Digital asset circulation method and system based on cryptography

Abstract

The present application relates to the technical field of cryptography, and in particular to a digital asset circulation method and system based on cryptography. The digital asset circulation method comprises: in response to a confirmation end receiving a target asset circulation request of an initiator, obtaining historical circulation information of a receiver and the initiator; calculating a real-time security demand on the basis of the historical circulation information and an asset circulation amount of the target asset circulation request, and allocating a key length of the target asset circulation request on the basis of real-time security demands of all asset circulation requests of a current moment; generating a temporary public key and a temporary private key on the basis of the key length, and using the temporary public key to generate a digital signature of the target asset circulation request; and using the temporary private key to perform signature verification on the digital signature, and if the signature verification is successful, the confirmation end adjusting digital assets in accounts of the initiator and the receiver on the basis of the asset circulation amount. The technical solution of the present application can ensure the circulation efficiency and the circulation safety of digital assets.

Description

Cryptography-based digital asset transfer method and system Technical Field

[0001] The present application generally relates to the field of cryptography technology, and more particularly to a cryptography-based digital asset circulation method and system. Background Art

[0002] With the continuous development of Internet technology and cryptography, any real asset can be converted into a corresponding digital asset on the Internet with the help of the security performance of cryptography, thus realizing the digitization of real assets.

[0003] Currently, digital assets are often encrypted using existing cryptographic algorithms and then transferred between users. However, due to the huge volume of digital assets transferred and the large amount of computing resources required for encryption processing, it is impossible to effectively guarantee the efficiency and security of digital asset transfers with limited computing resources.

[0004] Summary of the Invention

[0005] In order to solve the above-mentioned technical problems of this application, this application provides a cryptography-based digital asset circulation method and system, which can ensure the circulation efficiency and circulation security of digital assets.

[0006] In a first aspect, the present application provides a cryptography-based digital asset transfer method for realizing digital asset transfer between any two user terminals, the digital asset transfer method comprising: in response to a target asset transfer request from an initiator being received by a confirmation terminal, querying historical transfer information of a recipient and the initiator, wherein the target asset transfer request includes an asset transfer amount and the recipient, and the initiator is any user terminal with an asset transfer demand; calculating the real-time security requirements of the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request; calculating the security requirements of all assets at the current moment; The real-time security requirements of the transfer request are met, and the key length of the target asset transfer request is allocated according to the real-time security requirements of all asset transfer requests; after using a key generator to generate the temporary public key and temporary private key of the recipient, the right confirmation end uses the temporary public key to generate a digital signature of the target asset transfer request, wherein the length of the temporary public key and the temporary private key is equal to the key length; the recipient uses the temporary private key to verify the digital signature, and in response to the recipient's successful verification, the right confirmation end adjusts the digital assets in the corresponding accounts of the initiator and the recipient according to the asset transfer amount.

[0007] In one embodiment, querying the historical flow information of the recipient and the initiator includes: for the recipient, querying all asset flow history records of the recipient, the asset flow history records including historical flow amounts and historical flow results, and the historical flow results including normal flow and abnormal flow; calculating the average amount and amount variance of the flow amounts in all asset flow history records, and counting the proportion of abnormal flow results in all asset flow history records as historical abnormality proportions; using the average amount, the amount variance and the historical abnormality proportion as the historical flow information of the recipient; and obtaining the historical flow information of the initiator according to the same method.

[0008] In one embodiment, calculating the real-time security requirement of the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request includes: calculating the asset amount magnitude of the target asset transfer request based on the asset transfer amount of the target asset transfer request, the average amount and the amount variance of the initiator, and the average amount and the amount variance of the recipient, wherein the asset amount magnitude satisfies the relationship: Where S is the asset transfer amount of the target asset transfer request, and δ1 are the mean amount and variance of the amount of the initiator respectively, and δ2 are the average amount and variance of the amount of the recipient, respectively, λ is the preset coefficient, D S The asset amount magnitude of the target asset transfer request is used; the maximum value of the historical anomaly ratios of the initiator and the recipient is used as the security risk degree of the target asset transfer request; the real-time security requirement of the target asset transfer request is calculated based on the asset amount magnitude and the security risk degree, and the real-time security requirement is positively correlated with the asset amount magnitude and the security risk degree.

[0009] In one embodiment, the real-time security requirement is the sum of the asset amount and the security risk level.

[0010] In one embodiment, allocating a key length of the target asset transfer request based on the real-time security requirements of all asset transfer requests includes: arranging all asset transfer requests in descending order of real-time security requirements to obtain an asset transfer request sequence; performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result, wherein the clustering result includes at least one asset transfer request subsequence, and the union of all asset transfer request subsequences is equal to the asset transfer request sequence; calculating a mean real-time security requirement of each asset transfer request subsequence, and numbering each asset transfer request subsequence in ascending order of the real-time security requirement mean; initializing a key starting multiple, and constructing an objective function based on the key starting multiple, wherein the objective function satisfies the relationship: Where Num is the number of asset transfer request subsequences in the clustering result, N is the key starting multiple, K is the minimum key length, (N+j-1)K represents the key length corresponding to the asset transfer request subsequence numbered j, and f j ((N+j-1)K) represents the computing resources occupied by the asset transfer request with a key length of (N+j-1)K, V j is the number of asset transfer requests in the asset transfer request subsequence numbered j, F is the idle computing resources at the current moment, and MB is the value of the objective function; the key starting multiple is continuously adjusted, and the key starting multiple corresponding to the minimum value of the objective function is used as the target starting multiple; based on the number of the asset transfer request subsequence in which the target asset transfer request is located and the target starting multiple, the key length target starting multiple target starting multiple of the target asset transfer request is determined.

[0011] In one embodiment, the key length of the target asset transfer request satisfies the relationship: N m =(N * +j m -1)K; where N * is the target starting multiple, j m is the number of the asset transfer request subsequence where the target asset transfer request is located, K is the minimum length of the key, N m The target starting multiple of the key length requested for the target asset transfer.

[0012] In one embodiment, performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result includes: calculating the variance of the real-time security requirements in the asset transfer request sequence; in response to the variance being less than a variance threshold, taking the asset transfer request sequence as an asset transfer request subsequence to obtain a clustering result; in response to the variance being not less than the variance threshold, setting an initial cluster number to 2, and using ordered sample clustering to divide the asset transfer request sequence into multiple asset transfer request subsequences, the number of the asset transfer request subsequences being equal to the initial cluster number; calculating the variance of the real-time security requirements in each asset transfer request subsequence, if the maximum variance is less than the variance threshold, taking the multiple asset transfer request subsequences as clustering results, and if the maximum variance is not less than the variance threshold, increasing the initial cluster number by 1, and performing the ordered sample clustering again until the maximum variance is less than the variance threshold, thereby obtaining a clustering result.

[0013] In one embodiment, after the ownership confirmation end adjusts the digital assets in the corresponding accounts of the initiator and the recipient based on the asset transfer amount, the digital asset transfer method further includes: when the signature verification is successful, the transfer result of the target asset transfer request is normal; when the signature verification is unsuccessful, or the time for the recipient to successfully verify the signature exceeds a set time, the transfer result of the target asset transfer request is abnormal; and storing the asset transfer amount and transfer result of the target asset transfer request.

[0014] In one embodiment, after obtaining the transfer result of the target asset transfer request, the temporary public key and the temporary private key become invalid.

[0015] In a second aspect of the present application, a cryptography-based digital asset circulation system is provided, comprising a processor and a memory, wherein the memory stores computer program instructions. When the computer program instructions are executed by the processor, a cryptography-based digital asset circulation method according to the first aspect of the present application is implemented.

[0016] The technical solution of this application has the following beneficial technical effects:

[0017] Through the technical solution provided by the present application, any user terminal with an asset transfer demand sends a target asset transfer request to the right confirmation terminal. The right confirmation terminal calculates the real-time security requirement of the target asset transfer request based on the historical transfer information of the initiator and recipient of the target asset transfer request, calculates the real-time security requirement of all asset transfer requests at the same time using the same method, and allocates a key length for the target asset transfer request based on the real-time security requirement of all asset transfer requests. This key length can ensure both the real-time nature of digital asset transfer and the transfer security of the target asset transfer request. In addition, different asset transfer requests have different key lengths. Compared with traditional encryption methods with fixed key lengths, this greatly increases the difficulty of key cracking and improves the transfer security of the target asset transfer request. Furthermore, a key generator generates a temporary public key and a temporary private key of the recipient corresponding to the target asset transfer request based on the key length. The right confirmation terminal uses the temporary public key to generate a digital signature for the target asset transfer request, and the recipient uses the temporary private key to verify the digital signature, thereby completing the transfer of digital assets.

[0018] Furthermore, in order to prevent the temporary private key from being cracked, a set time length is added on the basis of the key length. Within the set time length, if the recipient fails to successfully verify the signature, the transfer of digital assets cannot be completed, which greatly increases the difficulty of cracking the temporary private key and further improves the transfer security of the target asset transfer request. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The above and other objects, features and advantages of the exemplary embodiments of the present application will become readily understood by reading the detailed description below with reference to the accompanying drawings. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding reference numerals represent the same or corresponding parts, wherein:

[0020] FIG1 is a flow chart of a cryptography-based digital asset circulation method according to an embodiment of the present application;

[0021] FIG2 is a block diagram of a cryptography-based digital asset circulation system according to an embodiment of the present application. DETAILED DESCRIPTION

[0022] The following will be combined with the drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts are within the scope of protection of this application.

[0023] It should be understood that when the terms "first," "second," etc. are used in the claims, specification, and drawings of this application, they are only used to distinguish different objects, rather than to describe a specific order. The terms "comprise" and "comprising" used in the specification and claims of this application indicate the presence of the described features, integers, steps, operations, elements, and / or components, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or combinations thereof.

[0024] According to the first aspect of this application, this application provides a cryptography-based digital asset transfer method for realizing digital asset transfer between any two user terminals; one user terminal represents a digital asset user, and one user terminal corresponds to an account, which is used to store the digital assets of the corresponding digital asset user; the right confirmation terminal represents the issuer or regulatory agency of the digital asset, is used to witness the digital asset transfer between any two user terminals, and has the authority to adjust the digital assets in the corresponding accounts of all digital asset users, and can be regarded as a witness to the digital asset transfer.

[0025] It is understood that the digital assets include, but are not limited to, stocks, bonds, currencies, or commodities. Specifically, when the digital assets are stocks, the ownership confirmation end corresponds to the issuer of the stocks, and the user end corresponds to the holder of the stocks.

[0026] Figure 1 is a flow chart of a cryptography-based digital asset transfer method according to an embodiment of the present application. As shown in Figure 1 , the cryptography-based digital asset transfer method 100 includes steps S101 to S105, which are described in detail below.

[0027] S101, in response to the confirmation end receiving the target asset transfer request from the initiator, querying the historical transfer information of the recipient and the initiator, wherein the target asset transfer request includes the asset transfer amount and the recipient, and the initiator is any user end with an asset transfer demand.

[0028] In one embodiment, when a user terminal has an asset transfer demand, the user terminal sends a target asset transfer request to the right confirmation terminal, where the target asset transfer request includes the asset transfer amount and the recipient; wherein the recipient is used to indicate the transfer direction of the target asset transfer request.

[0029] For example, when user terminal A needs to transfer 100 digital assets to user terminal B, the initiator is user terminal A, the asset transfer amount in the target asset transfer request is 100, and the recipient is user terminal B. In other words, user terminal A submits a request to the right confirmation end to "transfer digital assets worth 100 from user terminal A to user terminal B."

[0030] In one embodiment, in response to the target asset transfer request received by the initiator from the confirmation end, the historical transfer information of the recipient and the initiator can be queried. The specific description is as follows: querying the historical transfer information of the recipient and the initiator includes: for the recipient, querying all asset transfer history records of the recipient, the asset transfer history records include historical transfer amounts and historical transfer results, and the historical transfer results include normal transfers and abnormal transfers; calculating the average amount and amount variance of the transfer amounts in all asset transfer history records, and counting the percentage of abnormal transfers in the historical transfer results of all asset transfer history records as the historical abnormality percentage; taking the average amount, the amount variance and the historical abnormality percentage as the historical transfer information of the recipient; and obtaining the historical transfer information of the initiator in the same way.

[0031] When a historical transfer result indicates an abnormal transfer, it indicates that the corresponding historical asset transfer request failed due to a signature verification timeout or failure. Signature verification timeouts or failures are typically caused by malicious attacks. Therefore, within the recipient's historical transfer information, the average amount and variance of the amount can represent the recipient's digital asset transfer amount under normal circumstances. The historical abnormality percentage can represent the number of failed asset transfers during the recipient's historical asset transfers. A higher historical abnormality percentage indicates that the recipient's asset transfer requests are more susceptible to malicious attacks, and the security risks associated with the recipient's asset transfer requests are greater.

[0032] In this way, when the right confirmation end receives a target asset transfer request from any user end with asset transfer needs, it can query the historical transfer information of the recipient and the initiator. This historical transfer information can reflect the transfer amount and security risks of the digital assets of the initiator and the recipient.

[0033] S102: Calculate the real-time security requirement of the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request.

[0034] In one embodiment, during the transfer of digital assets, it is inevitable that they may be subject to malicious attacks and result in asset loss. In order to ensure the security of digital assets, it is necessary to calculate the real-time security requirements of the target asset transfer request. Subsequently, a key length can be assigned to the target asset transfer request based on the real-time security requirements to ensure the security of digital assets during asset transfer.

[0035] Specifically, the real-time security requirement for calculating the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request includes: calculating the asset amount magnitude of the target asset transfer request based on the asset transfer amount of the target asset transfer request, the average amount and the amount variance of the initiator, and the average amount and the amount variance of the recipient, wherein the asset amount magnitude satisfies the relationship: Where S is the asset transfer amount of the target asset transfer request, and δ1 are the mean amount and variance of the amount of the initiator respectively, and δ2 are the average amount and variance of the amount of the recipient, respectively, λ is the preset coefficient, D S The asset amount magnitude of the target asset transfer request is used; the maximum value of the historical anomaly ratios of the initiator and the recipient is used as the security risk degree of the target asset transfer request; the real-time security requirement of the target asset transfer request is calculated based on the asset amount magnitude and the security risk degree, and the real-time security requirement is positively correlated with the asset amount magnitude and the security risk degree.

[0036] In one embodiment, the real-time security requirement is the sum of the asset amount and the security risk level.

[0037] According to the 3σ rule, the preset coefficient λ can be set to 3, D S The larger the value, the more likely it is that the asset transfer amount in the target asset transfer request far exceeds the normal amount range for the initiator or recipient. This means that the asset transfer amount in the target asset transfer request is a large sum. To ensure the security of the asset transfer amount in the target asset transfer request, the real-time security requirement for the target asset transfer request should be higher. Similarly, the greater the security risk, the more vulnerable the initiator or recipient is to malicious attacks. To ensure the security of the asset transfer amount in the target asset transfer request, the real-time security requirement for the target asset transfer request should be increased.

[0038] In this way, the real-time security requirements of the target asset transfer request are accurately determined based on the asset transfer amount in the target asset transfer request and the historical transfer information of the recipient and the initiator. The real-time security requirements comprehensively consider the asset transfer amount in the target asset transfer request and the historical anomaly ratio of the recipient and the initiator.

[0039] S103: Calculate the real-time security requirements of all asset transfer requests at the current moment, and allocate the key length of the target asset transfer request according to the real-time security requirements of all asset transfer requests.

[0040] In one embodiment, the right confirmation terminal receives multiple asset transfer requests at the same time; obtains all asset transfer requests at the current moment, and calculates the real-time security requirements of each asset transfer request.

[0041] To ensure the security of asset transfer requests, this application assigns a temporary key pair to each recipient of an asset transfer request. The temporary key pair includes a temporary public key and a temporary private key. The temporary key pair is used to encrypt the asset transfer request. A longer key length indicates a higher security for the encryption process, but this also increases the computational complexity of the encryption process, reducing the real-time performance of the asset transfer request. To balance the security and real-time performance of asset transfer requests, key lengths are assigned to all asset transfer requests at the current moment based on their real-time security requirements. Requests with greater real-time security requirements are assigned larger key lengths, while requests with less real-time security requirements are assigned smaller key lengths.

[0042] Specifically, allocating the key length of the target asset transfer request according to the real-time security requirements of all asset transfer requests includes: arranging all asset transfer requests in order of real-time security requirements from large to small to obtain an asset transfer request sequence; performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result, wherein the clustering result includes at least one asset transfer request subsequence, and the union of all asset transfer request subsequences is equal to the asset transfer request sequence; calculating the real-time security requirement mean of each asset transfer request subsequence, and numbering each asset transfer request subsequence in order of the real-time security requirement mean from small to large; initializing a key starting multiple, and constructing an objective function based on the key starting multiple, wherein the objective function satisfies the relationship: Where Num is the number of asset transfer request subsequences in the clustering result, N is the key starting multiple, K is the minimum key length, (N+j-1)K represents the key length corresponding to the asset transfer request subsequence numbered j, and f j ((N+j-1)K) represents the computing resources occupied by the asset transfer request with a key length of (N+j-1)K, V j is the number of asset transfer requests in the asset transfer request subsequence numbered j, F is the idle computing resources at the current moment, and MB is the value of the objective function; the key starting multiple is continuously adjusted, and the key starting multiple corresponding to the minimum value of the objective function is used as the target starting multiple; based on the number of the asset transfer request subsequence in which the target asset transfer request is located and the target starting multiple, the key length target starting multiple target starting multiple of the target asset transfer request is determined.

[0043] The key length is an integer multiple of the minimum key length K. The value of the minimum key length K is related to the encryption algorithm used for digital signature and signature verification. The encryption algorithms include RSA algorithm, ECC algorithm and ElGamal algorithm. For example, when the encryption algorithm adopts RSA algorithm, the value of the minimum key length K is 8, that is, in the RSA algorithm, the length of the temporary public key and the temporary private key is an integer multiple of 8.

[0044] Among them, f j ((N+j-1)K) can be regarded as a function f(X), which is used to represent the mapping relationship between the key length X and the computing resources occupied by the encryption processing. The occupied computing resources include occupied CPU resources and occupied memory resources. The function f(X) can be preset by those skilled in the art based on experience. The encryption processing includes the process of generating a temporary public key and a temporary private key using a key generator, generating a digital signature using the temporary public key, and verifying the signature using the temporary private key.

[0045] Among them, the key length of the target asset transfer request satisfies the relationship: N m =(N * +j m -1)K; where N * is the target starting multiple, j m is the number of the asset transfer request subsequence where the target asset transfer request is located, K is the minimum length of the key, N m The key length requested for the target asset transfer.

[0046] It can be understood that the larger the number of the asset transfer request subsequence, the greater the real-time security requirement of the asset transfer request within the asset transfer request subsequence, and the longer the corresponding key length.

[0047] In one embodiment, performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result includes: calculating the variance of the real-time security requirements in the asset transfer request sequence; in response to the variance being less than a variance threshold, taking the asset transfer request sequence as an asset transfer request subsequence to obtain a clustering result; in response to the variance being not less than the variance threshold, setting an initial cluster number to 2, and using ordered sample clustering to divide the asset transfer request sequence into multiple asset transfer request subsequences, the number of the asset transfer request subsequences being equal to the initial cluster number; calculating the variance of the real-time security requirements in each asset transfer request subsequence, if the maximum variance is less than the variance threshold, taking the multiple asset transfer request subsequences as clustering results, and if the maximum variance is not less than the variance threshold, increasing the initial cluster number by 1, and performing the ordered sample clustering again until the maximum variance is less than the variance threshold, thereby obtaining a clustering result.

[0048] Among them, ordered sample clustering is a sequence-oriented clustering method. The samples in the sequence (corresponding to asset transfer requests) are arranged in a certain order. When clustering the sequence, the order of the samples cannot be disrupted. That is to say, samples of the same type in the clustering results must be adjacent to each other.

[0049] The variance threshold is set to 0.2. When the maximum variance is less than the variance threshold, it indicates that the real-time security requirements of all asset transfer requests within an asset transfer request subsequence are substantially consistent.

[0050] In this way, based on the real-time security requirements of all asset transfer requests at the current moment and combined with the idle computing resources at the current moment, a key length is allocated to the target asset transfer request. This key length can not only ensure the real-time nature of digital asset transfer, but also ensure the transfer security of the target asset transfer request. In addition, the key length of each asset transfer request is different. Compared with the traditional encryption method with a fixed key length, it greatly increases the difficulty of cracking and further improves the transfer security of the target asset transfer request.

[0051] S104, after using a key generator to generate the recipient's temporary public key and temporary private key, the right confirmation end uses the temporary public key to generate a digital signature of the target asset transfer request, wherein the length of the temporary public key and the temporary private key is equal to the key length.

[0052] In one embodiment, after determining the key length of the target asset transfer request, a key generator can be used to generate the recipient's temporary public key and temporary private key corresponding to the target asset transfer request. The temporary public key is shared and accessible to all users and the rights verification end, while the temporary private key is accessible only to the recipient. The rights verification end then encrypts the target asset transfer request using the temporary public key, generates a digital signature for the target asset transfer request, and sends the digital signature to the recipient.

[0053] S105: The recipient verifies the digital signature using the temporary private key. In response to the recipient successfully verifying the signature, the right confirmation end adjusts the digital assets in the corresponding accounts of the initiator and the recipient based on the asset transfer amount.

[0054] In one embodiment, after the recipient receives the digital signature of the target asset transfer request, it verifies the signature using a temporary private key. Successful verification indicates that the recipient has successfully confirmed the target asset transfer request. At this point, the title verification service adjusts the digital assets in the corresponding accounts of the initiator and recipient based on the amount of the asset transfer. The initiator, recipient, and title verification service reach an agreement, achieving synchronization of asset transfer information and completing the digital asset transfer.

[0055] It should be noted that the temporary private key is a sequence directly generated by the key generator and stored on the recipient's corresponding user terminal. The process of verifying the digital signature using the temporary private key is an automatic process and does not require manual input by the recipient.

[0056] In one embodiment, when the signature verification is successful, the transfer of the digital asset is completed, and the transfer result of the target asset transfer request is normal; when the signature verification is unsuccessful, or the time for the recipient to successfully verify the signature exceeds the set time, it means that the target asset transfer request cannot be confirmed and the transfer of the digital asset cannot be completed, and the transfer result of the target asset transfer request is abnormal; the asset transfer amount and transfer result of the target asset transfer request are stored.

[0057] The set duration is 3 minutes. The asset transfer amount and transfer result of the target asset transfer request can be used as historical transfer information to participate in the subsequent digital asset transfer process.

[0058] Understandably, since only the recipient can obtain the temporary private key, under normal circumstances only the recipient can successfully confirm the target asset transfer request; however, when other user terminals other than the recipient maliciously attack the target asset transfer request and successfully crack the temporary private key, the target asset transfer request can also be successfully confirmed. Therefore, in order to prevent the temporary private key from being cracked, a set time length is added on the basis of the key length, which greatly increases the difficulty of cracking and further improves the transfer security of the target asset transfer request.

[0059] In addition, the temporary public key and temporary private key are only valid for the target asset transfer request. Once the transfer result of the target asset transfer request is obtained, the temporary public key and temporary private key will become invalid immediately.

[0060] The above describes the technical principles and implementation details of the cryptography-based digital asset circulation method of the present application through specific embodiments. Through the technical solution provided by the present application, any user terminal with an asset transfer demand sends a target asset transfer request to the right confirmation terminal. The right confirmation terminal calculates the real-time security requirement of the target asset transfer request based on the historical transfer information of the initiator and recipient of the target asset transfer request, calculates the real-time security requirement of all asset transfer requests at the same time using the same method, and allocates a key length for the target asset transfer request based on the real-time security requirement of all asset transfer requests. This key length can ensure both the real-time nature of digital asset transfer and the transfer security of the target asset transfer request. In addition, different asset transfer requests have different key lengths. Compared with traditional encryption methods with fixed key lengths, this greatly increases the difficulty of key cracking and improves the transfer security of the target asset transfer request. Furthermore, a key generator generates a temporary public key and a temporary private key of the recipient corresponding to the target asset transfer request based on the key length. The right confirmation terminal uses the temporary public key to generate a digital signature for the target asset transfer request, and the recipient uses the temporary private key to verify the digital signature, thereby completing the transfer of digital assets.

[0061] According to the second aspect of this application, a cryptography-based digital asset circulation system is also provided. Figure 2 is a block diagram of a cryptography-based digital asset circulation system according to an embodiment of this application. As shown in Figure 2, the system 50 includes a processor and a memory. The memory stores computer program instructions. When executed by the processor, the computer program instructions implement the cryptography-based digital asset circulation method described in the first aspect of this application. The system also includes other components familiar to those skilled in the art, such as a communication bus and a communication interface. Their configuration and functions are well known in the art and are therefore not described in detail here.

[0062] In the present application, the aforementioned memory may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. For example, a computer-readable storage medium may be any suitable magnetic storage medium or magneto-optical storage medium, such as resistive random access memory (RRAM), dynamic random access memory (DRAM), static random access memory (SRAM), enhanced dynamic random access memory (EDRAM), high-bandwidth memory (HBM), hybrid memory cube (HMC), etc., or any other medium that can be used to store the required information and can be accessed by an application, module, or both. Any such computer storage medium may be part of a device or accessible or connectable to a device. Any application or module described in this application may be implemented using computer-readable / executable instructions that may be stored or otherwise maintained by such a computer-readable medium.

[0063] The technical features of the above-mentioned embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0064] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent application. It should be noted that a person of ordinary skill in the art may make various modifications and improvements without departing from the spirit of the present application, and these modifications and improvements fall within the scope of protection of the present application. Therefore, the scope of protection of the present patent application shall be determined by the appended claims.

Claims

1. A cryptography-based digital asset transfer method, characterized in that: Used to realize the circulation of digital assets between any two user terminals, the digital asset circulation method includes: In response to the target asset transfer request from the initiator being received by the confirmation end, querying the historical transfer information of the recipient and the initiator, wherein the target asset transfer request includes the asset transfer amount and the recipient, and the initiator is any user end with an asset transfer request; Calculating the real-time security requirements of the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request; Calculate the real-time security requirements of all asset transfer requests at the current moment, and assign the key length of the target asset transfer request based on the real-time security requirements of all asset transfer requests; After using a key generator to generate a temporary public key and a temporary private key of the recipient, the right confirmation end uses the temporary public key to generate a digital signature of the target asset transfer request, wherein the length of the temporary public key and the temporary private key is equal to the key length; The recipient uses the temporary private key to verify the digital signature. In response to the recipient's successful verification, the right confirmation end adjusts the digital assets in the corresponding accounts of the initiator and the recipient based on the asset transfer amount.

2. A cryptography-based digital asset circulation method according to claim 1, characterized in that: The historical flow information of the query recipient and the initiator includes: For the recipient, query all asset transfer history records of the recipient, where the asset transfer history records include historical transfer amounts and historical transfer results, where the historical transfer results include normal transfers and abnormal transfers; Calculate the average and variance of the transfer amounts in all asset transfer history records, and calculate the percentage of abnormal transfers in all asset transfer history records as the historical abnormality percentage; The average amount, the variance of the amount, and the historical anomaly ratio are used as the historical flow information of the recipient; The historical transaction information of the initiator is obtained in the same way.

3. A cryptography-based digital asset circulation method according to claim 2, characterized in that: The real-time security requirements for calculating the target asset transfer request based on the historical transfer information and the asset transfer amount of the target asset transfer request include: The asset amount magnitude of the target asset transfer request is calculated based on the asset transfer amount of the target asset transfer request, the average amount and the amount variance of the initiator, and the average amount and the amount variance of the recipient. The asset amount magnitude satisfies the relationship: Where S is the asset transfer amount of the target asset transfer request, and δ1 are the mean amount and variance of the amount of the initiator, respectively. and δ2 are the average amount and variance of the amount of the recipient, respectively, λ is the preset coefficient, D S The amount of assets requested for the target asset transfer; The maximum value of the historical anomaly ratios of the initiator and the recipient is used as the security risk level of the target asset transfer request; The real-time security requirement of the target asset transfer request is calculated based on the asset amount magnitude and the security risk degree, and the real-time security requirement is positively correlated with the asset amount magnitude and the security risk degree.

4. A cryptography-based digital asset circulation method according to claim 3, characterized in that: The real-time security requirement is the sum of the asset amount and the degree of security risk.

5. A cryptography-based digital asset circulation method according to claim 1, characterized in that: The key length allocated to the target asset transfer request based on the real-time security requirements of all asset transfer requests includes: Arrange all asset transfer requests in descending order of real-time security requirements to obtain an asset transfer request sequence; performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result, wherein the clustering result includes at least one asset transfer request subsequence, and a union of all asset transfer request subsequences is equal to the asset transfer request sequence; Calculate the average real-time security requirement of each asset transfer request subsequence, and number each asset transfer request subsequence in ascending order of the average real-time security requirement; Initialize the key starting multiple, and construct an objective function based on the key starting multiple, the objective function satisfies the relationship: Where Num is the number of asset transfer request subsequences in the clustering result, N is the key starting multiple, K is the minimum key length, (N+j-1)K represents the key length corresponding to the asset transfer request subsequence numbered j, and f j ((N+j-1)K) represents the computing resources occupied by the asset transfer request with a key length of (N+j-1)K, V j is the number of asset transfer requests in the asset transfer request subsequence numbered j, F is the idle computing resources at the current moment, and MB is the value of the objective function; Continuously adjusting the key starting multiple, and taking the key starting multiple corresponding to the minimum value of the objective function as the target starting multiple; The key length of the target asset transfer request is determined based on the number of the asset transfer request subsequence in which the target asset transfer request is located and the target starting multiple.

6. A cryptography-based digital asset circulation method according to claim 5, characterized in that: The key length of the target asset transfer request satisfies the relationship: N m =(N * +j m -1)K; Among them, N * is the target starting multiple, j m is the number of the asset transfer request subsequence where the target asset transfer request is located, K is the minimum length of the key, N m The key length requested for the target asset transfer.

7. A cryptography-based digital asset circulation method according to claim 5, characterized in that: Performing ordered sample clustering on the asset transfer request sequence to obtain a clustering result includes: Calculating the variance of real-time security requirements in the asset transfer request sequence; In response to the variance being less than a variance threshold, taking the asset transfer request sequence as an asset transfer request subsequence to obtain a clustering result; In response to the variance being not less than the variance threshold, setting the initial number of clusters to 2, and using ordered sample clustering to segment the asset transfer request sequence into a plurality of asset transfer request subsequences, where the number of the asset transfer request subsequences is equal to the initial number of clusters; The variance of the real-time security requirements in each asset transfer request subsequence is calculated. If the maximum variance is less than the variance threshold, the multiple asset transfer request subsequences are taken as clustering results. If the maximum variance is not less than the variance threshold, the initial number of clusters is increased by 1, and the ordered sample clustering is performed again until the maximum variance is less than the variance threshold, thereby obtaining a clustering result.

8. A cryptography-based digital asset circulation method according to claim 1, characterized in that: After the ownership confirmation end adjusts the digital assets in the corresponding accounts of the initiator and the recipient according to the asset transfer amount, the digital asset transfer method further includes: When the signature verification succeeds, the transfer result of the target asset transfer request is normal; If the signature verification fails, or the time taken for the recipient to successfully verify the signature exceeds the set time limit, the transfer result of the target asset transfer request is considered abnormal. The asset transfer amount and transfer result of the target asset transfer request are stored.

9. A cryptography-based digital asset circulation method according to claim 8, characterized in that: After obtaining the transfer result of the target asset transfer request, the temporary public key and the temporary private key become invalid.

10. A digital asset circulation system based on cryptography, characterized by: The method comprises a processor and a memory, wherein the memory stores computer program instructions, and when the computer program instructions are executed by the processor, a cryptography-based digital asset circulation method according to any one of claims 1 to 9 is implemented.

Images