A digital currency trading system based on trusted agency agents

Abstract

The present invention proposes a digital currency transaction system based on a trusted agency agent, including: a remote hosting server, a hosting terminal with a remote hosting server APP installed, a commercial bank, and the People's Bank of China. The remote hosting server and the hosting terminal communicate via the HTTPS protocol, and at the same time, they communicate confidentially with the commercial bank specified by the user; the commercial bank communicates confidentially with the People's Bank of China. The present invention stores digital currency for users by setting up a remote hosting server with high security performance, which has higher security than the method of using smart mobile terminals to store digital currency. The present invention also directly connects to commercial banks through the remote hosting server, and can initiate digital currency transactions on behalf of users. Confidential communications are carried out between the remote hosting server and commercial banks, as well as between commercial banks and the People's Bank of China, thereby ensuring the security of digital currency during transmission in the entire transaction process.

Description

Technical Field

[0001] The present invention relates to the technical field of digital currency transaction, and in particular to a digital currency transaction system based on a trusted agency agent. Background Art

[0002] At present, digital currency is a virtual currency generated by the People's Bank of China, which authorizes commercial banks to supervise digital currency transactions. The storage medium of digital currency is generally a commercial bank digital wallet or other APP with similar functions installed on smart mobile terminals.

[0003] However, smart mobile terminals cannot guarantee absolute security. For example, if a smart mobile terminal is lost, the digital currency stored in the terminal may be stolen by others. Due to the lack of security in storing digital currency in smart mobile terminals, the security of digital currency transactions cannot be guaranteed. Summary of the invention

[0004] Purpose of the invention: In order to overcome the defects of the prior art, the present invention proposes a digital currency transaction method based on a trusted agency agent, which can ensure the security of digital currency storage and transaction security.

[0005] Technical solution: To achieve the above-mentioned purpose, the present invention proposes a digital currency trading system based on a trusted agency agent, including: a remote hosting server, a hosting terminal with a remote hosting server APP installed, a commercial bank, and the People's Bank of China; wherein,

[0006] The remote hosting server and the hosting terminal communicate via the HTTPS protocol, and at the same time, they communicate confidentially with the commercial bank designated by the user; the commercial bank communicates confidentially with the People's Bank of China;

[0007] The remote hosting server generates a unique ID for each user when the user first registers and allocates a separate storage area for each user, and stores the digital currency, commercial bank information, payment password, and user identity information uploaded by the user in the corresponding storage area through ID association;

[0008] During the transaction, the payer user logs in to the remote hosting server through the APP on the hosting terminal and initiates a transaction request to the remote hosting server. The transaction request includes the payer ID, payment password, transaction amount, and payee ID; the remote hosting server finds the stored payment password based on the payer ID and verifies whether the stored payment password is consistent with the payment password sent by the payer. If they are consistent, the verification is successful and the subsequent transaction continues, otherwise the transaction is terminated; after the verification is successful, the remote hosting server generates transaction content, which includes digital currency with a value consistent with the transaction amount, payer identity information, payee identity information, payer commercial bank information, and payee commercial bank information; the remote hosting server sends the transaction content to the People's Bank of China through the payer's commercial bank; after verifying the transaction content, the People's Bank of China generates a transaction result containing the transaction content and sends it to the payee's commercial bank, and the payee's commercial bank returns the transaction result to the remote hosting server, and the remote hosting server stores the digital currency in the transaction result into the storage area associated with the payee's ID, and feedbacks the transaction success information to the payee and payer.

[0009] Furthermore, when the remote hosting server assigns an ID to a user, it maps the user ID to the address of a storage area through a hash function, which is used to store digital currency uploaded by the user, commercial bank information, the user's payment password, and user identity information.

[0010] Furthermore, when the user logs in to the remote hosting server through the hosting terminal, a dual authentication mechanism of password authentication and biometric information authentication is adopted.

[0011] Specifically, in the biometric information authentication, the biometric information includes: fingerprints and facial images.

[0012] Furthermore, the remote hosting server and the commercial bank use an identity authentication mechanism based on digital certificates to achieve confidential communication.

[0013] Furthermore, the commercial bank and the People's Bank of China use an identity authentication mechanism based on digital certificates to achieve confidential communication.

[0014] Furthermore, when storing the user's digital currency, the remote hosting server also encrypts the digital currency with its own certificate private key.

[0015] Furthermore, the remote hosting server is configured with a hardware security module to store data.

[0016] Specifically, the hardware security module is a key board or a cryptographic machine.

[0017] Beneficial effects: Compared with the prior art, the present invention has the following advantages:

[0018] The present invention stores digital currency on behalf of users by setting up a remote hosting server. The remote hosting server has high security performance and is more secure than the method of storing digital currency in a commercial bank digital wallet on a smart mobile terminal.

[0019] The present invention also directly connects to commercial banks through a remote hosting server, and can initiate digital currency transactions on behalf of users. Confidential communications are carried out between the remote hosting server and the commercial banks, as well as between the commercial banks and the People's Bank of China, thereby ensuring the security of digital currency during transmission throughout the entire transaction process. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 4 is a structural diagram of an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments. However, it should be understood that the present invention can be implemented in various forms, and some exemplary and non-limiting embodiments shown in the accompanying drawings and described below are not intended to limit the present invention to the specific embodiments described.

[0022] It should be understood that, where technically feasible, the technical features listed above for different embodiments can be combined with each other to form other embodiments within the scope of the present invention. In addition, the specific examples and embodiments described in the present invention are non-limiting, and the structures, steps, and sequences described above can be modified accordingly without departing from the scope of protection of the present invention.

[0023] The present invention aims to propose a technical solution that can ensure the storage security and transaction security of digital currency. Based on this, the present invention proposes a digital currency transaction system based on a trusted agency agent. The technical solution of the present invention is further described below through specific embodiments.

[0024] Example:

[0025] In this embodiment, the entire system structure is as follows: Figure 1 As shown, it includes: a remote hosting server TS, a hosting terminal T with a remote hosting server APP installed, a commercial bank BS and the People's Bank of China; the remote hosting server is configured with a hardware security module to store data, and the hardware security module is a key board or a cryptographic machine.

[0026] The remote hosting server communicates with the hosting terminal via the HTTPS protocol, and at the same time, communicates confidentially with the commercial bank specified by the user; the commercial bank communicates confidentially with the People's Bank of China. In this embodiment, the remote hosting server and the commercial bank, as well as the commercial bank and the People's Bank of China, use an identity authentication mechanism based on digital certificates to achieve confidential communication, and the identity authentication mechanism is preferably an HTTPS identity authentication mechanism.

[0027] Before the transaction, the remote hosting server TS conducts HTTPS identity authentication with the payer's commercial bank and the payee's commercial bank respectively to form an encrypted communication channel; the payer's commercial bank and the payee's commercial bank conduct HTTPS identity authentication with the People's Bank of China respectively to form an encrypted communication channel.

[0028] The user registers in advance on the remote hosting server through the APP on the hosting terminal, obtains a unique ID assigned to him by the remote hosting server, and uploads the digital currency, commercial bank information, payment password, and identity information to the remote hosting server. The remote hosting server uses a hash algorithm to map the user's ID to a storage address, and stores the digital currency, commercial bank information, payment password, identity information, and certificate private key in the corresponding storage area.

[0029] The transaction process is as follows:

[0030] 1. The payer obtains the ID of the payee T2 (via SMS, phone call, etc.), confirms the transaction amount, and then logs in to the remote hosting server TS through the hosting terminal T1, enters the payment password TP, and the hosting terminal T1 generates a transaction request TXT||TXm||TP, where TXT represents the transaction time and TXm represents the request content, such as "send xxx yuan to ID13912345678". In this embodiment, when the user logs in to the remote hosting server through the hosting terminal, a dual authentication mechanism of password authentication and biometric information authentication is adopted, and the biometric information includes fingerprints and facial images.

[0031] The hosting terminal T1 calculates MAC(TXT||TXm,TP) and then sends TXT||TXm||MAC(TXT||TXm,TP) to the remote hosting server TS.

[0032] 2. The remote hosting server TS transmits TXT||TXm||MAC(TXT||TXm,TP) to its own hardware security module HSM for verification. HSM goes to the storage area corresponding to T1 according to the payer ID in TXm, reads the payment password from it, and then uses the stored payment password and TXT||TXm to calculate MAC. If the calculated result is consistent with MAC(TXT||TXm,TP), the verification is passed and the subsequent transaction continues, otherwise the transaction is terminated.

[0033] 3. After verification, the remote hosting server TS generates the transaction content TXraw;

[0034] The transaction content TXraw includes: digital currency with the same value as the transaction amount, identity information of the payer, identity information of the payee, commercial bank information of the payer, and commercial bank information of the payee;

[0035] The remote hosting server TS obtains the certificate of the payer commercial bank BS1 based on the public information, and inputs the public key of BS1's certificate and TXraw into the HSM;

[0036] HSM signs TXraw with its own certificate private key SKT to obtain SIGT; encrypts TXraw||SIGT with a random number RND, encrypts RND with the public key PK1 of BS1's certificate, and then outputs the two ciphertexts to the remote hosting server TS;

[0037] The remote hosting server TS sends the two ciphertexts together to the payer commercial bank BS1.

[0038] 4. After receiving the two ciphertexts, the payer commercial bank BS1 first decrypts RND with its own certificate private key, then decrypts TXraw||SIGT with RND, and then verifies SIGT with the certificate public key of the remote hosting server TS, trusts TXraw, and sends TXraw to the People's Bank of China.

[0039] 5. After receiving TXraw, the People's Bank of China verifies the digital currency in it. After the verification, it generates a transaction result TXMraw containing the TXraw content and sends TXMraw to the recipient commercial bank BS2.

[0040] 6. The payee commercial bank BS2 encrypts TXMraw with its own certificate private key and sends it to the remote escrow server TS. After decryption, the remote escrow server TS stores the digital currency in TXMraw into the storage area of ​​the payee ID, and then feeds back a transaction success message to the payer escrow terminal T1 and the payee escrow terminal T2 respectively.

[0041] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A digital currency trading system based on a trusted agency agent, characterized in that: include: Remote hosting servers, hosting terminals with remote hosting server apps installed, commercial banks, and the People’s Bank of China; among them, The remote hosting server and the hosting terminal communicate via the HTTPS protocol, and at the same time, they communicate confidentially with the commercial bank designated by the user; the commercial bank communicates confidentially with the People's Bank of China; The remote hosting server generates a unique ID for each user when the user first registers and allocates a separate storage area for each user, and stores the digital currency, commercial bank information, payment password, and user identity information uploaded by the user in the corresponding storage area through ID association; During the transaction, the payer user logs in to the remote hosting server through the APP on the hosting terminal and initiates a transaction request to the remote hosting server. The transaction request includes the payer ID, payment password, transaction amount, and payee ID; the remote hosting server finds the stored payment password based on the payer ID and verifies whether the stored payment password is consistent with the payment password sent by the payer. If they are consistent, the verification is successful and the subsequent transaction continues, otherwise the transaction is terminated; after the verification is successful, the remote hosting server generates transaction content, which includes digital currency with a value consistent with the transaction amount, payer identity information, payee identity information, payer commercial bank information, and payee commercial bank information; the remote hosting server sends the transaction content to the People's Bank of China through the payer's commercial bank; after verifying the transaction content, the People's Bank of China generates a transaction result containing the transaction content and sends it to the payee's commercial bank, and the payee's commercial bank returns the transaction result to the remote hosting server, and the remote hosting server stores the digital currency in the transaction result into the storage area associated with the payee's ID, and feedbacks the transaction success information to the payee and payer.

2. A digital currency trading system based on a trusted agency agent according to claim 1, characterized in that: When the remote hosting server assigns an ID to a user, it maps the user ID to the address of a storage area through a hash function, which is used to store digital currency uploaded by the user, commercial bank information, the user's payment password, and user identity information.

3. A digital currency trading system based on a trusted agency agent according to claim 2, characterized in that: When a user logs in to a remote hosting server through a hosting terminal, a dual authentication mechanism of password authentication and biometric information authentication is adopted.

4. A digital currency trading system based on a trusted agency agent according to claim 3, characterized in that: In the biometric information authentication, the biometric information includes: fingerprints and facial images.

5. A digital currency trading system based on a trusted agency agent according to claim 1, characterized in that: The remote hosting server and the commercial bank use an identity authentication mechanism based on digital certificates to achieve confidential communication.

6. A digital currency trading system based on a trusted agency agent according to claim 5, characterized in that: The commercial bank and the People's Bank of China use an identity authentication mechanism based on digital certificates to achieve confidential communication.

7. A digital currency trading system based on a trusted agency agent according to claim 6, characterized in that: When storing the user's digital currency, the remote hosting server also encrypts the digital currency with its own certificate private key.

8. A digital currency trading system based on a trusted agency agent according to claim 1, characterized in that: The remote hosting server is configured with a hardware security module to store data.

9. A digital currency trading system based on a trusted agency agent according to claim 8, characterized in that: The hardware security module is a key board or a cryptographic machine.

Images