Blockchain-based fund transaction method and device, storage medium and electronic device

Abstract

The application discloses a blockchain-based fund transaction method and device, a storage medium and an electronic device. It relates to the technical field of blockchain and comprises the following steps: in a fund transaction process, determining payment application information initiated by a payer; synchronizing the payment application information to the payer node; authenticating the payment application information based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information is initiated by the payer, or determining that the payment application information is not initiated by the payer; in the case where it is determined that the payment application information is initiated by the payer, synchronizing the payment application information to a target financial institution through the payer node for payment transaction to obtain a payment transaction result; and synchronizing the payment transaction result to the financial institution node. Through the application, the problem that transaction data is easily tampered with in the related art, resulting in the inability to guarantee the accuracy and security of transaction data, is solved.

Description

Technical Field

[0001] This application relates to the field of blockchain technology, and more specifically, to a blockchain-based method, apparatus, storage medium, and electronic device for fund transactions. Background Technology

[0002] When current business platforms connect to banks to submit payment instructions, the banks primarily review the endorsement of the submitted documents and payment requirements, without verifying the data itself. The hierarchical approval process for internal payment details is based on an internal workflow system, which has weak external authentication effectiveness. Furthermore, inadequate data tamper-proofing measures further compromise the accuracy and security of transaction data.

[0003] There is currently no effective solution to the problem that transaction data is easily tampered with in related technologies, which makes it impossible to guarantee the accuracy and security of transaction data. Summary of the Invention

[0004] The main purpose of this application is to provide a blockchain-based fund transaction method, device, storage medium, and electronic device to solve the problem that transaction data is easily tampered with in related technologies, resulting in the inability to guarantee the accuracy and security of transaction data.

[0005] To achieve the above objectives, according to one aspect of this application, a blockchain-based fund transaction method is provided. The method includes: during a fund transaction, determining payment application information initiated by the payer, wherein the payment application information includes at least: a digital signature of the payment initiator, a digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer; synchronizing the payment application information to the payer node; authenticating the payment application information based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; if it is determined that the payment application information was initiated by the payer, synchronizing the payment application information to the target financial institution through the payer node to conduct a payment transaction, obtaining a payment transaction result; and synchronizing the payment transaction result to the financial institution node.

[0006] Furthermore, before determining the payment application information initiated by the payer during the fund transaction process, the method further includes: responding to the CA certificate application request initiated by the payer, generating an initial CA certificate for the payer, wherein the initial CA certificate includes at least: the name of the payer; configuring the administrator permissions of the initial CA certificate in the target financial institution; binding the initial CA certificate with the payer's account information through the administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the payer's account information; and issuing the target CA certificate to the payer.

[0007] Furthermore, the digital signature of the payment initiator is obtained through the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment initiator to obtain the digital signature of the payment initiator.

[0008] Furthermore, the digital signature of the payment approver is obtained through the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment approver to obtain the digital signature of the payment approver.

[0009] Furthermore, before authenticating the payment application information based on the payer node and obtaining the authentication result, the method further includes: obtaining the public key of the target CA certificate; sending the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment initiator based on the public key to obtain the decrypted first message; sending the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment approver based on the public key to obtain the decrypted second message.

[0010] Furthermore, based on the payment request information authenticated by the payer node, the authentication result includes: comparing the first message with the second message and the original payment message respectively, and obtaining the comparison result; if the comparison result indicates that the first message is the same as the original payment message, and the second message is the same as the original payment message, then it is determined that the payment request information was initiated by the payer; the determination that the payment request information was initiated by the payer is taken as the authentication result.

[0011] Furthermore, the blockchain network also includes monitoring nodes. Before the payment application information is synchronized to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result, the method also includes: listening to the payment application information through the monitoring nodes and obtaining the listening result, wherein the listening result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain abnormal fund transaction data.

[0012] To achieve the above objectives, according to another aspect of this application, a blockchain-based fund transaction device is provided. The device includes: a determining unit, configured to determine, during the fund transaction process, payment application information initiated by the payer, wherein the payment application information includes at least: a digital signature of the payment initiator, a digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer; a first synchronization unit, configured to synchronize the payment application information to the payer node; an authentication unit, configured to authenticate the payment application information based on the payer node and obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; a transaction unit, configured to, if it is determined that the payment application information was initiated by the payer, synchronize the payment application information to the target financial institution through the payer node to conduct a payment transaction and obtain a payment transaction result; and a second synchronization unit, configured to synchronize the payment transaction result to the financial institution node.

[0013] This application employs the following steps: During a fund transaction, the payment application information initiated by the payer is determined. This payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer; the payment application information is synchronized to the payer node; the payment application information is authenticated based on the payer node, and an authentication result is obtained, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; if the payment application information is determined to be initiated by the payer, the payment application information is synchronized to the target financial institution through the payer node for payment transaction, and a payment transaction result is obtained; the payment transaction result is synchronized to the financial institution node. This application solves the problem in related technologies where transaction data is easily tampered with, leading to a lack of assurance regarding the accuracy and security of transaction data. By synchronizing the payment application information to the target financial institution through the payer node for payment transaction, and obtaining the payment transaction result, the accuracy and security of transaction data are guaranteed. Attached Figure Description

[0014] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0015] Figure 1 This is a flowchart of a blockchain-based fund transaction method provided according to an embodiment of this application;

[0016] Figure 2 This is a schematic diagram of the initialization configuration of a blockchain-based fund transaction method provided in the embodiments of this application;

[0017] Figure 3 This is a schematic diagram of a system application of a blockchain-based fund transaction method provided in the embodiments of this application;

[0018] Figure 4 This is a schematic diagram of on-chain evidence storage for a blockchain-based fund transaction method provided in the embodiments of this application;

[0019] Figure 5 This is a schematic diagram of a blockchain-based fund transaction device provided according to an embodiment of this application;

[0020] Figure 6 This is a schematic diagram of a blockchain-based electronic fund transaction device provided according to an embodiment of this application. Detailed Implementation

[0021] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0022] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0023] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0024] For ease of description, the following explains some of the nouns or terms used in the embodiments of this application:

[0025] Digital signature: Using the certificate's private key, the original message digest is encrypted and calculated to generate a digital signature string.

[0026] Signature Verification: Digital certificate verification technology is employed. The encrypted message is decrypted using the certificate's public key, and its consistency is compared with the original message digest. The purpose is to ensure the validity and consistency of the certificate holder-message-signature. In simpler terms, it confirms that the payment message has been digitally signed by the true certificate holder using a legitimate and valid certificate issued by an authoritative authority.

[0027] Blockchain: Fund transaction data is stored online, deployed across multiple nodes in a distributed manner, and is tamper-proof, ensuring the secure storage of fund transaction results.

[0028] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties.

[0029] The present invention will now be described in conjunction with preferred implementation steps. Figure 1 This is a flowchart of a blockchain-based fund transaction method provided according to an embodiment of this application, such as... Figure 1 As shown, the method includes the following steps:

[0030] Step S101: The blockchain network includes at least a payer node and a financial institution node. During the fund transaction process, the payment application information initiated by the payer is determined. The payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, the payment message digest submitted by the payment initiator, the payment message digest submitted by the payment approver, and the original payment message initiated by the payer.

[0031] It should be noted that, in order to ensure the security and consistency of fund transactions, this application introduces authoritative third-party CA certification and uses multi-financial institution collaboration as the offline implementation link to perform strong authentication on the data. The financial institution can be a banking system.

[0032] Optionally, in the blockchain-based fund transaction method provided in this application embodiment, before determining the payment application information initiated by the payer during the fund transaction process, the method further includes: responding to the CA certificate application request initiated by the payer, generating an initial CA certificate for the payer, wherein the initial CA certificate includes at least: the name of the payer; configuring the administrator permissions of the initial CA certificate in the target financial institution; binding the initial CA certificate with the payer's account information through the administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the payer's account information; and issuing the target CA certificate to the payer.

[0033] For example, such as Figure 2 As shown, during multi-bank collaborative authentication, the paying company (corresponding to the payer in this application) applies for a certificate and verifies its information at the certificate application port. Upon successful verification, the CA (Certificate Authority) issues the company certificate and U-key hardware. At this stage, the certificate only contains basic company information. The paying company's corresponding bank handles the process, and the provincial branch approves the operation. On the security authentication device system application module, digital certificate administrator permissions are configured for the company user. The company's account information is then bound to the CA digital certificate through the bank. The CA digital certificate containing the bound account information is used as the target CA certificate in this application. This certificate is used for subsequent verification of whether the certificate has the authority to control the account, preventing unauthorized use of the company account and further ensuring data security and consistency during fund transactions.

[0034] It should be noted that enterprise administrators who have configured and bound digital certificates through the opening bank can grant business system permissions to ordinary enterprise users and complete the verification through signature and signature verification.

[0035] Optionally, in the blockchain-based fund transaction method provided in this application embodiment, the digital signature of the payment initiator is obtained through the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment initiator to obtain the digital signature of the payment initiator.

[0036] For example, such as Figure 3 As shown, during the approval process at the application terminal of this secure witness device, financial and management personnel at all levels of the enterprise confirm the payment data in the form of a data signature. The essence of this step is to use the private key of the digital certificate (target CA certificate, hereinafter the same) to perform encrypted calculations on the original payment message digest to generate a unique digital signature string, for example, such as... Figure 3 As shown, the enterprise's personnel (payment initiator) submit a payment application form (original payment message), then confirm the payment application form to obtain the payment message digest submitted by the payment initiator. Using the private key of the digital certificate, the payment message digest submitted by the payment initiator is encrypted and calculated to generate a digital signature corresponding to the payment initiator. By determining the digital signature of the payment initiator, the consistency of payment initiation data at the enterprise level is guaranteed.

[0037] The digital signature of the payment approver is obtained through the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment approver to obtain the digital signature of the payment approver.

[0038] Specifically, such as Figure 3As shown, the enterprise approver (payment approver) confirms the payment information initiated by the payment initiator, obtains the payment message digest submitted by the payment approver, and uses the private key of the digital certificate to encrypt and calculate the payment message digest submitted by the payment approver to generate the digital signature corresponding to the payment approver, thus ensuring the consistency of payment approval data at the enterprise level.

[0039] Step S102: Synchronize the payment application information to the payer node.

[0040] Specifically, the digital signatures of the payment initiator, the payment approver, the payment message digest submitted by the payment initiator, the payment message digest submitted by the payment approver, and the original payment message initiated by the payer are synchronized to the payer node, thereby ensuring that enterprise-level data is not tampered with.

[0041] Step S103: Authenticate the payment application information based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer.

[0042] Specifically, such as Figure 3 As shown, the payment application information is synchronized to the blockchain application platform through the payer node, and the digital signatures of the payment initiator and the payment approver in the payment application information are authenticated to obtain the authentication result.

[0043] It should be noted that before authenticating the payment application information based on the payer node and obtaining the authentication result, the digital signatures of the payment initiator and the payment approver need to be verified to obtain the decrypted signature message. The specific implementation steps are as follows: Obtain the public key of the target CA certificate; send the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system can decrypt the digital signature of the payment initiator based on the public key to obtain the first decrypted message; send the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system can decrypt the digital signature of the payment approver based on the public key to obtain the second decrypted message.

[0044] Specifically, the certificate information, payment message, and digital signature are submitted to the CA's authentication system. The CA authentication system uses the certificate's public key to decrypt the digital signatures of the payment initiator and the payment approver, respectively, to obtain the first and second decrypted messages. By verifying the digital signatures of the payment initiator and the payment approver, it is ensured that the payment application information subsequently submitted to the bank has indeed been confirmed and signed by the enterprise at each level.

[0045] Specifically, based on the payment request information authenticated by the payer node, the authentication result includes: comparing the first message with the second message and the original payment message respectively, and obtaining the comparison result; if the comparison result indicates that the first message is the same as the original payment message, and the second message is the same as the original payment message, then it is determined that the payment request information was initiated by the payer; the determination that the payment request information was initiated by the payer is taken as the authentication result.

[0046] In other words, the consistency between the decrypted first and second messages and the original messages is compared to achieve the verification purpose. From a business perspective, this ensures that the payment information submitted to the bank in the future has indeed been confirmed and signed by the company at each level, that is, confirming that the payment application information was initiated by the payer.

[0047] Step S104: If it is determined that the payment application information was initiated by the payer, the payment application information is synchronized to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result.

[0048] Step S105: Synchronize the payment transaction result to the financial institution node.

[0049] For example, such as Figure 4 As shown, when it is confirmed that the payment application information was initiated by the payer, the payment application information is synchronized to the banking system by the blockchain application platform to which the payer node belongs, and the payment transaction is processed. The payment transaction result is then synchronized to the financial institution node for notarization, thereby ensuring that the bank-level data is not tampered with.

[0050] Optionally, in the blockchain-based fund transaction method provided in this application embodiment, the blockchain network further includes a monitoring node. Before the payment application information is synchronized to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result, the method further includes: listening to the payment application information through the monitoring node and obtaining the listening result, wherein the listening result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain abnormal fund transaction data.

[0051] Specifically, after completing a series of data signatures and verifications, the blockchain application platform submits the securely certified data to the bank for payment. At the same time, the payment data may also be reported to the regulatory platform (corresponding to the monitoring node in the blockchain network), which can monitor the transaction data in the payment application information in real time, ensuring the security of data during the data transaction process, and also playing the role of blockchain network alliance in aggregating data to prevent tampering.

[0052] Through the above steps and the back-end signature verification function, the accurate transmission of the enterprise's true payment intention to the bank is ensured, effectively eliminating the possibility of disputes between the enterprise and the bank. The certified and verified data is deployed to multiple distributed nodes for storage, ensuring the availability and consistency of data for all parties in the overall blockchain network.

[0053] In summary, the blockchain-based fund transaction method provided in this application, during the fund transaction process, determines the payment application information initiated by the payer. This payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer. The payment application information is then synchronized to the payer's node. Based on the payment application information authenticated by the payer's node, an authentication result is obtained, which is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer. If the payment application information is determined to be initiated by the payer, the payment application information is synchronized to the target financial institution through the payer's node for payment transaction, resulting in a payment transaction result. Finally, the payment transaction result is synchronized to the financial institution's node. This application solves the problem in related technologies where transaction data is easily tampered with, leading to a lack of assurance regarding the accuracy and security of transaction data. By synchronizing the payment application information to the target financial institution through the payer's node for payment transaction, the accuracy and security of transaction data are guaranteed.

[0054] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0055] This application also provides a blockchain-based fund transaction device. It should be noted that the blockchain-based fund transaction device of this application can be used to execute the blockchain-based fund transaction method provided in this application. The following describes the blockchain-based fund transaction device provided in this application.

[0056] Figure 5 This is a schematic diagram of a blockchain-based fund transaction device according to an embodiment of this application. Figure 5 As shown, the device includes: a determination unit 501, a first synchronization unit 502, an authentication unit 503, a transaction unit 504, and a second synchronization unit 505.

[0057] Specifically, the determining unit 501 is used to determine the payment application information initiated by the payer during the fund transaction process. The payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, the payment message digest submitted by the payment initiator, the payment message digest submitted by the payment approver, and the original payment message initiated by the payer.

[0058] The first synchronization unit 502 is used to synchronize payment application information to the payer node;

[0059] The authentication unit 503 is used to authenticate the payment application information based on the payer node and obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer;

[0060] Transaction unit 504 is used to synchronize the payment application information to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result when it is determined that the payment application information was initiated by the payer.

[0061] The second synchronization unit 505 is used to synchronize the payment transaction results to the financial institution node.

[0062] In summary, the blockchain-based fund transaction device provided in this application embodiment, through a determining unit 501, is used to determine the payment application information initiated by the payer during the fund transaction process. The payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer. A first synchronization unit 502 is used to synchronize the payment application information to the payer node. An authentication unit 503 is used to authenticate the payment application information based on the payer node and obtain an authentication result, where the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer. A transaction unit 504, when determining that the payment application information was initiated by the payer, synchronizes the payment application information to the target financial institution through the payer node to conduct a payment transaction and obtain a payment transaction result. A second synchronization unit 505 is used to synchronize the payment transaction result to the financial institution node. This solves the problem in related technologies where transaction data is easily tampered with, leading to a lack of assurance regarding the accuracy and security of transaction data. By synchronizing payment application information to the target financial institution through the payer node, the payment transaction result is obtained, thereby ensuring the accuracy and security of transaction data.

[0063] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the device further includes: a response unit, used to generate an initial CA certificate for the payer in response to a CA certificate application request initiated by the payer before determining the payment application information initiated by the payer during the fund transaction process, wherein the initial CA certificate includes at least: the name of the payer; a configuration unit, used to configure the administrator permissions of the initial CA certificate in the target financial institution; a binding unit, used to bind the initial CA certificate with the account information of the payer through the administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the account information of the payer; and a distribution unit, used to distribute the target CA certificate to the payer.

[0064] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the determining unit includes: a first acquisition module, used to acquire the private key of the target CA certificate; and a first calculation module, used to perform encrypted calculation on the payment message digest submitted by the payment initiator using the private key to obtain the digital signature of the payment initiator.

[0065] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the determining unit includes: a second acquisition module, used to acquire the private key of the target CA certificate; and a second calculation module, used to perform encrypted calculation on the payment message digest submitted by the payment approver using the private key to obtain the digital signature of the payment approver.

[0066] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the device further includes: an acquisition unit, used to acquire the public key of the target CA certificate before authenticating the payment application information based on the payer node and obtaining the authentication result; a first decryption unit, used to send the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment initiator according to the public key to obtain a decrypted first message; and a second decryption unit, used to send the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment approver according to the public key to obtain a decrypted second message.

[0067] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the authentication unit includes: a comparison module, used to compare the first message with the second message and the original payment message respectively to obtain a comparison result; a first determination module, used to determine that the payment application information was initiated by the payer when the comparison result indicates that the first message is the same as the original payment message and the second message is the same as the original payment message; and a second determination module, used to take the determination that the payment application information was initiated by the payer as the authentication result.

[0068] Optionally, in the blockchain-based fund transaction device provided in this application embodiment, the device further includes: a listening unit, which is used to monitor the payment application information through the monitoring node before the payment application information is synchronized to the target financial institution through the payer node to make a payment transaction and obtain the payment transaction result. The monitoring result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain abnormal fund transaction data.

[0069] The blockchain-based fund transaction device includes a processor and a memory. The aforementioned determination unit 501, first synchronization unit 502, authentication unit 503, transaction unit 504, second synchronization unit 505, etc., are all stored in the memory as program units. The processor executes the aforementioned program units stored in the memory to realize the corresponding functions.

[0070] The processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and blockchain-based financial transactions can be performed by adjusting kernel parameters.

[0071] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0072] This invention provides a computer-readable storage medium storing a program that, when executed by a processor, implements a blockchain-based fund transaction method.

[0073] This invention provides a processor for running a program, wherein the program executes a blockchain-based fund transaction method during runtime.

[0074] like Figure 6 As shown, this embodiment of the invention provides an electronic device, which includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, it performs the following steps: In a fund transaction, determining payment application information initiated by the payer, wherein the payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer; synchronizing the payment application information to the payer node; authenticating the payment application information based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; if it is determined that the payment application information was initiated by the payer, synchronizing the payment application information to the target financial institution through the payer node to conduct a payment transaction, and obtaining a payment transaction result; synchronizing the payment transaction result to the financial institution node.

[0075] When the processor executes the program, it also performs the following steps: in response to a CA certificate application request initiated by the payer, it generates an initial CA certificate for the payer, wherein the initial CA certificate includes at least: the name of the payer; configures the administrator permissions of the initial CA certificate in the target financial institution; binds the initial CA certificate with the payer's account information through the administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the payer's account information; and distributes the target CA certificate to the payer.

[0076] When the processor executes the program, it also performs the following steps: obtains the private key of the target CA certificate; and uses the private key to perform encrypted calculation on the payment message digest submitted by the payment initiator to obtain the digital signature of the payment initiator.

[0077] When the processor executes the program, it also performs the following steps: obtains the private key of the target CA certificate; and uses the private key to perform encrypted calculation on the payment message digest submitted by the payment approver to obtain the digital signature of the payment approver.

[0078] When the processor executes the program, it also performs the following steps: obtaining the public key of the target CA certificate; sending the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment initiator according to the public key to obtain the decrypted first message; sending the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment approver according to the public key to obtain the decrypted second message.

[0079] When the processor executes the program, it also performs the following steps: comparing the first message with the second message and the original payment message respectively to obtain the comparison result; if the comparison result indicates that the first message is the same as the original payment message and the second message is the same as the original payment message, then it is determined that the payment application information was initiated by the payer; and the determination that the payment application information was initiated by the payer is taken as the authentication result.

[0080] The processor also performs the following steps when executing the program: The blockchain network also includes a monitoring node, which listens to the payment application information before the payment application information is synchronized to the target financial institution through the payer node to make the payment transaction and obtains the payment transaction result. The listening result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain abnormal fund transaction data.

[0081] The devices mentioned in this article can be servers, PCs, tablets, mobile phones, etc.

[0082] This application also provides a computer program product, which, when executed on a data processing device, is suitable for executing an initialization program with the following method steps: During a fund transaction, determining payment application information initiated by the payer, wherein the payment application information includes at least: a digital signature of the payment initiator, a digital signature of the payment approver, a payment message digest submitted by the payment initiator, a payment message digest submitted by the payment approver, and the original payment message initiated by the payer; synchronizing the payment application information to the payer node; authenticating the payment application information based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; if it is determined that the payment application information was initiated by the payer, synchronizing the payment application information to the target financial institution through the payer node to conduct a payment transaction, obtaining a payment transaction result; and synchronizing the payment transaction result to the financial institution node.

[0083] When executed on a data processing device, it is also suitable to execute an initialization procedure with the following steps: in response to a CA certificate application request initiated by the payer, generating an initial CA certificate for the payer, wherein the initial CA certificate includes at least: the payer's name; configuring the administrator permissions of the initial CA certificate in the target financial institution; binding the initial CA certificate with the payer's account information through the administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the payer's account information; and distributing the target CA certificate to the payer.

[0084] When executed on a data processing device, it is also suitable to execute an initialization program with the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment initiator to obtain the digital signature of the payment initiator.

[0085] When executed on a data processing device, it is also suitable to execute an initialization program with the following steps: obtaining the private key of the target CA certificate; using the private key to perform encrypted calculation on the payment message digest submitted by the payment approver to obtain the digital signature of the payment approver.

[0086] When executed on a data processing device, the procedure is also suitable for executing an initialization program with the following steps: obtaining the public key of the target CA certificate; sending the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment initiator according to the public key to obtain the decrypted first message; sending the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment approver according to the public key to obtain the decrypted second message.

[0087] When executed on a data processing device, it is also suitable to execute an initialization program with the following steps: comparing the first message with the second message and the original payment message respectively to obtain a comparison result; if the comparison result indicates that the first message is the same as the original payment message and the second message is the same as the original payment message, then it is determined that the payment request information was initiated by the payer; and the determination that the payment request information was initiated by the payer is taken as the authentication result.

[0088] When executed on a data processing device, it is also suitable to execute an initialization program with the following method steps: The blockchain network also includes a monitoring node, which listens to the payment application information before synchronizing the payment application information to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result. The listening result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain abnormal fund transaction data.

[0089] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0090] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0091] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1The function specified in one or more boxes.

[0092] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0093] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0094] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0095] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0096] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0097] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0098] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A blockchain-based fund transaction method, characterized in that, A blockchain network includes at least payer nodes and financial institution nodes, among which: During the fund transaction process, the payment application information initiated by the payer is determined, wherein the payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, the payment message digest submitted by the payment initiator, the payment message digest submitted by the payment approver, and the original payment message initiated by the payer; The payment application information is synchronized to the payer node; The payment application information is authenticated based on the payer node to obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; the authentication of the payment application information based on the payer node includes: authenticating the digital signature of the payment initiator and the digital signature of the payment approver in the payment application information; If it is determined that the payment application information was initiated by the payer, the payment application information is synchronized to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result. The payment transaction result is synchronized to the financial institution node; Before determining the payment request information initiated by the payer during the fund transaction process, the method further includes: In response to the CA certificate application request initiated by the payer, an initial CA certificate for the payer is generated, wherein the initial CA certificate includes at least: the name of the payer; Configure the initial CA certificate with administrator privileges in the target financial institution; By using the administrator privileges, the initial CA certificate is bound to the payer's account information to obtain the target CA certificate, wherein the certificate information of the target CA certificate includes at least the payer's account information; The target CA certificate is issued to the payer, wherein the target CA certificate is used to verify the permissions of the payment account; Before authenticating the payment application information based on the payer node and obtaining the authentication result, the method further includes: Obtain the public key of the target CA certificate; The digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information are sent to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment initiator according to the public key to obtain the decrypted first message; The digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information are sent to the CA authentication system, so that the CA authentication system decrypts the digital signature of the payment approver based on the public key to obtain the decrypted second message.

2. The method according to claim 1, characterized in that, The digital signature of the payment initiator is obtained through the following steps: Obtain the private key of the target CA certificate; The payment message digest submitted by the payment initiator is encrypted and calculated using the private key to obtain the digital signature of the payment initiator.

3. The method according to claim 2, characterized in that, The digital signature of the payment approver is obtained through the following steps: Obtain the private key of the target CA certificate; The payment message digest submitted by the payment approver is encrypted and calculated using the private key to obtain the digital signature of the payment approver.

4. The method according to claim 1, characterized in that, The authentication results obtained based on the payment request information authenticated by the payer node include: The first message is compared with the second message and the original payment message respectively to obtain the comparison results; If the comparison result indicates that the first message is the same as the original payment message, and the second message is the same as the original payment message, then it is determined that the payment request information was initiated by the payer. The authentication result will be determined as to have been initiated by the payer.

5. The method according to claim 1, characterized in that, The blockchain network also includes a monitoring node. Before the payment application information is synchronized to the target financial institution through the payer node for payment transaction and the payment transaction result is obtained, the method further includes: The monitoring node listens to the payment application information and obtains the listening result, wherein the listening result is at least one of the following: the payment application information contains abnormal fund transaction data, or the payment application information does not contain the abnormal fund transaction data.

6. A blockchain-based fund transaction device, characterized in that, A blockchain network includes at least payer nodes and financial institution nodes, among which: The determining unit is used to determine the payment application information initiated by the payer during the fund transaction process. The payment application information includes at least: the digital signature of the payment initiator, the digital signature of the payment approver, the payment message digest submitted by the payment initiator, the payment message digest submitted by the payment approver, and the original payment message initiated by the payer. The first synchronization unit is used to synchronize the payment application information to the payer node; An authentication unit is configured to authenticate the payment application information based on the payer node and obtain an authentication result, wherein the authentication result is one of the following: determining that the payment application information was initiated by the payer, or determining that the payment application information was not initiated by the payer; authenticating the payment application information based on the payer node includes: authenticating the digital signature of the payment initiator and the digital signature of the payment approver in the payment application information; The transaction unit is used to synchronize the payment application information to the target financial institution through the payer node to conduct the payment transaction and obtain the payment transaction result when it is determined that the payment application information was initiated by the payer. The second synchronization unit is used to synchronize the payment transaction result to the financial institution node; A response unit, used during a fund transaction, before determining the payment application information initiated by the payer, responds to the CA certificate application request initiated by the payer and generates an initial CA certificate for the payer, wherein the initial CA certificate includes at least: the name of the payer; a configuration unit, used to configure the administrator permissions of the initial CA certificate in the target financial institution; a binding unit, used to bind the initial CA certificate with the payer's account information through administrator permissions to obtain a target CA certificate, wherein the certificate information of the target CA certificate includes at least: the payer's account information; and a distribution unit, used to distribute the target CA certificate to the payer, wherein the target CA certificate is used to verify the permissions of the payment account; The acquisition unit is used to acquire the public key of the target CA certificate before authenticating the payment application information based on the payer node and obtaining the authentication result. The first decryption unit is used to send the digital signature of the payment initiator, the payment message digest submitted by the payment initiator, and the certificate information to the CA authentication system, so that the CA authentication system can decrypt the digital signature of the payment initiator according to the public key to obtain the decrypted first message. The second decryption unit is used to send the digital signature of the payment approver, the payment message digest submitted by the payment approver, and the certificate information to the CA authentication system, so that the CA authentication system can decrypt the digital signature of the payment approver according to the public key to obtain the decrypted second message.

7. A computer-readable storage medium, characterized in that, The storage medium stores a program, wherein the program executes the method described in any one of claims 1 to 5.

8. An electronic device, characterized in that, The method includes one or more processors and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement the method of any one of claims 1 to 5.

Images