Block chain cross-border transaction method and device, equipment and storage medium

Abstract

The invention relates to the technical field of block chains, and provides a block chain cross-border transaction method and device, equipment and a storage medium. The method comprises: when a current transaction initiator uses UTXO to perform a transaction, a forward intermediate state transaction is generated, and the forward intermediate state transaction comprises the UTXO, an encrypted serial number obtained based on a first supervision public key and a random number of a supervision institution to which the current transaction initiator belongs, and an encrypted currency serial number, the second commitment value and the intermediate state currency face value are obtained through forward intermediate state conversion; and when the current transaction initiator performs a transaction by using the currency serial number subjected to forward intermediate state conversion, generating a first secret state transaction, the first secret state transaction comprising the currency serial number, the wallet address of the first transaction receiver, and secret state currency obtained through intermediate state currency face value secret state conversion. Through the intermediate-state currency, the open-state currency and the secret-state currency are decoupled, so that transaction privacy is protected, and normal auditing of a supervision mechanism is ensured.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology and provides a blockchain cross-border transaction method, apparatus, device and storage medium. Background Art

[0002] Blockchain technology is being applied in the financial industry to enable cross-border payments. While blockchain-based cross-border transactions offer users efficient and convenient transactions, they also present the dual challenges of protecting user privacy and auditing and regulating transactions. On the one hand, the identities and transaction details of both parties must be protected. On the other hand, to eliminate regulatory blind spots and combat illegal financial activities, the respective regulatory bodies of both parties must monitor transaction data according to their own rules.

[0003] Therefore, how to achieve transaction supervision while protecting user privacy and security has become a technical problem that needs to be solved urgently. Summary of the Invention

[0004] The embodiments of the present application provide a blockchain cross-border transaction method, apparatus, device, and storage medium to address the current problem of being unable to supervise transaction processes while protecting user privacy and security.

[0005] In a first aspect, an embodiment of the present application provides a blockchain cross-border transaction method, comprising:

[0006] When the current transaction initiator uses the unspent transaction output UTXO to conduct a transaction, a forward intermediate state transaction is generated. The forward intermediate state transaction includes: UTXO, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained by forward intermediate state conversion and the intermediate state currency face value;

[0007] When the current transaction initiator uses the currency serial number converted through the forward intermediate state to conduct a transaction, a first encrypted transaction is generated, which includes: the currency serial number, the encrypted currency obtained by the encrypted currency face value and the user public key of the first transaction recipient through encrypted conversion.

[0008] Optionally, the intermediate currency is generated by performing the following operations:

[0009] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0010] Based on a random number, a hash operation is performed on the concatenation result of the intermediate currency denomination and the first commitment value to obtain the second commitment value, where the intermediate currency denomination is the denomination of the currency actually transferred out by the current transaction initiator;

[0011] A pseudo-random function operation is performed on the user private key and random number of the current transaction initiator to obtain a currency serial number, and the second commitment value, the intermediate currency face value and the currency serial number are used as the intermediate currency.

[0012] Optionally, the encrypted currency is generated by performing the following operations:

[0013] Based on the first regulatory public key and the random number, the concatenation result between the user public key of the first transaction recipient and the encrypted currency face value is encrypted to obtain the encrypted currency, where the encrypted currency face value is determined based on the intermediate currency face value.

[0014] Optionally, when the current transaction initiator uses UTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the forward intermediate transaction also includes: the wallet address of the current transaction initiator and the change denomination.

[0015] In a second aspect, the present application also provides a blockchain cross-border transaction method, including:

[0016] When the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, a reverse intermediate state transaction is generated. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained by reverse intermediate state conversion;

[0017] When the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction, a encrypted and transparent transaction is generated. The encrypted and transparent transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the transparent currency face value obtained by converting the intermediate currency face value into a transparent state.

[0018] Optionally, the second commitment value is generated by performing the following operations:

[0019] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0020] Based on the random number, a hash operation is performed on the concatenation result between the intermediate currency face value and the first commitment value to obtain a second commitment value. The intermediate currency face value is the face value of the currency actually transferred out by the current transaction initiator.

[0021] Optionally, when the current transaction initiator uses CUTXO to conduct a transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the reverse intermediate transaction also includes: based on the first regulatory public key and the random number, encrypting the change currency obtained by concatenating the user public key of the current transaction initiator and the change denomination.

[0022] In a third aspect, the present application also provides a blockchain cross-border transaction method, including:

[0023] When the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, the user public key and encrypted currency face value of the first transaction recipient are encryptedly converted based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, to obtain the encrypted currency of the first transaction recipient;

[0024] A second encrypted transaction is generated based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient, wherein the CUTXO encrypted currency is obtained by performing a secret conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs that generates the CUTXO.

[0025] Optionally, when the current transaction initiator uses CUTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the confidential transaction also includes: based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, the user public key and change denomination of the second transaction recipient are confidentially converted to obtain the change currency of the second transaction recipient.

[0026] Fourthly, the present application also provides a blockchain cross-border transaction device, including:

[0027] A forward intermediate state conversion unit is configured to generate a forward intermediate state transaction when the current transaction initiator uses an unspent transaction output (UTXO) to conduct a transaction. The forward intermediate state transaction includes: the UTXO, an encrypted serial number obtained by encrypting the serial number based on a first regulatory public key and a random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value and an intermediate state currency face value obtained by forward intermediate state conversion.

[0028] The first cryptographic conversion unit is configured to generate a first cryptographic transaction when the current transaction initiator uses a currency serial number converted from a forward intermediate state to conduct a transaction. The first cryptographic transaction includes: the currency serial number, the cryptographic currency obtained by cryptographically converting the cryptographic currency denomination and the user public key of the first transaction recipient.

[0029] Optionally, the forward intermediate state conversion unit generates the intermediate state currency by performing the following operations:

[0030] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0031] Based on a random number, a hash operation is performed on the concatenation result of the intermediate currency denomination and the first commitment value to obtain the second commitment value, where the intermediate currency denomination is the denomination of the currency actually transferred out by the current transaction initiator;

[0032] A pseudo-random function operation is performed on the user private key and random number of the current transaction initiator to obtain a currency serial number, and the second commitment value, the intermediate currency face value and the currency serial number are used as the intermediate currency.

[0033] Optionally, the first encrypted currency conversion unit generates the encrypted currency by performing the following operations:

[0034] Based on the first regulatory public key and the random number, the concatenation result between the user public key of the first transaction recipient and the encrypted currency face value is encrypted to obtain the encrypted currency, where the encrypted currency face value is determined based on the intermediate currency face value.

[0035] Optionally, when the current transaction initiator uses UTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the forward intermediate transaction also includes: the wallet address of the current transaction initiator and the change denomination.

[0036] In a fifth aspect, the present application also provides a blockchain cross-border transaction device, including:

[0037] A reverse intermediate state conversion unit is configured to generate a reverse intermediate state transaction when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained through reverse intermediate state conversion;

[0038] The clear state conversion unit is used to generate a encrypted clear state transaction when the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction. The encrypted clear state transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the clear state currency denomination obtained by the clear state conversion of the intermediate state currency denomination.

[0039] Optionally, the reverse intermediate state conversion unit generates the second commitment value by performing the following operations:

[0040] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0041] Based on the random number, a hash operation is performed on the concatenation result between the intermediate currency face value and the first commitment value to obtain a second commitment value. The intermediate currency face value is the face value of the currency actually transferred out by the current transaction initiator.

[0042] Optionally, when the current transaction initiator uses CUTXO to conduct a transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the reverse intermediate transaction also includes: based on the first regulatory public key and the random number, encrypting the change currency obtained by concatenating the user public key of the current transaction initiator and the change denomination.

[0043] In a sixth aspect, the embodiments of the present application further provide a blockchain cross-border transaction device, comprising:

[0044] The second cryptographic conversion unit is configured to, when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, perform cryptographic conversion on the user public key and cryptographic currency denomination of the first transaction recipient based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, to obtain the cryptographic currency of the first transaction recipient;

[0045] The transaction generation unit is configured to generate a second encrypted transaction based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient, wherein the CUTXO encrypted currency is obtained by performing a cryptographic conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs that generates the CUTXO.

[0046] Optionally, when the current transaction initiator uses CUTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the confidential transaction also includes: based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, the user public key and change denomination of the second transaction recipient are confidentially converted to obtain the change currency of the second transaction recipient.

[0047] In the seventh aspect, an embodiment of the present application also provides a computer device, including a processor and a memory, wherein the memory stores program code, and when the program code is executed by the processor, the processor executes the steps of any one of the above-mentioned blockchain cross-border transaction methods.

[0048] In an eighth aspect, an embodiment of the present application further provides a computer-readable storage medium, which includes a program code. When the program product is run on a computer device, the program code is used to enable the computer device to execute the steps of any one of the above-mentioned blockchain cross-border transaction methods.

[0049] The beneficial effects of this application are as follows:

[0050] An embodiment of the present application provides a blockchain cross-chain transaction method, apparatus, device, and storage medium, the method comprising: when the current transaction initiator uses UTXO to conduct a transaction, generating a forward intermediate transaction, the forward intermediate transaction comprising: UTXO, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value and an intermediate currency face value obtained through forward intermediate state conversion; when the current transaction initiator uses the currency serial number converted through the forward intermediate state to conduct a transaction, generating a first encrypted transaction, the first encrypted transaction comprising: the currency serial number, the wallet address of the first transaction recipient, and the encrypted currency obtained through the encrypted conversion of the intermediate currency face value.

[0051] By using an intermediate currency, the clear-state currency and the encrypted currency are decoupled, hiding the asset transfer path from all parties outside the regulatory body and protecting the privacy and security of users' data. However, regulators can restore the asset transfer path based on the regulatory private key and audit transactions for compliance. This protects transaction privacy while ensuring regulatory audits, thereby unifying transaction information confidentiality and oversight, offering significant advantages over solutions offered by related technologies.

[0052] Other features and advantages of the present application will be described in the following description, and in part will become apparent from the description, or will be understood by practicing the present application. The purposes and other advantages of the present application can be realized and obtained by the structures particularly pointed out in the written description, claims, and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0054] Figure 1 This is a schematic diagram of the architecture of a cross-border payment system based on blockchain;

[0055] Figure 2 This is a logical diagram of the open-ended transaction model;

[0056] Figure 3A schematic diagram of the process of cross-border blockchain transactions using the open-crypto transaction model provided in the embodiment of this application;

[0057] Figure 4 A schematic diagram of the process of conducting cross-border blockchain transactions using a confidential transaction model provided in an embodiment of the present application;

[0058] Figure 5 A schematic diagram of the process of cross-border blockchain transactions using a confidential transaction model provided in an embodiment of the present application;

[0059] Figure 6 A schematic diagram of the structure of a blockchain cross-border transaction supervision device provided in an embodiment of the present application;

[0060] Figure 7 A schematic diagram of the structure of a blockchain cross-border transaction supervision device provided in an embodiment of the present application;

[0061] Figure 8 A schematic diagram of the structure of a blockchain cross-border transaction supervision device provided in an embodiment of the present application;

[0062] Figure 9 A schematic diagram of the structure of a computer device provided in an embodiment of the present application;

[0063] Figure 10 This is a schematic diagram of the structure of a computing device in an embodiment of the present application. DETAILED DESCRIPTION

[0064] To make the purpose, technical solutions, and advantages of the embodiments of this application more clear, the technical solutions of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are part of the embodiments of the technical solutions of this application, but not all of them. Based on the embodiments described in this application document, all other embodiments obtained by ordinary technicians in this field without making creative efforts shall fall within the scope of protection of the technical solutions of this application.

[0065] The following is a brief introduction to the design concept of the embodiment of this application:

[0066] Blockchain technology is being applied in the financial industry to enable cross-border payments. While blockchain-based cross-border transactions offer users efficient and convenient transactions, they also present the dual challenges of protecting user privacy and auditing and regulating transactions. On the one hand, the identities and transaction details of both parties must be protected. On the other hand, to eliminate regulatory blind spots and combat illegal financial activities, the respective regulatory bodies of both parties must monitor transaction data according to their own rules.

[0067] Therefore, how to achieve transaction supervision while protecting user privacy and security has become a technical problem that needs to be solved urgently.

[0068] In view of this, an embodiment of the present application provides a blockchain cross-border transaction method. The method includes: when the current transaction initiator uses an unspent transaction output (UTXO) to conduct a transaction, generating a forward intermediate transaction, the forward intermediate transaction including: the UTXO, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value and an intermediate currency face value obtained by forward intermediate state conversion; when the current transaction initiator uses the currency serial number converted by the forward intermediate state to conduct a transaction, generating a secret transaction, the secret transaction including: the currency serial number, the wallet address of the first transaction recipient, and the secret currency obtained by secret state conversion from the intermediate currency face value.

[0069] By using an intermediate currency, the clear-state and cryptographic currencies are decoupled, hiding the asset transfer path from all parties except regulators and protecting the privacy and security of users' data. However, regulators can restore the asset transfer path based on the supervisory private key and audit transactions for compliance, thus protecting transaction privacy while ensuring regulatory oversight.

[0070] The preferred embodiments of the present application are described below in conjunction with the drawings in the specification. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present application and are not used to limit the present application. In addition, the embodiments and features in the embodiments of the present application can be combined with each other if there is no conflict.

[0071] like Figure 1 As shown in the figure, participants in blockchain-based cross-border transactions include users, regulators, and blockchain nodes. Users, as the principal actors in transactions, include both initiators and recipients. Each user has a corresponding regulator, and users belonging to the same regulator constitute a regulatory domain. Therefore, cross-border transactions can be abstractly understood as cross-domain transactions. Regulators audit transactions stored on the blockchain within the regulatory domain to determine compliance. Blockchain nodes, based on the blockchain's consensus mechanism, jointly maintain read and write operations on the blockchain, providing services for storing and accessing transactions between users on the blockchain.

[0072] Clear transactions are publicly visible transactions on the blockchain, and all participants can view the transaction records, including the identity information of both parties and the transaction amount. Figure 2As shown in the figure, when the current transaction initiator uses UTXO to conduct a transaction, a clear transaction is generated, where the transaction input of the clear transaction is the UTXO and signature of the current transaction initiator, and the transaction output is the wallet address and transfer value of the transaction recipient.

[0073] Among them, UTXO includes the wallet address of the current transaction initiator and the face value of the clear currency. The wallet address of the current transaction initiator is obtained by hashing the user public key of the current transaction initiator, and the user public key is obtained by performing elliptic curve operation on the user private key of the current transaction initiator. Therefore, there is a binding relationship between the wallet address of the current transaction initiator and its user public-private key pair. The user public-private key pair can be associated with the wallet address to determine the owner of the actual transferred-in or transferred-out currency.

[0074] The transaction initiator digitally signs the transaction data using the private signature key specified by the UTXO to ensure the authenticity and integrity of the transaction and prevent identity impersonation and transaction forgery. The transaction initiator sends the clear transaction to the blockchain, where multiple blockchain nodes verify the transaction initiator's account balance, transaction signature, and other aspects. After verification and consensus by the blockchain nodes, the block recording the clear transaction is added to the blockchain for storage.

[0075] However, clear-state transactions are publicly visible on the blockchain, allowing all participants to view transaction records and failing to protect the privacy of both parties. Furthermore, to conceal the asset transfer path and protect the privacy of both parties while also supporting regulatory bodies in auditing transaction compliance, this application proposes multiple transaction models for blockchain cross-border transactions, including clear-secret, secret-clear, and confidential transaction models.

[0076] Among them, combined Figure 3 The flowchart shown introduces the process of cross-border blockchain transactions using the open-close transaction model.

[0077] S301: When the current transaction initiator uses UTXO to conduct a transaction, a forward intermediate transaction is generated. The forward intermediate transaction includes: UTXO, an encrypted serial number obtained based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, the encrypted serial number, and the second commitment value and intermediate currency face value obtained by forward intermediate state conversion.

[0078] When the current transaction initiator uses UTXO to conduct a transaction, a forward intermediate transaction is generated

[0079] tx mint The transaction input includes: UTXO and transaction signature σ. Among them, as shown in the formula As shown, the current transaction initiator uses the signature private key specified by UTXO For the transaction data m of the forward intermediate transaction mint (including UTXO, intermediate state cryptocurrency, random number k old 、s old 、The wallet address addr of the second transaction recipient new_1 The transaction signature σ is obtained by digitally signing the denomination v1 and the change value v1 to ensure the authenticity and integrity of the transaction and prevent identity impersonation and transaction forgery.

[0080] When there is no second transaction recipient, output1 is 0. At this time, the forward intermediate transaction has only one transaction output, output0, indicating that the current transaction initiator has transferred all the face value of UTXO to the first transaction recipient. mint The transaction output output0 includes: intermediate state cryptocurrency and verification information (k old ,s old ,π mint ), at this time v0=v UTXO .

[0081] When there is a second transaction recipient, tx mint The transaction output includes output0 and output1. Among them, output1 includes: the wallet address addr of the second transaction recipient new_1 and v1.

[0082] When the wallet address of the second transaction recipient is the same as that of the current transaction initiator, v UTXO =v0+v1, v1 is the change value, to achieve the change operation. If the wallet address of the second transaction recipient is different from the current transaction initiator, v UTXO =v0+v1, where v1 is the actual value of the clear currency transferred by the second transaction recipient, enabling transactions with multiple transaction recipients. The current transaction initiator can also select multiple UTXOs as transaction inputs to achieve aggregation operations.

[0083] Then, the forward intermediate state transaction is sent to the blockchain, and multiple blockchain nodes in the blockchain verify the account balance, transaction signature, commitment value, zero-knowledge proof, etc. of the current transaction initiator. After passing the verification and consensus of the blockchain nodes, the block recording the forward intermediate state transaction is added to the blockchain for storage.

[0084] Intermediate currency (cm old ,v0,sn old ) consists of three parts, namely the currency serial number sn old, the intermediate currency value v0 and the second commitment value cm old Specifically, for the UTXO currency value v UTXO The process of performing a forward intermediate state conversion (i.e., mint operation) to generate intermediate state currency is as follows:

[0085] First, as the formula As shown, based on the random number r old , the public key of the user who initiated the current transaction and the random number ρ old The cascade result between them is hashed to obtain the first commitment value k old .

[0086] Secondly, as the formula As shown, based on the random number s old , for the intermediate currency value v0 and the first commitment value k old The concatenation result is hashed to obtain the second commitment value cm old The face value of the intermediate currency is the face value of the currency actually transferred by the initiator of the current transaction.

[0087] Again, as the formula As shown, the private key of the user who initiated the current transaction and the random number ρ old Perform pseudo-random function operation to obtain the currency serial number sn old , the second commitment value, currency face value and currency serial number are used as intermediate currency. Among them, the pseudo-random function Derived from the hash function H.

[0088] After obtaining the intermediate currency, as shown in the formula As shown, based on the first regulatory public key of the regulatory agency to which the current transaction initiator belongs and the random number r generated by the current transaction initiator enc(old1_1) , for currency serial number sn old Encrypt and get the encrypted serial number Encrypted serial number Intermediate currency value v0 and second commitment value cm old , forming an intermediate cryptocurrency For example, taking the elliptic curve cryptography (ECC) encryption algorithm as an example, as shown in the formula As shown, based on the random number r selected by the current transaction initiator enc(old1_1) , calculate the horizontal and vertical coordinates (x enc(old1_1) ,y enc(old1_1) ). Then use the key derivation function KDF to enc(old1_1) and yenc(old1_1) The cascade result between them, and the currency serial number sn old The data length len is calculated to obtain the key k of the symmetric encryption algorithm enc(old1_1) This application implements symmetric encryption by directly performing an XOR operation on the key and the plaintext.

[0089] As the formula As shown, the currency serial number sn old and the key k of the symmetric encryption algorithm enc(old1_1) Perform XOR operation to obtain partial ciphertext c1, and then perform XOR operation on random number r enc(old1_1) Perform elliptic curve encryption operation and obtain c2=r enc(old1_1) *G, and then perform cascade operations on c1 and c2 to obtain the encrypted serial number

[0090] The embodiments of the present application use non-interactive zero-knowledge proofs, in which the prover and verifier do not need to communicate. The prover wishes to prove the authenticity of a fact to the verifier, while the verifier wishes to verify the correctness of the information provided by the prover. Throughout the process, the prover gradually reveals part of the information, allowing the verifier to determine whether the fact is true based on this information, while not obtaining any specific details about the information itself, thereby protecting user privacy.

[0091] In this embodiment of the present application, the current transaction initiator acts as the prover and generates the first zero-knowledge proof π mint , the blockchain node acts as a verifier to verify the validity of the first zero-knowledge proof. When the verification passes, the blockchain node determines that the current transaction initiator holds the undisclosed input parameters in the first zero-knowledge proof.

[0092] The first zero-knowledge proof It consists of three parts, and the input parameters are not disclosed. Expose input parameters and the verification relationship R that needs to be satisfied between the two parameters mint .

[0093] Verify the relationship

[0094] The relationship between the undisclosed input parameters and the public input parameters is specified in the current transaction initiator's private key. and the user's public key Satisfies the hash relationship, and the first commitment value k old and the public key of the user who initiated the current transaction Random number ρold , random number r old There is a hash relationship between them, and the currency serial number sn old and the user private key of the current transaction initiator Random number ρ old There is a hash relationship between them, and the encrypted serial number and currency serial number sn old , the random number r generated by the current transaction initiator enc(old1_1) , the first regulatory public key of the regulatory agency to which the current transaction initiator belongs The verification relationship is satisfied.

[0095] S302: When the current transaction initiator uses the currency serial number converted from the forward intermediate state to conduct a transaction, a first encrypted transaction is generated. The first encrypted transaction includes: the currency serial number, the encrypted currency obtained by the encrypted currency face value and the user public key of the first transaction recipient through the encrypted conversion.

[0096] When the current transaction initiator uses the currency serial number converted by the forward intermediate state to conduct a transaction, the first confidential transaction tx is generated. pour ={input:sn old ,π pour ;output0:c new_0}. First confidential transaction tx pour The transaction input includes: currency serial number sn old and the second zero-knowledge proof π pour The transaction output includes: the encrypted currency c obtained by the encrypted currency face value and the user public key of the first transaction recipient through the encrypted conversion new_0 The user public key of the first transaction recipient is used as the wallet address addr of the first transaction recipient. new_0 .

[0097] Similar to the construction of the first zero-knowledge proof, the second zero-knowledge proof It also consists of three parts, and the input parameters are not disclosed. Expose input parameters and the verification relationship R that needs to be satisfied between the two parameters pour .

[0098] Verify the relationship

[0099] The relationship between the undisclosed input parameters and the public input parameters is specified in the current transaction initiator's private key. and the user's public key Satisfies the hash relationship, and the first commitment value k oldand the public key of the user who initiated the current transaction Random number ρ old , random number r old There is a hash relationship between them, and the second commitment value cm old and the intermediate currency value v0, the first commitment value k old , random number s old The verification relationship is satisfied, and the second commitment value cm old It is a leaf node of the merkle tree, and the currency serial number sn old and the user private key of the current transaction initiator Random number ρ old The hash relationship is satisfied between them, and the current transaction initiator uses the intermediate currency value v0 as the encrypted currency value v new_0 , based on the first supervisory public key and the random number r generated by the current transaction initiator enc(old1_2) , encrypt the user public key of the first transaction recipient and crypto currency value v new_0 The cascade result between them is the encrypted currency c new_0 .

[0100] Among them, the root node of the merkle tree is rt, and the leaf node is the second commitment value cm old , T is the search range set, path T (cm old ,rt) records the leaf node cm old The complete path to the root node rt, which is used by blockchain nodes to verify the currency serial number sn old The corresponding second commitment value cm old , has been stored in the first T blocks to prevent double spending problems.

[0101] Then, the current transaction initiator sends the first confidential transaction tx pour Sent to the blockchain, multiple blockchain nodes in the blockchain verify the zero-knowledge proof. After passing the verification and consensus of the blockchain nodes, the first secret transaction tx is recorded. pour The blocks are added to the blockchain for storage.

[0102] When the regulatory agency of the current transaction initiator conducts a transaction audit, it uses the first regulatory private key to decrypt tx mint Encrypted serial number Get the currency serial number sn old , and then get the second commitment value cm old and currency serial number sn old The binding relationship between them determines the intermediate currency after the UTXO's clear currency face value is converted.

[0103] The regulatory agency of the current transaction initiator is based on the currency serial number sn old , tx mint With tx pour By associating, we can restore the asset transfer path where the current transaction initiator converts the UTXO currency face value into an intermediate currency, and then uses the intermediate currency to trade with the first transaction recipient.

[0104] This application decouples the clear-state currency and the encrypted currency through an intermediate currency, hiding the asset transfer path from participants other than the regulatory agency and protecting the privacy and security of users' data. Without revealing the transaction data of both parties (including the identity information and transaction value of both parties) to the regulatory agency of the current transaction initiator, the regulatory agency can still restore the asset transfer path based on the first regulatory private key and audit the transaction for compliance, thus protecting the privacy of the transaction and ensuring the normal audit of the regulatory agency.

[0105] The current transaction initiator will also (v new_0 ,c new_0 ,r enc(old1_2) ) is secretly sent to the first transaction recipient (i.e. When the first transaction recipient needs to initiate a transaction to consume the transaction output, the above three parameters can be used to prove the first transaction recipient's control over the encrypted currency.

[0106] Combine Figure 4 The flowchart shown introduces the process of cross-border transactions on the blockchain using the confidential transaction model.

[0107] S401: When the current transaction initiator uses CUTXO to conduct a transaction, the user public key and encrypted currency face value of the first transaction recipient are encrypted based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs to obtain the encrypted currency of the first transaction recipient.

[0108] S402: Generate a second encrypted transaction based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient. The CUTXO encrypted currency is obtained by performing a secret conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs.

[0109] The current transaction initiator uses CUTXO to conduct transactions and generate the second confidential transaction tx cipher ={input:c old ,π cipher ;output0:c new_0 ;output1:c1}.

[0110] Confidential transaction tx cipher The transaction input includes: the encrypted currency c converted by the initiator of the historical transaction that generated CUTXO old And the third zero-knowledge proof π cipher .

[0111] When there is no second transaction recipient, output1 is 0. At this time, the encrypted transaction has only one transaction output, output0, which means that the current transaction initiator has transferred all the face value of CUTXO to the first transaction recipient. Transaction output output0 includes: the encrypted currency c actually transferred by the first transaction recipient new_0 .

[0112] When there is a second transaction recipient, the transaction output includes output0 and output1. Among them, output1 includes: the encrypted currency c1 of the second transaction recipient. When the wallet address of the second transaction recipient is the same as that of the current transaction initiator, v CUTXO =v new_0 +v1, v1 is the change denomination, to achieve the change operation. If the wallet address of the second transaction recipient is different from the current transaction initiator, v CUTXO =v new_0 +v1, where v1 is the actual value of the clear currency transferred by the second transaction recipient, enabling transactions with multiple transaction recipients. The current transaction initiator can also select multiple CUTXOs as transaction inputs to achieve aggregation operations.

[0113] Then, the current transaction initiator sends the second secret transaction tx cipher It is sent to the blockchain, and multiple blockchain nodes in the blockchain verify the zero-knowledge proof. After passing the verification and consensus of the blockchain nodes, the confidential transaction tx is recorded. cipher The blocks are added to the blockchain for storage.

[0114] Similar to the construction method of the first zero-knowledge proof, the third zero-knowledge proof

[0115] It also consists of three parts, and the input parameters are not disclosed. Expose input parameters and the verification relationship R that needs to be satisfied between the two parameters cipher .

[0116] Verify the relationship

[0117] The relationship between the undisclosed input parameters and the public input parameters is specified in the . and the user's public key Satisfies the hash relationship, and the encrypted currency c generated by the historical transaction initiator old The encrypted currency c generated by the conversion of the current transaction recipient new_0 , c1 satisfy the verification relationship, and the encrypted currency c generated by the historical transaction initiator old and the second regulatory public key of the regulatory agency to which the historical transaction initiator belongs Random number r generated by the initiator of the historical transaction enc(old0_1) , the user public key of the historical transaction initiator and crypto currency value v old The verification relationship between them is satisfied, and the first transaction recipient actually transfers the encrypted currency c new_0 and the first regulatory public key of the regulatory agency to which the current transaction initiator belongs The random number r generated by the current transaction initiator enc(old1_3) , the user public key of the first transaction recipient and crypto currency value v new_0 The verification relationship is satisfied, and c1 and the first regulatory public key of the regulatory agency to which the current transaction initiator belongs The random number r generated by the current transaction initiator enc(old1_4) , the user public key of the second transaction initiator The verification relationship satisfied between v1 and v2.

[0118] When the regulatory agency of the current transaction initiator conducts a transaction audit, it uses the first regulatory private key to decrypt tx cipher Cryptocurrency c new_0 , get the user public key of the first transaction recipient and crypto currency value v new_0 , and then determine the first transaction recipient Associated wallet address addr new_0 , transferred to the encrypted currency value v new_0 Without disclosing the transaction data of both parties (including the identity information and transaction value of both parties) to the regulatory agency of the current transaction initiator, the regulatory agency can still restore the asset transfer path based on the first regulatory private key and audit whether the transaction is compliant, which not only protects the transaction privacy but also ensures the normal audit of the regulatory agency.

[0119] The current transaction initiator will also (v new_0 ,c new_0 ,r enc(old1_3) ) is secretly sent to the first transaction recipient, and (v1,c1,r enc(old1_4) ) is secretly sent to the second transaction recipient. When the transaction recipient needs to initiate a transaction to consume this transaction output, the above three parameters can be used to prove its control over the currency.

[0120] Combine Figure 5 The flowchart shown introduces the process of cross-border blockchain transactions using the confidential transaction model.

[0121] S501: When the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, a reverse intermediate state transaction is generated. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained by reverse intermediate state conversion.

[0122] When the current transaction initiator uses CUTXO to conduct a transaction, a reverse intermediate transaction is generated

[0123] tx remint The transaction input includes: CUTXO encrypted currency c converted by the historical transaction initiator that generated CUTXO old And the fourth zero-knowledge proof π remint .

[0124] When there is no second transaction recipient, output1 is 0. At this time, the reverse intermediate transaction has only one transaction output, output0, which means that the current transaction initiator has transferred all the face value of CUTXO to the first transaction recipient. Transaction output output0 includes: the second commitment value cm old and encrypted serial number At this time v0=v CUTXO .

[0125] When there is a second transaction recipient, tx remint The transaction outputs include output0 and output1. Output1 includes: the encrypted currency c1 of the second transaction recipient.

[0126] When the wallet address of the second transaction recipient is the same as that of the current transaction initiator, v CUTXO =v0+v1, v1 is the change value, to achieve the change operation. If the wallet address of the second transaction recipient is different from the current transaction initiator, v CUTXO =v0+v1, where v1 is the actual value of the clear currency transferred by the second transaction recipient, enabling transactions with multiple transaction recipients. The current transaction initiator can also select multiple CUTXOs as transaction inputs to achieve aggregation operations.

[0127] Then, reverse the intermediate transaction tx remintIt is sent to the blockchain, where multiple blockchain nodes in the blockchain verify the zero-knowledge proof. After passing the verification and consensus of the blockchain nodes, the block recording the reverse intermediate transaction is added to the blockchain for storage.

[0128] Among them, the intermediate currency (cm old ,v0,sn old ) consists of three parts, namely the currency serial number sn old , the intermediate currency value v0 and the second commitment value cm old Specifically, the encrypted currency value v of CUTXO CUTXO The process of performing the reverse intermediate state conversion (i.e., remint operation) to generate intermediate state currency is as follows:

[0129] First, as the formula As shown, based on the random number r old , the public key of the user who initiated the current transaction and the random number ρ old The cascade result between them is hashed to obtain the first commitment value k old .

[0130] Secondly, as the formula As shown, based on the random number s old , for the intermediate currency value v0 and the first commitment value k old The concatenation result is hashed to obtain the second commitment value cm old .

[0131] Again, as the formula As shown, the private key of the user who initiated the current transaction and the random number ρ old Perform pseudo-random function operation to obtain the currency serial number sn old , the second commitment value, currency face value and currency serial number are used as intermediate currency. Among them, the pseudo-random function Derived from a hash function.

[0132] After obtaining the intermediate currency, as shown in the formula As shown, the currency serial number is encrypted based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs to obtain the encrypted serial number The intermediate cryptocurrency consists of an encrypted serial number, the intermediate currency face value, and the second commitment value.

[0133] Similar to the construction method of the first zero-knowledge proof, the formula for the fourth zero-knowledge proof is:

[0134] Verify the relationship

[0135] The validation relationship between undisclosed input parameters and public input parameters is specified in .

[0136] The private key of the user who initiated the current transaction and the user's public key Satisfies the hash relationship, and the first commitment value k old and the public key of the user who initiated the current transaction Random number ρ old There is a hash relationship between them, and the currency serial number sn old and the user private key of the current transaction initiator Random number ρ old The hash relationship is satisfied between them, and the encrypted currency c generated by the historical transaction initiator old and the second regulatory public key of the regulatory agency to which the historical transaction initiator belongs Random number r generated by the initiator of the historical transaction enc(old0_2) , the user public key of the current transaction initiator and crypto currency value v old The verification relationship between them is satisfied, and the serial number is encrypted and currency serial number sn old , the random number r generated by the current transaction initiator enc(old1_5) , the first regulatory public key of the regulatory agency to which the current transaction initiator belongs The verification relationship between them is satisfied, and the second commitment value cm old and the intermediate currency value v0 and the first commitment value k of the current transaction initiator old , random number s old The verification relationship between them is satisfied, and is based on the first regulatory public key of the regulatory agency to which the current transaction initiator belongs. and r generated by the current transaction initiator enc(old1_6) , the user public key of the second transaction recipient Encrypted with v1, the encrypted currency c1 of the second transaction recipient is obtained.

[0137] S502: When the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction, a encrypted and transparent transaction is generated. The encrypted and transparent transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the transparent currency face value obtained by converting the intermediate currency face value into a transparent state.

[0138] When the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction, a secret transaction tx is generated. repour ={input:sn old ,π repour;output1:addr new_0 ,v new_0}. Clear state transaction tx repour The transaction input includes: currency serial number sn old And the fifth zero-knowledge proof π pour , the transaction output includes: the wallet address addr of the first transaction recipient new_0 , and the clear currency value v obtained by the secondary conversion of the intermediate currency value new_0 .

[0139] Similar to the construction method of the first zero-knowledge proof, the formula for the fifth zero-knowledge proof is: Among them, the verification relationship that these verification parameters need to satisfy is,

[0140] R repour The private key of the user who initiated the current transaction is specified in and the user's public key Satisfies the hash relationship, and the first commitment value k old and the public key of the user who initiated the current transaction Random number ρ old , random number r old There is a hash relationship between them, and the currency serial number sn old and the user private key of the current transaction initiator Random number ρ old There is a hash relationship between them, and the second commitment value cm old and the intermediate currency value v0 and the first commitment value k of the current transaction initiator old , random number s old There is a hash relationship between them, and the hash function execution result hamc is the same as the user private key of the current transaction initiator Transaction datam repour The verification relationship is satisfied between them, and the intermediate currency value v0 is used as the clear currency value v that the current transaction initiator actually transfers to the first transaction recipient during the transaction process. new_0 Among them, transaction data m repour Contains sn old 、addr new_0 and v new_0 .

[0141] Then, the current transaction initiator sends the encrypted transaction tx repour It is sent to the blockchain, where multiple blockchain nodes in the blockchain verify aspects such as zero-knowledge proof. After passing the verification and consensus of the blockchain nodes, the block recording the encrypted and clear state transactions is added to the blockchain for storage.

[0142] When the regulatory agency of the current transaction initiator conducts a transaction audit, it uses the first regulatory public key to decrypt tx remint Encrypted serial number Get the currency serial number sn old , and then get the second commitment value cm old and currency serial number sn old The binding relationship between them determines the intermediate currency after the face value of CUTXO's encrypted currency is converted.

[0143] The regulatory agency of the current transaction initiator is based on the currency serial number sn old , tx remint With tx repour By associating, we can restore the asset transfer path where the initiator of the current transaction converts CUTXO into an intermediate currency and then uses the intermediate currency to trade with the first transaction recipient.

[0144] This application decouples the clear-state currency and the encrypted currency through an intermediate currency, hiding the asset transfer path from participants other than the regulatory agency and protecting the privacy and security of users' data. Without revealing the transaction data of both parties (including the identity information and transaction value of both parties) to the regulatory agency of the current transaction initiator, the regulatory agency can still restore the asset transfer path based on the first regulatory private key and audit the transaction for compliance, thus protecting the privacy of the transaction and ensuring the normal audit of the regulatory agency.

[0145] Based on the same inventive concept as the above method embodiment, the present application embodiment also provides a structural diagram of a blockchain cross-border transaction device. Figure 6 As shown, the blockchain cross-border transaction device 600 may include:

[0146] The forward intermediate state conversion unit 601 is configured to generate a forward intermediate state transaction when the current transaction initiator uses an unspent transaction output (UTXO) to conduct a transaction. The forward intermediate state transaction includes: the UTXO; an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs; and a second commitment value obtained through forward intermediate state conversion and an intermediate state currency face value.

[0147] The first cryptographic conversion unit 602 is configured to generate a first cryptographic transaction when the current transaction initiator uses a currency serial number converted from a forward intermediate state to conduct a transaction. The first cryptographic transaction includes: the currency serial number, the cryptographic currency obtained by cryptographically converting the cryptographic currency denomination and the user public key of the first transaction recipient.

[0148] Optionally, the forward intermediate state conversion unit 601 generates the intermediate state currency by performing the following operations:

[0149] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0150] Based on a random number, a hash operation is performed on the concatenation result of the intermediate currency denomination and the first commitment value to obtain the second commitment value, where the intermediate currency denomination is the denomination of the currency actually transferred out by the current transaction initiator;

[0151] A pseudo-random function operation is performed on the user private key and random number of the current transaction initiator to obtain a currency serial number, and the second commitment value, the intermediate currency face value and the currency serial number are used as the intermediate currency.

[0152] Optionally, the first encrypted currency conversion unit 602 generates the encrypted currency by performing the following operations:

[0153] Based on the first regulatory public key and the random number, the concatenation result between the user public key of the first transaction recipient and the encrypted currency face value is encrypted to obtain the encrypted currency, where the encrypted currency face value is determined based on the intermediate currency face value.

[0154] Optionally, when the current transaction initiator uses UTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the forward intermediate transaction also includes: the wallet address of the current transaction initiator and the change denomination.

[0155] Based on the same inventive concept as the above method embodiment, the present application embodiment also provides a structural diagram of a blockchain cross-border transaction device. Figure 7 As shown, the blockchain cross-border transaction device 700 may include:

[0156] The reverse intermediate state conversion unit 701 is configured to generate a reverse intermediate state transaction when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained through reverse intermediate state conversion;

[0157] The encrypted-light state conversion unit 702 is used to generate a encrypted-light state transaction when the current transaction initiator uses the currency serial number converted from the reverse intermediate state to conduct a transaction. The encrypted-light state transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the light state currency denomination obtained by converting the intermediate state currency denomination into light state.

[0158] Optionally, the reverse intermediate state conversion unit 701 generates the second commitment value by performing the following operations:

[0159] Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value;

[0160] Based on the random number, a hash operation is performed on the concatenation result between the intermediate currency face value and the first commitment value to obtain a second commitment value. The intermediate currency face value is the face value of the currency actually transferred out by the current transaction initiator.

[0161] Optionally, when the current transaction initiator uses CUTXO to conduct a transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the reverse intermediate transaction also includes: based on the first regulatory public key and the random number, encrypting the change currency obtained by concatenating the user public key of the current transaction initiator and the change denomination.

[0162] Based on the same inventive concept as the above method embodiment, the present application embodiment also provides a structural diagram of a blockchain cross-border transaction device. Figure 8 As shown, the blockchain cross-border transaction device 800 may include:

[0163] The second cryptographic conversion unit 801 is configured to perform a cryptographic conversion on the user public key and cryptographic currency denomination of the first transaction recipient based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, thereby obtaining the cryptographic currency of the first transaction recipient;

[0164] The transaction generation unit 802 is used to generate a second encrypted transaction based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient, wherein the CUTXO encrypted currency is obtained by performing a cryptographic conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs that generates the CUTXO.

[0165] Optionally, when the current transaction initiator uses CUTXO to conduct the transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the confidential transaction also includes: based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, the user public key and change denomination of the second transaction recipient are confidentially converted to obtain the change currency of the second transaction recipient.

[0166] For the convenience of description, the above parts are divided into modules (or units) according to their functions and described separately. Of course, when implementing this application, the functions of each module (or unit) can be implemented in the same or multiple software or hardware.

[0167] After introducing the method and apparatus for supervising cross-border transactions on blockchain according to an exemplary embodiment of the present application, the following describes a computer device according to another exemplary embodiment of the present application.

[0168] Those skilled in the art will appreciate that various aspects of the present application can be implemented as systems, methods, or program products. Therefore, various aspects of the present application can be specifically implemented in the following forms: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or an implementation that combines hardware and software aspects, which may be collectively referred to herein as a "circuit," "module," or "system."

[0169] Based on the same inventive concept as the above method embodiment, the present application embodiment also provides a computer device, see Figure 9 As shown, the computer device 900 may include at least a processor 901 and a memory 902. The memory 902 stores program code, and when the program code is executed by the processor 901, the processor 901 performs the steps of any one of the above-mentioned blockchain cross-border transaction methods.

[0170] In some possible implementations, the computing device according to the present application may include at least one processor and at least one memory. The memory stores program code, and when the program code is executed by the processor, the processor executes the steps of the blockchain cross-border transaction method according to various exemplary embodiments of the present application described above in this specification. For example, the processor may execute the following steps: Figure 3 Follow the steps shown in .

[0171] Refer to the following Figure 10 1000 according to this embodiment of the present application is described. Figure 10 The computing device 1000 is merely an example and should not limit the functions and scope of use of the embodiments of the present application.

[0172] like Figure 10 As shown, computing device 1000 is implemented as a general-purpose computing device. Components of computing device 1000 may include, but are not limited to, at least one processing unit 1001, at least one storage unit 1002, and a bus 1003 connecting various system components (including storage unit 1002 and processing unit 1001).

[0173] Bus 1003 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, and a processor or local bus using any of a variety of bus architectures.

[0174] The storage unit 1002 may include a readable medium in the form of a volatile memory, such as a random access memory (RAM) 10021 and / or a cache memory unit 10022 , and may further include a read-only memory (ROM) 10023 .

[0175] The storage unit 1002 may also include a program / utility 10025 having a set (at least one) of program modules 10024, such program modules 10024 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0176] Computing device 1000 may also communicate with one or more external devices 1004 (e.g., a keyboard, pointing device, etc.), one or more devices that enable a user to interact with computing device 1000, and / or any device that enables computing device 1000 to communicate with one or more other computing devices (e.g., a router, modem, etc.). Such communication may occur via input / output (I / O) interface 1005. Furthermore, computing device 1000 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) via network adapter 1006. As shown, network adapter 1006 communicates with other modules of computing device 1000 via bus 1003. It should be understood that, although not shown, other hardware and / or software modules may be used in conjunction with computing device 1000, including but not limited to microcode, device drivers, redundant processors, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0177] Based on the same inventive concept as the above-mentioned method embodiment, various aspects of the network isolation policy configuration method provided in this application can also be implemented in the form of a program product, which includes program code. When the program product is run on a computer device, the program code is used to enable the computer device to execute the steps of the blockchain cross-border transaction method according to various exemplary embodiments of the present application described above in this specification. For example, the computer device can execute the following steps: Figure 3 Follow the steps shown in .

[0178] The program product may employ any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or component, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0179] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present application.

[0180] Obviously, those skilled in the art may make various changes and modifications to this application without departing from the spirit and scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalents, this application is intended to include these modifications and variations.

Claims

1. A blockchain cross-border transaction method, characterized in that: include: When the current transaction initiator uses the unspent transaction output UTXO to conduct a transaction, a forward intermediate state transaction is generated. The forward intermediate state transaction includes: UTXO, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained by forward intermediate state conversion and the intermediate state currency face value; When the current transaction initiator uses the currency serial number converted through the forward intermediate state to conduct a transaction, a first encrypted transaction is generated, which includes: the currency serial number, the encrypted currency obtained by the encrypted currency face value and the user public key of the first transaction recipient through encrypted conversion.

2. The method according to claim 1, wherein The intermediate currency is generated by performing the following operations: Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value; Based on a random number, a hash operation is performed on the concatenation result of the intermediate currency denomination and the first commitment value to obtain the second commitment value, where the intermediate currency denomination is the denomination of the currency actually transferred out by the current transaction initiator; A pseudo-random function operation is performed on the user private key and random number of the current transaction initiator to obtain a currency serial number, and the second commitment value, the intermediate currency face value and the currency serial number are used as the intermediate currency.

3. The method according to claim 1, wherein Generate the crypto currency by performing the following operations: Based on the first regulatory public key and the random number, the concatenation result between the user public key of the first transaction recipient and the encrypted currency face value is encrypted to obtain the encrypted currency, where the encrypted currency face value is determined based on the intermediate currency face value.

4. The method according to claim 1, wherein When the current transaction initiator uses UTXO to conduct a transaction, and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the forward intermediate transaction also includes: the wallet address of the current transaction initiator and the change denomination.

5. A blockchain cross-border transaction method, characterized in that: include: When the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, a reverse intermediate state transaction is generated. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained by reverse intermediate state conversion; When the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction, a encrypted and transparent transaction is generated. The encrypted and transparent transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the transparent currency face value obtained by converting the intermediate currency face value into a transparent state.

6. The method according to claim 5, wherein The second commitment value is generated by performing the following operations: Based on the random number, a hash operation is performed on the concatenation result between the user public key of the current transaction initiator and the random number to obtain a first commitment value; Based on the random number, a hash operation is performed on the concatenation result between the intermediate currency face value and the first commitment value to obtain a second commitment value. The intermediate currency face value is the face value of the currency actually transferred out by the current transaction initiator.

7. The method according to claim 5, wherein When the current transaction initiator uses CUTXO to conduct a transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the reverse intermediate transaction also includes: based on the first regulatory public key and the random number, the change currency obtained by encrypting the cascade result between the user public key of the current transaction initiator and the change denomination.

8. A blockchain cross-border transaction method, characterized in that: include: When the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, the user public key and encrypted currency face value of the first transaction recipient are encryptedly converted based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, to obtain the encrypted currency of the first transaction recipient; A second encrypted transaction is generated based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient, wherein the CUTXO encrypted currency is obtained by performing a secret conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs that generates the CUTXO.

9. The method according to claim 8, wherein When the current transaction initiator uses CUTXO to conduct a transaction and the wallet address of the second transaction recipient is the same as that of the current transaction initiator, the confidential transaction also includes: based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, the user public key and change denomination of the second transaction recipient are confidentially converted to obtain the change currency of the second transaction recipient.

10. A blockchain cross-border transaction device, characterized in that: include: A forward intermediate state conversion unit is configured to generate a forward intermediate state transaction when the current transaction initiator uses an unspent transaction output (UTXO) to conduct a transaction. The forward intermediate state transaction includes: the UTXO, an encrypted serial number obtained by encrypting the serial number based on a first regulatory public key and a random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value and an intermediate state currency face value obtained by forward intermediate state conversion. The first cryptographic conversion unit is configured to generate a first cryptographic transaction when the current transaction initiator uses a currency serial number converted from a forward intermediate state to conduct a transaction. The first cryptographic transaction includes: the currency serial number, the cryptographic currency obtained by cryptographically converting the cryptographic currency denomination and the user public key of the first transaction recipient.

11. A blockchain cross-border transaction device, characterized in that: include: A reverse intermediate state conversion unit is configured to generate a reverse intermediate state transaction when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction. The reverse intermediate state transaction includes: CUTXO encrypted currency, an encrypted serial number obtained by encrypting the serial number based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, and a second commitment value obtained through reverse intermediate state conversion; The encrypted-light state conversion unit is used to generate a encrypted-light state transaction when the current transaction initiator uses the currency serial number converted by the reverse intermediate state to conduct a transaction. The encrypted-light state transaction includes: the currency serial number, the wallet address of the first transaction recipient, and the light state currency face value obtained by converting the intermediate state currency face value into light state.

12. A blockchain cross-border transaction device, characterized in that: include: The second cryptographic conversion unit is configured to, when the current transaction initiator uses the unspent encrypted transaction output CUTXO to conduct a transaction, perform cryptographic conversion on the user public key and cryptographic currency denomination of the first transaction recipient based on the first regulatory public key and random number of the regulatory agency to which the current transaction initiator belongs, to obtain the cryptographic currency of the first transaction recipient; The transaction generation unit is configured to generate a second encrypted transaction based on the CUTXO encrypted currency and the encrypted currency of the first transaction recipient, wherein the CUTXO encrypted currency is obtained by performing a cryptographic conversion on the user public key of the historical transaction initiator and the CUTXO currency face value based on the second regulatory public key and random number of the regulatory agency to which the historical transaction initiator belongs that generates the CUTXO.

13. A computer device, characterized in that: The method comprises a processor and a memory, wherein the memory stores program codes, and when the program codes are executed by the processor, the processor executes the steps of the method according to any one of claims 1 to 9.

14. A computer-readable storage medium, characterized in that The method comprises a program code, and when the program code is run on a computer device, the program code is used to enable the computer device to execute the steps of the method according to any one of claims 1 to 9.

Images