CN109102286A

CN109102286A - Across account book method of commerce and device

Info

Publication number: CN109102286A
Application number: CN201810874378.2A
Authority: CN
Inventors: 陆陈帆; 陆陈一帆; 来学嘉; 贾牧; 谢丹力
Original assignee: Ping An Technology Shenzhen Co Ltd
Current assignee: Ping An Technology Shenzhen Co Ltd
Priority date: 2018-08-02
Filing date: 2018-08-02
Publication date: 2018-12-28
Anticipated expiration: 2038-08-02
Also published as: CN109102286B

Abstract

The invention discloses across the account book method of commerce of one kind and devices, this method includes but is not limited to: after transaction request device generates Transaction Information and is sent to traction processing apparatus, traction processing apparatus is by examining the digital signature success of the second account book correction parameter and second account book being examined not correct trade share ciphertext, the compliance across account book transaction between the first account and the second account is determined, to update account book remaining sum ciphertext.As can be seen that the present invention can carry out the zero-knowledge proof of full homomorphism verification in the case where not revealing transaction specific value, to guarantee to trade successfully, be conducive to the security and privacy across account book process of exchange.

Description

Across account book method of commerce and device

Technical field

The present invention relates to digital cash fields, more particularly to a kind of across account book method of commerce and device.

Background technique

Zero-knowledge proof (Zero-Knowledge Proof), be by S.Goldwasser, S.Micali and C.Rackoff is proposed in early 1980s.It refer to certifier can not provided to verifier it is any useful In the case where information, verifier is made to believe that some judgement is correct.Zero-knowledge proof is substantially that one kind is related to two sides or more The series of steps that multi-party agreement, i.e. two sides or more are taken needed for just accomplishing a task.Certifier proves to verifier And believe it and oneself know or possess a certain message, but proof procedure cannot be leaked to verifier it is any about being proved to message Information.

At present in the process of exchange of digital cash, zero-knowledge proof is typically limited to the transaction in an account book, such as RMB is gone into second account from first account.But can usually there are the transaction between multiple account books, such as first account in practical application People's currency exchange second account dollar, the RMB, dollar account book of that first account and second account require to update simultaneously.And it is Guarantee privacy of the account book information in third-party platform, need to solve across account book transaction issues by zero-knowledge proof, But the inventors found that solving the problems, such as this there is no effective method at present.

Summary of the invention

The embodiment of the present invention provides across the account book method of commerce of one kind and device, can be in the feelings for not revealing transaction specific value Under condition, the zero-knowledge proof of full homomorphism verification is carried out to verify the compliance across account book transaction, to guarantee to trade successfully, favorably In the security and privacy across account book process of exchange.

In a first aspect, the present invention provides across the account book method of commerce of one kind, this method comprises:

Transaction request device generates the Transaction Information between the first account and the second account, and the Transaction Information includes exchanging Rate ciphertext, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book do not correct trade share ciphertext with And second account book correction parameter digital signature；Wherein, it is that the transaction is asked that second account book, which does not correct trade share ciphertext, Device is asked to carry out the ciphertext that bilinear map obtains to the first account book trade share ciphertext and the exchange rate ciphertext；

The transaction request device sends the Transaction Information to traction processing apparatus, so that the traction processing apparatus will The second account book correction parameter examines the digital signature of the second account book correction parameter as public key, and according to the exchange It is close that the bilinear map of rate ciphertext and the first account book trade share ciphertext examines second account book not correct trade share Text, and it is close in the success of the digital signature check of the second account book correction parameter and second account book not correct trade share Text is examined in successful situation, and the account book remaining sum of the account book remaining sum ciphertext and second account that update first account is close Text, the second account book correction parameter are the traction processing apparatus according to the second account book trade share ciphertext and described the Two account books do not correct the parameter that trade share cryptogram computation obtains.

Second aspect, the present invention provides across the account book method of commerce of one kind, this method comprises:

Traction processing apparatus receives the Transaction Information between the first account and the second account that transaction request device is sent, institute State Transaction Information include exchange rate ciphertext, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book not Correct the digital signature of trade share ciphertext and the second account book correction parameter；

The traction processing apparatus does not correct transaction according to the second account book trade share ciphertext and second account book Share cryptogram computation obtains the second account book correction parameter；Using the second account book correction parameter as public key, described in inspection The digital signature of second account book correction parameter；

The traction processing apparatus is according to the bilinearity of the exchange rate ciphertext and the first account book trade share ciphertext Mapping examines second account book not correct trade share ciphertext；

In the digital signature success for examining the second account book correction parameter, second account book is examined not correct transaction part In the successful situation of volume ciphertext, the traction processing apparatus updates the account book remaining sum ciphertext and second account of first account The account book remaining sum ciphertext at family.

The third aspect, the present invention provide a kind of transaction request device, which includes:

Generation unit, for generating the Transaction Information between the first account and the second account, the Transaction Information includes converting It changes rate ciphertext, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book and does not correct trade share ciphertext And second account book correction parameter digital signature；Wherein, it is the transaction that second account book, which does not correct trade share ciphertext, Request unit carries out the ciphertext that bilinear map obtains to the first account book trade share ciphertext and the exchange rate ciphertext；

Transmission unit, for sending the Transaction Information to traction processing apparatus, so that the traction processing apparatus is by institute The digital signature that the second account book correction parameter examines the second account book correction parameter as public key is stated, and according to the exchange rate The bilinear map of ciphertext and the first account book trade share ciphertext examines second account book not correct trade share ciphertext, And trade share ciphertext is not corrected in the success of the digital signature check of the second account book correction parameter and second account book It examines in successful situation, updates the account book remaining sum ciphertext of first account and the account book remaining sum ciphertext of second account, The second account book correction parameter is the traction processing apparatus according to the second account book trade share ciphertext and described second Account book does not correct the parameter that trade share cryptogram computation obtains.Fourth aspect, the present invention provide a kind of traction processing apparatus, the dress It sets including the unit for executing the method as described in second aspect.

Fourth aspect, the present invention provide a kind of transaction request device, which includes:

Receiving unit, the Transaction Information between the first account and the second account sent for transaction request device；

Computing unit, for not correcting trade share according to the second account book trade share ciphertext and second account book Cryptogram computation obtains the second account book correction parameter；

Signature check unit, for examining the second account book correction using the second account book correction parameter as public key The digital signature of parameter；

Ciphertext verification unit, for the bilinearity according to the exchange rate ciphertext and the first account book trade share ciphertext Mapping examines second account book not correct trade share ciphertext；

Updating unit in the digital signature success for examining the second account book correction parameter, examines second account book not It corrects in the successful situation of trade share ciphertext, updates the account book remaining sum ciphertext of first account and the account of second account This remaining sum ciphertext.

5th aspect, the present invention provide a kind of traction processing apparatus, which includes processor, memory and transmitting-receiving Device, the processor, memory and transceiver are connected with each other, wherein the memory is for storing computer program, the meter Calculation machine program includes program instruction, and the processor is configured for calling described program instruction, is executed in terms of such as first or two The method.

6th aspect, the present invention provide a kind of computer readable storage medium, and the computer storage medium is stored with meter Calculation machine program, the computer program include program instruction, and described program instruction makes the processor when being executed by a processor Execute the method as described in terms of first or two.

By implementing the embodiment of the present invention, after transaction request device generates Transaction Information and is sent to traction processing apparatus, Traction processing apparatus is by examining the digital signature success of the second account book correction parameter and examining second account book not Trade share ciphertext is corrected, the compliance across account book transaction between the first account and the second account is determined, to update account book Remaining sum ciphertext.As can be seen that the embodiment of the present invention can carry out full homomorphism verification in the case where not revealing transaction specific value Zero-knowledge proof be conducive to the security and privacy across account book process of exchange to guarantee to trade successfully.

Detailed description of the invention

In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this Some embodiments of invention for those of ordinary skill in the art without creative efforts, can be with It obtains other drawings based on these drawings.

Fig. 1 is a kind of system architecture diagram across account book method of commerce provided in an embodiment of the present invention；

Fig. 2 is a kind of flow diagram across account book method of commerce provided in an embodiment of the present invention；

Fig. 3 is another flow diagram across account book method of commerce provided in an embodiment of the present invention；

Fig. 4 is a kind of structural schematic diagram of transaction request device provided in an embodiment of the present invention；

Fig. 5 is a kind of structural schematic diagram of traction processing apparatus provided in an embodiment of the present invention；

Fig. 6 is the structural schematic diagram of another transaction request device provided in an embodiment of the present invention；

Fig. 7 is the structural schematic diagram of another traction processing apparatus provided in an embodiment of the present invention.

Specific embodiment

Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts every other Embodiment shall fall within the protection scope of the present invention.

It should be appreciated that ought use in this specification and in the appended claims, term " includes " and "comprising" instruction Described feature, entirety, step, operation, the presence of element and/or component, but one or more of the other feature, whole is not precluded Body, step, operation, the presence or addition of element, component and/or its set.

It is also understood that mesh of the term used in this description of the invention merely for the sake of description specific embodiment And be not intended to limit the present invention.As description of the invention and it is used in the attached claims, unless on Other situations are hereafter clearly indicated, otherwise " one " of singular, "one" and "the" are intended to include plural form.

It will be further appreciated that the term "and/or" used in description of the invention and the appended claims is Refer to any combination and all possible combinations of one or more of associated item listed, and including these combinations.

The system architecture of the embodiment of the present invention is described below.Referring to Fig. 1, system architecture of the embodiment of the present invention includes transaction hair Lifting device, transaction acceptance device, traction processing apparatus.

Transaction initiation device is mainly used for generating Transaction Information to be confirmed, and the Transaction Information to be confirmed is sent to friendship Easy reception device confirmation；And the trade share ciphertext of two account books is digitally signed, to confirm transaction.

Transaction acceptance device is mainly used for after receiving the Transaction Information to be confirmed that transaction initiation device is sent, to the first account book Trade share is confirmed with the second account book trade share, and is digitally signed the trade share ciphertext of two account books with true Recognize transaction.

Wherein, transaction initiation device is corresponding first account (i.e. the account of the corresponding user of transaction initiation device), and transaction connects It is corresponding second account (i.e. the account of the corresponding user of transaction acceptance device) by device.It include one or more in same account Account book, the account book be digital asset account book, such as Hongkong dollar, RMB, dollar or Euro etc..It should be noted that at this In inventive embodiments for convenience of explanation, transaction request device includes transaction initiation device, transaction acceptance device；In other words, In the step of being related to transaction request device, which can be what transaction initiation device was individually performed, is also possible to transaction and connects What receiving apparatus was individually performed, it can also be what transaction initiation device and transaction acceptance device cooperation executed, do not limit specifically here It is fixed.

Traction processing apparatus is mainly used for after receiving the Transaction Information that transaction request device is sent, and is tested by full homomorphism Transaction Information is demonstrate,proved, and updates the account book remaining sum ciphertext of the first account and the second account.

Referring to Fig. 2, Fig. 2 is a kind of flow diagram across account book method of commerce provided in an embodiment of the present invention.First The rudimentary knowledge for introducing this method example scheme, relates generally to bilinear map and Encryption Algorithm:

Bilinearity: for arbitrary g1 ∈ G1；g2∈G2；A, b ∈ Zp have e (g1^a, g2^b)=e (g1, g2) ^ab It sets up.Wherein, e is known as bilinear map.

Encryption Algorithm: having additive homomorphism characteristic, i.e. R and S are domains, and Encryption Algorithm E:R → S has additive homomorphism characteristic, Then set up if there is efficient algorithm ⊕, E (x+y)=E (x) ⊕ E (y) or x+y=D (E (x) ⊕ E (y))；And the encryption is calculated Obtained value can be used as the parameter (the input factor) in bilinear map after method encryption, i.e. g1^a in e (g1^a, g2^b) or g2^b。

Being somebody's turn to do across account book method of commerce includes but is not limited to following steps:

S201, transaction initiation device determine exchange rate, the first account book trade share, the second account book trade share, exchange rate Key, the first account book trade share key.

In the embodiment of the present invention, the first account book trade share is the share for digital asset in the first account book of exchange, Second account book trade share is the share of digital asset in the second account book exchanged, and exchange rate is that the currency of the first account book instruction is converted Change the ratio of the digital asset of the second account book instruction.For example, the digital asset of the first account book instruction is RMB, the second account The digital asset of this instruction is dollar, and exchange rate is by the quantity of people's currency exchange dollar of Board Lot.That is, formula 1: the second Account book trade share=the first account book trade share * exchange rate；Alternatively, exchange rate=the second account book trade share/first account book Trade share.

Transaction initiation device can receive the exchange rate of user setting, the first account book trade share, the second account book and trade part Any two in volume, and another is obtained according to formula 1；It can also receive exchange rate, the transaction of the first account book of user setting Share and the second account book trade share, are not construed as limiting.

After determining exchange rate, the first account book trade share, the second account book trade share, generation is adding transaction initiation device Exchange rate key in close algorithm for encrypting to exchange rate, the first account book for encrypting to the first account book trade share are traded Share key.

S202, transaction initiation device determine that exchange rate ciphertext, the first account book trade share ciphertext, the second account book do not correct friendship Easy share ciphertext, the second account book trade share ciphertext, the second account book trade share key, the digital of the second account book correction parameter are signed Name.

In the embodiment of the present invention, transaction initiation device encrypts to obtain institute according to Encryption Algorithm and exchange rate key pair exchange rate State exchange rate ciphertext.Optionally, it is close to send exchange rate to traction processing apparatus after generating exchange rate ciphertext for transaction initiation device Text, so that exchange rate ciphertext described in traction processing apparatus typing.

Transaction initiation device is encrypted according to Encryption Algorithm and first account book trade share key pair the first account book trade share Obtain the first account book trade share ciphertext.

After obtaining exchange rate ciphertext and the first account book trade share ciphertext, transaction initiation device is to first account This trade share ciphertext and exchange rate ciphertext progress bilinear map obtain the second account book and do not correct trade share ciphertext.

In the embodiment of the present invention, the value that encrypted algorithm obtains has unique form, and two ciphertexts are reflected through bilinearity The value penetrated has more a part of (being defined as non-correction portion or correction parameter) on the form.Such as two ciphertexts It is S respectively₁=f (a, m), S₂=f (b, n), wherein f is Encryption Algorithm, and a, b are original text, and m, n are key；And two ciphertext warps The value S ' of bilinear map=f (x, y) ☉ c, wherein x=a*b, ☉ are existing efficient algorithm, and c is correction parameter.Then by y It is defined as the key of x, f (x, y) is defined as the ciphertext of x, and c is defined as correction parameter of the S ' relative to f (x, y).

So transaction initiation device can be according to Encryption Algorithm, exchange rate, exchange rate key, the first account book trade share And first account book trade share cryptogram computation obtain the second account book trade share key, the second account book correction parameter.Then, according to Second account book does not correct trade share ciphertext and the second account book trade share ciphertext is calculated in the second account book correction parameter.

After obtaining the second account book correction parameter, the second account book correction parameter is encrypted to obtain the correction of the second account book The digital signature of parameter, it should be noted that the sign test public key of the digital signature is the second account book correction parameter.Optionally, institute The signature private key for stating digital signature is the product of exchange rate key and the first account book trade share key.

S203, transaction initiation device send the first account book trade share, the first account book trade share to transaction acceptance device Key, the second account book trade share, the second account book trade share key, the second account book are not correcting trade share ciphertext, second just The digital signature of this correction parameter.

In the embodiment of the present invention, the first account book trade share, the first account book trade share key, the second account book are traded part Volume, the second account book trade share key, the second account book do not correct the digital signature of trade share ciphertext, the second original correction parameter For Transaction Information to be confirmed, it is used to confirm for transaction acceptance device.

S204, transaction acceptance device confirm the first account book trade share, the second account book trade share, the first account are calculated This trade share ciphertext, the second account book trade share ciphertext, and generate the number of the first account book trade share ciphertext of the second account Word signature, the second account the second account book trade share ciphertext digital signature.

In the embodiment of the present invention, after transaction acceptance device receives the Transaction Information to be confirmed of transaction initiation device transmission, First account book trade share, the second account book trade share are confirmed.In one embodiment, transaction acceptance device according to Formula 1 obtains exchange rate, and by any two in the first account book trade share, the second account book trade share, exchange rate or entirely Portion is shown to user and confirms.Optionally, it is exchanged if transaction initiation device is not sent to traction processing apparatus in step S202 Rate ciphertext further includes that exchange rate, exchange rate are close in the Transaction Information to be confirmed that then transaction initiation device is sent in step S203 Key.To which in this step, exchange rate can be shown to user's confirmation without calculating by transaction acceptance device.

After confirming the first account book trade share, the second account book trade share, transaction acceptance device is according to Encryption Algorithm It encrypts to obtain the first account book trade share ciphertext with first account book trade share key pair the first account book trade share, according to encryption Algorithm and second account book trade share key pair the second account book trade share encrypt to obtain the second account book trade share ciphertext.So Afterwards, transaction acceptance device is digitally signed the first account book trade share ciphertext using the first account book private key of the second account, Obtain the digital signature of the first account book trade share ciphertext of the second account；Second account is used to the second account book trade share ciphertext The second account book private key at family is digitally signed, and obtains the digital signature of the second account book trade share ciphertext of the second account.

S205, transaction initiation device generate digital signature, the first account of the first account book trade share ciphertext of the first account The digital signature of the second account book trade share ciphertext at family.

In the embodiment of the present invention, transaction initiation device uses the first account book trade share ciphertext the first account of the first account This private key is digitally signed, and obtains the digital signature of the first account book trade share ciphertext of the first account；Second account book is handed over Easy share ciphertext is digitally signed using the second account book private key of the first account, and the second account book for obtaining the first account is traded part The digital signature of volume ciphertext.

It should be noted that in step S204 and step S205 to the first account book trade share ciphertext, the second account book In the digital signature that trade share ciphertext carries out, the first account book public key of traction processing apparatus the first account of typing, the first account The the second account book public key or trading processing of the second account book public key at family, the first account book public key of the second account and the second account Device obtains the first account book public key of the first account, the second account book public key of the first account, the second account by digital certificate Second account book public key of the first account book public key and the second account, is not limited thereto.

S206, transaction initiation device send the number of the first account book trade share ciphertext of the first account to transaction acceptance device Word signature, the first account the second account book trade share ciphertext digital signature；Transaction acceptance device is sent out to transaction initiation device Send the number of the digital signature of the first account book trade share ciphertext of the second account, the second account book trade share ciphertext of the second account Word signature.

In the embodiment of the present invention, the digital signature of the first account book trade share ciphertext of the first account and the second account, the The digital signature of two account book trade share ciphertexts is respectively used to illustrate that transaction initiation device and the confirmation of transaction acceptance device are traded, and It is stored with the Transaction Information of the transaction, i.e. exchange rate ciphertext, the first account book trade share ciphertext, the second account book trade share is close Text, the second account book do not correct the digital signature of trade share ciphertext and the second account book correction parameter.It should be noted that if handing over Easy originating device has sent exchange rate ciphertext to traction processing apparatus in step S202, then in this step and subsequent step Transaction Information may not include exchange rate ciphertext.

Further, transaction initiation device and transaction acceptance device send mutually two account book trade shares of itself generation Digital signature, to guarantee that both parties are stored with the confirmation message to the transaction of other side.It should be noted that transaction hair Lifting device generates and sends to transaction acceptance device digital signature, the first account of the first account book trade share ciphertext of the first account The digital signature of the second account book trade share ciphertext at family can before the step 204, can also after step 204, herein It is not especially limited.

S207, transaction initiation device or transaction acceptance device send Transaction Information to traction processing apparatus.

In the embodiment of the present invention, after transaction initiation device and transaction acceptance device are by digital signature confirmation transaction, hand over Easy request unit sends Transaction Information to traction processing apparatus.In other words, it can be transaction initiation device to fill to trading processing Set transmission Transaction Information；It is also possible to transaction acceptance device and sends Transaction Information to traction processing apparatus；It can also be transaction hair Lifting device sends a part of Transaction Information to traction processing apparatus, and transaction acceptance device sends another part to traction processing apparatus Transaction Information is not specifically limited herein.

S208, traction processing apparatus examine digital signature, the second account of the first account of the first account book trade share ciphertext The digital signature of this trade share ciphertext, the digital signature of the first account book trade share ciphertext of the second account, the second account The digital signature of second account book trade share ciphertext.

In the embodiment of the present invention, traction processing apparatus by the first account book public key of the first account, the first account second Second account book public key of account book public key, the first account book public key of the second account and the second account examines the first account book to trade part respectively First account book of the digital signature of volume ciphertext, the digital signature of the second account book trade share ciphertext of the first account, the second account The digital signature of the digital signature of trade share ciphertext, the second account book trade share ciphertext of the second account, so that it is determined that transaction Originating device and transaction acceptance device confirm the transaction.

S209, traction processing apparatus examine the digital signature of the second account book correction parameter, and the second account book is examined not correct friendship Easy share ciphertext.

In the embodiment of the present invention, traction processing apparatus does not correct trade share ciphertext according to the second account book and the second account book is handed over Easy share ciphertext, is calculated the second account book correction parameter；Then, using the second account book correction parameter being calculated as sign test Public key examines the digital signature of the second account book correction parameter.If examining successfully, then it represents that it is close that the second account book does not correct trade share Text and the relationship of the second account book trade share ciphertext are non-correction portion (i.e. the second account book correction parameters), so that the second account book is not Correct the second account book with the protection of the second account book trade share ciphertext of the second account book trade share of trade share ciphertext protection Trade share is identical, i.e., the second account book trade share is not modified.

In the embodiment of the present invention, traction processing apparatus carries out two-wire to the first account book trade share ciphertext and exchange rate ciphertext Property mapping, the value that is obtained by the bilinear map examines the second account book not correct trade share ciphertext.If examining successfully, Indicate the second account book trade share ciphertext protection exchange rate it is identical as the exchange rate that exchange rate ciphertext is protected, i.e., exchange rate not by Change.

It should be understood that knowing the first account book in the case where the second account book trade share, exchange rate are not modified by formula 1 Trade share is not modified equally, i.e. the Transaction Information of the first account and the second account is legal.

S210, traction processing apparatus update the account book remaining sum ciphertext of the first account and the account book remaining sum ciphertext of the second account.

In the embodiment of the present invention, traction processing apparatus examines the digital signature success of the second account book correction parameter, examines the After two account books do not correct the success of trade share ciphertext, according to the first account book trade share ciphertext and the second account book trade share ciphertext The account book remaining sum ciphertext of the first account, the account book transaction ciphertext of the second account are updated respectively.Since Encryption Algorithm has addition same Step response, when original text is plus and minus calculation, there are efficient algorithms to carry out operation for the corresponding ciphertext of original text.For convenience of explanation, it defines The "+" of original text operation corresponds to " ⊕ " of ciphertext operation, and the "-" of original text operation corresponds to " Θ " of ciphertext operation.

In across account book money transfer transactions scene, transaction initiation device turns the trade share in the first account book of the first account To in the second account book of corresponding second account of transaction acceptance device, thus the first account book remaining sum=original first of existing first account First account book remaining sum the-the first account book trade share of account；The second account book remaining sum=the second account of original of existing second account the Two account book remaining sum the+the second account book trade shares.

Accordingly, traction processing apparatus updates account book remaining sum ciphertext: the first account book remaining sum ciphertext=original of existing first account First account book remaining sum ciphertext Θ the first account book trade share ciphertext of the first account；Second account book remaining sum ciphertext of existing second account Second account book remaining sum ciphertext ⊕ the second account book trade share ciphertext of the second account of=original.

In across account book exchange trading scene, transaction initiation device uses the trade share in the first account book of the first account The trade share of second account book of corresponding second account of exchange trading reception device, thus more than the first account book of existing first account First account book remaining sum the-the first account book trade share of the first account of volume=original；The second account book remaining sum=original of existing first account the Second account book remaining sum the+the second account book trade share of one account；The first account book remaining sum=the second account of original of existing second account First account book remaining sum the+the first account book trade share；The second account book of the second account book remaining sum=the second account of original of existing second account Remaining sum the-the second account book trade share.

Accordingly, traction processing apparatus updates account book remaining sum ciphertext: the first account book remaining sum ciphertext=original of existing first account First account book remaining sum ciphertext Θ the first account book trade share ciphertext of the first account；Second account book remaining sum ciphertext of existing first account Second account book remaining sum ciphertext ⊕ the second account book trade share ciphertext of the first account of=original；First account book remaining sum of existing second account First account book remaining sum ciphertext ⊕ the first account book trade share ciphertext of the second account of ciphertext=original；Second account book of existing second account Remaining sum ciphertext=the second account of original the second account book remaining sum ciphertext Θ the second account book trade share ciphertext.

Further, in successful situation of trading, transaction initiation device updates the account book remaining sum and account of the first account This remaining sum key, transaction acceptance device update the account book remaining sum and account book remaining sum key of the second account.Wherein, dress is initiated in transaction Set the account book remaining sum for updating the first account, the account book remaining sum of transaction acceptance device the second account of update please refers to aforementioned transaction scene In illustrate.In embodiments of the present invention, the key in Encryption Algorithm, which equally exists efficient algorithm and carries out corresponding original text, adds The homomorphism operation for subtracting operation can refer to the homomorphism operation mode that aforementioned ciphertext corresponds to original text, and I will not elaborate.In key updating In the process, transaction initiation device updates the first account book of the first account and the account book of the second account book according to the key homomorphism operation Remaining sum key, transaction initiation device update the first account book of the second account and the account of the second account book according to the key homomorphism operation This remaining sum key.

Referring to Fig. 3, Fig. 3 is another flow diagram across account book method of commerce provided in an embodiment of the present invention.? During reading the embodiment of the present invention, partial content can refer to the related description in 2 embodiment of earlier figures, and this will not be detailed here. The rudimentary knowledge for first introducing this method example scheme below, relates generally to discrete logarithm and Susan Pedersen promises to undertake (Pedersen Commitment) the characteristic of Encryption Algorithm:

Discrete logarithm: there are h=g^n in the operation of discrete logarithm problem, wherein g is base, due to discrete logarithm problem Complexity, the value of n can not be calculated in the case where knowing h and g.Optionally, the computing environment is based on elliptic curve On operation.

Susan Pedersen promises to undertake Encryption Algorithm: under the computing environment of discrete logarithm problem, a is original text, and x is key, is encrypted to a Ciphertext a '=g^a*h^x afterwards, wherein g and h respectively represent a base, h=g^n.Susan Pedersen promises to undertake that algorithm has additive homomorphism special Property and can be used as the parameter in bilinear map formula (input the factor).

The background of this method embodiment is introduced below:

The present embodiment is related to third-party platform, block chain network, wherein third-party platform can be cloud server, divide Cloth system etc..It should be noted that the friendship in 2 embodiment of third-party platform or block chain network corresponding diagram in the present embodiment Easy to handle device.

3 bases are stored in third-party platform or block chain network, are g, h, i respectively.G is common parameter, and h and i are can Letter third party is arranged and is uploaded in third-party platform or block chain network.Specifically, trusted third party generates one at random Number α, and it is based on pre-set base g, by h=g^ α, i=h^ α=g^ α α obtains h and i.When third-party platform or block chain After network receives three bases, by the characteristic of bilinear map judge whether to obtain e (i, g)=e (h, h) (note: e (i, g)= E (g^ α α, g)=e (h, h)=e (g^ α, g^ α)=e (g, g) ^ α α), so that it is determined that these three bases are configured by same α 's.

Each account book of each user is owned by remaining sum, key and remaining sum ciphertext, it is worth noting that, remaining sum is close Text is to promise to undertake that Encryption Algorithm encrypts to obtain using key pair remaining sum by aforementioned Susan Pedersen.Wherein, remaining sum and key are that user is whole End storage, in other words, remaining sum and key only have user oneself to know.Remaining sum ciphertext is to be sent in block chain network to disclose , but due to being ciphertext so only user could decrypt to obtain remaining sum indicated in ciphertext by key.

Specifically, user-side device is referred to as initiator and recipient for convenience of description by the present embodiment, initiator with connect Debit can be Intelligent bracelet, smartwatch, portable digital player, smart phone, palm PC, tablet computer, notes This computer, desktop computer etc., are not construed as limiting.It should be noted that the friendship in 2 embodiment of initiator's corresponding diagram in the present embodiment Easy originating device, the transaction acceptance device in 2 embodiment of recipient's corresponding diagram in the present embodiment.

Initiator and recipient respectively gather around that there are two account books, are the first account book of initiator respectively, the second account book of initiator, connect The first account book of debit, the second account book of recipient, wherein the first account book and the second account book respectively represent two different digital assets Account book.Table 1 is please referred to, table 1 is the character reference table of relevant information.

Table 1

Wherein, ax1=g^a1*h^x1；Ax2=g^a2*h^x2；By1=g^b1*h^y1；By2=g^b2*h^y2.

Next the embodiment of the present invention is described in detail, being somebody's turn to do across account book method of commerce includes:

S301: initiator determines exchange rate.

Specifically, initiator generates exchange rate, and the exchange rate can be initiator's setting, it is true to be also possible to recipient It is fixed and be configured by communicate with initiator, it can also be and communicated with recipient by initiator to negotiate to be arranged.Separately Outside, the exchange rate can be configured by trusted third party, such as the exchange rate between two kinds of currency of bank's publication is made For exchange rate used in the present embodiment.Optionally it is determined that generating the key of the exchange rate after exchange rate, pass through the exchange Rate and the exchange rate key obtain exchange rate ciphertext, and are uploaded in third-party platform or block chain network.

S302: initiator determines the first account book trade share.

In the embodiment of the present invention, initiator's terminal receives the first account book trade share of user's input, exchange rate；Alternatively, Receive the first account book trade share of user's input, the second account book trade share and according to the formula 1 in 2 embodiment of earlier figures To exchange rate；Alternatively, receiving the second account book trade share of user's input, exchange rate to obtain first according to above-mentioned formula 1 Account book trade share.Preferably, exchange rate is set in step S301, and initiator exchanges according to the first account book trade share Rate obtains the second account book trade share.

S303: initiator generates the first account book trade share key and exchange rate key.Optionally, exchange rate key is in step It is arranged when rapid S301.

S304: initiator passes through the first account book trade share, the first account book transaction key, exchange rate and exchange rate key, Obtain the first account book trade share ciphertext, exchange rate ciphertext, the second account book trade share, the second account book trade share key, Two account book trade share ciphertexts, the second account book do not correct the digital signature of trade share ciphertext, the second account book correction parameter.

Table 2 is please referred to, table 2 is the character reference table of relevant information.

Table 2

A) by exchange rate and exchange rate key, exchange rate ciphertext is obtained.

Specifically, Encryption Algorithm is promised to undertake according to Susan Pedersen, exchange rate ciphertext, i.e. er=g^e*h^r is calculated.It is preferred that , exchange rate ciphertext can be preset and be uploaded in step S301 in third-party platform or block chain network.

B) by the first account book trade share and the first account book trade share key, it is close to obtain the first account book trade share Text.

Specifically, Encryption Algorithm is promised to undertake according to Susan Pedersen, the first account book trade share ciphertext, i.e. tz1=g^ is calculated t1*h^z1。

C) by the first account book trade share and exchange rate, the second account book trade share is obtained.

Specifically, it if user inputs the first account book trade share and exchange rate in step S301, is executed based on formula 1 The second account book trade share, i.e. t2=t1*e is calculated in this step.If user inputs the transaction of the first account book in step S301 Share and the second account book trade share (or the second account book trade share and exchange rate), since recipient has obtained the second account This trade share does not execute this step then.

D) by the first account book trade share ciphertext and exchange rate ciphertext, obtaining the second account book, not correct trade share close Text.

Specifically, bilinear map is carried out to the first account book trade share ciphertext and exchange rate ciphertext and obtains the second account book not Trade share ciphertext is corrected, which represents the number of " product " of the first account book trade share ciphertext and exchange rate ciphertext Value.Second account book does not correct trade share ciphertext and base g and the numerical value come is calculated equal to the first account in bilinear map formula The numerical value come is calculated in bilinear map formula for this trade share ciphertext and exchange rate ciphertext.It uses in the present embodiment The formula of bilinear map are as follows: e (g^a, g^b)=(g^a) ^b=g^ab.Further, the first account book trade share ciphertext tz1 =g^t1*h^z1=g^ (e+ α r), exchange rate ciphertext er=g^e*h^r=g^ (t1+ α z1), then the second account book being calculated Trade share ciphertext t2m=e (er, tz1)=[g^ (e+ α r)] ^ (t1+ α z1)=g^et1*g^ α ez1*g^ α rt1*g^ is not corrected α α rz1=g^et1*h^ (ez1+rt1) * i^rz1.

E) being traded by the second account book, it is close not correct trade share ciphertext, the first account book trade share key and exchange rate Key obtains the second account book trade share ciphertext.

Specifically, since the second account book does not correct trade share ciphertext t2m=g^et1*h^ (ez1+rt1) * i^rz1, institute Using the number that the second account book correction parameter is using i as base, the second account book correction parameter tc=i^rz1.That is, being traded by the first account book The second account book correction parameter can be obtained in share key and exchange rate key.Pass through the second account book correction parameter and the second account book again Trade share ciphertext is not corrected, obtains the second account book trade share ciphertext, i.e. tz2=t2m/tc=g^et1*h^ (ez1+rt1).

F) it is based on the second account book trade share ciphertext, obtains the second account book trade share key.

Specifically, due to the second account book trade share ciphertext tz2=g^et1*h^ (ez1+rt1)=g^et1*h^z2, institute With the second account book trade share key z2=ez1+rt1.That is, close by the first account book trade share, the first account book trade share The second account book trade share key can be obtained in key, exchange rate, exchange rate key.

G) the second account book correction parameter is digitally signed, obtains the digital signature of the second account book correction parameter.

Specifically, using the product rz1 of exchange rate key and the first account book trade share key as signature private key, by second Account book correction parameter tc=i^rz1 itself is digitally signed the second account book correction parameter tc as sign test public key, thus To the digital signature of the second account book correction parameter.Wherein, the digital signature of the second account book correction parameter is for verifying the second account book Trade share and the second account book trade share key do not correct trade share ciphertext and the second account book trade share in the second account book It is identical in ciphertext.

S305: initiator by the first account book trade share, the first account book trade share key, the second account book trade share, Second account book trade share key is sent to recipient, and recipient is according to the first account book trade share and the second account book trade share Confirmation transaction.

Specifically, the first account book trade share and the second account book trade share that recipient is sent based on initiator, obtain Exchange rate.If the user of recipient confirms any two in the first account book trade share, the second account book trade share and exchange rate A or all to agree to the transaction, then recipient passes through the first account book trade share, the first account book trade share key, the Two account book trade shares, the second account book trade share key, obtain the first account book trade share ciphertext and the second account book is traded part Volume ciphertext.

Recipient is digitally signed the first account book trade share ciphertext using recipient's the first account book private key, obtains To the digital signature of recipient's the first account book trade share ciphertext；Recipient the is used to the second account book trade share ciphertext Two account book private keys are digitally signed, and obtain the digital signature of recipient's the second account book trade share ciphertext.In addition, initiator The first account book trade share ciphertext is digitally signed using initiator's the first account book private key, obtains the first account of initiator The digital signature of this trade share ciphertext；The second account book trade share ciphertext is carried out using initiator's the second account book private key Digital signature obtains the digital signature of initiator's the second account book trade share ciphertext.It should be noted that the first account book of recipient It is flat that public key, the second account book of recipient public key, the first account book of initiator public key, initiator's the second account book public key pre-deposit third party In platform or block chain network.

S306: Transaction Information is sent in third-party platform or block chain network by initiator or recipient.

Specifically, initiator and recipient by communicate with each other respectively the second account book of storage do not correct trade share ciphertext, The digital signature of second account book correction parameter, the digital signature of initiator's the first account book trade share ciphertext, the second account of initiator The digital signature of this trade share ciphertext, the digital signature of recipient's the first account book trade share ciphertext, the second account book of recipient The digital signature of trade share ciphertext.

Further, initiator or recipient will include the first account book trade share ciphertext, the second account book trade share Ciphertext, the second account book do not correct trade share ciphertext, the digital signature of the second account book correction parameter, the transaction of the first account book of initiator The digital signature of share ciphertext, the digital signature of initiator's the second account book trade share ciphertext, the first account book of recipient are traded part It is flat that the digital signature of volume ciphertext, the Transaction Information of the digital signature of recipient's the second account book trade share ciphertext are sent to third party In platform or block chain network.

S307: third-party platform or block chain network examine the Transaction Information.

Specifically, third-party platform or block chain network are public by the first account book of recipient public key, the second account book of recipient Key, the first account book of initiator public key, initiator's the second account book public key, verify the number of initiator's the first account book trade share ciphertext The number label of signature, the digital signature of initiator's the second account book trade share ciphertext, recipient's the first account book trade share ciphertext Name, the digital signature of recipient's the second account book trade share ciphertext, so that it is determined that the Transaction Information is initiator and recipient Transaction Information after confirmation.

Third-party platform or block chain network examine the consistency of the second account book trade share.Firstly, third-party platform or Block chain network does not correct trade share ciphertext by the second account book trade share ciphertext and the second account book, obtains the second account book school Positive parameter, i.e. tc=t2m/tz2=i^rz1.Then, the second account book is examined using the second account book correction parameter tc as sign test public key The digital signature i_sig of correction parameter, so that it is determined that the second account book trade share has not changed as, the second account book trade share is close It is identical that text with the second account book does not correct the trade share that trade share ciphertext is protected.

Third-party platform or block chain network examine the consistency of exchange rate based on bilinear map.

Due to e (tz1, er)=e (g^t1*h^z1, g^e*h^r)

=e (g^t1*g^ α z1, g^e*g^ α r)

=e (g^ (t1+ α z1), g^ (e+ α r))

=e (g, g) ^ [(t1+ α z1) * (e+ α r)]

=e (g, g) ^ (et1+ α ez1+ α rt1+ α α rz1)；

E (t2m, g)=e (g^et1*h^ (ez1+rt1) * I^rz1, g)

=e (g^et1*g^ α (ez1+rt1) * g^ α α rz1, g)

=e (g^ (et1+ α ez1+ α rt1+ α α rz1), g)

=e (g, g) ^ (et1+ α ez1+ α rt1+ α α rz1)

So it is equal by verifying e (tz1, er) and e (t2m, g), then it can determine exchange rate ciphertext and the second account book not The exchange rate protected in correction privacy trade share ciphertext is equal, has not changed as.It should be noted that if initiator does not have Exchange rate ciphertext is sent in third-party platform or block chain network by intelligent contract in advance, then in initiator or recipient When sending Transaction Information into third-party platform or block chain network, the Transaction Information includes the exchange rate ciphertext.

As can be seen that not correcting trade share ciphertext t2m=e (er, tz1) by the second account book that bilinear map obtains =g^et1*h^ (ez1+rt1) * i^rz1, had not only contained the information of the second account book trade share, but also contain the letter of exchange rate Breath.Second account book trade share ciphertext is not corrected into as criterion, in conjunction with the digital signature of the second account book correction parameter The second account book trade share can be verified, exchange rate can be verified in conjunction with exchange rate ciphertext, Transaction Information is effectively prevented and exist It is modified in process of exchange, privacy and the safety of process of exchange is provided.Meanwhile the Transaction Information is by way of ciphertext The trade share between different account books is contained, efficiently solving the same account book method of reseptance based on digital number signature cannot apply In the problem traded across account book.

S308: third-party platform or block chain network update the Transaction Information.

Specifically, promise to undertake that Encryption Algorithm will be more than the first account book and the second account book of initiator and recipient based on Susan Pedersen Volume ciphertext updates.That is:

Initiator's the first account book remaining sum ciphertext ax1 '=ax1/tz1=(g^a1*h^x1)/(g^t1*h^z1)=g^ (a1- t1)*h^(x1-z1)；

Recipient's the first account book remaining sum ciphertext by1 '=by1*tz1=(g^b1*h^y1) * (g^t1*h^z1)=g^ (b1+ t1)*h^(y1+z1)；

Initiator's the second account book remaining sum ciphertext ax2 '=ax2*tz2=(g^a2*h^x2) * (g^t2*h^z2)=g^ (a2+ t2)*h^(x2+z2)；

Recipient's the second account book remaining sum ciphertext by2 '=by2/tz2=(g^b2*h^y2)/(g^t2*h^z2)=g^ (b2- t2)*h^(y2-z2)。

It should be noted that the inspection of Transaction Information and the update of remaining sum ciphertext can be in step S308 and step S309 It is the intelligent contract in block chain network, is also possible to be deployed in the operation program on third-party platform.

Further, the remaining sum and remaining sum of initiator and recipient each the first account book of self refresh and the second account book after a transaction Key.That is: initiator's the first account book remaining sum a1 '=a1-t1, initiator's the first account book remaining sum key x1 '=x1-z1；Initiator Second account book remaining sum a2 '=a2+t2, initiator's the second account book remaining sum key x2 '=x2+z2；Recipient's the first account book remaining sum b1 ' =b1+t1, recipient's the first account book remaining sum key y1 '=y1+z1；Recipient's the second account book remaining sum b2 '=b2-t2；Recipient Second account book remaining sum key y2 '=y2-z2.

As can be seen that Transaction Information is disclosed in the public environment such as block chain network, cloud server, distributed system, Any third party can examine between initiator and recipient under conditions of can not decrypt account book information and exchange rate information Across account book transaction compliance, not only protect the privacy of account book information and exchange rate information, but protect initiator with The transaction that cannot be tampered between recipient, effectively performs across account book transaction.

Based on the same inventive concept, the embodiment of the invention provides a kind of transaction request devices, referring to fig. 4, described device Including at least generation unit 401 and transmission unit 402, the transaction request device is for realizing Fig. 2, Fig. 3 embodiment of the method institute Across the account book method of commerce of description.

Generation unit 401, for generating the Transaction Information between the first account and the second account.

Transmission unit 402, for sending the Transaction Information to traction processing apparatus.

Optionally, the exchange rate ciphertext is that the transaction request device is exchanged according to Encryption Algorithm and exchange rate key pair The ciphertext that rate encrypts；And/or the first account book trade share ciphertext is the transaction request device according to Encryption Algorithm The ciphertext encrypted with first account book trade share key pair the first account book trade share.

Optionally, the transaction request device is transaction acceptance device；The second account book trade share ciphertext is described Transaction acceptance device encrypts according to Encryption Algorithm with second account book trade share key pair the second account book trade share close Text.

Optionally, the transaction request device is transaction initiation device；The second account book trade share ciphertext is described Transaction initiation device does not correct trade share ciphertext according to second account book and is calculated with the second account book correction parameter Ciphertext.

Optionally, the Encryption Algorithm has additive homomorphism characteristic.

Optionally, the digital signature of the second account book correction parameter is that the transaction request device is traded with the first account book The product of share key and exchange rate key is as private key, using the second account book correction parameter as public key, to described second The digital signature that account book correction parameter encrypts.

Optionally, the Transaction Information further includes the digital signature of the first account book trade share ciphertext of the first account, The digital signature of second account book trade share ciphertext of one account, the number of the first account book trade share ciphertext of the second account are signed The digital signature of name, the second account book trade share ciphertext of the second account.

Optionally, the transaction request device is transaction initiation device；Transmission unit 402 is also used to transaction acceptance device Send the first account book trade share, the first account book trade share key, the second account book trade share, described Two account book trade share keys, second account book do not correct the number of trade share ciphertext, the second account book correction parameter Signature；The transaction request device further includes receiving unit, is confirming first account for receiving the transaction acceptance device First account book trade share of second account sent in the case where this trade share and the second account book trade share The digital signature of the digital signature of ciphertext, the second account book trade share ciphertext of second account.

Optionally, the transaction request device is transaction acceptance device；The transaction request device further includes receiving unit, For receiving the first account book trade share, the first account book trade share key, described of transaction initiation device transmission Second account book trade share, the second account book trade share key, second account book do not correct trade share ciphertext, described The digital signature of second account book correction parameter；Generation unit 401 be also used to confirm the first account book trade share with it is described In the case where second account book trade share, digital signature, the institute of the first account book trade share ciphertext of second account are generated State the digital signature of the second account book trade share ciphertext of the second account；Transmission unit 402 is also used to initiate to fill to the transaction Set the second account book trade share ciphertext of the digital signature, second account that send the first account book trade share ciphertext Digital signature.

It should be noted that by earlier figures 2, the detailed description of Fig. 3 embodiment of the method, those skilled in the art can understand The implementation method of each unit that transaction request device is included is known on ground, so in order to illustrate the succinct of book, it is no longer superfluous herein It states.

Based on the same inventive concept, the embodiment of the invention provides a kind of traction processing apparatus, referring to Fig. 5, described device Including at least receiving unit 501, computing unit 502, signature check unit 503, ciphertext verification unit 504, updating unit 505, The traction processing apparatus is for realizing across account book method of commerce described in Fig. 2, Fig. 3 embodiment of the method.

Receiving unit 501, the Transaction Information between the first account and the second account sent for transaction request device.

Computing unit 502, for not correcting transaction according to the second account book trade share ciphertext and second account book Share cryptogram computation obtains the second account book correction parameter.

Signature check unit 503, for examining second account book school using the second account book correction parameter as public key The digital signature of positive parameter.

Ciphertext verification unit 504, for pair according to the exchange rate ciphertext and the first account book trade share ciphertext Linear Mapping examines second account book not correct trade share ciphertext.

Updating unit 505 in the digital signature success for examining the second account book correction parameter, examines second account book It does not correct in the successful situation of trade share ciphertext, updates the account book remaining sum ciphertext and second account of first account Account book remaining sum ciphertext.

Optionally, the Transaction Information further includes the digital signature of the first account book trade share ciphertext of the first account, The digital signature of second account book trade share ciphertext of one account, the number of the first account book trade share ciphertext of the second account are signed The digital signature of name, the second account book trade share ciphertext of the second account；The signature check unit is also used to examine described The number of the digital signature of first account book trade share ciphertext of one account, the second account book trade share ciphertext of first account The second account book friendship of word signature, the digital signature of the first account book trade share ciphertext of second account, second account The digital signature of easy share ciphertext.

It should be noted that by earlier figures 2, the detailed description of Fig. 3 embodiment of the method, those skilled in the art can understand The implementation method of each unit that traction processing apparatus is included is known on ground, so in order to illustrate the succinct of book, it is no longer superfluous herein It states.

Based on the same inventive concept, the embodiment of the present invention also provides a kind of transaction request device, referring to Fig. 6, the terminal For realizing across account book method of commerce described in Fig. 2, Fig. 3 embodiment of the method.As shown in fig. 6, the terminal can include: processing Device 601, memory 602, transceiver 603.These components can be communicated on one or more communication bus 604.The end End can also include input-output system 605, power module 606.

Alleged processor 601 can be central processing unit (Central Processing Unit, CPU), the processor It can also be other general processors, digital signal processor (Digital Signal Processor, DSP), dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field- Programmable Gate Array, FPGA) either other programmable logic device, discrete gate or transistor logic, Discrete hardware components etc..General processor can be microprocessor or the processor is also possible to any conventional processor Deng.

The memory 602 may include read-only memory and random access memory, and provide instruction to processor 601 And data.The a part of of memory 602 can also include nonvolatile RAM.In addition, memory 602 can be with The information of storage device type.

The transceiver 603 is mainly used for carrying out data communication with other devices；It may include a receiver and one Transmitter, for example, wireless radio frequency modules, process described below device 601 receives or sends some message, specific to be understood that It is received or is sent by the transceiver for the processor 601.

The input-output system 605 is mainly used for receiving user input instruction and shows relevant information.The power supply Module 606 is mainly used for providing stable power supply for other devices in equipment.

In the embodiment of the present invention, the processor 601 is held for calling the instruction stored in the memory 602 Row following steps: the Transaction Information between the first account and the second account is generated；The transaction letter is sent to traction processing apparatus Breath.

It should be noted that those skilled in the art can be clear by earlier figures 2 or the detailed description of Fig. 3 embodiment of the method The implementation method for each function element that transaction request device is included is known to Chu, so in order to illustrate the succinct of book, herein It repeats no more.

Based on the same inventive concept, the embodiment of the present invention also provides a kind of traction processing apparatus, referring to Fig. 7, the terminal For realizing across account book method of commerce described in Fig. 2, Fig. 3 embodiment of the method.As shown in fig. 7, described device can include: processing Device 701, memory 702, transceiver 703.These components can be communicated on one or more communication bus 704.The dress Setting can also include input-output system 705, power module 706.

Alleged processor 701 can be central processing unit (Central Processing Unit, CPU), the processor It can also be other general processors, digital signal processor (Digital Signal Processor, DSP), dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field- Programmable Gate Array, FPGA) either other programmable logic device, discrete gate or transistor logic, Discrete hardware components etc..General processor can be microprocessor or the processor is also possible to any conventional processor Deng.

The memory 702 may include read-only memory and random access memory, and provide instruction to processor 701 And data.The a part of of memory 702 can also include nonvolatile RAM.In addition, memory 702 can be with The information of storage device type.

The transceiver 703 is mainly used for carrying out data communication with other devices；It may include a receiver and one Transmitter, for example, wireless radio frequency modules, process described below device 701 receives or sends some message, specific to be understood that It is received or is sent by the transceiver for the processor 701.

The input-output system 705 is mainly used for receiving user input instruction and shows relevant information.The power supply Module 706 is mainly used for providing stable power supply for other devices in equipment.

In the embodiment of the present invention, the processor 701 is held for calling the instruction stored in the memory 702 Row following steps: the Transaction Information between the first account and the second account that transaction request device is sent is received；According to described Two account book trade share ciphertexts and second account book do not correct trade share cryptogram computation and obtain the second account book correction ginseng Number；Using the second account book correction parameter as public key, the digital signature of the second account book correction parameter is examined；According to described The bilinear map of exchange rate ciphertext and the first account book trade share ciphertext examines second account book not correct transaction part Volume ciphertext；In the digital signature success for examining the second account book correction parameter, second account book is examined not correct transaction part In the successful situation of volume ciphertext, the account book remaining sum of the account book remaining sum ciphertext and second account that update first account is close Text.

It should be noted that those skilled in the art can be clear by earlier figures 2 or the detailed description of Fig. 3 embodiment of the method The implementation method for each function element that traction processing apparatus is included is known to Chu, so in order to illustrate the succinct of book, herein It repeats no more.

Based on the same inventive concept, a kind of computer readable storage medium, institute are provided in another embodiment of the invention Stating computer-readable recording medium storage has computer program, and the computer program includes program instruction, described program instruction Method described in aforementioned either method embodiment is realized when being executed by processor.

The computer readable storage medium can be the internal storage unit of terminal described in aforementioned any embodiment, example Such as the hard disk or memory of terminal.The computer readable storage medium is also possible to the External memory equipment of the terminal, such as The plug-in type hard disk being equipped in the terminal, intelligent memory card (Smart Media Card, SMC), secure digital (Secure Digital, SD) card, flash card (Flash Card) etc..Further, the computer readable storage medium can also be wrapped both The internal storage unit for including the terminal also includes External memory equipment.The computer readable storage medium is described for storing Other programs and data needed for computer program and the terminal.The computer readable storage medium can be also used for temporarily When store the data that has exported or will export.

Those of ordinary skill in the art may be aware that list described in conjunction with the examples disclosed in the embodiments of the present disclosure Member and method and step, can be realized with electronic hardware, computer software, or a combination of the two, in order to clearly demonstrate hardware With the interchangeability of software, each exemplary composition and step are generally described according to function in the above description.This A little functions are implemented in hardware or software actually, the specific application and design constraint depending on technical solution.Specially Industry technical staff can use different methods to achieve the described function each specific application, but this realization is not It is considered as beyond the scope of this invention.

It is apparent to those skilled in the art that for convenience of description and succinctly, the list of foregoing description Member, the specific work process of equipment, can refer to corresponding processes in the foregoing method embodiment, details are not described herein.

In several embodiments provided herein, it should be understood that disclosed unit, device and method, it can be with It realizes by another way.For example, the apparatus embodiments described above are merely exemplary, for example, the unit It divides, only a kind of logical function partition, there may be another division manner in actual implementation, such as multiple units or components It can be combined or can be integrated into another system, or some features can be ignored or not executed.In addition, shown or beg for Opinion mutual coupling, direct-coupling or communication connection can be through some interfaces, the INDIRECT COUPLING of device or unit Or communication connection, it is also possible to electricity, mechanical or other form connections.

The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple In network unit.Some or all of unit therein can be selected to realize the embodiment of the present invention according to the actual needs Purpose.

It, can also be in addition, the functional units in various embodiments of the present invention may be integrated into one processing unit It is that each unit physically exists alone, is also possible to two or more units and is integrated in one unit.It is above-mentioned integrated Unit both can take the form of hardware realization, can also realize in the form of software functional units.

If the integrated unit is realized in the form of SFU software functional unit and sells or use as independent product When, it can store in a computer readable storage medium.Based on this understanding, technical solution of the present invention is substantially The all or part of the part that contributes to existing technology or the technical solution can be in the form of software products in other words It embodies, which is stored in a storage medium, including some instructions are used so that a computer Equipment (can be personal computer, server or the network equipment etc.) executes the complete of each embodiment the method for the present invention Portion or part steps.And storage medium above-mentioned includes: USB flash disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic or disk etc. are various can store journey The medium of sequence code.

The above description is merely a specific embodiment, but scope of protection of the present invention is not limited thereto, any Those familiar with the art in the technical scope disclosed by the present invention, can readily occur in various equivalent modifications or replace It changes, these modifications or substitutions should be covered by the protection scope of the present invention.Therefore, protection scope of the present invention should be with right It is required that protection scope subject to.

Claims

1. a kind of across account book method of commerce characterized by comprising

Transaction request device generates the Transaction Information between the first account and the second account, and the Transaction Information includes that exchange rate is close Text, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book do not correct trade share ciphertext and The digital signature of two account book correction parameters；Wherein, second account book does not correct trade share ciphertext as transaction request dress It sets and the ciphertext that bilinear map obtains is carried out to the first account book trade share ciphertext and the exchange rate ciphertext；

The transaction request device sends the Transaction Information to traction processing apparatus, so that the traction processing apparatus will be described Second account book correction parameter examines the digital signature of the second account book correction parameter as public key, and close according to the exchange rate The literary bilinear map with the first account book trade share ciphertext examines second account book not correct trade share ciphertext, and The inspection of trade share ciphertext is not corrected in the digital signature check success of the second account book correction parameter and second account book It tests in successful situation, updates the account book remaining sum ciphertext of first account and the account book remaining sum ciphertext of second account, institute Stating the second account book correction parameter is the traction processing apparatus according to the second account book trade share ciphertext and second account This does not correct the parameter that trade share cryptogram computation obtains.

2. the method according to claim 1, wherein

The exchange rate ciphertext is that the transaction request device encrypts to obtain according to Encryption Algorithm and exchange rate key pair exchange rate Ciphertext；And/or

The first account book trade share ciphertext is the transaction request device according to Encryption Algorithm and the first account book trade share The ciphertext that key pair the first account book trade share encrypts.

3. the method according to claim 1, wherein the transaction request device is transaction acceptance device；It is described Second account book trade share ciphertext is the transaction acceptance device according to Encryption Algorithm and the second account book trade share key pair the The ciphertext that two account book trade shares encrypt.

4. the method according to claim 1, wherein the transaction request device is transaction initiation device；It is described Second account book trade share ciphertext does not correct trade share ciphertext and institute according to second account book for the transaction initiation device State the ciphertext that the second account book correction parameter is calculated.

5. according to the described in any item methods of claim 2-3, which is characterized in that the Encryption Algorithm has additive homomorphism special Property.

6. the method according to claim 1, wherein

The digital signature of the second account book correction parameter be the transaction request device with the first account book trade share key with The product of exchange rate key is as private key, using the second account book correction parameter as public key, corrects and joins to second account book The digital signature that number encryption obtains.

7. the method according to claim 1, wherein the Transaction Information further includes the first account book of the first account The digital signature of trade share ciphertext, the digital signature of the second account book trade share ciphertext of the first account, the second account Digital signature, the digital signature of the second account book trade share ciphertext of the second account of one account book trade share ciphertext；The side Method further include: traction processing apparatus examines the digital signature of the first account book trade share ciphertext of first account, described The number of the digital signature of second account book trade share ciphertext of one account, the first account book trade share ciphertext of second account Word signature, second account the second account book trade share ciphertext digital signature.

8. the method according to the description of claim 7 is characterized in that the transaction request device is transaction initiation device；Institute Before stating the Transaction Information that transaction request device generates between the first account and the second account further include:

The transaction initiation device sends the first account book trade share to transaction acceptance device, first account book is traded part Volume key, the second account book trade share, the second account book trade share key, second account book do not correct transaction part The digital signature of volume ciphertext, the second account book correction parameter；

The transaction initiation device receives the transaction acceptance device and is confirming the first account book trade share and described second The digital signature of first account book trade share ciphertext of second account sent in the case where account book trade share, described The digital signature of second account book trade share ciphertext of two accounts.

9. the method according to the description of claim 7 is characterized in that the transaction request device is transaction acceptance device；Institute Before stating the Transaction Information that transaction request device generates between the first account and the second account further include:

The transaction acceptance device receives the first account book trade share, first account book friendship that transaction initiation device is sent Easy share key, the second account book trade share, the second account book trade share key, second account book do not correct friendship Easy share ciphertext, the digital signature of the second account book correction parameter；

The transaction acceptance device in the case where confirming the first account book trade share and the second account book trade share, Generate the digital signature of the first account book trade share ciphertext of second account, the second account book of second account is traded part The digital signature of volume ciphertext；

The transaction acceptance device sent to the transaction initiation device the first account book trade share ciphertext digital signature, The digital signature of second account book trade share ciphertext of second account.

10. a kind of across account book method of commerce characterized by comprising

Traction processing apparatus receives the Transaction Information between the first account and the second account that transaction request device is sent, the friendship Easy information includes that exchange rate ciphertext, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book do not correct The digital signature of trade share ciphertext and the second account book correction parameter；

The traction processing apparatus does not correct trade share according to the second account book trade share ciphertext and second account book Cryptogram computation obtains the second account book correction parameter；Using the second account book correction parameter as public key, described second is examined The digital signature of account book correction parameter；

The traction processing apparatus according to the bilinear map of the exchange rate ciphertext and the first account book trade share ciphertext, Second account book is examined not correct trade share ciphertext；

In the digital signature success for examining the second account book correction parameter, to examine second account book not correct trade share close In literary successfully situation, the traction processing apparatus updates the account book remaining sum ciphertext and second account of first account Account book remaining sum ciphertext.

11. according to the method described in claim 10, it is characterized in that, the Transaction Information further includes the first account of the first account The digital signature of this trade share ciphertext, the digital signature of the second account book trade share ciphertext of the first account, the second account Digital signature, the digital signature of the second account book trade share ciphertext of the second account of first account book trade share ciphertext；

The method also includes: the traction processing apparatus examines the number of the first account book trade share ciphertext of first account The first account book friendship of word signature, the digital signature of the second account book trade share ciphertext of first account, second account Digital signature, the digital signature of the second account book trade share ciphertext of second account of easy share ciphertext.

12. a kind of transaction request device characterized by comprising

Generation unit, for generating the Transaction Information between the first account and the second account, the Transaction Information includes exchange rate Ciphertext, the first account book trade share ciphertext, the second account book trade share ciphertext, the second account book do not correct trade share ciphertext and The digital signature of second account book correction parameter；Wherein, it is the transaction request that second account book, which does not correct trade share ciphertext, Device carries out the ciphertext that bilinear map obtains to the first account book trade share ciphertext and the exchange rate ciphertext；

Transmission unit, for sending the Transaction Information to traction processing apparatus, so that the traction processing apparatus is by described the Two account book correction parameters examine the digital signature of the second account book correction parameter as public key, and according to the exchange rate ciphertext Second account book is examined not correct trade share ciphertext with the bilinear map of the first account book trade share ciphertext, and The digital signature check success of the second account book correction parameter and second account book do not correct the inspection of trade share ciphertext In successful situation, the account book remaining sum ciphertext of first account and the account book remaining sum ciphertext of second account are updated, it is described Second account book correction parameter is the traction processing apparatus according to the second account book trade share ciphertext and second account book The parameter that trade share cryptogram computation obtains is not corrected.

13. a kind of traction processing apparatus characterized by comprising

Computing unit, for not correcting trade share ciphertext according to the second account book trade share ciphertext and second account book The second account book correction parameter is calculated；

Signature check unit, for examining the second account book correction parameter using the second account book correction parameter as public key Digital signature；

Ciphertext verification unit, for being reflected according to the bilinearity of the exchange rate ciphertext and the first account book trade share ciphertext It penetrates, second account book is examined not correct trade share ciphertext；

Updating unit in the digital signature success for examining the second account book correction parameter, examines second account book not correct In the successful situation of trade share ciphertext, update more than the account book remaining sum ciphertext of first account and the account book of second account Volume ciphertext.

14. a kind of device, which is characterized in that including processor, memory and transceiver, the processor, memory and receipts It sends out device to be connected with each other, wherein the memory is for storing computer program, and the computer program includes program instruction, institute It states processor to be configured for calling described program instruction, executes such as the described in any item methods of claim 1-11.

15. a kind of computer readable storage medium, which is characterized in that the computer storage medium is stored with computer program, The computer program includes program instruction, and described program instruction makes the processor execute such as right when being executed by a processor It is required that the described in any item methods of 1-11.