Detailed Description
Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, in which various details of embodiments of the invention are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.
In the embodiment of the invention, a digital currency (hereinafter referred to as D-RMB) design scheme based on crypto-mathematics is described, and the main operation mode is that a central bank and each commercial bank together build a D-RMB system in a grading way. The central bank here is a currency issuing organization, such as the chinese people's bank. In the following description, a central bank is sometimes simply referred to as a "central bank", and similarly, a commercial bank is sometimes simply referred to as a "business bank". Further, the digital money is denoted by "DCoin (coin)”。
The D-RMB system is based on DCoin (coin)Funding of a transactionA money transfer system operated jointly by a central bank and commercial banks. The D-RMB system comprises a D running on a core server of a particular digital centerCoin (coin)The system comprises an issuing module, a client login module, a client account management module, a transaction management module, a fraud detection module and a core service module, and also comprises terminal client programs needing to interact with a core server, such as a mobile phone and a notebook computer of a user end, and also comprises a server DCoin (coin)The funds-transfer system operates over an open form of electronic communications network, including the internet, mobile communications networks, and so on, nationwide. Before discussing the D-RMB system, it is clear that:
1. and the method is compatible with the current physical currency circulation. The digital currency in the D-RMB system is stored through three links, namely a digital currency issuing bank at the central bank (namely digital currency fund); the bank of the commercial bank, namely the stock digital cash of the commercial bank; and thirdly, a client application program at the user end, namely the electronic wallet. During this different process, the D-RMB registration center will complete the relevant registration operation.
D-RMB digital currency does not use blind signatures. Limited anonymous protection during use.
The 3.D-RMB digital currency can be circulated by different networks, and can be stored in various electronic equipment terminals such as mobile phones, IC card chips, notebook computers and the like in an electronic digital form, and the discussion is mainly carried out by taking the mobile phones and the IC cards as carriers to store the D-RMB digital currency, but the D-RMB digital currency is not limited to only taking the mobile phones and the IC cards as the carriers.
The payment mode for the D-RMB system design relies on the transfer of D-RMB digital currency (D)Coin (coin)Transaction).
5, the D-RMB system is subject to the relevant system requirements of cash management in China. The specific requirements are determined by the requirements of the business department.
6. To avoid a homogeneous competition with existing billing payment systems, the D-RMB system may be designed for limited-line payments.
To facilitate the subsequent description, the following notation is given:
enc: and encrypting, namely after downloading a private key from the IBC center, a user signs the sent information with the private key of the user and encrypts the information with the public key of the other party.
And Dec: and decrypting, specifically, the user decrypts the incoming text by using the own private key, and signs and confirms the information sent by the user by using the mobile phone number of the opposite party as a corresponding public key (or a direct public key).
DBank: the bank is a deposit account opened in the central system of the central bank for accounting.
DCoin (coin): the D-RMB digital currency generated by the finger row according to the own encryption mechanism is a string of characters and represents a certain amount of RMB.
DCoin 100: D-RMB digital currency generated by the instruction row according to an own encryption mechanism is a string of numbers and represents 100 yuan RMB, and the like, and subscript numbers represent the actual RMB amount.
BAccount number: the bank account number of the bank where the user is located.
H (M): the hash operation is performed on M to obtain a value, where M may be a mobile phone number, an organization code, or a string of characters and numbers.
The D-RMB is used as digital currency, established by China's bank as legal currency, issued into circulation, and used as final credit to provide guarantee to participate in exchange, remittance and consumption in national standard architecture. It is a string of codes with the same monetary meaning as the "face value" in actual circulation. D-RMB digital currency simulates the issuing and managing process of paper currency in the central row, and digital currency is generated at one time according to the issuing amount of the current digital currency in the central row in a D-RMB issuing bank.
In the design of D-RMB system, DCoin (coin)The system can be generated according to the minimum unit denomination, the specific withdrawal amount of a user, the real-object currency denomination in circulation, and the specific mode which can be set in the initial process through system parameters. For the sake of closeness, the fixed denomination in circulation is taken as an example for the following explanation.
The D-RMB in the distribution library completely simulates the face value in circulation, the printing generates digital representation of 'one circle, five circle, puzzling circle, two puzzling circle, five puzzling circle, one herborist circle' and the like, and the encrypted text represents the D-RMB digital currency of the face value.
Producing D-RMB at a fixed denomination, e.g., producing a representative D-RMB according to the fifth set (production required: D)Coin 1、DCoin 5、DCoin 10、DCoin 20、DCoin 50、DCoin 100) Then:
step 1: six basic encryption ciphers are generated from the master cipher and the numbers 1, 5, 10, 20, 50 and 100, respectively.
Step 2: the system random number is generated by a hash algorithm. The random number may be understood as a crown number.
And step 3: the encryption password is generated by encrypting a basic encryption password representing different currency values and a random number.
And 4, step 4: the secret password is signed by the private key of the central row, and represents the generation of a new coin. If the payee wants to provide D representing 100 Yuan RMBCoin 100Then, in the actual withdrawal process, the unique random number representing 100 yuan and the corresponding basic encryption password can be encrypted to generate an encryption ciphertext m, and then the secret key at the central row signs the m.
In the D-RMB system, there are a digital money issuing bank at the central bank, a digital money bank at a commercial bank, and an electronic wallet at a user side (e.g., a mobile phone). The basic content of digital money transfers includes:
(1) according to the total amount of issued digital money, digital money (i.e., the fund for digital money) is generated at the central bank and stored in the central bank.
(2) According to the demand application of the digital currency of the commercial bank, the digital currency is sent to a database of the corresponding commercial bank for storing the digital currency, namely the digital currency is sent from an issuing bank to a bank.
For example, 10 hundred million D-RMB are issued by the central row at a certain time according to the total amount of money issued, and these D-RMB are released in the issuing bank of the central row after being issued. Later, 2 billion of the 10 billion D-RMBs are extracted from the 10 billion D-RMBs according to the application of a certain bank, the extracted 2 billion D-RMBs are stored in the bank of the bank (the bank accounts for the deposit preparation money at the central bank are reduced by 2 billion, meanwhile, 2 billion D-RMBs are stored in the bank of the commercial bank, the operation of the bank accounts is equal to the payment of the current real money), and at the registration center, the owner corresponding to the digital money is changed from the central bank to the commercial bank, and the information of the corresponding operation flow and the like is recorded.
(3) When a user applies for extracting digital money, the digital money enters a storage medium (such as a mobile phone) of a user client from a bank to a circulation link, namely from the bank to an electronic wallet of the user. In the registration center, the owner corresponding to the digital currency is changed into the user by the commercial bank, and the information such as the corresponding operation flow is recorded.
(4) In the circulation link, the essence of the digital money is to transfer between the electronic purses of two users to complete payment, and the payment is divided into online transaction and offline transaction, and the detailed business process is analyzed in detail later. In the registration center, the owner corresponding to the digital currency is changed from the user 1 to the user 2, and information such as corresponding operation flow is recorded.
In the above digital money transfer process, the registration center of the D-RMB system needs to verify the validity of the transaction digital money, record the transaction flow and correct the new owner of the corresponding digital money, and register other required information (specifically determined by the business requirements).
If the IC card is used as a carrier, the work of preparing the card exists, and in the work of preparing the card, a central bank digital currency system and a commercial bank digital currency system carry out a series of operations on a D-RMB chip card containing a storage medium, and the operations mainly comprise: the central bank digital currency system generates personalized data of the D-RMB chip card according to the pre-designated content; the commercial bank digital currency system writes personal information of a user applying for the D-RMB chip card into the D-RMB chip card; the commercial bank digital currency system applies an IBC private key to the authentication system by using a user IBC public key, wherein the user IBC public key is the identification of the D-RMB chip card or the identification of the user. The main flow involved in the above operations is shown in fig. 1, and fig. 1 is a schematic view of the main flow of the operation of the prefabricated card relating to the embodiment of the present invention.
As a card base DCoin (coin)The safety vector of (2), in DCoin (coin)Each of which is circulatedLink to guarantee DCoin (coin)The security of (1) has a certain reinforcing effect (a separate physical carrier IC card is also referred to as a 'D-RMB chip card' for short).
(1) Production of D-RMB chip cards
The production of D-RMB chip cards must be produced by a company certified by a central bank with production qualifications for which the quantity and quality of the production manufacture is strictly controlled by the central bank (or other departments authorized by the central bank). The enterprise qualification authentication process comprises the following steps: submitting an application, examining and verifying materials, detecting a sample card, evaluating on site, authorizing qualification and the like.
(2) Personalization of D-RMB chip cards
The personalized data in the D-RMB chip card is generated by a central bank, and related departments are authorized to establish a personalized center to perform personalized operation on the newly produced D-RMB chip card.
(3) Issuing of D-RMB chip cards
The system can support real-name card issuing and anonymous card issuing.
Card issuing in a real name system: the D-RMB chip card is applied by the user, the card is issued in real name, the central bank authorizes the commercial bank to issue the card, the commercial bank checks the real name of the user and registers the related data, after the check is passed, the secondary card issuing is carried out on the D-RMB chip card of the central bank, and the personal information of the user is written into the D-RMB chip card.
Anonymous card issuing: the user directly applies the D-RMB chip card to the commercial bank, and the commercial bank can select whether to verify the identity information of the applicant according to the actual situation.
And the commercial bank selects the unique identification number of the D-RMB chip card or the mobile phone number of the user as the public key of the IBC of the user according to the actual situation, and further applies for the private key from the IBC authentication center.
The D-RMB system supports the selection of online or offline transactions using computer devices, mobile phones, POS, ATM, and Web as carriers, and the examples herein will be mainly described using mobile phones as carriers.
With regard to the mobile phone terminal, various unlocking settings such as digital passwords, graphic passwords and the like and power-on passwords can effectively protect the security of personal information on the mobile phone. With the coming of the smart phone era, various fingerprint mobile phones based on biological characteristics enter common consumer groups, different fingerprint encryption can be adopted according to different applications and different specific information, and the application of the new technologies can effectively ensure the storage safety of digital currency and related transaction information on the mobile phones.
In order to ensure the safety of the transfer of the digital currency between the mobile phones, a safety certification system needs to be introduced into the D-RMB system. The existing CA authentication center is utilized between the central bank and the financial institution, and social users (including individuals and enterprises) can utilize an IBC (Identity-Based cryptography) authentication center to perform Identity authentication.
For private keys and public keys in a central row generated in IBC and PKI, Secure Element (SE) is required to be stored in a Secure exclusive area of a mobile phone, and the SE area may be implemented by hardware (mobile phone Card change) or host Card emulation (hce). If the user adopts the card change to protect the secret key, the secret key is downloaded to the SE area of the mobile phone in the card change application process.
In the construction process of the authentication system, the PKI system can be designed according to the traditional PKI authentication system, the PKI system is uniformly established, a CA (certificate authority) provides a strong digital signature, the PKI system can also be designed according to an IBC (identity based certificate), and a user mobile phone number is taken as a public key to manage, so that the PKI system seems to be more convenient and fast especially for off-line payment of a tiny amount. All business introductions below will be explained in terms of IBC authentication. Fig. 2 is a schematic diagram of a process of registering a D-RMB account by a user in connection with an embodiment of the present invention, and fig. 3 is a schematic diagram of a D-RMB transaction process in connection with an embodiment of the present invention.
When registering a user, the following procedures are mainly performed: after receiving the identification information sent by the terminal equipment used by the user, the central bank digital currency system sends application software suitable for the terminal equipment to the terminal equipment; the central bank digital currency system sends an IBC public key and an IBC private key to the terminal equipment running the application software, and then performs identity authentication session and session key negotiation with the terminal equipment; and the central bank digital currency system receives the user account sent by the terminal equipment running the application software and then sends a user password to the terminal equipment.
50-dollar digital currency D for online payment of user 1 to user 2Coin 50For example, to illustrate the involvement of D in the transaction processCoin 50Security protocol at transfer time. The user 1 logs in the APP of the mobile phone of the user to complete the identity authentication of the two parties with the D-RMB system, and executes a transaction protocol after a session key is negotiated in an SSL mode. Taking a mobile phone number as an IBC public key as an example, at a mobile phone client of the user 1: mobile phone client automatically selects 50-yuan digital currency DCoin 50The related information M | M is organized according to transaction rules, where M may be designed to: m | mobile phone number 1 | D |, transaction code |Coin 50The payment amount | mobile phone number 2, the information segment is subjected to hash operation to obtain a message H (M), a private key pair H (M) corresponding to the mobile phone number 1 is used for signing to obtain M, and the M | M is sent to the D-RMB system in an encryption mode.
D-RMB system end: decrypting the message according to a protocol to obtain M | M, and verifying the validity of the message, namely verifying M and H (M) by using a public key, namely a mobile phone number 1, so as to prevent the message from being tampered in the transmission process; verification DCoin 50If it is legal, the transaction rule and related information are read and the corresponding operation is executed, which mainly includes the change of registration center after service verificationCoin 50And the owner changes the bound mobile phone number 1 into a mobile phone number 2 and records the corresponding running water. Sending DCoin 50And the mobile phone 2 is given, and the successful transaction is prompted to the two parties.
In order to further enhance anonymity, the mobile phone number corresponding to the right of the registration center can be changed into the hash of the mobile phone number (i.e. borrowing the address of the bitcoin wallet, which consists of public key hash), which is specifically described as follows:
the client side organizes the message unchanged, and at the mobile phone client side of the user 1: automatic selection of 50-dollar digital currency DCoin 50The related information M | M is organized according to the transaction rule, wherein M may be designed as a transaction code | mobile phone number 1 | DCoin 50The payment amount | mobile phone number 2, the information segment is subjected to hash operation to obtain a message H (M), a private key pair H (M) corresponding to the mobile phone number 1 is used for signing to obtain M, and the M | M is sent to the D-RMB system in an encryption mode.
D-RMB system end: decrypting the message according to the protocol to obtain M | M, verifying the validity of the message, namely verifying M and H (M) by using a public key, namely the mobile phone number 1, and preventing the message from being transmittedIs tampered in the transmission process; verification DCoin 50If it is legal, the transaction rule and related information are read and the corresponding operation is executed, which mainly includes the change of registration center after service verificationCoin 50And the owner changes the bound H (mobile phone number 1) into H (mobile phone number 2), and records the corresponding running water. Sending DCoin 50And the mobile phone 2 is given, and the successful transaction is prompted to the two parties.
With respect to system convenience design, in embodiments of the present invention, there are a variety of interfaces and portals for transactions. In the scene example process, only one entrance is used for example, if a registered user transacts business in a commercial bank, the user can directly log in the D-RMB system by taking a mobile phone, and the commercial bank can log in the D-RMB system.
Regarding the problem of the account password, whether the user needs to input the account password can be flexibly designed according to the business needs. Based on the D-RMB system being a micropayment system, the proposal may consider whether to set a password freely selected by the user. In the description of the embodiments of the present invention, the description is made without leaving a password, but in the implementation, the description may be made according to the actual situation.
Regarding the problem of the client application program, the user can download the corresponding client application program on the corresponding terminal (such terminal software is equivalent to a "wallet" tool), for example, the mobile phone user can download the D-RMB mobile phone terminal program (also called as mobile phone APP). The terminal program may be designed to include the following functions: one is DCoin (coin)And (5) management functions. (1) The terminal program can automatically count all DCoin (coin)An amount; (2) can automatically find D in the wallet according to the amount of money input by the userCoin (coin)Combining and automatically selecting matched D in the payment processCoin (coin)Performing a transaction; (3) after the transaction is completed, D for participating in expenditure is automatically selectedCoin (coin)Deleting; (4) the digital currency which is not checked in the center row in the wallet can be automatically distinguished from the checked and registered digital currency. And secondly, completing the functions required by the business, such as business functions of online registration application, extraction, payment, cashing, offline payment request and the like, and automatically completing operations of public key encryption, private key signature and the like in the transaction process.
In general, the core elements of the D-RMB system are a currency, two types of libraries and three centers:
one type of coin, namely "D-RMB", also known as DCoin (coin)In particular to a series of encrypted digital strings representing a specific amount signed by a central line.
Two types of libraries: respectively an issuing bank and a banking bank of the D-RMB. The digital currency is expressed as digital currency fund at the central row in the issuing bank; the digital currency is presented in the bank vault as digital cash in stock by the commercial bank.
Three centers: the first is a registration center (including currency generation, circulation, counting, check and death whole process record); the other two are the certification centers, namely the CA certification center (Based on the PKI system, centralized management of the certificates of organizations and users, such as CFCA) and the IBC certification center, namely the certification center established Based on the cryptographic technology of identification (Identity-Based cryptography). Two tables can be designed in the registration center, one is a digital currency ownership registration table for recording the attribution of digital currency, and the other is a transaction flow meter.
The identity-based cryptosystem IBC in the embodiment of the invention can directly use the identity of the user as a public key, the authentication of the public key is not dependent on a certificate any more, the use and management of the secret key are simplified, and the identity-based cryptosystem IBC has the advantages of no catalogue, convenience in use, easiness in maintenance and the like.
For the identity identification, the individual user can adopt a mobile phone number, and also can adopt an E-mail address matched with the mobile phone or other converted character strings, so that the individual user can conveniently memorize the identity identification, and other people can not know the identity identification), and the purpose of controllable anonymity can be achieved. Enterprise users may use an organization code or a custom code as an identity of the IBC center, and the identity is used as a public key, which is described in the following example only by using a mobile phone number as an example.
The D-RMB system is a hierarchical system, namely, a central bank and each commercial bank are built together, the central bank digital currency system is a computer system which is operated and maintained by the central bank or a designated organization of the central bank and is used for processing information about digital currency, the main functions of the central bank digital currency system comprise the responsibility for issuing and verifying and monitoring the digital currency, the commercial bank is a computer system which is operated and maintained by the commercial bank or the designated organization of the commercial bank and is used for processing the information about the digital currency, the commercial bank performs various functions about the currency of the existing bank, namely bank functions, and the D-RMB system mainly comprises the responsibility for directly facing the society after applying for the digital currency from the central bank, and meets various requirements for providing digital currency circulation services.
In the basic structure of the digital money system according to the embodiment of the present invention, the digital money system mainly includes a central bank digital money system, a commercial bank digital money system (which may be a plurality of commercial bank digital money systems in practice), and an authentication system. The central bank digital currency system is used for generating and issuing digital currency and performing ownership registration on the digital currency; a commercial bank digital currency system for performing banking functions on digital currency; the authentication system is used for providing authentication for interaction between the central bank digital currency system and a terminal device used by a user of digital currency, and for providing authentication for interaction between the central bank digital currency system and the commercial bank digital currency system.
Fig. 4 is a schematic diagram of one structure of an overall framework when the D-RMB digital money system provides an online service according to an embodiment of the present invention.
In the overall framework shown in fig. 4, the core of the D-RMB digital currency operation is the commercial bank digital currency system, and the central bank D-RMB system is connected to the merchant bank D-RMB system and is responsible for transaction confirmation. The commercial D-RMB system and the central D-RMB system can fully utilize advanced cloud technology to carry out decentralized deployment, and meanwhile, the commercial D-RMB system is interconnected and communicated with internal systems thereof.
As can be seen from fig. 4, the commercial bank digital currency system is connected to other networks or systems at a core location, and can be constructed using "cloud computing" technology. The D-RMB digital currency system supports network data of various protocols, such as Virtual Private Networks (VPNs), private lines, satellite networks, Public Switched Telephone Networks (PSTN), global system for mobile communications (GSM), Public Land Mobile Networks (PLMNs), and different networks can be directly or indirectly connected with the central server.
The business digital currency system is connected with a central bank registration center and also comprises four basic functional modules: the system comprises an electronic wallet function module for automatically tracking the amount of D-RMB digital money owned by an account, a supervision function module for automatically tracking the transfer of the D-RMB digital money among all parties and identifying suspicious transactions, an electronic banking function and a Customer Relationship Management (CRM) function module.
The logical layout of the server in the commercial bank digital currency system adopts a three-layer architecture mode: namely, the presentation layer, namely, the front-end application system 200; a back-end application system 202, also called a session layer, an application layer, or a transaction logic layer; thebackground database 204 is a data layer. A corresponding physical machine deployment block diagram is shown in fig. 5, and fig. 5 is a schematic diagram of a computer system included in a commercial bank digital currency system according to an embodiment of the present invention.
The front-end application 200 is an application, such as a Web application, deployed here as a Web server cluster, for running users that interact directly with money transfer service operators. The user and money transfer service operator interact with these applications through a user interface, such as apersonal computing device 114 and a mobile device. The user can access the functions of the electronic wallet, the supervision function, the virtual bank function and the CRM function through the entrance. Open source software such as apache can be adopted on the Web server.
The back-end application system 202 is mainly used to support the back-end functions of the front-end application system 200, such as data access, business logic processing, and the like. This area deploys the application servers. D-RMB digital currency can use JBOSS tool under Red Hat open source system to develop applications.
The back-office database 204 is essentially a database management system DBMS that includes a data repository that stores sales transactions for transferring money, customer profiles, and other data needed to track and regulate the central bank digital money system for D-RMB digital money transfers. The D-RMB digital currency system can be designed using Oracle's DBMS as a database system.
The digital currency system of the business department can be interconnected with an external system, and an alternative architecture is shown in fig. 6, and fig. 6 is a schematic diagram of an architecture for interconnecting the digital currency system of the commercial bank with the external system according to the embodiment of the invention.
The above figure illustrates the physical and logical layout of a commercial bank digital currency system with various external system adapters including central bank central servers, other commercial bank digital currency systems. There are monetary transaction data adapters, cell phone service provider SMS gateway adapters, retailer system adapters, ATM data supply system adapters, etc. by means of this interconnection the central server can accept digital monetary transfer requests and responses from each type of entity. Fig. 6 illustrates well the support of the D-RMB digital currency system to various channels, different protocol networks, which is also a manifestation of its open nature.
For the business process of using IC card as digital currency carrier, the central server in the central office is provided with issuing bank and the commercial bank is provided with bank. In the description of the business process of the simulation scene, a 'commercial bank' is taken as a general name of a commercial bank end D-RMB system and an internal related system thereof, and a 'central bank' is taken as a general name of a central bank end D-RMB system and a related system thereof.
The application, extraction, deposit and cashing of the D-RMB card of the user are all required to be completed in an online state, and the payment process can be divided into online payment and offline payment. After the user takes the D-RMB chip card in a safe way, the D-RMB chip card can be stored with the DCoin (coin). The D-RMB chip card contains an integrated circuit and a storage medium, and can be made into a single card with a standard size (such as the size of a bank card currently used) or can be integrated into other chips or cards in the manufacturing process of the integrated circuit. For example, the D-RMB chip card can be in the following forms: the mobile phone can be in a visible Bluetooth IC card form (hereinafter referred to as a visible IC card), an IC card form (namely a common IC card), a mobile phone-eSE form (namely a mobile phone embedded IC card), a mobile phone-secure SD card form (namely a built-in secure SD card), a mobile phone-SIM card form and a mobile phone-cloud SE form. In addition, the mobile phone-cloud SE form can also be used as a carrier of the D-RMB and is not limited to a chip card. Brief description of the following scenarios in connection with specific scenariosCoin (coin)The application and payment process of (1) below, all of the D-RMB chip card shapes mentioned above are referred to using the term "full form" asState).
Application of D-RMB chip card
Description of the flow: the user applies for the D-RMB chip card to the counter of the commercial bank.
The D-RMB chip card form is applicable: all form
Scene description: but not shown.
Description of the steps:
step 1, a user arrives at a counter of a commercial bank, submits information of related identity documents and applies for a D-RMB chip card;
step 2, commercial bank: registering a page of a D-RMB system, inputting related information (such as name, address, e-mail address, mobile phone number, identity card number, card number and the like) of an applicant and a card, creating a D-RMB account number for the user in a D-RMB system of a commercial bank, and sending the D-RMB account number to a D-RMB system (IBC authentication center) of a central bank; the D-RMB chip card can be designed to be completely anonymous and if it is safe anonymous, no applicant identity information has to be entered. The card number and the identity information of the applicant are bound in the background according to a controllable anonymous design.
Step 3, the central bank: the uniqueness is verified at the IBC center (here, the card number is taken as an example of the account number). IBC center: generating a private key of a user according to the card number, wherein the public key is the D-RMB chip card number, and the public key is used as an account number for transaction circulation;
and 4, commercial bank: and (4) operating according to the transaction prompt, downloading the private key and the public key of the central bank of the user to a D-RMB chip card protection area (card writing and embedding the secret key), finishing initialization of the card, delivering the card to the user, finishing the registration of the important certificate and finishing the transaction.
The following further describes the method and system for payment of digital currency based on the visible digital currency chip card in the embodiment of the invention.
FIG. 7 is a schematic diagram of the main steps of a method for payment of digital currency based on a visual digital currency chip card according to an embodiment of the invention.
As shown in FIG. 7, the method for paying digital currency based on the visual digital currency chip card of the embodiment of the invention mainly comprises the following steps A1 to A4.
Step A1: and under the condition that the payment visible digital currency chip card is not in network connection with the commercial bank digital currency system, sending a payment request to the collection terminal equipment, wherein the payment request comprises the digital currency to be paid and the transaction amount.
For the sake of simplicity, the visible digital currency chip card will be referred to below simply as visible D-RMB chip card. The payment visual D-RMB chip card can be a visual integrated circuit card (visual IC card) such as a visual Bluetooth integrated circuit card (visual Bluetooth IC card). The money receiving terminal device may be a mobile terminal device such as a mobile phone, for example, a smart phone. The payment visible digital currency chip card can establish a short-range communication connection with the collection terminal device and send a payment request to the collection terminal device through the short-range communication connection. Wherein, the short-range communication connection can be a Bluetooth connection, an infrared connection and the like. The digital currency may be a D currency (i.e., D)Coin (coin)) The D currency is a character string representing a fixed amount, and the amount of the D currency may be similar to the existing currency, such as 5 yuan, 10 yuan, 50 yuan, etc., and the D currency may be displayed as a graphic, a symbol, or a two-dimensional code on the receiving terminal device for user identification. The payment visual D-RMB chip card can automatically select the D currency combination with the corresponding amount according to the payment requirement of the user so as to facilitate payment.
The payment request comprises fields such as a transaction code, a receiving terminal device identification (such as a mobile phone number), a card number of the payment visible D-RMB chip card and the like besides fields of digital currency and transaction amount, and other fields such as other information of both parties of the transaction, transaction time and the like can also be expanded.
In order to ensure the transaction security and prevent repudiation, the payment visible D-RMB chip card may further sign and encrypt the payment request before sending the payment request to the payee terminal device, specifically, the payment visible D-RMB chip card may sign the hash operation result of the above-mentioned field in the payment request, and the public key may use the card number of the payment visible D-RMB chip card or the identity of another payment user, for example, an individual user may use a mobile phone number bound to the visible D-RMB chip card, and an enterprise user may use an organization code, etc. The payment-enabled visual D-RMB chip card then transmits the signed payment request encrypted to the payment terminal. The identity is used as the public key, so that the authentication of the public key is not dependent on a certificate, the use and management of the secret key are simplified, the convenience and the easy maintenance are realized, and the controllable anonymity is realized.
Step A2: the payment receiving terminal device initiates network connection to the commercial bank digital currency system after receiving the payment request, and sends the payment request to the commercial bank digital currency system under the condition of successful network connection.
Under the condition that the network connection fails, the collection terminal device is in an off-line state of not being networked with the commercial bank digital currency system, then the collection terminal device stores the payment request, the on-line transaction between the collection terminal device and the payment visual D-RMB chip card is finished, the collection terminal device can be designed to be automatically networked with the commercial bank digital currency system, and when the condition that the network connection is successful is met, the stored payment request is sent to the commercial bank digital currency system.
The payment request may be first signed and encrypted by the receive terminal device before the receive terminal device sends the payment request to the commercial bank digital currency system, and then sent to the commercial bank digital currency system.
The receiving terminal device may also perform preliminary verification of the payment request, including verifying whether the digital currency to be paid is consistent with the transaction amount, etc., before sending the payment request to the merchant bank digital currency system.
Step A3: and the commercial bank digital currency system sends a payment confirmation request containing the payment request to the central bank digital currency system according to the payment request, wherein the payment confirmation request is used for carrying out owner change on the digital currency to be paid.
Before the step of sending a payment confirmation request of the digital currency to the central bank digital currency system by the commercial bank digital currency system according to the payment request, the commercial bank digital currency system can also verify the legality of the digital currency to be paid, and concretely, whether the sum of the currency values of the digital currency to be paid is consistent with the transaction amount and whether the digital currency to be paid is the digital currency which can be identified by the commercial bank digital currency system can be verified, if the sum of the currency values of the digital currency to be paid is consistent with the transaction amount and the digital currency to be paid is the currency which can be identified by the commercial bank digital currency system, the payment confirmation request of the digital currency is sent to the central bank digital currency system, otherwise, the payment request is obtained again.
The payment confirmation request can comprise field content of the payment request, or an expanded field can be added by the commercial bank digital currency system according to the business requirement, and the content of the specific expanded field can be determined according to the business content of the commercial bank digital currency system. And the commercial bank digital currency system may sign, encrypt, and transmit the payment confirmation request to the central bank digital currency system.
Step A4: and the central bank digital currency system executes preset operation according to the payment confirmation request, and then informs the operation result to the collection terminal equipment, wherein the preset operation comprises the change of the owner of the digital currency to be paid.
The executing of the preset operation may specifically include: and if the owner of the digital currency to be paid is not the user paying the visual D-RMB chip card, the owner fails to verify, and a result of the verification failure is returned to the collection terminal device.
Specifically, changing the owner of the digital money to be paid to the user of the cash collection terminal device may include: changing the wallet address of the payment visual D-RMB chip card bound with the digital currency to be paid into the wallet address of the cash-receiving terminal device, wherein the wallet address of the payment visual D-RMB chip card can be a public key of the payment visual D-RMB chip card (such as the card number or other unique identification number of the payment visual D-RMB chip card) or a hash value of the public key; the wallet address of the receiving terminal device may be a public key of the receiving terminal device (for example, the unique identification number of the receiving terminal device, and the public key may be a mobile phone number when the receiving terminal device is a mobile phone) or a hash value of the public key.
The digital currency name and the owner information of the digital currency are stored in a one-to-one correspondence mode in the ownership registration table, the owner information represents the wallet address of a user, and the owner information can be a unique identification code of a visual D-RMB chip card, such as the card number of the visual D-RMB chip card, and can also be the hash value of the card number of the visual D-RMB chip card. For the registered mobile phone user, the owner information may also be the mobile phone number of the registered user or the hash value of the mobile phone number. In particular, other user identifiers may be used for owner information.
After the preset operation is executed, the central bank digital currency system informs the operation result to the collection terminal equipment. Specifically, the central bank digital currency system may return the operation result to the commercial bank digital currency system first, and then the commercial bank digital currency system notifies the money receiving terminal device of the operation result, where the operation result is an operation success in a case where the ownership change is successfully completed, and the operation result is an operation failure in a case where the owner verification fails or the owner change fails.
The central bank digital currency system may also record transaction flow information for digital currency. The transaction flow information can comprise account information of the payment visual D-RMB chip card, account information of the collection terminal device, paid digital currency, payment time of the digital currency and the like.
FIG. 8 is a schematic diagram of a system for payment of digital currency based on a visible digital currency chip card according to an embodiment of the present invention.
As shown in fig. 8, the system B for payment of digital money based on visual digital money chip cards according to the embodiment of the present invention includes a payment visual D-RMB chip card B1, a money receiving terminal device B2, a commercial bank digital money system B3, and a central bank digital money system B4. The payment visible D-RMB chip card B1 is used for sending a payment request to a collection terminal device B2 under the condition that network connection is not established with a commercial bank digital currency system B3, and the payment request comprises digital currency to be paid and transaction amount; a money receiving terminal device B2 for initiating a network connection to the commercial bank digital money system B3 after receiving the payment request, and sending the payment request to the commercial bank digital money system B3 in case of successful network connection; a commercial bank digital currency system B3 for sending a payment confirmation request including a payment request for making owner change to digital currency to be paid to the central bank digital currency system B4 according to the payment request; a central bank digital money system B4 for performing a preset operation including changing an owner of digital money to be paid according to the payment confirmation request and then notifying the money receiving terminal device B2 of the operation result.
The checkout terminal B2 is also used to save the payment request in case of a network connection failure.
The payment visual D-RMB chip card B1 may also be used to establish a close-range communication connection with the checkout terminal device B2 and send a payment request to the checkout terminal device B2 over the close-range communication connection.
The commercial bank digital currency system B3 may also be used to confirm that the sum of the monetary values of the digital currency to be paid is consistent with the transaction amount, and that the digital currency to be paid is the currency recognized by the commercial bank digital currency system B3.
The central bank digital currency system B4 may also be used to: verifying the owner of the digital money to be paid, changing the owner of the digital money to be paid to the user of the money receiving terminal device B2 if the owner of the digital money to be paid is the user of the payment visible D-RMB chip card B1, and notifying the result of the verification failure to the money receiving terminal device B2 if the owner of the digital money to be paid is not the user of the payment visible D-RMB chip card B1. Specifically, the wallet address of the payment-visible D-RMB chip card B1 bound to the digital currency to be paid may be changed to the wallet address of the payee terminal device B2.
The central bank digital currency system B4 may also be used to record transaction flow information for digital currency.
The central bank digital money system B4 notifies the collection terminal device B2 of the operation result, and specifically, the central bank digital money system B4 may first return the operation result to the commercial bank digital money system B3, and then notify the collection terminal device B2 of the operation result by the commercial bank digital money system B3.
The detection of repeated transactions in the case of D-RMB chip cards as digital currency carriers is described below. In the embodiment of the invention, namely in the case of online transaction, the D-RMB system passes through DCoin (coin)And binding with the user card number to prevent repeated transactions. The registration center in the D-RMB system has a rights registration form, and the record form pattern can be designed as shown in Table 1:
table 1:
| digital currency name | Owner of an animal | Remarks for note |
| Pbc100adfkl09987766670 | ICC00000001 | DCoin 100 |
| …… | …… | …… |
| Pbc50cadfkl09987766670 | ICC00000002 | DCoin 50 |
The user D-RMB chip card 1(D-RMB chip card unique identification number ICC00000001) is connected with the user D-RMB chip card 2(D-RMB chip card unique identification number ICC00000001)An identification number ICC00000002) Payment DCoin 100In the process, the D-RMB system registers a central ownership registration form: modification of DCoin 100Corresponding to the owner, the wallet address corresponding to the original mobile phone number ICC00000001 in the owner field is changed to the wallet address corresponding to the mobile phone number ICC00000002, if the user D-RMB chip card 1 also wants to use DCoin 100And paying to other user D-RMB chip cards, wherein the owner of the user D-RMB chip card is not the user D-RMB chip card 1 at the moment, and the payment cannot be finished, so that repeated payment is prevented.
In the case of offline transactions, repeated payment checks are discovered and relied upon with lag, and at present, repeated payment checks performed by almost all electronic cash systems are delayed, i.e., they are performed after the payment process is completed.
Meanwhile, the settable transaction is a micropayment (less than 1000 yuan), which is an acceptable range for individual users, and adverse records are input into a credit investigation system to be punished by adopting a posterior responsibility tracing mechanism.
Compared with other currency systems replacing paper money in the market, the D-RMB has the characteristics of good convenience, high safety and the like, and the convenience is shown in the following aspects:
in the issuing mode, the D-RMB is the digitization of the currency, and does not depend on any bank account and a single network;
in the storage mode, the storage medium of the D-RMB can be a mobile phone, and can also be electronic equipment such as a card, a magnetic disk, a computer and the like, so that various choices are provided for a user. Especially, the D-RMB taking the mobile phone as a carrier can fully utilize the functions of the mobile phone, such as keyboard, display, positioning, storage, calculation, communication and the like, and can be developed for the second time, thereby greatly expanding the payment scene and convenience;
in the payment mode, the online payment transaction similar to paper money can be provided, the online remote payment transaction similar to an electronic payment system can also be provided, the online transaction and the offline transaction can be supported, and the mode is convenient and flexible;
the payment speed is greatly improved in the transaction speed compared with an online card swiping payment mode. Is very suitable for small amount quick payment;
in the use habit, the method can be compatible with the original card swiping payment mode, can also provide face-to-face digital currency payment, and can also provide electronic transaction records, thereby being convenient for financial statistics and having high user acceptability.
The safety is expressed in the following aspects:
in contrast to other digital currency systems, D-RMB digital currency is a series of electronic encrypted serial numbers converted from cash values, and payment transactions are completed through the transfer of these encrypted serial numbers. The safety of the currency is protected by a cryptographic algorithm, so that the confidentiality and the integrity of currency information can be effectively guaranteed, and the safety is high;
the safety of the D-RMB digital currency carrier realizes end-to-end safety by using a chip technology at a mobile terminal and a trusted technology at a background cloud;
the safety of the D-RMB digital currency transaction system depends on the traditional electronic payment system safety technology on one hand, and meanwhile, the strong D-RMB cloud computing system is utilized by the background to further guarantee the transaction safety;
in the aspect of user privacy protection, the user privacy is ensured and the risk of illegal transactions is avoided by means of 'foreground voluntary and background real name'.
According to the technical scheme of the embodiment of the invention, the payment visible digital currency chip card sends the payment request to the payment terminal device under the condition that the network connection with the commercial bank digital currency system is not established, the payment terminal device sends the payment request to the commercial bank digital currency system under the condition that the network connection with the commercial bank digital currency system is successful, and if the network connection is unsuccessful, the payment request is stored. The commercial bank digital currency system sends a request to the central bank digital currency system to make an owner change of the digital currency, changing the owner of the digital currency from the user paying the digital currency chip card to the user of the receiving terminal device. By using the technical scheme of the embodiment of the invention, the on-the-spot transaction similar to paper money can be realized, and the transaction similar to the transaction of the traditional electronic payment can also be realized; the digital currency is intuitive and low in cost, various user operations are facilitated, and the user experience is good; reliable safety guarantee can be provided, hardware manufacturers are not completely depended on, and popularization is more convenient; the method is suitable for offline payment, expands the payment scene, and solves the payment problem of both parties in transaction under the condition of no network; electronic transaction records can be provided; the privacy of the user is ensured, and the risk of illegal transactions can be effectively avoided; the digital currency in the digital currency chip card can be conveniently paid to the terminal device without other hardware devices.
The above-described embodiments should not be construed as limiting the scope of the invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions can occur, depending on design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.