A digital currency transaction method, transaction management method, device and system

Abstract

The present invention discloses a digital currency transaction method, transaction management method, device and system, and relates to the field of computer technology. A specific implementation of the method includes: obtaining a transaction request; signing the transaction data in the transaction request using a proxy signature private key, the proxy signature private key is generated according to the first authorization information sent by the issuance management platform and the private key of the first terminal; sending the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate and user certificate corresponding to the issuance management platform; the user certificate is generated by the operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal; and when the verification is passed, the transaction is conducted with the second terminal. This implementation enables the digital currency issuer to directly supervise the digital currency wallet terminal, thereby improving the security of digital currency transactions.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a digital currency transaction method, transaction management method, device and system. Background Art

[0002] With the development of digital currency technology, digital currency is increasingly used in various transaction scenarios. The management of digital currency issuers is of great significance to the security of digital currency transactions.

[0003] At present, the management of digital currency wallet carriers by digital currency issuers is mainly based on the transaction data reported by digital currency operators. This method makes it impossible for digital currency issuers to directly supervise the legality of wallet carriers, which may cause digital currency operators to use unreported wallet carriers for transactions, thereby reducing the security of digital currency transactions. Summary of the invention

[0004] In view of this, the embodiment of the present invention provides a digital currency transaction method, transaction management method, device and system. When the first terminal trades with the second terminal, the transaction data can be signed by the proxy signature private key, and the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate issued by the operation management platform for the user to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer does not need to rely on the transaction data reported by the digital currency operator, and can directly supervise the wallet carrier (digital currency wallet terminal) by signing and verifying the transaction data, which also improves the security of digital currency transactions.

[0005] To achieve the above objective, according to a first aspect of an embodiment of the present invention, a digital currency transaction method is provided.

[0006] A digital currency transaction method according to an embodiment of the present invention, when applied to a first terminal, includes:

[0007] Obtaining a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded;

[0008] Signing the transaction data using a proxy signature private key, where the proxy signature private key is generated based on the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal;

[0009] Sending the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal;

[0010] When the verification is successful, the transaction is conducted with the second terminal based on the digital currency in the first terminal.

[0011] Optionally, before obtaining the transaction request, the method further includes:

[0012] Sending an authorization request to the issuance management platform;

[0013] Receive first authorization information secretly sent by the issuance management platform according to the authorization request, where the first authorization information is generated according to a random number corresponding to the first terminal, a public key of the first terminal, and a private key of the issuance management platform.

[0014] Optionally, after receiving the first authorization information secretly sent by the issuance management platform according to the authorization request and before obtaining the transaction request, the method further includes:

[0015] Verifying the authenticity of the first authorization information;

[0016] When the verification is successful, a verification success message is sent to the issuance management platform, so that the issuance management platform sends the second authorization information to the operation management platform according to the verification success message.

[0017] To achieve the above objective, according to a second aspect of an embodiment of the present invention, a method for managing digital currency transactions is provided.

[0018] A digital currency transaction management method according to an embodiment of the present invention, when applied to a digital currency issuance management platform, includes:

[0019] receiving an authorization request sent by a first terminal, wherein the authorization request indicates a public key of the first terminal;

[0020] In response to the authorization request, generating first authorization information and second authorization information corresponding to the first terminal according to the public key of the first terminal;

[0021] Secretly sending the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key according to the first authorization information and its own private key;

[0022] The second authorization information is sent to the operation and management platform of the digital currency, so that the operation and management platform generates a user certificate corresponding to the first terminal according to the second authorization information and the public key of the first terminal.

[0023] Optionally, the authorization request further indicates terminal information of the first terminal; and the generating, according to the public key of the first terminal, first authorization information corresponding to the first terminal further includes:

[0024] Based on the terminal information, verify whether the first terminal is within the management authority; if so, generate a random number corresponding to the first terminal, and based on the random number, the public key of the first terminal and its own private key, use the authorization part algorithm in the proxy signature algorithm to generate the first authorization information.

[0025] To achieve the above objective, according to a third aspect of an embodiment of the present invention, a first terminal for digital currency transaction is provided.

[0026] A first terminal for digital currency transactions according to an embodiment of the present invention comprises: a transaction request acquisition module, a signature module, an interaction module and a transaction module; wherein:

[0027] The transaction request acquisition module is used to acquire a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded;

[0028] The signature module is used to sign the transaction data using a proxy signature private key, where the proxy signature private key is generated based on the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal;

[0029] The interactive module is used to send the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal;

[0030] The transaction module is used to conduct transactions with the second terminal based on the digital currency in the first terminal when the verification is passed.

[0031] To achieve the above objectives, according to a fourth aspect of an embodiment of the present invention, a digital currency issuance management platform is provided.

[0032] A digital currency issuance management platform according to an embodiment of the present invention comprises: an authorization request receiving module, an authorization information generating module and a sending module; wherein:

[0033] The authorization request receiving module is used to receive an authorization request sent by a first terminal, where the authorization request indicates a public key of the first terminal;

[0034] The authorization information generation module is configured to generate, in response to the authorization request, first authorization information and second authorization information corresponding to the first terminal according to the public key of the first terminal;

[0035] The sending module is used to secretly send the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key based on the first authorization information and its own private key; and send the second authorization information to the digital currency operation and management platform, so that the operation and management platform generates a user certificate corresponding to the first terminal based on the second authorization information and the public key of the first terminal.

[0036] To achieve the above objective, according to a fifth aspect of an embodiment of the present invention, a management system for digital currency transactions is provided.

[0037] A digital currency transaction management system according to an embodiment of the present invention comprises: the first terminal provided by the third aspect, the digital currency issuance management platform, the digital currency operation management platform and the second terminal provided by the fourth aspect; wherein:

[0038] The digital currency operation and management platform is used to generate a user certificate corresponding to the first terminal according to the second authorization information sent by the issuance management platform and the public key of the first terminal;

[0039] The second terminal is used to verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; if the verification is successful, the transaction is carried out with the first terminal.

[0040] To achieve the above objective, according to a sixth aspect of an embodiment of the present invention, an electronic device is provided.

[0041] An electronic device according to an embodiment of the present invention includes: one or more processors; a storage device for storing one or more programs, and when the one or more programs are executed by the one or more processors, the one or more processors implement a digital currency transaction method or a digital currency transaction management method according to an embodiment of the present invention.

[0042] To achieve the above objective, according to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided.

[0043] A computer-readable storage medium according to an embodiment of the present invention stores a computer program, which, when executed by a processor, implements a digital currency transaction method or a digital currency transaction management method according to an embodiment of the present invention.

[0044] One embodiment of the above invention has the following advantages or beneficial effects: when the first terminal is trading with the second terminal, the transaction data can be signed by the proxy signature private key, and the proxy signature private key is generated according to the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate issued by the operation management platform for the user to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer does not need to rely on the transaction data reported by the digital currency operator, and can directly supervise the wallet carrier by proxy signing and verifying the transaction data, which also improves the security of digital currency transactions.

[0045] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0047] Figure 1 is a schematic diagram of the main steps of a digital currency transaction method according to an embodiment of the present invention;

[0048] Figure 2 is a schematic diagram of the main steps of a method for managing digital currency transactions according to an embodiment of the present invention;

[0049] Figure 3 is a schematic diagram of main modules of a first terminal for digital currency transaction according to an embodiment of the present invention;

[0050] Figure 4 is a schematic diagram of main modules of a digital currency issuance management platform according to an embodiment of the present invention;

[0051] Figure 5 is a schematic diagram of main modules of a digital currency transaction management system according to an embodiment of the present invention;

[0052] Figure 6is a schematic diagram of the main steps of another method for managing digital currency transactions according to an embodiment of the present invention;

[0053] Figure 7 is an exemplary system architecture diagram to which embodiments of the present invention may be applied;

[0054] Figure 8 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0055] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0056] It should be pointed out that the embodiments of the present invention and the technical features therein may be combined with each other without conflict.

[0057] Figure 1 It is a schematic diagram of the main steps of a digital currency transaction method according to an embodiment of the present invention.

[0058] like Figure 1 As shown, a digital currency transaction method according to an embodiment of the present invention, when applied to a first terminal, mainly comprises the following steps:

[0059] Step S101: Obtain a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded.

[0060] The transaction request may be initiated by the first terminal or the second terminal. The first terminal and the second terminal may correspond to different operating institutions or the same operating institution; multiple operating institutions are managed by the same digital currency issuer. For example, the operating institution of the first terminal is Bank A, and the operating institution of the second terminal is Bank B; or, the operating institutions of the first terminal and the second terminal are both Bank C. In addition, the transaction data indicated by the transaction request may include information such as the transaction amount, the time when the transaction request was initiated, and the transaction serial number.

[0061] Step S102: Sign the transaction data using a proxy signature private key, where the proxy signature private key is generated based on the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal.

[0062] It is understandable that before the transaction begins, the first terminal has generated a proxy private key signature based on the first authorization information sent by the digital currency issuance management platform and its own private key. The digital currency issuance management platform is the management platform of the digital currency issuer.

[0063] In one embodiment of the present invention, in order to generate a proxy signature private key and thereby obtain authorization from a digital currency issuance management platform, a first terminal (corresponding to digital currency user 1) generates its own public-private key pair in hardware as its normal signature verification key, and then sends an authorization request to the issuance management platform; and receives the first authorization information secretly sent by the issuance management platform in response to the authorization request, wherein the first authorization information is generated based on a random number corresponding to the first terminal, the public key of the first terminal, and the private key of the issuance management platform.

[0064] In this embodiment, the first terminal sends an authorization request to the issuance management platform, and the authorization request may carry the public key of the first terminal and terminal information (such as basic information of the wallet carrier terminal). After receiving the authorization request, the issuance management platform first verifies the terminal information to verify whether the wallet carrier terminal information is within its management authority, that is, whether the wallet carrier terminal is within its own supervision scope. After the verification is passed, a unique random number is generated for the first terminal (corresponding to digital currency user 1), and then authorization information is generated based on the random number, the public key of the first terminal and the private key of the issuance management platform.

[0065] It is worth noting that when the issuance management platform generates authorization information, it can use the proxy authorization part algorithm of the proxy signature algorithm to generate two parts of authorization information (first authorization information and second authorization information). For example, an algorithm based on the elliptic curve difficulty problem can be used to generate authorization information. The first authorization information cannot be made public and needs to be sent secretly to the first terminal so that the first terminal and the normal signature private key can generate a proxy signature private key together. The second authorization information can be used as the public key of the proxy signature algorithm and can be made public. The second authorization information is sent to the operation management platform so that the operation management platform can write the second authorization information into the user certificate, so that the transaction data signed by the proxy signature private key can be verified later using the user certificate.

[0066] For example, when using an algorithm based on the elliptic curve difficulty problem to generate authorization information, the random number unique to the first terminal, the public key of the first terminal, and the private key of the issuance management platform are used as inputs to the proxy authorization part of the proxy signature algorithm. The output of the proxy authorization part of the algorithm will have two parts, one of which is not public and is sent to the first terminal as the first authorization information in secret to avoid the leakage of the first terminal's proxy signature private key. Other users can determine the first terminal's signature private key through inverse operations, thereby causing the first terminal's signature private key to be leaked. The other part can be public, which corresponds to a point on the elliptic curve, and is sent to the operating agency as the second authorization information to generate a user certificate to announce the authorized identity of the first terminal to the outside world, and provide the data required for authorization verification and proxy signature and its verification process.

[0067] After receiving the first authorization information secretly sent by the issuance management platform, the first terminal can verify the authenticity of the first authorization information. If the verification is successful, the first terminal sends a verification success message to the issuance management platform, so that the issuance management platform sends the second authorization information to the operation management platform based on the verification success message.

[0068] Here, after receiving the first authorization information, the first terminal first verifies the authenticity of the first authorization information, for example, the authenticity of the first authorization information can be verified by using the public key corresponding to the issuance management platform in the preset issuance certificate. After the verification is passed, a verification success message is sent to the issuance management platform, and the proxy signature private key is generated together with its own private key and the first authorization information. During the transaction, the proxy signature private key can be used to sign the transaction data, and the signed transaction data is sent to the second terminal (corresponding to digital currency user 2).

[0069] In addition, it is worth mentioning that when the authorization information is generated based on the elliptic curve algorithm, the second authorization information includes the base point corresponding to the elliptic curve. After the operation management platform generates a user certificate based on the second authorization information and sends the user certificate to the first terminal, the first terminal can obtain the base point data corresponding to the elliptic curve. Then, when the first terminal signs the transaction data, it can use the proxy signature private key and the base point data in the second authorization information to sign together. After receiving the signed transaction data, the second terminal can verify the signed transaction data based on the second authorization information (including the base point corresponding to the elliptic curve) and the issuance certificate corresponding to the issuance management platform.

[0070] Step S103: Send the signed transaction data and user certificate to the second terminal, so that the second terminal can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal. If the verification is passed, execute step S104, otherwise end the current process.

[0071] Step S104: Conducting transactions with the second terminal according to the digital currency in the first terminal.

[0072] As described above, after generating the authorization information, the issuance management platform sends the publicly available second authorization information to the digital currency operation management platform. It is understandable that, since the terminals can correspond to different operating institutions respectively, when the issuance management platform sends the second authorization information, it sends the second authorization information to the operation management platform A corresponding to the first terminal, and when sending the second authorization information, the public key of the first terminal can also be sent to the operation management platform A. The operation management platform A can sign the second authorization information together in the public key certificate (user certificate) according to the standard process of signing the public key certificate, and send the public key certificate to the first terminal.

[0073] Therefore, when the second terminal receives the transaction data signed by the proxy signature private key, it can use the issuance certificate and the user certificate to verify the signed transaction data. Among them, the issuance certificate can be issued by the issuance management platform CA and pre-set in the first terminal when the digital currency wallet of the first terminal is opened. Of course, the second terminal can also send the transaction data signed by the proxy signature private key to the first terminal accordingly, and the first terminal can also verify the signed transaction data. The signed transaction data is verified by the issuance certificate and the user certificate. When the verification is passed, it means that the two parties to the transaction (the first terminal and the second terminal) have obtained the authorization of the digital currency issuer and the certification of their respective operators, thereby ensuring the security of digital currency transactions and realizing the direct supervision of digital currency transactions by the digital currency issuer.

[0074] In summary, according to a digital currency transaction method of an embodiment of the present invention, it can be seen that when the first terminal trades with the second terminal, the transaction data can be signed by the proxy signature private key, and the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate corresponding to the operation management platform to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer does not need to rely on the transaction data reported by the digital currency operator, and can directly supervise the wallet carrier, which also improves the security of digital currency transactions.

[0075] Figure 2 It is a schematic diagram of the main steps of a method for managing digital currency transactions according to an embodiment of the present invention.

[0076] like Figure 2 As shown, a digital currency transaction management of an embodiment of the present invention, when applied to a digital currency issuance management platform, mainly includes the following steps:

[0077] Step S201: receiving an authorization request sent by a first terminal, wherein the authorization request indicates a public key of the first terminal.

[0078] In order to generate a proxy signature private key and thus obtain authorization from the digital currency issuance management platform, the first terminal (corresponding to digital currency user 1) generates its own public and private key pair in hardware as the key for its normal signature verification, and then sends an authorization request to the issuance management platform through its corresponding operation management platform. That is to say, the first terminal sends the authorization request to its corresponding operation management platform, and the operation management platform forwards the authorization request to the issuance management platform.

[0079] Step S202: In response to the authorization request, generate first authorization information and second authorization information corresponding to the first terminal according to the public key of the first terminal.

[0080] The authorization request sent by the first terminal to the issuance management platform may carry the public key of the first terminal and terminal information (such as basic information of the wallet carrier terminal). After receiving the authorization request, the issuance management platform verifies whether the first terminal is within the management authority based on the terminal information; if so, generates a random number corresponding to the first terminal, and uses the proxy signature algorithm to generate the first authorization information based on the random number, the public key of the first terminal and its own private key.

[0081] Among them, the issuance management platform verifies the terminal information to verify whether the wallet carrier terminal information is within its management authority, that is, to verify whether the wallet carrier terminal is within its own supervision scope. After the verification is passed, a unique random number is generated for the first terminal (corresponding to digital currency user 1), and then authorization information is generated based on the random number, the public key of the first terminal and the private key of the issuance management platform.

[0082] Step S203: secretly sending the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key according to the first authorization information and its own private key.

[0083] Step S204: Send the second authorization information to the operation and management platform of the digital currency, so that the operation and management platform generates a user certificate corresponding to the first terminal according to the second authorization information and the public key of the first terminal.

[0084] According to a method for managing digital currency transactions according to an embodiment of the present invention, it can be seen that when the first terminal trades with the second terminal, the transaction data can be signed by a proxy signature private key, and the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate issued by the operation management platform for the user to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer does not need to rely on the transaction data reported by the digital currency operator, and can directly supervise the wallet carrier, which also improves the security of digital currency transactions.

[0085] Figure 3 is a schematic diagram of main modules of a first terminal for digital currency transaction according to an embodiment of the present invention.

[0086] like Figure 3 As shown, a first terminal 300 for digital currency transactions according to an embodiment of the present invention includes: a transaction request acquisition module 301, a signature module 302, an interaction module 303 and a transaction module 304; wherein,

[0087] The transaction request acquisition module 301 is used to acquire a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded;

[0088] The signature module 302 is used to sign the transaction data using a proxy signature private key, where the proxy signature private key is generated based on the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal;

[0089] The interaction module 303 is used to send the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal;

[0090] The transaction module 304 is used to conduct transactions with the second terminal according to the digital currency in the first terminal when the verification is passed.

[0091] In one embodiment of the present invention, the signature module 302 is also used to send an authorization request to the issuance management platform; receive first authorization information secretly sent by the issuance management platform according to the authorization request, and the first authorization information is generated according to the random number corresponding to the first terminal, the public key of the first terminal and the private key of the issuance management platform.

[0092] In one embodiment of the present invention, the signature module 302 is also used to verify the authenticity of the first authorization information; if the verification is successful, a verification success message is sent to the issuance management platform, so that the issuance management platform sends the second authorization information to the operation management platform based on the verification success message.

[0093] According to a first terminal for digital currency transactions according to an embodiment of the present invention, it can be seen that when the first terminal trades with the second terminal, the transaction data can be signed by a proxy signature private key, and the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate corresponding to the operation management platform to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer does not need to rely on the transaction data reported by the digital currency operator, and can directly supervise the wallet carrier, which also improves the security of digital currency transactions.

[0094] Figure 4It is a schematic diagram of main modules of a digital currency issuance management platform according to an embodiment of the present invention.

[0095] like Figure 4 As shown, a digital currency issuance management platform 400 according to an embodiment of the present invention includes: an authorization request receiving module 401, an authorization information generating module 402 and a sending module 403; wherein,

[0096] The authorization request receiving module 401 is used to receive an authorization request sent by a first terminal, where the authorization request indicates a public key of the first terminal;

[0097] The authorization information generation module 402 is used to generate first authorization information and second authorization information corresponding to the first terminal according to the public key of the first terminal in response to the authorization request;

[0098] The sending module 403 is used to secretly send the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key based on the first authorization information and its own private key; and send the second authorization information to the digital currency operation and management platform, so that the operation and management platform generates a user certificate corresponding to the first terminal based on the second authorization information and the public key of the first terminal.

[0099] In one embodiment of the present invention, the authorization information generation module 402 is used to verify whether the first terminal is within the management authority based on the terminal information; if so, generate a random number corresponding to the first terminal, and generate the first authorization information based on the random number, the public key of the first terminal and its own private key using the proxy authorization part algorithm in the proxy signature algorithm.

[0100] Figure 5 It is a schematic diagram of main modules of a management system for digital currency transactions according to an embodiment of the present invention.

[0101] like Figure 5 As shown, a digital currency transaction management system 500 according to an embodiment of the present invention includes: a first terminal 300 provided by any of the above embodiments, a digital currency issuance management platform 400 provided by any of the above embodiments, a digital currency operation management platform 501, and a second terminal 502; wherein,

[0102] The digital currency operation management platform 501 is used to generate a user certificate corresponding to the first terminal according to the second authorization information sent by the issuance management platform 400 and the public key of the first terminal;

[0103] The second terminal 502 is used to verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform 400 and the second authorization information included in the user certificate; if the verification is successful, the transaction is performed with the first terminal 300.

[0104] In conjunction with the management system for digital currency transactions, the digital currency transaction method provided by the embodiment of the present invention is described in detail by taking the first terminal and the second terminal corresponding to different operation management platforms A and B as an example. Figure 6 As shown, the method may include the following steps:

[0105] Step S601: Digital currency user 1 sends an authorization request to its corresponding operation management platform A through the first terminal, and the operation management platform A forwards the authorization request to the issuance management platform.

[0106] In the process of digital currency user 1 opening a digital currency wallet through the first terminal, the issuance management platform needs authorization. At this time, digital currency user 1 can send an authorization request to the issuance management platform through the operation management platform A corresponding to the first terminal. At this time, the authorization request sent by the first terminal includes the public key corresponding to the first terminal and terminal information.

[0107] Step S602: The issuance management platform verifies whether the first terminal is within the supervision scope according to the terminal information. If so, step S603 is executed; otherwise, the current process ends.

[0108] Step S603: The issuance management platform generates a unique random number for the first terminal, and generates first authorization information and second authorization information according to the random number, the public key of the first terminal and its own private key.

[0109] Step S604: the issuance management platform secretly sends the first authorization information to the first terminal.

[0110] Step S605: The first terminal verifies the authenticity of the first authorization information. If the verification is successful, step S606 is executed; otherwise, the current process ends.

[0111] Step S606: The first terminal sends verification success information to the issuance management platform.

[0112] Step S607: The first terminal generates a proxy signature private key according to the first authorization information and its own private key.

[0113] It is understandable that there is no particular order in which step S606 and step S607 are executed, that is, step S606 may be executed first and then step S607; step S607 may be executed first and then step S606; or step S606 and step S607 may be executed simultaneously.

[0114] Step S608: The issuance management platform sends the second authorization information to the operation management platform A.

[0115] Step S609: Generate a user certificate corresponding to the first terminal according to the second authorization information and the public key of the first terminal, and send the certificate to the first terminal.

[0116] It is understandable that the second terminal can also forward the authorization request through its corresponding operation management platform B through the same process as the above steps S601 to S609, obtain its corresponding first authorization information, and generate a corresponding proxy signature private key. And generate a corresponding user certificate through its corresponding operation management platform B.

[0117] Step S610: The first terminal obtains a transaction request.

[0118] The transaction request may be initiated by the first terminal or the second terminal.

[0119] Step S611: The first terminal signs the transaction data in the transaction request using the proxy signature private key, and sends the signed transaction data and the user certificate to the second terminal.

[0120] Step S612: The second terminal verifies the signed transaction data according to the issuance certificate and user certificate corresponding to the preset issuance management platform, and executes step S603 after the verification is passed, otherwise the current process ends.

[0121] Among them, the issuance certificate is a certificate issued by the issuance management platform CA. The second terminal can verify the signed transaction data according to the public key in the issuance certificate and the second authorization information in the user certificate to ensure that the first terminal is a digital currency wallet terminal authorized by the issuance management platform and authenticated by its corresponding operation management platform A.

[0122] Step S613: Conduct transactions with the second terminal based on the digital currency in the first terminal.

[0123] It is understandable that the embodiment corresponding to step S613 is that the first terminal is the payee and the second terminal is the payee. In the case where the first terminal is the payee and the second terminal is the payee, after verification, the two parties can trade based on the digital currency in the second terminal.

[0124] According to the above embodiment, when the first terminal is trading with the second terminal, the transaction data can be signed by the proxy signature private key, which is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate issued by the operation management platform for the user to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer can directly supervise the wallet carrier without relying on the transaction data reported by the digital currency operator, which also improves the security of digital currency transactions.

[0125] Figure 7 An exemplary system architecture 700 of a digital currency transaction management method or a digital currency transaction management system to which an embodiment of the present invention may be applied is shown.

[0126] like Figure 7 As shown, system architecture 700 may include terminal devices 701, 702, 703, network 704 and servers 705, 706. Network 704 is used to provide a medium for communication links between terminal devices 701, 702, 703 and server 705. Network 704 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0127] Users can use terminal devices 701, 702, 703 to interact with servers 705, 706 through network 704 to receive or send messages, etc. Servers 705 and 706 can also interact through the network to forward authorization requests or receive authorization information, etc. Various communication client applications can be installed on terminal devices 701, 702, 703, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc.

[0128] The terminal devices 701, 702, and 703 may be various electronic devices with display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, etc., and may also be electronic devices such as IC cards.

[0129] The server 705 may be a server that provides various services, such as a background management server that responds to authorization requests sent by users using the terminal devices 701, 702, and 703. The background management server may analyze and process the received authorization requests, and feed back the processing results (such as authorization information) to the terminal devices.

[0130] It should be noted that the digital currency transaction management method provided in the embodiment of the present invention is generally executed by the server 705.

[0131] It should be understood that Figure 7 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to the implementation requirements.

[0132] Reference below Figure 8 , which shows a schematic diagram of the structure of a computer system 800 of a terminal device suitable for implementing an embodiment of the present invention. Figure 8 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0133] like Figure 8 As shown, the computer system 800 includes a central processing unit (CPU) 801, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 802 or a program loaded from a storage part 808 into a random access memory (RAM) 803. In the RAM 803, various programs and data required for the operation of the system 800 are also stored. The CPU 801, the ROM 802, and the RAM 803 are connected to each other via a bus 804. An input / output (I / O) interface 805 is also connected to the bus 804.

[0134] The following components are connected to the I / O interface 805: an input section 806 including a keyboard, a mouse, etc.; an output section 807 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 808 including a hard disk, etc.; and a communication section 809 including a network interface card such as a LAN card, a modem, etc. The communication section 809 performs communication processing via a network such as the Internet. A drive 810 is also connected to the I / O interface 805 as needed. A removable medium 811, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 810 as needed, so that a computer program read therefrom is installed into the storage section 808 as needed.

[0135] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 809, and / or installed from the removable medium 811. When the computer program is executed by the central processing unit (CPU) 801, the above-mentioned functions defined in the system of the present invention are executed.

[0136] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0137] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0138] The modules involved in the embodiments of the present invention may be implemented in software or hardware. The modules described may also be set in a processor. For example, they may be described as follows: a processor includes a transaction request acquisition module, a signature module, an interaction module, and a transaction module. The names of these modules do not, in some cases, constitute limitations on the modules themselves. For example, the transaction request acquisition module may also be described as a "module for acquiring transaction requests."

[0139] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently without being assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes: obtaining a transaction request, the transaction request indicating transaction data and a second terminal to be traded; signing the transaction data using a proxy signature private key, the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal; sending the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the operation management platform of the digital currency according to the second authorization information sent by the issuance management platform and the public key of the first terminal; if the verification is passed, the transaction is conducted with the second terminal according to the digital currency in the first terminal.

[0140] According to the technical solution of the embodiment of the present invention, when the first terminal is trading with the second terminal, the transaction data can be signed by the proxy signature private key, which is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal. When the second terminal receives the transaction data signed by the proxy signature private key, it can verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the user certificate issued by the operation management platform for the user to ensure that the first terminal is authenticated by the digital currency issuer and the digital currency operator, thereby improving the security of digital currency transactions. In addition, the issuance management platform directly authorizes the user terminal so that only terminals with authorization qualifications can conduct normal transactions, so that the digital currency issuer can directly supervise the wallet carrier without relying on the transaction data reported by the digital currency operator, which also improves the security of digital currency transactions.

[0141] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A digital currency transaction method, applied to a first terminal, comprising: Obtaining a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded; Signing the transaction data using a proxy signature private key, where the proxy signature private key is generated based on the first authorization information sent by the digital currency issuance management platform and the private key of the first terminal; Sending the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; The user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal; If the verification is successful, the transaction is conducted with the second terminal according to the digital currency in the first terminal; Before obtaining the transaction request, the method further includes: Sending an authorization request to the issuance management platform; Receive first authorization information secretly sent by the issuance management platform according to the authorization request, where the first authorization information is generated according to a random number corresponding to the first terminal, a public key of the first terminal, and a private key of the issuance management platform.

2. The method according to claim 1, characterized in that After receiving the first authorization information secretly sent by the issuance management platform according to the authorization request and before obtaining the transaction request, the method further includes: Verifying the authenticity of the first authorization information; When the verification is successful, a verification success message is sent to the issuance management platform, so that the issuance management platform sends the second authorization information to the operation management platform according to the verification success message.

3. A method for managing digital currency transactions, characterized in that: The issuance management platform for digital currency includes: receiving an authorization request sent by a first terminal, wherein the authorization request indicates a public key of the first terminal; In response to the authorization request, generating first authorization information and second authorization information corresponding to the first terminal according to the public key of the first terminal; Secretly sending the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key according to the first authorization information and its own private key; Sending the second authorization information to the operation and management platform of the digital currency, so that the operation and management platform generates a user certificate corresponding to the first terminal according to the second authorization information and the public key of the first terminal; The authorization request further indicates terminal information of the first terminal; and the generating of first authorization information corresponding to the first terminal according to the public key of the first terminal further includes: Based on the terminal information, verify whether the first terminal is within the management authority; if so, generate a random number corresponding to the first terminal, and based on the random number, the public key of the first terminal and its own private key, use the proxy authorization part algorithm in the proxy signature algorithm to generate the first authorization information.

4. A first terminal for digital currency transactions, comprising: Transaction request acquisition module, signature module, interaction module and transaction module; among them, The transaction request acquisition module is used to acquire a transaction request, wherein the transaction request indicates transaction data and a second terminal to be traded; The signature module is used to send an authorization request to the issuance management platform; receive the first authorization information secretly sent by the issuance management platform according to the authorization request, wherein the first authorization information is generated according to the random number corresponding to the first terminal, the public key of the first terminal and the private key of the issuance management platform; and is also used to sign the transaction data using the proxy signature private key, wherein the proxy signature private key is generated according to the first authorization information sent by the issuance management platform of the digital currency and the private key of the first terminal; The interactive module is used to send the signed transaction data and the user certificate to the second terminal, so that the second terminal verifies the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; the user certificate is generated by the digital currency operation management platform according to the second authorization information sent by the issuance management platform and the public key of the first terminal; The transaction module is used to conduct transactions with the second terminal based on the digital currency in the first terminal when the verification is passed.

5. A digital currency issuance management platform, characterized in that: include: Authorization request receiving module, authorization information generating module and sending module; wherein, The authorization request receiving module is used to receive an authorization request sent by a first terminal, where the authorization request indicates a public key of the first terminal; The authorization information generation module is used to verify whether the first terminal is within the management authority according to the terminal information; if so, generate a random number corresponding to the first terminal, and generate the first authorization information using the proxy authorization part algorithm in the proxy signature algorithm according to the random number, the public key of the first terminal and its own private key; and is also used to generate the first authorization information and the second authorization information corresponding to the first terminal according to the public key of the first terminal in response to the authorization request; The sending module is used to secretly send the first authorization information to the first terminal, so that the first terminal generates a proxy signature private key based on the first authorization information and its own private key; and send the second authorization information to the digital currency operation and management platform, so that the operation and management platform generates a user certificate corresponding to the first terminal based on the second authorization information and the public key of the first terminal.

6. A digital currency transaction management system, characterized in that: include: The first terminal of claim 4, the issuance management platform of digital currency, the operation management platform of digital currency and the second terminal of claim 5; wherein, The digital currency operation and management platform is used to generate a user certificate corresponding to the first terminal according to the second authorization information sent by the issuance management platform and the public key of the first terminal; The second terminal is used to verify the signed transaction data according to the issuance certificate corresponding to the issuance management platform and the second authorization information included in the user certificate; if the verification is successful, the transaction is carried out with the first terminal.

7. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method as claimed in any one of claims 1 to 2 or 3.

8. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 2 or 3 is implemented.

Images