An asset trading method that generates transactions for multiple asset fluctuation values ​​by utilizing reordering, and an asset trading system that executes this method.

Abstract

The technical concept of this invention is to provide an asset trading method that generates transactions for multiple asset fluctuation values ​​by utilizing reordering, and an asset trading system that carries out this method. [Solution] The asset trading method includes the steps of: obtaining multiple asset fluctuation values ​​to be traded; sequentially generating multiple commit values ​​for each of the multiple asset fluctuation values; changing the order of the multiple asset fluctuation values ​​(permutate); generating a transaction by sequentially arranging the multiple commit values ​​and the reordered multiple asset fluctuation values; and trading the asset by verifying the transaction with a smart contract.

Description

[Technical Field]

[0001] This invention relates to an asset trading method that generates transactions for multiple asset fluctuation values ​​by utilizing reordering, and a system for carrying out this transaction. [Background technology]

[0002] Smart contracts are being used in asset transactions. A smart contract is an automated digital contract based on blockchain technology, and can be viewed as a digital version of a legal contract. When a user requests a transaction to execute an asset transaction, the entity managing the user's account generates a transaction to reflect this in the smart contract. The transaction includes a proof value to prove the change in the asset's value, and zero-knowledge proof algorithms are used to generate such a proof value.

[0003] Zero-knowledge proof algorithms verify the integrity of a message without verifying the message itself (e.g., assets or asset fluctuations). However, the time required for such zero-knowledge proof algorithms has resulted in a long transaction generation time. [Overview of the project] [Problems that the invention aims to solve]

[0004] One objective of the present invention is to provide a method for generating transactions for multiple asset fluctuation values ​​by utilizing reordering.

[0005] Another object of the present invention is to provide an efficient method for generating proof values ​​for multiple asset fluctuation values. [Means for solving the problem]

[0006] An asset trading method performed by at least one processor according to one embodiment of the present disclosure may include the steps of: obtaining a plurality of asset fluctuation values ​​to be traded; sequentially generating a plurality of commit values ​​for each of the plurality of asset fluctuation values; changing the order of the plurality of asset fluctuation values ​​(permutate); generating a transaction by sequentially arranging the plurality of commit values ​​and the plurality of asset fluctuation values ​​whose order has been changed; and trading an asset by verifying the transaction with a smart contract.

[0007] In one embodiment, the plurality of commit values ​​may be characterized by having the form of a Pedersen commit.

[0008] In one embodiment, the step of generating the transaction may include: obtaining a plurality of addresses corresponding to each of the plurality of asset change values; permutating the order of the plurality of addresses to correspond to the plurality of asset change values ​​with their order changed; and generating the transaction by sequentially arranging the plurality of commit values, the plurality of asset change values ​​with their order changed, and the plurality of addresses with their order changed.

[0009] In one embodiment, the steps may further include: performing a proof for the plurality of commit values ​​using zero-knowledge proofs; performing a proof for the plurality of asset change values ​​using zero-knowledge proofs; and including the proof values ​​generated as a result of the proof for the plurality of commit values ​​and the plurality of asset change values ​​in the transaction.

[0010] In one embodiment, the steps of performing a proof for the plurality of commit values ​​may include: obtaining a verification random value; generating an asset aggregation value based on the verification random value, the plurality of asset fluctuation values ​​and the plurality of asset fluctuation values ​​with their order changed; and proving the asset aggregation value by utilizing a zero-knowledge proof.

[0011] In one embodiment, the verification random value is r, and the current asset value is m. i , the above-mentioned multiple asset fluctuation values ​​Δm i , the multiple asset fluctuation values ​​whose order has been changed Δm i 'And when the number of the multiple asset fluctuation values ​​is N, the asset aggregation value agg m It can be characterized as being generated based on the following mathematical formula.

[0012]

number

[0013] In one embodiment, the steps of performing a proof for the plurality of commit values ​​may include: obtaining a plurality of asset random values ​​corresponding to each of the asset fluctuation values; generating a random aggregation value based on the verification random value and the plurality of asset random values; and proving the random aggregation value by utilizing a zero-knowledge proof.

[0014] In one embodiment, the steps of performing a proof for the plurality of asset fluctuation values ​​may include: obtaining a verification random value; and using a zero-knowledge proof to prove whether the rearranged plurality of asset fluctuation values ​​correspond to the plurality of asset fluctuation values ​​based on the verification random value, the plurality of asset fluctuation values, and the rearranged plurality of asset fluctuation values.

[0015] In one embodiment, the verification random value is r, and the multiple asset fluctuation values ​​are Δm. i , the multiple asset fluctuation values ​​whose order has been changed Δm i When N is the number of the aforementioned asset fluctuation values, it can be characterized that whether the aforementioned asset fluctuation values ​​with their order changed correspond to the aforementioned asset fluctuation values ​​can be proven based on the following mathematical formula.

[0016]

number

Advantages of the Invention

[0017] According to the technical idea of the present invention, by generating a transaction for a plurality of asset variation values by utilizing the order change, even if the variation value of the asset is exposed externally, it is possible not to expose to which account or user it is, and accordingly, the security of the transaction can be increased. Further, according to the technical idea of the present invention, even by utilizing the order change, a proof for a plurality of asset variation values can be correctly generated.

Brief Description of the Drawings

[0018] [Figure 1] It is a block diagram showing an asset trading system according to an exemplary embodiment of the present disclosure. [Figure 2] It is a flowchart showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 3] It is a drawing showing code for an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 4] It is a drawing showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 5] It is a flowchart showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 6] It is a drawing showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 7] It is a flowchart showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 8] It is a drawing showing an asset trading method according to an exemplary embodiment of the present disclosure. [Figure 9] It is a block diagram showing a computing system according to an exemplary embodiment of the present disclosure.

Modes for Carrying Out the Invention

[0019] Preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. The advantages and features of the present invention, and how they are achieved, will become clearer with reference to the embodiments described below in detail with the accompanying drawings. However, the technical idea of ​​the present invention is not limited to the following embodiments and can be embodied in a variety of different forms, although the following embodiments are provided to complete the technical idea of ​​the present invention and to fully inform those who are ordinary skill in the art to which the present invention pertains, and the technical idea of ​​the present invention is defined only by the scope of the claims.

[0020] When assigning reference numerals to the components in each drawing, it should be noted that, as far as possible, the same component will have the same reference numeral even if it is shown in other drawings. Furthermore, in describing the present invention, if it is determined that a specific description of a related known configuration or function may obscure the gist of the present invention, such detailed description will be omitted.

[0021] Unless otherwise defined, all terms used herein (including technical and scientific terms) are to be used in a sense that can be commonly understood by a person of ordinary skill in the art to which the present invention pertains. Furthermore, terms defined in commonly used dictionaries should not be interpreted ideally or excessively unless explicitly defined otherwise. Terms used herein are for illustrative purposes only and are not intended to limit the present invention. In this specification, singular forms include plural forms unless otherwise specified.

[0022] Furthermore, when describing the components of the present invention, terms such as first, second, A, B, (a), (b), etc., may be used. Such terms are merely for distinguishing a component from other components, and do not limit the essence, order, or sequence of the component in question. When it is stated that a component is “connected,” “joined,” or “connected” to another component, it should be understood that the component may be directly connected to or connected to the other components, but that other components may also be “connected,” “joined,” or “connected” between each component.

[0023] As used in this invention, "comprises" and / or "comprising" does not exclude the presence or addition of one or more other components, stages, operations, and / or elements that are mentioned.

[0024] Components included in any one embodiment and components having a common function may be described using the same name in other embodiments. Unless otherwise stated, the description in any one embodiment may apply to other embodiments, and specific descriptions may be omitted to the extent that they overlap or are obvious to a person of ordinary skill in the art.

[0025] Several embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

[0026] The present invention will be described in detail below with reference to preferred embodiments and the accompanying drawings.

[0027] Figure 1 is a block diagram showing an asset trading system according to an exemplary embodiment of the present disclosure.

[0028] Referring to Figure 1, the asset trading system 10 can execute transactions on assets and for this purpose may include an account manager 100, a trade manager 200, multiple user devices 310-330, and a smart contract network.

[0029] Account Manager 100 may be operated by a governing body that holds assets and manages transactions, the governing body may include a bank, for example. In this specification, assets may mean financial or physical assets held in trust with or entrusted to a governing body, the like, for example, deposits, token securities, etc.

[0030] Trade Manager 200 may be operated by an intermediary that mediates the trading of assets, and for example, the intermediary may include an over-the-counter broker or an exchange.

[0031] Multiple user devices 310-330 can deposit assets with account manager 100 and be managed by users who trade those assets.

[0032] The account manager 100, trade manager 200, and user devices 310-330 may include various communication-capable terminal devices such as cellular phones, smartphones, laptops, PCs (personal computers), navigation systems, PCS (personal communication systems), GSM (Global System for Mobile communications), PDC (personal digital cellular), PHS (personal handyphone systems), PDAs (personal digital assistants), IMT (international mobile telecommunication)-2000, CDMA (code division multiple access)-2000, W-CDMA (W-code division multiple access), Wibro (wireless broadband internet) terminals, smartpads, and tablet PCs. In further examples, the account manager 100, trade manager 200, and user devices 310-330 may be embodied as servers.

[0033] The account manager 100, the trade manager 200, and the user devices 310-330 can be connected to each other via a network capable of wired or wireless communication. When connected via a wired connection, the network can utilize a serial protocol, and when connected wirelessly, the network can communicate using a wireless communication network. Wireless communication networks include, but are not limited to, short-range communication networks (LAN: Local Area Network), wide-area communication networks (WAN: Wide Area Network), the Internet (WWW: World Wide Web), wired / wireless data communication networks, telephone networks, wired / wireless television communication networks, 3G, 4G, 5G, 3GPP (registered trademark) (3rd Generation Partnership Project), 5GPP (5th Generation Partnership Project), LTE (Long Term Evolution), WiMAX (World Interoperability for Microwave Access), Wi-Fi, Internet, LAN (Local Area Network), Wireless LAN (Wireless Local Area Network), WAN (Wide Area Network), PAN (Personal Area Network), RF (Radio Frequency), Bluetooth (registered trademark) networks, NFC (Near-Field Communication) networks, satellite broadcasting networks, analog broadcasting networks, DMB (Digital Multimedia Broadcasting) networks, and blockchain networks.

[0034] User devices 310-330 can entrust user-owned assets to the management organization operating the account manager 100, and can transmit requests (Req) for trading assets to the account manager 100.

[0035] The account manager 100 can generate a single transaction Tx in response to requests Req received from multiple user devices 310-330 and transmit it to the smart contract network. At this time, the request Req may include information about the asset change value to be traded, and the account manager 100 can calculate a commit value corresponding to the asset change value based on the request Req. In this specification, the commit value may mean a value converted into the form of a Pedersen Commit based on a message m corresponding to the asset or asset change value, a commit key, and a random value.

[0036] In one embodiment, account manager 100 can prove asset fluctuations in the asset trading process based on a zero-knowledge proof algorithm. In this specification, a zero-knowledge proof method is a method for verifying the integrity of a message without reviewing the message (e.g., asset / asset fluctuation value), and as an example, zk-SNARK (zero-knowledge SNARK), cc-SNARK (commit carrying SNARK), and Growth 16 may be used as zero-knowledge proof methods.

[0037] The account manager 100 can generate a single transaction Tx using multiple asset change values ​​corresponding to multiple requests Req. In one embodiment, when the account manager 100 generates a transaction Tx, it can change the order of multiple asset change values ​​(permutation) and generate a transaction Tx using the reordered asset change values.

[0038] According to the technical concept of this disclosure, by including reordered asset change values ​​in transaction Tx, the account manager 100 can make it impossible to identify the account or user corresponding to the asset change values ​​even if transaction Tx is exposed externally, thereby potentially increasing the security of transaction Tx.

[0039] Furthermore, according to the technical concept of this disclosure, it is possible to generate a single proof value corresponding to multiple asset fluctuation values, rather than a single proof value corresponding to a single asset fluctuation value. As a result, the time required to generate proof values ​​can be significantly reduced, potentially enabling high-speed trading.

[0040] The smart contract network receives a transaction (Tx), verifies it using the proof values ​​contained in the transaction (Tx), verifies the integrity of the multiple commit values ​​contained in the transaction (tx), and if integrity is verified, it can transmit the transaction information (Ex) to the trade manager 200 once verification is complete. In other embodiments, the trade manager 200 itself may be composed of a smart contract network.

[0041] In this specification, the operation of the account manager 100, the trade manager 200, and user devices 310-330 may mean the operation performed by the processor included in each configuration based on a computer program containing at least one instruction word stored in a storage device included in each configuration. The storage device may include non-volatile memory, volatile memory, flash memory, hard disk drive (HDD), or solid-state drive (SSD), etc. The processor may include at least one of a CPU (Central Processing Unit), GPU (Graphic Processing Unit), NPU (Neural Processing Unit), RAM, ROM, system bus, and application processor. The operation of the smart contract 300 may refer to the operation of the software and hardware configurations that constitute the blockchain that makes up the smart contract.

[0042] Figure 2 is a flowchart illustrating an asset trading method according to an exemplary embodiment of the present disclosure, and Figure 3 is a diagram showing the code for the asset trading method according to an exemplary embodiment of the present disclosure.

[0043] Referring to Figures 2 and 3, the account manager 100 can obtain multiple asset fluctuation values ​​to be traded from user devices 310-330 (S110). The account manager 100 can sequentially generate multiple commit values ​​for each of the multiple asset fluctuation values ​​(S120). In this specification, "sequentially" may mean processing and arranging data according to a predetermined order.

[0044] The account manager 100 can change the order of multiple asset values ​​(S130). In one embodiment, the account manager 100 can change the order of multiple asset values ​​from the order in which they are stored in the database to a random order.

[0045] The account manager 100 obtains multiple addresses corresponding to each of the multiple asset change values ​​(S140), and can change the order of the obtained addresses to correspond to the multiple asset change values ​​whose order has been changed (S150).

[0046] Account manager 100 can perform proofs against multiple commit values ​​(S150) and against multiple asset change values ​​(S170) by utilizing zero-knowledge proofs. Account manager 100 can generate transaction Tx containing multiple commit values, reordered asset change values, reordered addresses, and proof values ​​(S180).

[0047] The account manager 100 transmits transaction Tx to the smart contract network, and the smart contract network verifies transaction Tx, allowing the trade manager 200 to trade the asset (S190).

[0048] Figure 4 is a diagram illustrating an asset trading method according to an exemplary embodiment of the present disclosure.

[0049] Referring to Figure 4, the multiple requests Req1 to Req4 received from multiple user devices 310 to 330 may include asset change values ​​Δm1 to Δm4 corresponding to the amount of assets that the user wishes to trade.

[0050] The account manager 100 can store asset change values ​​Δm1 to Δm4 in the account database DB_Acc and generate commit values ​​Δcm1 to Δcm4 corresponding to the asset change values ​​Δm1 to Δm4. In one embodiment, the commit values ​​Δcm1 to Δcm4 may consist of a Pedersen commitment, which is composed of a message (e.g., asset change value) for a commit key and an exponential form of a random value corresponding to the message. The account manager 100 can sequentially include the commit values ​​Δcm1 to Δcm4 in a transaction Tx. For example, the account manager 100 can include the commit values ​​Δcm1 to Δcm4 in a transaction Tx in the order "Δcm1-Δcm2-Δcm3-Δcm4".

[0051] The account manager 100 can change the order of asset fluctuation values ​​Δm1 to Δm4. For example, the account manager 100 can randomly change the order of asset fluctuation values ​​Δm1 to Δm4 to "Δm3-Δm2-Δm4-Δm1". The account manager 100 can include the reordered asset fluctuation values ​​in transaction Tx.

[0052] The account manager 100 can obtain addresses corresponding to the reordered asset change values. For example, the account manager 100 can construct addresses as "addr3-addr2-addr4-addr1" to correspond to "Δm3-Δm2-Δm4-Δm1". The account manager 100 can include the reordered addresses in transaction Tx.

[0053] According to one embodiment of this disclosure, when the account manager 100 includes asset change values ​​in a transaction, by changing the order in which the values ​​are included, even if a third party checks the transaction Tx, they will not be able to match the asset change values ​​with the corresponding account. As a result, the transaction details including asset change values ​​will not be exposed to the outside, and the security of the transaction may be increased.

[0054] Account manager 100 can generate a proof value (pi) based on a zero-knowledge proof method by utilizing multiple commit values ​​Δcm1-Δcm2-Δcm3-Δcm4 and multiple asset change values ​​Δm3-Δm2-Δm4-Δm1 in a changed order, and can include the proof value (pi) in transaction Tx and transmit it to the smart contract network.

[0055] The smart contract network can verify whether multiple commit values ​​Δcm1-Δcm2-Δcm3-Δcm4 were correctly generated based on transaction Tx. Furthermore, the smart contract network can verify whether the reordered multiple asset change values ​​Δm3-Δm2-Δm4-Δm1 correspond to the multiple asset change values ​​Δm1-Δm2-Δm3-Δm4 that correspond to the multiple commit values ​​Δcm1-Δcm2-Δcm3-Δcm4, or in other words, whether pairs of the reordered multiple asset change values ​​Δm3-Δm2-Δm4-Δm1 and the multiple asset change values ​​Δm1-Δm2-Δm3-Δm4 are matched.

[0056] If the verification is successful, the trading terminal 200 can enter the asset fluctuation values ​​Δm1 to Δm4 corresponding to the address into the order book on the smart contract network, and a trade can be executed based on the order book on the smart contract network.

[0057] According to one embodiment of this disclosure, accurate and rapid trading can be performed even when utilizing zero-knowledge proof methods, by having the trade manager 200 execute trades on a single transaction Tx platform for multiple trades.

[0058] This specification describes a method for requesting a trade from an account manager 100 to a trade manager 200, but the technical concept of this disclosure can also be applied in the opposite case, when a trade is completed and the details of the trade are reflected in the account manager 100 from the trade terminal 200. For example, the trade manager 200 can generate a commit value for completed trades, and use the commit value and the reordered asset change values ​​to generate a transaction, and the completed trade can be reflected in the account database DB_Acc by verifying the transaction generated by the smart contract network.

[0059] Furthermore, although the account database DB_Acc included in the account manager 100 and the order book database DB_ob included in the trade manager 200 are described in database form in Figure 4 for convenience of explanation, they can be implemented on a smart contract network in one embodiment of this disclosure.

[0060] Figure 5 is a flowchart illustrating an asset trading method according to an exemplary embodiment of the present disclosure. In detail, Figure 5 shows in detail the proof step (S160) for multiple commit values ​​in Figure 2.

[0061] Referring to Figure 5, the account manager 100 can obtain a validation random value (S161). In one embodiment, the validation random value can be received from the trade manager 200, and in another embodiment, the validation random value may be determined by hashing the commit value.

[0062] The account manager 100 can generate an asset aggregation value based on a validation random value, multiple asset fluctuation values, and multiple asset fluctuation values ​​with a changed order (S162). In this specification, the aggregation value may mean a value obtained by combining the asset fluctuation values ​​and asset random values ​​into a single value.

[0063] The account manager 100 can obtain a plurality of asset random values corresponding to each asset change value (S163). In one example, the account manager 100 can obtain a plurality of asset random values through hashes for each asset change value.

[0064] The account manager 100 can generate a random aggregation value based on the verification random value and the plurality of asset random values (S164).

[0065] The account manager 100 can prove the asset aggregation value and the random aggregation value by utilizing zero-knowledge proof (S165). Also, the smart contract NW can verify whether the proof is valid by using the asset aggregation value and the random aggregation value obtained from the commit value.

[0066] According to an embodiment of the present disclosure, by utilizing the aggregation value to verify the current asset value, the asset change value, the asset change value with the order changed, and the asset random value, it is possible to prove and verify many elements through one value, and as a result, the time required to utilize zero-knowledge proof can be reduced and high-speed proof is possible.

[0067] FIG. 6 is a drawing showing an asset transaction method according to an exemplary embodiment of the present disclosure. Specifically, FIG. 6 shows a proof method for a plurality of commit values.

[0068] Referring to FIG. 6, the account manager 100 can obtain an asset aggregation value by utilizing a plurality of asset change values (Δm i ’) with the order changed, a plurality of asset change values (Δm i ), the current asset value (m i ) and the verification random value.

[0069] In one example, the account manager 100 sets the verification random value as r, the current asset value as m i , and the plurality of asset change values as Δm i, the order of multiple asset fluctuation values ​​is changed to Δm i 'And when N is the number of multiple asset fluctuation values, the asset aggregation value agg m This can be generated based on the following mathematical formula 1.

[0070]

number

[0071] Account manager 100 has multiple asset fluctuation values ​​(Δm i Multiple asset random values ​​(Δo) corresponding to ) i ) and current asset value (m i Multiple asset random values ​​(o) corresponding to ) i ) and use validation random values ​​to obtain random aggregate values.

[0072] As an example, account manager 100 sets a validation random value r and an asset random value o corresponding to the current asset value. i , an asset random value corresponding to multiple asset fluctuation values ​​Δo i And when N is the number of multiple asset fluctuation values, the random aggregation value agg o This can be generated based on the following mathematical formula 2.

[0073]

number

[0074] According to one embodiment of the present disclosure, when generating aggregate values, the power of the validated random value (r i Each element can be distinguished by this. Consequently, it may be possible to prove and verify various elements such as asset fluctuations and current asset values ​​using a single aggregate value.

[0075] Figure 7 is a flowchart illustrating an asset trading method according to an exemplary embodiment of the present disclosure. More specifically, Figure 7 shows in detail the proof step (S170) for multiple asset fluctuation values ​​in Figure 2.

[0076] Referring to Figure 7, the account manager 100 can obtain a validation random value (S171). In one embodiment, the validation random value may be the same as the validation random value described in Figure 5.

[0077] Account manager 100 can use zero-knowledge proofs to prove whether a set of reordered asset fluctuations matches a set of reordered asset fluctuations based on a random value to be validated, multiple asset fluctuations, and multiple reordered asset fluctuations (S172).

[0078] According to one embodiment of the present disclosure, even if the account manager 100 rearranges the order of several asset change values ​​to enhance security, it is possible to prove zero-knowledge that all asset change values ​​are included in transaction Tx by checking whether the rearranged asset change values ​​match the set of asset change values, and consequently the integrity of transaction Tx can be proven.

[0079] Figure 8 is a diagram illustrating an asset trading method according to an exemplary embodiment of the present disclosure. More specifically, Figure 8 shows a method for verifying multiple asset fluctuation values.

[0080] Referring to Figure 8, the account manager 100 displays multiple asset fluctuation values ​​(Δm) whose order has been changed. i The first value is obtained by multiplying all the values ​​obtained by adding the ') and the verification random value (r), and multiple asset fluctuation values ​​(Δm i It is possible to prove whether the second value obtained by multiplying all the values ​​obtained by adding the ) and the verification random value (r) is the same.

[0081] As an example, account manager 100 sets the verification random value to r and the multiple asset fluctuation values ​​to Δm. i , the order of multiple asset fluctuation values ​​is changed to Δm iWhen N is the number of asset fluctuation values, whether the asset fluctuation values ​​whose order has been changed correspond to the asset fluctuation values ​​can be proven based on the following mathematical formula 3.

[0082]

number

[0083] According to one embodiment of the present disclosure, even if the order of asset change values ​​is changed for confidentiality reasons, the integrity of asset change values ​​can be demonstrated in a simple manner by proving that the overall set is the same.

[0084] Figure 9 is a block diagram showing a computing system according to an exemplary embodiment of the present disclosure.

[0085] Referring to Figure 9, the computing system 1000 can consist of one of the following: an account manager 100, a trade manager 200, and user devices 310-330, and may include a processor 1100, a memory device 1200, a storage device 1300, a power supply 1400, and a display device 1500. On the other hand, although not shown in Figure 9, the computing system 1000 may further include ports that can communicate with video cards, sound cards, memory cards, USB devices, etc., or with other electronic devices.

[0086] Thus, the processor 1100, memory device 1200, storage device 1300, power supply 1400, and display device 1500 included in the computing system 1000 can constitute any one of the account manager 100, trade manager 200, and user devices 310 to 330 according to embodiments of the technical concept of the present invention and perform an asset trading method. Specifically, the processor 1100 can perform the asset trading method detailed in Figures 1 to 8 by controlling the memory device 1200, storage device 1300, power supply 1400, and display device 1500.

[0087] The processor 1100 can perform specific calculations or tasks. By embodiment, the processor 1100 may be a microprocessor or a Central Processing Unit (CPU). The processor 1100 can communicate with the memory device 1200, storage device 1300, and display device 1500 through buses 1600, such as an address bus, control bus, and data bus. By embodiment, the processor 1100 may also be connected to an expansion bus, such as a Peripheral Component Interconnect (PCI) bus.

[0088] The memory device 1200 can store data necessary for the operation of the computing system 1000. For example, the memory device 1200 can be embodied in DRAM, mobile DRAM, SRAM, PRAM, FRAM (registered trademark), RRAM, and / or MRAM. The storage device 1300 may include a solid-state drive, a hard disk drive, a CD-ROM, etc. The storage device 1300 can store programs related to asset trading methods, application program data, system data, operational structure data, etc., as detailed in Figures 1 to 8.

[0089] The display device 1500 is an output means for providing notifications to the user, and can display and inform the user of information regarding asset trading methods. The power supply device 1400 can supply the operating voltage necessary for the operation of the computing system 1000.

[0090] As described above, exemplary embodiments have been invented in the drawings and specification. While specific terminology has been used to describe the embodiments in this specification, this is solely for the purpose of illustrating the technical idea of ​​the invention and not to limit its meaning or the scope of the invention as defined in the claims. Therefore, a person with ordinary skill in the art will understand that a variety of modifications and equivalent other embodiments are possible. Accordingly, the true scope of technical protection of the invention should be determined by the technical idea of ​​the appended claims. The invention described in the claims at the time of filing the present application is listed below. [1] In an asset trading method performed by at least one processor, The stage of obtaining fluctuation values ​​for multiple assets that will be the subject of the transaction; A step of sequentially generating multiple commit values ​​for each of the aforementioned multiple asset fluctuation values; The step of changing the order of the aforementioned multiple asset fluctuation values ​​(permutate); A step of generating a transaction by sequentially arranging the aforementioned multiple commit values ​​and multiple asset change values ​​whose order has been changed; and A method for trading assets, including the step of trading assets by verifying the transaction using a smart contract. [2] The asset trading method according to [1], characterized in that the plurality of commit values ​​have the form of a Pedersen commit. [3] The step of generating the aforementioned transaction is: A step of obtaining multiple addresses corresponding to each of the aforementioned multiple asset fluctuation values; The step of rearranging the plurality of addresses so that they correspond to the plurality of asset change values ​​whose order has been changed (permutate); and The asset trading method according to [1], which includes the step of generating a transaction by sequentially arranging the aforementioned multiple commit values, multiple asset change values ​​in a different order, and multiple addresses in a different order. [4] The stage of performing a proof for the aforementioned multiple commit values ​​using zero-knowledge proofs; The step of performing a proof for the aforementioned multiple asset fluctuation values ​​using zero-knowledge proofs; and The asset trading method according to [1] further includes the step of including the transaction a proof value generated as a proof result for the plurality of commit values ​​and the plurality of asset change values. [5] The step of performing proof for the aforementioned multiple commit values ​​is: The stage of obtaining verification random values; A step of generating an asset aggregation value based on the verification random value, the plurality of asset fluctuation values, and the plurality of asset fluctuation values ​​with their order changed; The asset trading method described in [4], which includes the step of proving the asset aggregation value by utilizing zero-knowledge proofs. [6] When the verification random value is r, the current asset value is mi, the multiple asset fluctuation values ​​are Δmi, the multiple asset fluctuation values ​​with their order changed are Δmi', and the number of the multiple asset fluctuation values ​​is N, the asset aggregation value aggm is generated based on the following mathematical formula.

number

number

Claims

1. In an asset trading method performed by at least one processor, The stage in which the computer obtains multiple asset fluctuation values ​​corresponding to multiple assets that are the subject of a transaction; The computer sequentially generates multiple commit values ​​for each of the multiple asset fluctuation values; The computer permutates the order of the multiple asset fluctuation values; The step in which the computer generates a transaction by sequentially arranging the plurality of commit values ​​and the plurality of asset change values ​​whose order has been changed; and A method for trading assets, comprising the step of the computer trading the assets by verifying the transaction in a smart contract.

2. The asset trading method according to claim 1, characterized in that the plurality of commit values ​​have the form of Pedersen commitments.

3. The step of generating the aforementioned transaction is: The computer acquires a plurality of addresses corresponding to each of the plurality of asset fluctuation values; The computer permutates the order of the plurality of addresses to correspond to the plurality of asset change values ​​whose order has been changed; and The asset trading method according to claim 1, further comprising the step of the computer generating a transaction by sequentially arranging the plurality of commit values, the plurality of asset change values ​​with altered order, and the plurality of addresses with altered order.

4. The computer performs a proof of the plurality of committed values ​​by utilizing zero-knowledge proofs; The computer performs a proof for the multiple asset fluctuation values ​​by utilizing zero-knowledge proofs; and The asset transaction method according to claim 1, further comprising the step of the computer including in the transaction proof values ​​generated as proof results for the plurality of commit values ​​and the plurality of asset change values.

5. The step of performing proof for the aforementioned multiple commit values ​​is: The aforementioned computer obtains a verification random value; The step in which the computer generates an asset aggregation value based on the verification random value, the plurality of asset fluctuation values, and the plurality of asset fluctuation values ​​with their order changed; The asset trading method according to claim 4, further comprising the step of the computer proving the asset aggregation value using zero-knowledge proofs.

6. When the verification random value is r, the current asset value is mi, the multiple asset fluctuation values ​​are Δmi, the multiple asset fluctuation values ​​with their order changed are Δmi', and the number of the multiple asset fluctuation values ​​is N, the asset aggregation value aggm is generated based on the following mathematical formula. [Math 1] The asset trading method according to claim 5.

7. The step of performing proof for the aforementioned multiple commit values ​​is: The computer obtains a plurality of random asset values ​​corresponding to each of the asset fluctuation values; The steps include: the computer generating a random aggregation value based on the verification random value and the plurality of asset random values; and The asset trading method according to claim 5, further comprising the step of the computer proving the random aggregate value using zero-knowledge proofs.

8. The step of providing proof for the aforementioned multiple asset fluctuation values ​​is: The aforementioned computer obtains a verification random value; The asset trading method according to claim 4, further comprising the step of the computer using zero-knowledge proof to prove whether the reordered asset fluctuations correspond to the reordered asset fluctuations based on the verification random value, the plurality of asset fluctuations, and the reordered asset fluctuations.

9. When the verification random value is r, the plurality of asset fluctuation values ​​are Δmi, the plurality of asset fluctuation values ​​with their order changed are Δmi', and the number of the plurality of asset fluctuation values ​​is N, the proof of whether the plurality of asset fluctuation values ​​with their order changed corresponds to the plurality of asset fluctuation values ​​is based on the following mathematical formula. [Math 2] The asset trading method according to claim 8.

Images