A mobile terminal digital currency transaction method without installing a digital wallet

Abstract

This invention proposes a digital currency transaction method for mobile terminals that eliminates the need for digital wallet installation. This method configures digital currency at a commercial bank and establishes a digital certificate-based identity authentication mechanism. This allows for confidential communication between a digital currency escrow server and the commercial bank, and between the commercial bank and the People's Bank of China, based on digital certificates. Before a transaction, the escrow user registers their identity information and phone number on the corresponding digital currency escrow server and deposits digital currency encrypted with their payment password. During the transaction, the escrow user conducts a digital currency transaction with the other party via the corresponding digital currency escrow server. This invention enables digital currency transactions even for terminals that do not have a digital wallet installed, eliminating the prior art requirement that digital currency transaction terminals must have a digital wallet installed, and improving the security of digital currency transactions.

Description

Technical Field

[0001] The present invention relates to the technical field of digital currency transactions, and in particular to a mobile terminal digital currency transaction method that does not require the installation of a digital wallet. Background Art

[0002] Digital currency is a virtual currency that converts the value of cash into a series of electronically encrypted numbers. It is typically generated by the central bank and distributed to digital currency holders, who typically store it in digital wallets on mobile devices. Digital currency transactions require interaction between mobile devices and commercial banks to transfer digital currency.

[0003] However, the aforementioned transaction method requires that mobile terminals participating in digital currency transactions must be installed with an app similar to a digital wallet to store digital currency and facilitate digital currency transactions. In reality, however, many terminals lack the capabilities to install digital wallets. Furthermore, digital wallets are implemented through program code, and their data transmission and processing cannot guarantee complete security of digital currency. Therefore, there is a real need to enable terminals without digital wallets to participate in digital currency transactions while also improving the security of digital currency transmission and processing. Summary of the Invention

[0004] Purpose of the invention: Based on the above purpose, the present invention proposes a mobile terminal digital currency transaction method that does not require the installation of a digital wallet.

[0005] Technical Solution: To achieve the above-mentioned purpose, the present invention proposes a mobile terminal digital currency transaction method that does not require the installation of a digital wallet. The method is implemented between two parties who do not have a digital wallet installed, and includes the following steps:

[0006] (1) Deploy a digital currency escrow server at a commercial bank and establish a secure channel between the digital currency escrow server and the escrow user terminal;

[0007] (2) Establishing an identity authentication mechanism based on digital certificates to enable confidential communication between the digital currency escrow server and commercial banks, and between commercial banks and the People's Bank of China based on digital certificates;

[0008] (3) Before the transaction, the escrow user registers his / her identity information and phone number on the corresponding digital currency escrow server and deposits the digital currency encrypted with his / her payment password;

[0009] (4) During the transaction, the escrow user as the payer sends an application message to the payer's digital currency escrow server to request the transaction. The application message includes the payee's phone number, digital currency amount, payer's payment password, and payer's identity information;

[0010] (5) The payer's digital currency escrow server finds the locally stored encrypted digital currency based on the payer's identity information in the application information, decrypts the digital currency using the payer's payment password, and then generates and signs a transaction request, which includes the digital currency of this transaction, the payer's identity information, and the payee's phone number;

[0011] The payer's digital currency escrow server generates a random number encrypted transaction request and its signature, then encrypts the random number using the public key of the payee's digital currency escrow server's digital certificate, and then sends both ciphertexts to the payee's digital currency escrow server;

[0012] (6) The payee's digital currency escrow server decrypts the two ciphertexts and verifies the signatures. It then finds the locally stored payee's identity information based on the payee's phone number in the transaction request, generates the transaction content, signs it, and sends it to the payee's commercial bank for verification. The transaction content includes: payee's identity information, payer's identity information, and digital currency.

[0013] (7) After verification by the recipient's commercial bank, the transaction details will be sent to the People's Bank of China for verification;

[0014] (8) After the People's Bank of China verifies the transaction content, it generates a transaction result containing the transaction content and feeds it back to the corresponding digital currency escrow server through the commercial banks of the payee and the payee respectively;

[0015] (9) After receiving and verifying the transaction result, the payer's digital currency escrow server deletes the corresponding digital currency stored locally and then feeds back transaction completion information to the payer;

[0016] (10) After receiving and verifying the transaction result, the digital currency escrow server of the payee stores the digital currency in the transaction result and then feeds back the transaction completion information to the payee.

[0017] Furthermore, the identity authentication mechanism based on digital certificates adopts the HTTPS identity authentication mechanism.

[0018] Furthermore, the secure channel between the digital currency escrow server and the escrow user is achieved by the following method:

[0019] Set up an identity authentication mechanism between the hosting user and the operator's server to form a confidential channel between the hosting user and the operator's server;

[0020] An identity authentication mechanism is set up between the operator server and the digital currency escrow server to form a confidential channel between the operator server and the digital currency escrow server, and ultimately realize a confidential channel between the digital currency escrow server and the escrow user.

[0021] Furthermore, the identity authentication mechanism between the escrow user and the operator server is an identity authentication mechanism of the mobile communication network.

[0022] Furthermore, the digital currency escrow server is configured with a hardware security module for storing the escrow user's identity information, telephone number and encrypted digital currency.

[0023] Furthermore, the hardware security module is a key board or a cryptographic machine.

[0024] Beneficial effects: Compared with the prior art, the present invention has the following advantages:

[0025] The present invention can get rid of the restriction in existing digital currency transactions that the terminals held by both parties to the transaction must be installed with digital wallets, thereby enabling digital currency transactions to be carried out even on terminals that do not have the conditions for installing digital wallets.

[0026] The present invention uses a digital currency hosting server to store user information and encrypted digital currency. The user end does not store digital currency, thereby reducing the security risks faced by digital currency on the user end; and through an identity authentication mechanism based on digital certificates, the confidentiality of the digital currency transmission link is achieved, thereby improving the security performance of digital currency in the entire transaction process. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 This is a flowchart of the digital currency transaction process involved in the embodiment. DETAILED DESCRIPTION

[0028] The present invention will be further described below with reference to the accompanying drawings and specific embodiments. However, it should be understood that the present invention may be implemented in various forms, and the following exemplary and non-limiting embodiments shown in the drawings and described below are not intended to limit the present invention to the specific embodiments described.

[0029] It should be understood that, where technically feasible, the technical features listed above for different embodiments may be combined with each other to form additional embodiments within the scope of the present invention. In addition, the specific examples and embodiments described in the present invention are non-limiting, and the structures, steps, and sequences described above may be modified accordingly without departing from the scope of protection of the present invention.

[0030] In the following embodiments, mobile communication users who use the digital currency transaction method based on the hosting server agent are referred to as hosted users, and the remaining digital currency users are non-hosted users.

[0031] In this embodiment, a new digital currency escrow server S is required in the commercial bank. The escrow user first applies for digital currency escrow service at the commercial bank, registers various personal information, and deposits digital currency encrypted with his or her payment password P into S.

[0032] In this embodiment, HTTPS identity authentication is performed between the escrow user terminal, the digital currency escrow server S, the commercial bank, and the People's Bank of China based on digital certificates to form a session key.

[0033] S is equipped with a hardware security module HSM such as a key board or a cryptographic machine. All users' payment passwords P, identity information, and S's certificate private key SK are securely stored in the HSM.

[0034] In the following examples, the operator servers corresponding to the escrow user payer and escrow user payee are TCS / RCS, respectively, and the corresponding digital currency escrow servers are TS / RS. The commercial banks corresponding to TS / RS are TBS / RBS, respectively. The mobile communications operator's CS server has voice and SMS capabilities, enabling encrypted voice and SMS communications with the escrow user's mobile terminal.

[0035] Example: Escrow user T pays digital currency to escrow user R

[0036] Before the transaction, an encrypted channel is established between the participants of the digital currency transaction: after T and TCS are authenticated, an encrypted communication channel is formed; after TS and TCS are authenticated, an encrypted communication channel is formed; after R and RCS are authenticated, an encrypted communication channel is formed; after RS ​​and RCS are authenticated, an encrypted communication channel is formed.

[0037] The specific process of the transaction is as follows Figure 1 As shown, the following steps are included:

[0038] Step 1. T obtains R's mobile terminal number RN, confirms the amount, and enters the payment password to form a transaction request application message: TXT||TXm||TP, where TXm contains, for example, "Send xxx yuan to 13912345678", TXT is the transaction time, and TP is the payment password. Then, TXT||TXm||TP is sent to TCS in the form of voice or text message.

[0039] TCS calculates MAC(TXT||TXm,TP) and sends TXT||TXm||MAC(TXT||TXm,TP) to TS;

[0040] TS transmits TXT||TXm||MAC(TXT||TXm,TP) to its own HSM;

[0041] After the HSM verifies the received data, if the verification passes, it notifies the TS. The TS obtains the sender's information from the local personal information database based on the TN, forms a transaction request message TXraw, and inputs it into the HSM;

[0042] TXraw: includes transaction information such as transaction time TXT, sender information, RN, digital currency, etc.

[0043] Sender information includes sender ID, wallet ID, contact information, etc.

[0044] HSM uses its own private key SKT to sign TXraw to obtain SIGT and output it to TS.

[0045] 2. TS obtains the certificate of RS to which R belongs based on the public information, encrypts TXraw||SIGT with the random number RND, encrypts RND with RS's public key, and sends the two ciphertexts together to RS.

[0046] 3. RS decrypts the message and verifies the signature. Based on RN, it obtains the recipient information from the local personal information database to form the transaction content TX.

[0047] TX: including transaction time TXT, sender information, receiver information, digital currency and other transaction information

[0048] Sender information includes sender ID, wallet ID, contact information, hardware device code, etc.

[0049] The receiver information is similar;

[0050] RS's HSM signs TX with SKR to obtain SIGR and outputs it to RS;

[0051] RS sends TX||SIGR to RBS for verification.

[0052] 4. After RBS passes verification, it sends TX to the People's Bank of China; after the People's Bank of China passes verification, it sends the transaction results to TBS and RBS; after TBS and RBS pass verification, they send the transaction results to TS and RS respectively.

[0053] 5. TS verifies the transaction results and confirms the deletion of the local digital currency stored in TXraw after verification;

[0054] TS abbreviates and simplifies TXraw to form the voice or text information TXMraw corresponding to TXraw; TS encrypts TXMraw and sends it to TCS; TCS encrypts TXMraw and sends it to T;

[0055] RS verifies the transaction result and confirms the receipt of the digital currency in TX after verification;

[0056] RS abbreviates and simplifies TX to form the voice or text information TXM corresponding to TX; RS encrypts TXM and sends it to RCS; RCS decrypts TXM and then encrypts it and sends it to R.

[0057] 6. After receiving TXMraw / TXM respectively, T / R does not respond.

[0058] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A mobile terminal digital currency transaction method that does not require the installation of a digital wallet, characterized in that: The method is implemented between two parties of a transaction who neither of them has a digital wallet installed, and includes the following steps: (1) Configure a digital currency escrow server at a commercial bank and establish a secure channel between the digital currency escrow server and the escrow user terminal; the details are as follows: The secure channel between the digital currency escrow server and the escrow user is achieved by the following method: Set up an identity authentication mechanism between the hosting user and the operator's server to form a confidential channel between the hosting user and the operator's server; Setting up an identity authentication mechanism between the operator server and the digital currency escrow server to form a confidential channel between the operator server and the digital currency escrow server, and ultimately to achieve a confidential channel between the digital currency escrow server and the escrow user; The identity authentication mechanism between the managed user and the operator's server is the identity authentication mechanism of the mobile communication network; (2) Establishing an identity authentication mechanism based on digital certificates to enable confidential communication between the digital currency escrow server and commercial banks, and between commercial banks and the People's Bank of China based on digital certificates; (3) Before the transaction, the escrow user registers his / her identity information and phone number on the corresponding digital currency escrow server and deposits the digital currency encrypted with his / her payment password; (4) During the transaction, the escrow user acting as the payer sends an application message to the payer's digital currency escrow server requesting the transaction, which includes the payee's phone number, digital currency amount, payer's payment password, and payer's identity information; (5) The payer's digital currency escrow server finds the locally stored encrypted digital currency based on the payer's identity information in the application information, decrypts the digital currency using the payer's payment password, and then generates and signs a transaction request, which includes the digital currency for this transaction, the payer's identity information, and the payee's phone number; The payer's digital currency escrow server generates a random number encrypted transaction request and its signature, then encrypts the random number using the public key of the payee's digital currency escrow server's digital certificate, and then sends both ciphertexts to the payee's digital currency escrow server; (6) The payee's digital currency escrow server will decrypt the two ciphertexts and verify the signatures. It will find the locally stored payee's identity information based on the payee's phone number in the transaction request, generate the transaction content, sign it, and send it to the payee's commercial bank for verification. The transaction content includes: payee's identity information, payer's identity information, and digital currency. (7) After verification by the beneficiary commercial bank, the transaction details will be sent to the People’s Bank of China for verification; (8) After the People's Bank of China verifies the transaction content, it generates a transaction result containing the transaction content and feeds it back to the corresponding digital currency escrow server through the commercial banks of the payee and payer respectively; (9) After receiving and verifying the transaction result, the payer's digital currency escrow server deletes the corresponding digital currency stored locally and then feeds back transaction completion information to the payer; (10) After the payee’s digital currency escrow server receives and verifies the transaction result, it stores the digital currency in the transaction result and then feeds back the transaction completion information to the payee.

2. A mobile terminal digital currency transaction method that does not require installation of a digital wallet according to claim 1, characterized in that: The digital certificate-based authentication mechanism adopts the HTTPS authentication mechanism.

3. A mobile terminal digital currency transaction method without installing a digital wallet according to claim 1, characterized in that: The digital currency escrow server is configured with a hardware security module for storing the identity information, telephone number and encrypted digital currency of the escrow user.

4. A mobile terminal digital currency transaction method without installing a digital wallet according to claim 3, characterized in that: The hardware security module is a key board or a cipher machine.

Images