A method, system and related trading terminal for digital currency transactions

Abstract

The present invention discloses a digital currency trading method, system and related trading terminals, relating to the field of computer technology. A specific embodiment of the method includes: after establishing a communication connection with a second trading terminal, a first trading terminal exchanges user certificates with the second trading terminal to mutually verify the user identities of each other. After determining that the user identity verification of both parties is passed, a trading factor is negotiated and generated with the second trading terminal, and the first digital currency trading information including the trading factor is uploaded to the background system of the first operating institution, and the background system of the first operating institution sends the first digital currency trading information to the background system of the second operating institution to complete the digital currency trading. This embodiment realizes the separation of identity verification and trading, reduces the user operation steps, simplifies the trading process, is not restricted by the trading distance, supports password-free and password-verified payments, and does not require secondary touching during password verification, greatly shortening the touching time and improving the security of the trading.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and particularly to a digital currency trading method, system and related trading terminals. Background Art

[0002] In existing online digital currency transactions, the payee and the payer make payments by means of transmitting the online account markers through two-dimensional codes or NFC (Near Field Communication). Users need to enter the digital currency App (application) to obtain payment information or receipt information, and the user operation steps are numerous; when verifying the password in near-field payment, it is necessary to touch twice, resulting in a poor user payment experience; in addition, the traditional two-dimensional code payment method is easy to be copied and stolen, and the security is relatively low.

[0003] In the process of implementing the present invention, the inventors found that there are at least the following problems in the prior art:

[0004] The user operation steps are numerous, the transaction process is complex, it is necessary to touch twice when verifying the password, the touch time is long, and the security of the transaction is relatively poor. Summary of the Invention

[0005] In view of this, embodiments of the present invention provide a digital currency trading method, system and related trading terminals, which can reduce the user operation steps, simplify the transaction process, are not limited by the transaction distance, support password-free and password-verified payments, and do not require secondary touch when verifying the password, greatly shortening the touch time, and improving the security of the transaction.

[0006] To achieve the above object, according to one aspect of the embodiments of the present invention, a digital currency trading method is provided.

[0007] A digital currency trading method includes: after establishing a communication connection with a second trading terminal, a first trading terminal exchanges user certificates with the second trading terminal, and the exchanged user certificates are used for the first trading terminal and the second trading terminal to mutually verify the user identities of each other; after determining that the user identity verifications of both the first trading terminal and the second trading terminal are passed, the first trading terminal negotiates with the second trading terminal to generate a transaction factor; the first trading terminal uploads first digital currency trading information including the transaction factor to a first operating institution's back-end system, and the first operating institution's back-end system sends the first digital currency trading information to a second operating institution's back-end system to complete the digital currency transaction, where the first operating institution's back-end system is the back-end of the operating institution corresponding to the first trading terminal, the second operating institution's back-end system is the back-end of the operating institution corresponding to the second trading terminal, and the transaction factor is used for the second operating institution's back-end system to verify the first digital currency trading information.

[0008] Optionally, the first trading terminal and the second trading terminal establish the communication connection through short-range communication.

[0009] Optionally, the first trading terminal verifies the user certificate of the second trading terminal by using the operating institution certificate corresponding to the second trading terminal stored in the local security chip, so as to verify the user identity of the second trading terminal.

[0010] Optionally, the first digital currency trading information further includes relevant information of the digital currency, and the relevant information of the digital currency includes the digital currency string and / or the account information of the digital currency.

[0011] Optionally, before uploading the first digital currency trading information including the trading factor to the background system of the first operating institution, the first trading terminal includes: adding the private key signature of the first trading terminal to the first digital currency trading information, and the private key signature is used for the background system of the first operating institution to verify the trading intention of the first trading terminal.

[0012] Optionally, the first trading terminal generates the trading factor by invoking a preset key algorithm through the local security chip, and the trading factor is in the form of a string.

[0013] Optionally, after determining that the current transaction adopts password-free transaction or determining that the password entered for the current transaction is correct, the first trading terminal uploads the first digital currency trading information including the trading factor to the background system of the first operating institution.

[0014] According to another aspect of the embodiments of the present invention, a first trading terminal for digital currency trading is provided.

[0015] A first trading terminal for digital currency trading, comprising: a first communication module, configured to establish a communication connection with a second trading terminal and exchange user certificates with the second trading terminal, where the user certificate of the first trading terminal is used by the second trading terminal to verify the user identity of the first trading terminal; an identity verification module, configured to use the user certificate of the second trading terminal to verify the user identity of the second trading terminal; a trading factor generation module, configured to negotiate and generate a trading factor with the second trading terminal after determining that the user identity verification of both the first trading terminal and the second trading terminal is passed; a second communication module, configured to upload first digital currency trading information including the trading factor to a first operating institution's back-end system, and the first operating institution's back-end system sends the first digital currency trading information to a second operating institution's back-end system to complete the digital currency trading, where the first operating institution's back-end system is the back-end of the operating institution corresponding to the first trading terminal, the second operating institution's back-end system is the back-end of the operating institution corresponding to the second trading terminal, and the trading factor is used by the second operating institution's back-end system to verify the first digital currency trading information.

[0016] Optionally, the first communication module is further configured to: establish the communication connection with the second trading terminal through short-range communication.

[0017] Optionally, the identity verification module is further configured to: verify the user certificate of the second trading terminal by using the operating institution certificate corresponding to the second trading terminal stored in the local security chip, so as to verify the user identity of the second trading terminal.

[0018] Optionally, the first digital currency trading information further includes relevant information of the digital currency, and the relevant information of the digital currency includes a digital currency string and / or account information of the digital currency.

[0019] Optionally, it further includes a signature module, configured to: add a private key signature of the first trading terminal to the first digital currency trading information, and the private key signature is used by the first operating institution's back-end system to verify the trading intention of the first trading terminal.

[0020] Optionally, the trading factor generation module is further configured to: generate the trading factor by invoking a preset key algorithm through the local security chip, and the trading factor is in the form of a string.

[0021] Optionally, the second communication module is further configured to: upload the first digital currency trading information including the trading factor to the first operating institution's back-end system after determining that the current transaction adopts password-free trading or determining that the current transaction password input is correct.

[0022] According to another aspect of the embodiments of the present invention, a digital currency trading system is provided.

[0023] A digital currency trading system, comprising: a first trading terminal provided by an embodiment of the present invention, further comprising a second trading terminal, a first operator's back-end system, and a second operator's back-end system. The first operator's back-end system is the back-end of the operator corresponding to the first trading terminal, and the second operator's back-end system is the back-end of the operator corresponding to the second trading terminal; the second trading terminal is configured to verify the user identity of the first trading terminal by using the user certificate of the first trading terminal, and upload second digital currency trading information including the trading factor to the second operator's back-end system; the first operator's back-end system is configured to upload the first digital currency trading information to the second operator's back-end system; the second operator's back-end system is configured to verify the first digital currency trading information according to the second digital currency trading information, and perform the digital currency trading when the first digital currency trading information is verified.

[0024] Optionally, the first digital currency trading information and the second digital currency trading information further include a trading amount, the first digital currency trading information further includes a second operator identifier, and the second digital currency trading information further includes a first operator identifier; the second operator's back-end system is further configured to: verify the first digital currency trading information by verifying the trading factor, operator identifier, and trading amount in the second digital currency trading information and the first digital currency trading information.

[0025] According to another aspect of the embodiments of the present invention, an electronic device is provided.

[0026] An electronic device, comprising: one or more processors; a memory for storing one or more programs, which when executed by the one or more processors, cause the one or more processors to implement the digital currency trading method provided by the embodiments of the present invention.

[0027] According to another aspect of the embodiments of the present invention, a computer-readable medium is provided.

[0028] A computer-readable medium, on which a computer program is stored, and when the program is executed by a processor, it implements the digital currency trading method provided by the embodiments of the present invention.

[0029] One embodiment of the above invention has the following advantages or beneficial effects: After establishing a communication connection with the second trading terminal, the first trading terminal exchanges user certificates with the second trading terminal to mutually verify the user identities of each other. After determining that the user identity verification of both parties is passed, a trading factor is negotiated and generated with the second trading terminal, and the first digital currency trading information including the trading factor is uploaded to the back-end system of the first operating institution. The back-end system of the first operating institution sends the first digital currency trading information to the back-end system of the second operating institution to complete the digital currency transaction. By utilizing the networking ability and security chip ability on the terminal side, the separation of identity verification and transaction is realized, which can reduce the user operation steps, simplify the trading process, is not restricted by the trading distance, supports password-free and password-verified payments, and does not require secondary touching during password verification, greatly shortening the touching time and improving the trading security.

[0030] The further effects of the above non-conventional optional methods will be described below in conjunction with specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The drawings are used to better understand the present invention and do not constitute an improper limitation to the present invention. Among them:

[0032] Figure 1 is a schematic diagram of the main steps of a digital currency trading method according to an embodiment of the present invention;

[0033] Figure 2 is a schematic diagram of a digital currency trading process according to an embodiment of the present invention;

[0034] Figure 3 is a schematic diagram of the main modules of a first trading terminal for digital currency trading according to an embodiment of the present invention;

[0035] Figure 4 is a schematic diagram of the main components of a digital currency trading system according to an embodiment of the present invention;

[0036] Figure 5 is an exemplary system architecture diagram to which the embodiments of the present invention can be applied;

[0037] Figure 6 is a schematic diagram of the structure of a computer system of a terminal device suitable for implementing the embodiments of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0038] The following describes exemplary embodiments of the present invention in conjunction with the accompanying drawings. Various details of the embodiments of the present invention are included to facilitate understanding, and they should be considered merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, descriptions of well-known functions and structures are omitted in the following description for clarity and conciseness.

[0039] Figure 1 It is a schematic diagram of the main steps of a digital currency trading method according to an embodiment of the present invention.

[0040] As Figure 1 shown, the digital currency trading method of an embodiment of the present invention mainly includes the following steps S101 to S103.

[0041] Step S101: After establishing a communication connection with the second trading terminal, the first trading terminal exchanges user certificates with the second trading terminal, and the exchanged user certificates are used for the first trading terminal and the second trading terminal to mutually verify the user identities of each other;

[0042] Step S102: After determining that the user identity verification of both the first trading terminal and the second trading terminal is passed, the first trading terminal negotiates with the second trading terminal to generate a trading factor;

[0043] Step S103: The first trading terminal uploads the first digital currency trading information including the trading factor to the back-end system of the first operating institution, and the back-end system of the first operating institution sends the first digital currency trading information to the back-end system of the second operating institution to complete the digital currency trading.

[0044] Among them, the back-end system of the first operating institution is the back-end of the operating institution corresponding to the first trading terminal, and the back-end system of the second operating institution is the back-end of the operating institution corresponding to the second trading terminal.

[0045] The trading factor is used for the back-end system of the second operating institution to verify the first digital currency trading information.

[0046] The first trading terminal and the second trading terminal establish a communication connection through short-range communication.

[0047] The first trading terminal and the second trading terminal are the two parties to the transaction. Among them, the first trading terminal can be the payer, and the second trading terminal can be the payee, or the second trading terminal can be the payer, and the first trading terminal can be the payee.

[0048] Accordingly, the first digital currency transaction information is sent by the back-end system of the first operating institution to the back-end system of the second operating institution to complete the digital currency transaction. Specifically, the back-end system of the operating institution of the payee may send the first digital currency transaction information to the back-end system of the operating institution of the payer, so that the payer initiates a transfer. Alternatively, the back-end system of the operating institution of the payer may send the first digital currency transaction information to the back-end system of the operating institution of the payee, so that the payee initiates a deduction.

[0049] The first transaction terminal uses the operating institution certificate corresponding to the second transaction terminal stored in the local security chip to verify the user certificate of the second transaction terminal, so as to verify the user identity of the second transaction terminal. The public key of the operating institution in the operating institution certificate can be used to verify the user certificate (with the private key signature of the operating institution) of the second transaction terminal.

[0050] The first digital currency transaction information further includes relevant information of the digital currency. The relevant information of the digital currency includes the digital currency string and / or the account information of the digital currency.

[0051] Before uploading the first digital currency transaction information including the transaction factor to the back-end system of the first operating institution, the first transaction terminal may add the private key signature of the first transaction terminal to the first digital currency transaction information. The private key signature is used for the back-end system of the first operating institution to verify the transaction intention of the first transaction terminal.

[0052] The first transaction terminal generates a transaction factor by calling a preset key algorithm through the local security chip. The preset key algorithm can be a common key algorithm, as long as it can be used for both parties to negotiate a transaction factor with a certain data structure.

[0053] The transaction factor can be in the form of a string, and the data structure of the transaction factor such as the number of digits of the string.

[0054] After the first transaction terminal determines that the current transaction uses password-free transaction or determines that the current transaction password entered is correct, it uploads the first digital currency transaction information including the transaction factor to the back-end system of the first operating institution.

[0055] Based on the security chip loading certificate system technology and the near-field communication technology, after the identity verification of both parties at the end side (i.e., the transaction terminal), a transaction factor is jointly negotiated, and then both parties to the transaction upload the transaction factor to the back-end of the operating institution through the Internet for verification. After the verification is passed, online collection and payment are initiated, which greatly improves the convenience and security of digital currency transactions, greatly reduces the transaction time, and reduces the risk of the collection and payment information being stolen.

[0056] In the embodiments of the present invention, the two parties to the transaction only perform identity authentication on the terminal side to confirm that both parties are legal users of the operating institution, and then initiate the payment process through the online operating institution. The digital currency transaction process of an embodiment of the present invention is as follows Figure 2 shown. When personalizing and opening a wallet, the user writes in the user certificate. The two parties can preset the certificates of each operating institution or exchange the certificates of the operating institutions during the transaction process to achieve mutual verification among the operating institutions (S201). The transaction initiator initiates a transaction request and establishes a connection with the recipient through short-range communication (S202). The two parties exchange user certificates, and use the operating institution certificates to verify the legality of the user certificates (S203). If the above verification passes, the two parties negotiate a session key and generate a transaction factor (S204), and then execute S205. If the above verification fails, the transaction is interrupted (S208). The two parties to the transaction respectively upload digital currency transaction information such as the transaction factor, transaction amount, and the operating institution number of the counterparty to their respective institutional backends through their respective communication modules (i.e., the second communication module) (S205). This transaction information should include the private key signature on the terminal side. The initiating institution sends this transaction information to the receiving institution through the interoperability platform (S206). The receiving institution checks the consistency of transaction information such as the transaction factor and the operating institution number, and verifies the user signature to confirm the user's true payment intention. The operating institution backend initiates a transfer or consumption request to complete the payment transaction (S207). If a payment password is required, the payer can input the payment password through the terminal application. The initiating institution is the first operating institution backend system, and the receiving institution is the second operating institution backend system.

[0057] In the embodiments of the present invention, on the mobile phone side, the user can touch the screen when the screen is off. After touching, the two parties do not need to keep the touch operation, and can wake up the payer's application to input the password, which solves the risk problem of passwordless payment. And when password verification is required, there is no need for a second touch, but the digital currency transaction information (referred to as transaction information) is transmitted between the operating institution backend systems, which greatly improves the user experience and security. In the embodiments of the present invention, especially when applied to NFC near-field communication, the two parties on the terminal side can leave only after performing identity authentication through touching, and there is no need to transmit subsequent transaction information on the terminal side. On the premise that the NFC transaction distance is short, the touching time is greatly shortened, and the user experience is improved. For the subsequent transaction information initiated by the operating institution backend, digital currency can be uploaded through the terminal side, or the payment can be made through the user's account balance. When the two parties are connected to the network, the transaction rate is improved. When the two parties have no network, they can also conduct double-offline transactions with digital currency in the security chip, which improves the scalability and coverage of the transaction.

[0058] Figure 3 is a schematic diagram of the main modules of the first transaction terminal for digital currency transactions according to an embodiment of the present invention. As Figure 3As shown in the figure, the first transaction terminal 300 for digital currency transactions according to an embodiment of the present invention mainly includes: a first communication module 301, an identity authentication module 302, a transaction factor generation module 303, and a second communication module 304.

[0059] The first communication module 301 is used to establish a communication connection with the second transaction terminal and exchange user certificates with the second transaction terminal. The user certificate of the first transaction terminal is used by the second transaction terminal to verify the user identity of the first transaction terminal.

[0060] The identity authentication module 302 is used to verify the user identity of the second transaction terminal by using the user certificate of the second transaction terminal.

[0061] The transaction factor generation module 303 is used to negotiate with the second transaction terminal to generate a transaction factor after determining that the user identity authentication of both the first transaction terminal and the second transaction terminal has passed.

[0062] The second communication module 304 is used to upload the first digital currency transaction information including the transaction factor to the back-end system of the first operating institution. The back-end system of the first operating institution sends the first digital currency transaction information to the back-end system of the second operating institution to complete the digital currency transaction. Among them, the back-end system of the first operating institution is the back-end of the operating institution corresponding to the first transaction terminal, and the back-end system of the second operating institution is the back-end of the operating institution corresponding to the second transaction terminal. The transaction factor is used by the back-end system of the second operating institution to verify the first digital currency transaction information.

[0063] The first communication module 301 can specifically be used to establish a communication connection with the second transaction terminal through short-range communication.

[0064] The identity authentication module 302 is specifically used to: verify the user certificate of the second transaction terminal by using the operating institution certificate corresponding to the second transaction terminal stored in the local security chip, so as to verify the user identity of the second transaction terminal.

[0065] The first digital currency transaction information further includes relevant information about the digital currency. The relevant information about the digital currency includes the digital currency string and / or the account information of the digital currency.

[0066] The first transaction terminal 300 may further include a signature module, which is used to: add the private key signature of the first transaction terminal to the first digital currency transaction information. The private key signature is used by the back-end system of the first operating institution to verify the transaction intention of the first transaction terminal.

[0067] The transaction factor generation module 303 can specifically be used to: call a preset key algorithm through the local security chip to generate a transaction factor.

[0068] The transaction factor is specifically in the form of a string.

[0069] The second communication module 304 is specifically configured to: after determining that the current transaction uses passwordless transaction or determining that the password entered for the current transaction is correct, upload the first digital currency transaction information including transaction factors to the back-end system of the first operating institution.

[0070] Figure 4 It is a schematic diagram of the main components of a digital currency trading system according to an embodiment of the present invention. As Figure 4 shown, the digital currency trading system 400 according to an embodiment of the present invention mainly includes: a first trading terminal 401, a second trading terminal 402, a back-end system 403 of the first operating institution, and a back-end system 404 of the second operating institution. The back-end system 403 of the first operating institution is the back-end of the operating institution corresponding to the first trading terminal 401, and the back-end system 404 of the second operating institution is the back-end of the operating institution corresponding to the second trading terminal 402.

[0071] The second trading terminal 402 is configured to verify the user identity of the first trading terminal 401 using the user certificate of the first trading terminal 401, and upload the second digital currency transaction information including transaction factors to the back-end system 404 of the second operating institution;

[0072] The back-end system 403 of the first operating institution is configured to upload the first digital currency transaction information to the back-end system 404 of the second operating institution;

[0073] The back-end system 404 of the second operating institution is configured to verify the first digital currency transaction information according to the second digital currency transaction information, and conduct digital currency transactions when the first digital currency transaction information passes the verification.

[0074] The first digital currency transaction information and the second digital currency transaction information further include the transaction amount. The first digital currency transaction information further includes the second operating institution identifier, and the second digital currency transaction information further includes the first operating institution identifier;

[0075] The back-end system 404 of the second operating institution is specifically configured to: verify the first digital currency transaction information by verifying the transaction factors, operating institution identifiers, and transaction amounts in both the second digital currency transaction information and the first digital currency transaction information.

[0076] The specific functions of the first trading terminal 401 are the same as those of the first trading terminal 300 introduced above. For details, please refer to the description of the first trading terminal 300.

[0077] Both the first trading terminal 401 and the second trading terminal 402 can be locally provided with a security chip, a terminal short-range communication module, and a terminal communication module.

[0078] The terminal short - range communication module is responsible for establishing the payment channels between both parties and transmitting transaction information such as certificates. The communication methods can include NFC near - field communication, Bluetooth communication, WLAN direct connection, UWB, etc. The terminal short - range communication module of the first trading terminal 401 has the same function as the first communication module 301 introduced above. For details, refer to the introduction of the first communication module 301. The terminal communication module is responsible for establishing a communication connection between the terminal and the back - end of the operating institution and transmitting the transaction information to the back - end of the operating institution. The terminal communication module of the first trading terminal 401 has the same function as the second communication module 304 introduced above. For details, refer to the introduction of the second communication module 304. For the terminal short - range communication module and the terminal communication module of the second trading terminal 402, refer to the introduction of the first communication module 301 and the second communication module 304 above.

[0079] The security chip is responsible for the logical operations of transactions and the storage of sensitive information, including key contents such as digital currency applications, institutional certificates, user public - key certificates, and user private keys. The digital currency application is responsible for processing the transaction authentication process and performing encryption / decryption and signature / verification operations. The institutional certificate is used to verify the user public - key certificate, and the public - key certificate is used to verify the user private - key signature.

[0080] Both the first trading terminal 401 and the second trading terminal 402 can call the user certificate and key algorithm functions through their respective security chips to perform certificate exchange, identity authentication, and transaction factor calculation. They transmit the transaction factors to their respective operating institution back - ends through their respective terminal communication modules so that the operating institution back - ends can confirm the information and initiate the payment process. The operating institution back - end verifies the transaction information sent from the terminal side and initiates the payment process.

[0081] In the embodiment of the present invention, by utilizing the networking ability and security chip ability on the terminal side, identity verification and transactions are separated. The two trading parties negotiate transaction factors, which are checked and verified by the back - end of the operating institution to confirm the trading intentions and legality of both parties. It can achieve touch - based operation when the screen is off. After the transaction authentication is completed, the payment is initiated by the back - end through the networking ability. There is no restriction on the trading distance, and it supports password - free and password - verification payments. Moreover, no secondary touch is required during password verification. It can rely on the digital currency on the user side or the institutional back - end account system, and has strong scalability.

[0082] Figure 5 An exemplary system architecture 500 is shown that can apply the digital currency trading method or trading terminal of the embodiment of the present invention.

[0083] As Figure 5As shown, the system architecture 500 may include terminal devices 501, 502, 503, a network 504, and a server 505. The network 504 is used to provide a medium for communication links between the terminal devices 501, 502, 503 and the server 505. The network 504 may include various connection types, such as wired, wireless communication links, or fiber optic cables, etc.

[0084] Users can use the terminal devices 501, 502, 503 to interact with the server 505 through the network 504 to receive or send messages, etc. Various communication client applications may be installed on the terminal devices 501, 502, 503, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only as examples).

[0085] The terminal devices 501, 502, 503 may be various electronic devices with a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop portable computers, and desktop computers, etc.

[0086] The server 505 may be a server providing various services, such as a background management server (only as an example) that supports shopping websites browsed by users using the terminal devices 501, 502, 503. The background management server may analyze and process data such as received transaction information, etc., and feedback the processing results (such as transaction results - only as an example) to the terminal devices.

[0087] It should be noted that the digital currency trading method provided by the embodiments of the present invention is generally executed by the terminal devices 501, 502, 503. Correspondingly, the trading terminal may be specifically implemented as the terminal devices 501, 502, 503.

[0088] It should be understood that Figure 5 the numbers of terminal devices, networks, and servers in

[0089] are merely illustrative. According to actual needs, there may be any number of terminal devices, networks, and servers. Figure 6 Next, refer to Figure 6 which shows a schematic structural diagram of a computer system 600 of a terminal device suitable for implementing the embodiments of the present application.

[0090] As shown in Figure 6As shown, computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 602 or a program loaded from a storage section 608 into a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the system 600 are also stored. The CPU 601, ROM 602, and RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0091] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including, for example, a cathode ray tube (CRT), a liquid crystal display (LCD), etc. and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as needed. A removable medium 611, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 610 as needed so that a computer program read from it can be installed into the storage section 608 as needed.

[0092] Specifically, according to the embodiments disclosed in the present invention, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program codes for performing the methods shown in the flowcharts. In such an embodiment, the computer program can be downloaded and installed from a network via the communication section 609, and / or installed from the removable medium 611. When the computer program is executed by the central processing unit (CPU) 601, the above functions defined in the system of the present application are executed.

[0093] It should be noted that the computer-readable medium shown in the present invention can be a computer-readable signal medium, a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples of the computer-readable storage medium can include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, the computer-readable storage medium can be any tangible medium that contains or stores a program, and this program can be used by or in combination with an instruction execution system, apparatus, or device. In the present application, the computer-readable signal medium can include a data signal propagated in a baseband or as part of a carrier wave, which carries computer-readable program code. Such a propagated data signal can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer-readable signal medium can also be any computer-readable medium other than the computer-readable storage medium, and this computer-readable medium can send, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted by any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0094] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architectures, functions, and operations of systems, methods, and computer program products according to various embodiments of the present application. In this regard, each block in the flowchart or block diagram can represent a module, a program segment, or a part of code, and the above module, program segment, or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order from that marked in the accompanying drawings. For example, two consecutively represented blocks can actually be executed substantially in parallel, and they can sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram or flowchart, as well as the combination of blocks in the block diagram or flowchart, can be implemented by a dedicated hardware-based system for performing the specified functions or operations, or can be implemented by a combination of dedicated hardware and computer instructions.

[0095] The modules involved in the embodiments of the present invention can be implemented in software or in hardware. The described modules can also be provided in a processor. For example, it can be described as: a processor includes a first communication module, an authentication module, a transaction factor generation module, and a second communication module. Among them, the names of these modules do not constitute a limitation on the module itself in some cases. For example, the first communication module can also be described as "a module for establishing a communication connection with a second transaction terminal and exchanging user certificates with the second transaction terminal".

[0096] As another aspect, the present invention further provides a computer-readable medium. The computer-readable medium can be included in the device described in the above embodiments; or it can exist alone without being assembled into the device. The above computer-readable medium carries one or more programs. When the one or more programs are executed by the device, the device includes: after the first transaction terminal establishes a communication connection with the second transaction terminal, it exchanges user certificates with the second transaction terminal, and the exchanged user certificates are used for the first transaction terminal and the second transaction terminal to mutually verify the user identities of each other; after the first transaction terminal determines that the user identity authentication of both the first transaction terminal and the second transaction terminal is passed, it negotiates with the second transaction terminal to generate a transaction factor; the first transaction terminal uploads the first digital currency transaction information including the transaction factor to the first operating institution's back-end system, and the first operating institution's back-end system sends the first digital currency transaction information to the second operating institution's back-end system to complete the digital currency transaction. Among them, the first operating institution's back-end system is the back-end of the operating institution corresponding to the first transaction terminal, the second operating institution's back-end system is the back-end of the operating institution corresponding to the second transaction terminal, and the transaction factor is used for the second operating institution's back-end system to verify the first digital currency transaction information.

[0097] According to the technical solution of the embodiments of the present invention, after the first transaction terminal establishes a communication connection with the second transaction terminal, it exchanges user certificates with the second transaction terminal to mutually verify the user identities of each other. After determining that the user identity authentication of both sides is passed, it negotiates with the second transaction terminal to generate a transaction factor, and uploads the first digital currency transaction information including the transaction factor to the first operating institution's back-end system. The first operating institution's back-end system sends the first digital currency transaction information to the second operating institution's back-end system to complete the digital currency transaction. By utilizing the networking ability and the security chip ability on the terminal side, it realizes the separation of identity authentication and transaction, can reduce the user operation steps, simplify the transaction process, is not restricted by the transaction distance, supports password-free and password-verified payments, and does not require secondary touch during password verification, greatly shortening the touch time and improving the security of the transaction.

[0098] The above specific embodiments do not limit the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. A digital currency trading method, characterized in that, Including: After establishing a communication connection with the second trading terminal, the first trading terminal exchanges user certificates with the second trading terminal, and the exchanged user certificates are used for the first trading terminal and the second trading terminal to mutually verify the user identities of each other; After determining that the user identity verification of both the first trading terminal and the second trading terminal is passed, the first trading terminal negotiates with the second trading terminal to generate a trading factor; The first trading terminal uploads the first digital currency trading information including the trading factor to the back-end system of the first operating institution, and the back-end system of the first operating institution sends the first digital currency trading information to the back-end system of the second operating institution to complete the digital currency transaction, where the back-end system of the first operating institution is the back-end of the operating institution corresponding to the first trading terminal, the back-end system of the second operating institution is the back-end of the operating institution corresponding to the second trading terminal, and the trading factor is used for the back-end system of the second operating institution to verify the first digital currency trading information.

2. The method according to claim 1, wherein The first trading terminal and the second trading terminal establish the communication connection through short-range communication.

3. The method according to claim 1, wherein The first trading terminal uses the operating institution certificate corresponding to the second trading terminal stored in the local security chip to verify the user certificate of the second trading terminal to verify the user identity of the second trading terminal.

4. The method according to claim 1, characterized in that, The first digital currency trading information further includes relevant information of the digital currency, and the relevant information of the digital currency includes the digital currency string and / or the account information of the digital currency.

5. The method according to claim 1 or 4, characterized in that, Before the first trading terminal uploads the first digital currency trading information including the trading factor to the back-end system of the first operating institution, it includes: Adding the private key signature of the first trading terminal to the first digital currency trading information, and the private key signature is used for the back-end system of the first operating institution to verify the trading intention of the first trading terminal.

6. The method according to claim 1, wherein The first trading terminal generates the trading factor by invoking a preset key algorithm through the local security chip, and the trading factor is in the form of a string.

7. The method according to claim 1, characterized in that, After the first trading terminal determines that the current transaction adopts password-free transaction or determines that the current transaction password input is correct, it uploads the first digital currency trading information including the trading factor to the back-end system of the first operating institution.

8. A first trading terminal for digital currency transactions, characterized in that, Including: A first communication module, configured to establish a communication connection with the second trading terminal and exchange user certificates with the second trading terminal, and the user certificate of the first trading terminal is used for the second trading terminal to verify the user identity of the first trading terminal; An identity verification module, configured to use the user certificate of the second trading terminal to verify the user identity of the second trading terminal; A trading factor generation module, configured to negotiate with the second trading terminal to generate a trading factor after determining that the user identity verification of both the first trading terminal and the second trading terminal is passed; A second communication module, configured to upload the first digital currency transaction information including the transaction factor to the back-end system of the first operating institution, and the back-end system of the first operating institution sends the first digital currency transaction information to the back-end system of the second operating institution to complete the digital currency transaction. Wherein, the back-end system of the first operating institution is the back-end of the operating institution corresponding to the first transaction terminal, the back-end system of the second operating institution is the back-end of the operating institution corresponding to the second transaction terminal, and the transaction factor is used for the back-end system of the second operating institution to verify the first digital currency transaction information.

9. The first transaction terminal according to claim 8, characterized in that, The first communication module is further configured to: establish the communication connection with the second transaction terminal through short-range communication.

10. The first transaction terminal according to claim 8, characterized in that, The identity authentication module is further configured to: verify the user certificate of the second transaction terminal by using the operating institution certificate corresponding to the second transaction terminal stored in the local security chip, so as to verify the user identity of the second transaction terminal.

11. The first transaction terminal according to claim 8, characterized in that, The first digital currency transaction information further includes information related to the digital currency, and the information related to the digital currency includes a digital currency string and / or the account information of the digital currency.

12. The first transaction terminal according to claim 8 or 11, characterized in that, It further includes a signature module, configured to: add a private key signature of the first transaction terminal to the first digital currency transaction information, and the private key signature is used for the back-end system of the first operating institution to verify the transaction intention of the first transaction terminal.

13. The first transaction terminal according to claim 8, wherein The transaction factor generation module is further configured to: generate the transaction factor by invoking a preset key algorithm through the local security chip, and the transaction factor is in the form of a string.

14. The first trading terminal according to claim 8, wherein The second communication module is further configured to: after determining that the current transaction uses password-free transaction or determining that the entered transaction password for the current transaction is correct, upload the first digital currency transaction information including the transaction factor to the back-end system of the first operating institution.

15. A digital currency trading system, characterized in that, It includes: The first transaction terminal according to any one of claims 8 to 14 further includes a second transaction terminal, a back-end system of the first operating institution, and a back-end system of the second operating institution. The back-end system of the first operating institution is the back-end of the operating institution corresponding to the first transaction terminal, and the back-end system of the second operating institution is the back-end of the operating institution corresponding to the second transaction terminal; The second transaction terminal is configured to verify the user identity of the first transaction terminal by using the user certificate of the first transaction terminal, and upload the second digital currency transaction information including the transaction factor to the back-end system of the second operating institution; The back-end system of the first operating institution is configured to upload the first digital currency transaction information to the back-end system of the second operating institution; The back-end system of the second operating institution is configured to verify the first digital currency transaction information according to the second digital currency transaction information, and perform the digital currency transaction when the first digital currency transaction information is verified.

16. The system according to claim 15, wherein The first digital currency transaction information and the second digital currency transaction information further include a transaction amount. The first digital currency transaction information further includes an identifier of the second operating institution, and the second digital currency transaction information further includes an identifier of the first operating institution; The back-end system of the second operating institution is further configured to: Verify the first digital currency transaction information by verifying the transaction factors, operating institution identifiers, and transaction amounts in both the second digital currency transaction information and the first digital currency transaction information.

17. An electronic device, characterized in that, Including: One or more processors; A memory for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the method according to any one of claims 1-7.

18. A computer-readable medium having a computer program stored thereon, characterized in that, The computer program, when executed by a processor, implements the method according to any one of claims 1-7.

Images