Method and device for protecting privacy of digital RMB transaction

Abstract

The invention discloses a digital RMB transaction privacy protection method and a digital RMB transaction privacy protection device. The method comprises the following steps: receiving at least two original transaction requests in a secret state form and respectively decrypting the two original transaction requests; the original transaction requests are request information generated based on payment behaviors of a user side, and checking whether the two decrypted original transaction requests conform to a supervision rule or not; if not, triggering a supervision process; if yes, calling a shuffling algorithm and generating at least two shuffling transaction requests; the shuffled transaction request at least comprises collection end information and a transaction amount; based on the shuffled transaction request, respectively initiating a payment process to a corresponding collection terminal to carry out payment, and respectively generating a key for the user terminal; the key is used for encrypting the original transaction request; and storing the secret key and sending the secret key to a supervision and auditing group. According to the method and the device provided by the invention, the transaction privacy of the user is protected, the supervision compliance is ensured, and the win-win situation of economic benefits and social benefits is realized.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to a method and device for protecting privacy in digital RMB transactions. Background Art

[0002] The digital RMB is an efficient, secure and traceable payment system that uses advanced encryption technology and distributed ledger technology, exists in digital form, and is transmitted and traded through the network. Compared with traditional cash, the digital RMB has many advantages. First, it can reduce the risk of cash circulation and reduce losses such as counterfeit currency and damage. Secondly, real-time payment improves payment efficiency and reduces payment costs. Finally, tracking transaction records is conducive to preventing financial crimes such as money laundering and terrorist financing. Compared with third-party payment methods, the advantages of the digital RMB are obvious. Service fees and handling fees are the main sources of profit for third-party payment institutions. The cost advantage of the digital RMB completely breaks this profit model. The digital RMB is directly connected to the central bank's clearing and settlement system, and the settlement is completed at the moment the transaction is completed. The placement and circulation are completely free for the public, with both efficiency and cost advantages.

[0003] Unlike payment methods such as Alipay and WeChat that are operated by third-party companies, the digital RMB is directly controlled and issued by the government, so it lacks the buffer layer of third-party institutions. This has led to some users' concerns about personal privacy protection, making the use of digital RMB in daily transactions relatively low. Therefore, the issue of privacy protection has become an important obstacle that needs to be solved in the process of promoting digital RMB. Summary of the invention

[0004] The present invention provides a method and device for privacy protection in digital RMB transactions, which are used to solve the problem of privacy protection in the use of digital RMB in the prior art.

[0005] The present invention provides a method for protecting privacy in digital RMB transactions, the method comprising:

[0006] Receive at least two encrypted original transaction requests and decrypt them respectively; the original transaction request is request information generated based on the payment behavior of the user terminal, and the original transaction request at least includes: user terminal information, payment terminal information and transaction amount;

[0007] Check whether the two decrypted original transaction requests comply with regulatory rules;

[0008] If not, the supervision process is triggered; if yes, the shuffling algorithm is called and at least two shuffling transaction requests are generated; the shuffling transaction request at least includes: the payment terminal information and the transaction amount;

[0009] Initiate payment processes to corresponding payment terminals based on the shuffle transaction request to make payment, and generate a key for each user terminal; the key is used to encrypt the original transaction request;

[0010] The key is stored and sent to the regulatory jury.

[0011] Optionally, triggering the regulatory process includes:

[0012] Sending supervision information to a supervision terminal to trigger the supervision terminal to initiate an alarm request to the supervision jury; the supervision jury includes multiple nodes;

[0013] Each node of the regulatory jury determines whether it is necessary to provide a key;

[0014] If yes, sending the key to the supervisory end;

[0015] The historical data is read according to the key to determine whether the corresponding original transaction request violates the regulatory rules.

[0016] Optionally, before storing the key and sending it to the supervision jury, the method further includes:

[0017] The decryption key is divided into multiple decryption key fragments and multiple key fragments are obtained, wherein the key fragments include: the private key corresponding to each node of the regulatory jury and at least one decryption key fragment.

[0018] Optionally, the method further includes:

[0019] storing the plurality of key fragments in the cloud platform and sending them to the supervisory end, so that the supervisory end distributes the key fragments to the supervisory jury; wherein each node of the supervisory jury obtains one key fragment;

[0020] When each node determines that a key needs to be provided, the node sends the key fragments to the regulatory agency so that the regulatory end can restore the key based on the multiple key fragments.

[0021] Optionally, before the supervisory end recovers the key according to the multiple key fragments, the method includes:

[0022] Determining whether the number of the collected key fragments meets a first threshold; the first threshold represents the number of the key fragments required to recover the key;

[0023] If so, the key is restored based on the collected multiple key fragments.

[0024] Optionally, the method further includes: the payee outputting a payment record, and sending the payment record to a cloud platform and a third-party system; the payment record includes at least: a payment code, payee information, a transaction amount, and a transaction time.

[0025] Optionally, before reading historical data according to the key to determine whether the corresponding original transaction request violates regulatory rules, the method includes:

[0026] Obtaining the payment record from the cloud platform and the third-party system respectively and comparing them to verify whether the original transaction request has been tampered with;

[0027] If not, historical data is read according to the key to determine whether the corresponding original transaction request violates regulatory rules.

[0028] Optionally, obtaining the payment record from the cloud platform and the third-party system respectively and comparing them includes:

[0029] Comparing whether the payment codes in the payment records obtained from the cloud platform and the third-party system are the same;

[0030] If not, the original transaction request has not been tampered with.

[0031] A digital RMB transaction privacy protection device in the present invention comprises:

[0032] A receiving unit, configured to receive at least two encrypted original transaction requests and decrypt them respectively; the original transaction request is request information generated based on the payment behavior of the user terminal, and the original transaction request at least includes: user terminal information, payment terminal information and transaction amount;

[0033] A checking unit, used for checking whether the two decrypted original transaction requests comply with regulatory rules;

[0034] A judgment unit, for triggering the supervision process if no; if yes, calling the shuffling algorithm and generating at least two shuffling transaction requests; the shuffling transaction request at least includes: the payment terminal information and the transaction amount;

[0035] A payment unit, configured to initiate payment processes to corresponding payment terminals based on the shuffle transaction request to make payment, and to generate a key for each user terminal; the key is used to encrypt the original transaction request;

[0036] The processing unit is used to store the key and send it to the supervision jury.

[0037] A computer-readable storage medium in the present invention stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of any of the methods described above.

[0038] The method and device for protecting the privacy of digital RMB transactions proposed in the present invention protect the privacy of user transactions by mixing coins, while ensuring regulatory compliance, and achieving a win-win situation of economic and social benefits. In terms of economic benefits, the mixing coin service reduces the risk of user privacy leakage, enhances the attractiveness of digital currency, and promotes the development of the digital economy. In terms of social benefits, the system strengthens financial supervision, cracks down on illegal transactions, maintains the order of the financial market, and safeguards the public interest on the basis of protecting user privacy through secret sharing, regulatory rule inspection, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 This is a flowchart of a method for privacy protection of digital RMB transactions in an embodiment of the present invention;

[0040] Figure 2 It is a schematic diagram of the structure of a device for protecting privacy in digital RMB transactions in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0042] The embodiment of the present invention provides a method for protecting the privacy of digital RMB transactions, such as Figure 1 As shown, the method includes:

[0043] Step 100, receiving at least two original transaction requests in encrypted form and decrypting them respectively; the original transaction request is request information generated based on the payment behavior of the user end, and the original transaction request at least includes: user end information, payment end information and transaction amount. Specifically, in order to better protect transaction privacy, the embodiment of the present invention needs to mix at least two original transactions, so in this step, the mixing agent receives at least two original transaction requests in encrypted form, and mixes them subsequently. Among them, the original transaction request indicates that the mixing agent needs to transfer the corresponding transaction amount to the payment end. For example, user C1 consumes M1 at payment terminal S1, and user C2 consumes M2 at payment terminal S2, then the two original transaction requests are: tx1 = C1-->S1:M1 and tx2 = C2-->S2:M2. In this embodiment, when M1 and M2 are equal in value, currency mixing can be performed directly between M1 and M2; if the value of M1 is greater than M2, another transaction amount A3 can be added to make M1 = M2 + A3, and vice versa. Specifically, the original transaction request is received in a secret form, so it needs to be decrypted after receiving to obtain the relevant information of the original transaction request.

[0044] Step 200, check whether the two decrypted original transaction requests comply with the regulatory rules. In the embodiment of the present invention, before mixing coins and making payments to the payment terminal, a regulatory judgment needs to be made first. Specifically, the embodiment of the present invention can perform a simple regulatory rule judgment in the TEE, and then consider the intelligent regulatory rules, or check all regulatory rules in step 200.

[0045] If not, proceed to step 300 to trigger the supervision process;

[0046] If yes, then proceed to step 400, call the shuffling algorithm and generate at least two shuffling transaction requests; the shuffling transaction request at least includes: the payment terminal information and the transaction amount. Specifically, when a certain original transaction request does not comply with the regulatory rules, the regulatory process is directly triggered for further judgment. Preferably, when one of the two original transaction requests does not comply with the regulatory rules, and the other original transaction request complies with the regulatory rules, the original transaction request that does not comply with the regulatory rules triggers the regulatory process, but still calls the shuffling algorithm and generates at least two shuffling transaction requests. Specifically, two shuffling transaction requests are generated, namely tx5=A-->S1:M3 and tx6=A-->S2:M4, wherein the transaction amounts in M3 and M4 are numerically equal to M1 and M2, for example, both are 10 yuan. The embodiment of the present invention performs and generates shuffling transaction requests through a coin mixer. A coin mixer is a cryptocurrency privacy protection tool, the main purpose of which is to hide the transaction path by mixing the user's cryptocurrency with the cryptocurrency of other users, thereby protecting the identity and transaction privacy of the participants. The coin mixer mixes the transactions of multiple users together, making the path and correlation of the transaction difficult to track and identify, thereby increasing the anonymity and privacy protection of the transaction participants and cutting off the connection between the input and output of the transaction. In a preferred embodiment, the coin mixer can be divided into decentralized coin mixer and centralized coin mixer. In the centralized coin mixer mechanism, the user end sends the original transaction request to the intermediary node, which is responsible for scrambling and distributing the transaction information in the original transaction requests received from many user ends, and sending the specified amount to the specified payment end. Decentralized coin mixer does not rely on a centralized service provider, but is carried out through a peer-to-peer network. Since there is no centralized control, users do not need to trust any third party, reducing the trust risk. Among them, the intermediary node in the embodiment of the present invention is the coin mixer proxy end, and in other embodiments, it can be determined according to specific circumstances, not limited to the embodiment of the present invention.

[0047] Step 500, based on the shuffling transaction request, a payment process is initiated to the corresponding payee to make payment, and a key is generated for the user end respectively; the key is used to encrypt the original transaction request. Specifically, the coin mixing agent pays the corresponding payee respectively. For example, M3 is paid to the payee S1, and M4 is paid to the payee S2, and the data center records it, that is, based on the shuffling transaction requests tx5 and tx6, the coin mixing agent pays the payee and generates a transaction, and finally the transaction will be submitted to the digital currency center for recording. At the same time, due to the coin mixing, the original transaction request of the payee cannot be confirmed by the payee, so the embodiment of the present invention will also generate a key according to the original transaction request and encrypt the original transaction request. The purpose of encryption is to protect the user's privacy and prevent the leakage of payment records.

[0048] Step 600, the key is stored and sent to the regulatory jury. Specifically, the encrypted original transaction request needs to be stored locally as historical transaction information on the one hand, and needs to be sent to the regulatory jury as historical data of the transaction on the other hand. Specifically, the regulatory jury can be a blockchain. In a preferred embodiment, in order to execute the regulatory process, the coin mixing agent may need to save historical transaction information within a time period. For example, check whether the total transaction amount of a certain account exceeds the limit in one day.

[0049] The digital RMB transaction privacy protection method described in the embodiment of the present invention protects user transaction privacy by mixing coins, while ensuring regulatory compliance, achieving a win-win situation of economic and social benefits. In terms of economic benefits, the mixing coin service reduces the risk of user privacy leakage, enhances the attractiveness of digital currency, and promotes the development of the digital economy. In terms of social benefits, the system strengthens financial supervision, cracks down on illegal transactions, maintains financial market order, and protects the public interest on the basis of protecting user privacy through secret sharing, regulatory rule checking, and invoice information comparison.

[0050] The method for protecting privacy in digital RMB transactions described in the embodiment of the present invention preferably triggers the regulatory process including:

[0051] Sending supervision information to a supervision terminal to trigger the supervision terminal to initiate an alarm request to the supervision jury; the supervision jury includes multiple nodes;

[0052] Each node of the regulatory jury determines whether it is necessary to provide a key;

[0053] If yes, sending the key to the supervisory end;

[0054] The historical data is read according to the key to determine whether the corresponding original transaction request violates the regulatory rules.

[0055] Specifically, the coin-mixing agent first sends regulatory information to the regulatory end, such as the possibility that the user end C1 has violated regulations. After receiving the regulatory information, the regulatory end initiates an alarm request to the regulatory jury and attaches relevant evidence. The method of initiating an alarm request is to call the corresponding smart contract.

[0056] After the supervision jury receives the alarm request, each node of the supervision jury executes the smart contract separately, that is, determines whether it is necessary to provide the key to the supervision end. When each node makes a comprehensive judgment based on the contract rules and the corresponding evidence sent by the supervision end, if it is considered that the key should be provided, it will send the key to the supervision end, and each node that agrees to provide the key will record this operation on the blockchain.

[0057] After receiving the key, the supervisory end performs further supervisory processing. Specifically, the supervisory end reads historical data based on the key to determine whether the corresponding original transaction request violates the supervisory rules.

[0058] The method for protecting the privacy of digital RMB transactions described in the embodiment of the present invention preferably stores the key and sends it to the supervision jury, and the method also includes:

[0059] The decryption key is divided to obtain multiple decryption key fragments and multiple key fragments are obtained, wherein the key fragments include: the private key corresponding to each node of the regulatory jury and at least one decryption key fragment. The embodiment of the present invention uses an electrical secret sharing method to process the key. Specifically, the generated key is divided into multiple decryption key fragments, and corresponding key fragments are generated based on a decryption key fragment and a private key. After the key fragments are generated, they are stored and sent to the regulatory jury at the same time.

[0060] The method for protecting privacy in digital RMB transactions described in the embodiment of the present invention preferably further includes:

[0061] The plurality of key fragments are stored in the cloud platform and sent to the supervisory end, so that the supervisory end distributes the key fragments to the supervisory jury; wherein each node of the supervisory jury obtains one key fragment. Specifically, each node is only allocated a part of the key fragments to ensure the security of the key.

[0062] When each node determines that it needs to provide a key, the node sends the key fragment to the regulatory agency so that the regulatory end can restore the key based on the multiple key fragments. Specifically, the regulatory end receives key fragments from multiple nodes and then merges the key fragments to restore the key.

[0063] The method for protecting privacy in digital RMB transactions according to the embodiment of the present invention is preferably that before the supervisory end recovers the key according to the plurality of key fragments, the method comprises:

[0064] Determining whether the number of the collected key fragments meets a first threshold; the first threshold represents the number of the key fragments required to recover the key;

[0065] If so, the key is restored according to the collected multiple key fragments. The supervisory end needs to collect enough key fragments before restoring the key. Specifically, the first threshold is set as the minimum number of key fragments required to restore the key. When the number of collected key fragments exceeds the first threshold, it means that the key can be restored. Preferably, after restoring the key, historical transaction information is read from the cloud platform according to the key.

[0066] The method for protecting the privacy of digital RMB transactions described in the embodiment of the present invention is preferably further comprising: the payment terminal outputs the payment record and sends the payment record to the cloud platform and the third-party system; the payment record includes at least: payment code, payment terminal information, transaction amount, and transaction time. Specifically, according to the requirements of the user terminal, the payment terminal can provide a payment record, which can be an invoice or other information that can prove the payment of the user terminal. The payment record generally includes the payment code, payment terminal information, transaction amount, transaction time, etc. Taking the invoice as an example, S1 issues an invoice to C1. In order to protect the privacy of C1, there is no information about C1 in the invoice, only the merchant, amount, date, invoice details, etc. After the invoice is issued, a unique invoice number will be generated, recorded as tx1.taxID, that is, the payment code. The invoice is also recorded in the tax department information system.

[0067] Because cloud storage is not necessarily trustworthy, in order to ensure that cloud storage is trustworthy, specifically, the method for protecting the privacy of digital RMB transactions described in the embodiment of the present invention preferably reads historical data according to the key to determine whether the corresponding original transaction request violates the regulatory rules, and the method includes:

[0068] Obtaining the payment record from the cloud platform and the third-party system respectively and comparing them to verify whether the original transaction request has been tampered with;

[0069] If not, historical data is read according to the key to determine whether the corresponding original transaction request violates regulatory rules.

[0070] For example, the third-party system can be a tax invoice system. If the payment record contains a taxID, the invoice is read from the tax invoice system according to the taxID and compared with the original transaction request. In order to ensure the credibility of cloud storage, although there is no c1 information, an invoice can be uniquely identified according to the invoice number, and the transaction amount and other information of the user can be guaranteed not to be tampered with according to the merchant, amount, date, invoice and other contents.

[0071] The method for protecting privacy in digital RMB transactions described in the embodiment of the present invention preferably comprises obtaining the payment records from the cloud platform and the third-party system and comparing them, respectively, including:

[0072] Comparing whether the payment codes in the payment records obtained from the cloud platform and the third-party system are the same;

[0073] If not, the original transaction request has not been tampered with. In a specific embodiment, the payment code can be used as a verification code of the payment record to ensure that the original transaction request has not been tampered with by verifying the payment code.

[0074] The embodiment of the present invention provides a device for protecting the privacy of digital RMB transactions, such as Figure 2 As shown, the device comprises:

[0075] The receiving unit 201 is used to receive at least two encrypted original transaction requests and decrypt them respectively; the original transaction request is request information generated based on the payment behavior of the user terminal, and the original transaction request at least includes: user terminal information, payment terminal information and transaction amount;

[0076] A checking unit 202, configured to check whether the two decrypted original transaction requests comply with regulatory rules;

[0077] The supervision unit 203 is used to trigger the supervision process if no;

[0078] The shuffling unit 204 is configured to call a shuffling algorithm and generate at least two shuffling transaction requests if yes; the shuffling transaction requests at least include: the payment receiving terminal information and the transaction amount;

[0079] The payment unit 205 is used to initiate a payment process to the corresponding payment terminal based on the shuffle transaction request to make payment, and generate a key for each user terminal; the key is used to encrypt the original transaction request;

[0080] The processing unit 206 is used to store the key and send it to the supervision jury.

[0081] A specific embodiment of the present invention further provides a computer-readable storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement the steps of the method described in any of the above specific embodiments.

[0082] The embodiment of the present invention protects the user's transaction privacy through the currency mixing service, while ensuring regulatory compliance, achieving a win-win situation of economic and social benefits. In terms of economic benefits, the currency mixing service reduces the risk of user privacy leakage, enhances the attractiveness of digital currency, and promotes the development of the digital economy. In terms of social benefits, the system strengthens financial supervision, cracks down on illegal transactions, maintains financial market order, and safeguards the public interest on the basis of protecting user privacy through secret sharing, regulatory rule checking, and invoice information comparison.

[0083] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0084] Technical operators in this area should understand that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0085] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0086] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0087] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0088] The foregoing descriptions of specific exemplary embodiments of the present invention are for purposes of illustration and description. These descriptions are not intended to limit the invention to the precise form disclosed, and it is apparent that many changes and variations are possible in light of the foregoing teachings. The exemplary embodiments are selected and described for the purpose of explaining the specific principles of the invention and their practical application, thereby enabling a skilled operator in the art to implement and utilize the various exemplary embodiments of the invention and various selections and variations. The scope of the present invention is intended to be defined by the claims and their equivalents.

Claims

1. A method for protecting privacy in digital RMB transactions, characterized in that: The method comprises: Receive at least two encrypted original transaction requests and decrypt them respectively; the original transaction request is request information generated based on the payment behavior of the user terminal, and the original transaction request at least includes: user terminal information, payment terminal information and transaction amount; Check whether the two decrypted original transaction requests comply with regulatory rules; If not, the supervision process is triggered; if yes, the shuffling algorithm is called and at least two shuffling transaction requests are generated; the shuffling transaction request at least includes: the payment terminal information and the transaction amount; Initiate payment processes to corresponding payment terminals based on the shuffle transaction request to make payment, and generate a key for each user terminal; the key is used to encrypt the original transaction request; The key is stored and sent to the regulatory jury.

2. The method for protecting privacy in digital RMB transactions according to claim 1, characterized in that: Triggering the regulatory process includes: Sending supervision information to a supervision terminal to trigger the supervision terminal to initiate an alarm request to the supervision jury; the supervision jury includes multiple nodes; Each node of the regulatory jury determines whether it is necessary to provide a key; If yes, sending the key to the supervisory terminal; The historical data is read according to the key to determine whether the corresponding original transaction request violates the regulatory rules.

3. The method for protecting privacy in digital RMB transactions according to claim 2, characterized in that: The key is stored and sent to a supervisory jury, and the method further comprises: The decryption key is divided into multiple decryption key fragments and multiple key fragments are obtained, wherein the key fragments include: the private key corresponding to each node of the regulatory jury and at least one decryption key fragment.

4. The method for protecting privacy in digital RMB transactions according to claim 3 is characterized in that: The method further comprises: storing the plurality of key fragments in the cloud platform and sending them to the supervisory end, so that the supervisory end distributes the key fragments to the supervisory jury; wherein each node of the supervisory jury obtains one key fragment; When each node determines that a key needs to be provided, the node sends the key fragments to the regulatory agency so that the regulatory end can restore the key based on the multiple key fragments.

5. The method for protecting privacy in digital RMB transactions according to claim 4 is characterized in that: Before the supervisory end recovers the key according to the plurality of key fragments, the method includes: Determining whether the number of the collected key fragments meets a first threshold; the first threshold represents the number of the key fragments required to recover the key; If so, the key is restored based on the collected multiple key fragments.

6. The method for protecting privacy in digital RMB transactions according to claim 2, characterized in that: The method also includes: the payee outputs a payment record and sends the payment record to a cloud platform and a third-party system; the payment record includes at least: a payment code, payee information, a transaction amount, and a transaction time.

7. The method for protecting privacy in digital RMB transactions according to claim 6, characterized in that: Before reading historical data according to the key to determine whether the corresponding original transaction request violates regulatory rules, the method includes: Obtaining the payment record from the cloud platform and the third-party system respectively and comparing them to verify whether the original transaction request has been tampered with; If not, historical data is read according to the key to determine whether the corresponding original transaction request violates regulatory rules.

8. The method for protecting privacy in digital RMB transactions according to claim 7, characterized in that: Obtaining the payment records from the cloud platform and the third-party system respectively and comparing them includes: Comparing whether the payment codes in the payment records obtained from the cloud platform and the third-party system are the same; If not, the original transaction request has not been tampered with.

9. A device for protecting privacy in digital RMB transactions, characterized in that: The device comprises: A receiving unit, configured to receive at least two encrypted original transaction requests and decrypt them respectively; the original transaction request is request information generated based on the payment behavior of the user terminal, and the original transaction request at least includes: user terminal information, payment terminal information and transaction amount; A checking unit, used for checking whether the two decrypted original transaction requests comply with regulatory rules; A judgment unit, for triggering the supervision process if no; if yes, calling the shuffling algorithm and generating at least two shuffling transaction requests; the shuffling transaction request at least includes: the payment terminal information and the transaction amount; A payment unit, configured to initiate payment processes to corresponding payment terminals based on the shuffle transaction request to make payment, and to generate a key for each user terminal; the key is used to encrypt the original transaction request; The processing unit is used to store the key and send it to the supervision jury.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of any one of claims 1 to 8.

Images