Digital Currency Certificate Authentication for Secure Transactions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing digital currency transactions lack sufficient security protection for information transmission, device security control, and user privacy, leading to risks of data hijacking and forgery, with no effective solution for theft of sensitive data.

Innovation Solution

A method and apparatus for security authentication involving a first terminal device storing certificates from a digital currency issuer and operators, performing signature verifications, and conducting transactions after successful verification, with encryption and key negotiations using shared confidential keys, all secured within a secure encryption chip.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional authentication processes are used for digital currency transactions, then the transaction process is simple and fast, but information transmission security is insufficient and user privacy is exposed

Engineering Contradiction:
Improveinformation transmission securityVSAvoidauthentication process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication process is segmented into multiple independent verification stages: device authentication, user authentication, and transaction authentication. Each stage uses separate certificates and verification mechanisms, allowing comprehensive security without requiring a single complex authentication system. This segmentation enables modular implementation where each component can be optimized independently.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Security certificates and authentication credentials are pre-configured in terminal devices before transactions occur. The digital certificate authority structures enable automatic verification without real-time manual intervention. This preliminary setup ensures that security checks are performed seamlessly during transactions, maintaining both high security and operational efficiency.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multiple certificates and verification steps are implemented, then information security is improved, but the authentication process becomes more complex and time-consuming

Engineering Contradiction:
Improvedevice security controlVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The authentication system performs self-verification through automated certificate validation and cryptographic proof checking. Terminal devices automatically verify the authenticity of digital certificates and transaction signatures without requiring manual security checks. This self-service mechanism reduces authentication time while maintaining rigorous security standards through programmatic verification processes.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The verification process incorporates immediate feedback mechanisms where each authentication step confirms success or failure before proceeding. The digital certificate authority structure enables rapid validation with clear pass/fail outcomes at each verification stage, allowing the system to quickly determine authentication status without prolonged processing delays.

Inventive Principle:
Principle #23Feedback

3Productivity

If data is transmitted during the transaction process, then the transaction functionality is enabled, but data may be hijacked or forged by middlemen

Engineering Contradiction:
Improvetransaction processing capabilityVSAvoiddata hijacking and forgery risks
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary anti-action through cryptographic hashing and digital signing of transaction data before transmission. Each data element is transformed into a secure format that prevents interception and forgery. The digital certificate authority structure establishes trust chains that verify data integrity throughout the transmission process, proactively blocking potential attacks rather than reacting to them.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

Digital certificates and cryptographic protocols serve as intermediaries between transaction parties, enabling secure data exchange without direct exposure of sensitive information. The certificate authority structure acts as a trusted mediator that verifies identities and authenticates transactions, preventing middlemen from hijacking or forging data while maintaining transaction functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If encryption and access control are implemented for sensitive data, then security is improved, but the processing and handling of data becomes more complex

Engineering Contradiction:
Improveaccess control securityVSAvoiddata processing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system replaces manual security management with automated cryptographic operations. Encryption keys, digital signatures, and certificate verifications are performed automatically by software and hardware security modules without requiring manual intervention. This substitution of mechanical security processes with automated digital mechanisms reduces operational complexity while maintaining strong access control and encryption standards.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12619980B2Security authentication method, apparatus and system for digital currency transaction
Publication Date: 2026.05.05 THE PEOPLES BANK OF CHINA DIGITAL CURRENCY INST
  • US12619980B2 patent drawing
  • US12619980B2 patent drawing
  • US12619980B2 patent drawing

AI summary

The present application relates to the technical field of computers. A security authentication method, apparatus and system for a digital currency transaction. A specific embodiment of the method includes: a first terminal device storing a first certificate issued by a digital currency issuing end and second certificates issued by one or more digital currency operation ends; the first terminal device receiving a third certificate sent by a first digital currency operation end, and performing signature verification on the third certificate by using a second certificate, which is issued by the first digital currency operation end and passes signature verification; and after the third certificate passes the signature verification, the first terminal device performing a digital currency transaction with the first digital currency operation end and/or a second terminal device, wherein the second terminal device stores a fourth certificate sent by a second digital currency operation end. By means of the embodiment, mutual authentication and secure communication between a digital currency operation end and a terminal device and between different terminal devices can be realized, thereby avoiding potential security hazards such as information stealing, information leakage and illegitimate access.