TWI742670B - Terminal device, server and method for private key protection and transaction supervision in blockchains - Google Patents

Abstract

A terminal device, a server and a method for private key protection and transaction supervision in blockchains are provided, which adopt the security mechanism of secret sharing and multi-factor authentication and adopt the structure and process of third-party supervision to achieve secure and transparent blockchain transactions and protection and management of private keys.

Description

Terminal equipment, server and method for blockchain key storage and transaction supervision

The present invention relates to blockchain transactions and related keys, and particularly relates to terminal equipment, servers, and methods for blockchain key storage and transaction supervision.

In blockchain technology, a blockchain account has a set of key pairs, where the public key corresponds to the transaction address of the account, and the private key needs to be kept by the account user, or by the transaction Keep it on your behalf. When an account user needs to conduct a blockchain transaction, those who keep the key will use the set password to decrypt the private key to perform the signature calculation. Those who conduct blockchain transactions through the exchange are usually The exchange keeps the private keys on their behalf, and also performs blockchain transaction signatures and other operations on their behalf. These two conventional private key storage methods have their own shortcomings: if the terminal device storing the key is lost or stolen by the person who keeps the key, it will cause financial loss to the account; and let the exchange take charge of the private key The method is prone to problems such as guarding theft and hacking.

The security of the existing conventional technologies still needs to be improved, and it has not fully solved the problems related to the custody of private keys and exchange escrow in the current public blockchain, and these conventional technologies are not yet able to provide blockchain-based technologies. The complete system architecture of the private key custody and transaction supervision mechanism.

In order to solve the above-mentioned problems and achieve the above-mentioned objects, the present invention provides a terminal device for producing corresponding public and private keys, including: key-shared registration terminal modules for use according to the private key The secret sharing algorithm generates the first secret sharing data and the second secret sharing data, using the first mechanism to encrypt the second secret sharing data to generate the ciphertext of the second secret sharing data, using the private key After signing the public key, the ciphertext of the second secret shared data and the account address to generate the first digital signature, the public key, the ciphertext of the second secret shared data, and the account address And the first digital signature is sent to the server, and the first secret shared data is stored in the terminal device using a second mechanism.

The present invention also provides a server, including: a key registration server module for receiving a public key from a terminal device, a ciphertext of the first secret shared data generated according to the private key corresponding to the public key, and an account Address and the first digital signature, use the public key to verify the first digital signature, and then use the account address as an index to create and store registration data, where the registration data includes the public key and the first The ciphertext of the confidential information.

The present invention also provides a method for key sharing and registration, executed by a terminal device, including: producing a corresponding public key and a private key; according to the private key, a secret sharing algorithm is used to generate the first secret sharing Data and second secret sharing data; using the first mechanism to encrypt the second secret sharing data to generate the ciphertext of the second secret sharing data; using the private key to sign the public key, the second The ciphertext and account address of the confidential shared data are used to generate the first digital signature; the public key, the ciphertext of the second confidential shared data, the account address and the first digital signature are sent to the server器; and, using a second mechanism to store the first confidential share data in the terminal device.

The present invention also provides a method for key sharing and registration, which is executed by a server, and includes: receiving a public key from a terminal device, ciphertext of the first secret shared data generated according to the private key corresponding to the public key, The account address and the first digital signature; the public key is used to verify the first digital signature; and the account address is used as an index to create and store registration information, where the registration information includes the public key and the The first secret holds the ciphertext of the data.

Based on the above-mentioned key secret sharing and multi-factor verification, the present invention establishes a private key custody and transaction supervision system and method suitable for public blockchains to improve transaction transparency, key availability, and hacker intrusion. , Guard against the deficiencies of self-theft, and provide a key management system and blockchain transaction process that is open, transparent, high-availability, high-security, and easy-to-use.

10: Blockchain key custody and transaction supervision system

100: terminal equipment

101: Key share registration terminal module

102: Blockchain transaction terminal module

103: Key recovery terminal module

104: Password reset terminal module

200: private key

300: server

301: Key registration server module

302: Transaction Supervision Servo Module

303: Key Recovery Servo Module

304: Password reset servo module

400: External storage device

500: Blockchain

600: digital signature

S1~S3: Confidential holding information

S202~S224: Method steps

S302~S338: Method steps

S402~S442: Method steps

S502~S516: method steps

S602~S630: method steps

Figure 1 is a schematic diagram of a blockchain key storage and transaction supervision system according to an embodiment of the present invention.

Figure 2 is a flowchart of a method for key sharing and registration according to an embodiment of the invention.

Figures 3A and 3B are flowcharts of a blockchain transaction supervision method according to an embodiment of the present invention.

4A and 4B are flowcharts of a key recovery method according to an embodiment of the invention.

Figure 5 is a flowchart of an unsupervised blockchain transaction method according to an embodiment of the present invention.

6A and 6B are flowcharts of a password reset method according to an embodiment of the present invention.

The following specific examples illustrate the implementation of the present invention. Those familiar with the art can easily understand the other advantages and effects of the present invention from the contents disclosed in this specification.

Please refer to FIG. 1, which is a schematic diagram of a blockchain key storage and transaction supervision system 10 (hereinafter referred to as the system 10) according to an embodiment of the present invention. The system 10 includes a terminal device 100, a server 300, and an external storage device 400. In this embodiment, the user will use the terminal device 100 to register an account on the server 300 to conduct transactions in the blockchain 500, and the user is the owner of the terminal device 100 and the external storage device 400. The blockchain 500 may be a public blockchain or other types of blockchains.

For the security of the account and transaction, the terminal device 100 will generate a key pair of the user's account, that is, the corresponding public key (not shown) and the private key 200, and use the key pair to perform blockchain transactions For example, the private key 200 is used to generate the digital signature 600 required for the transaction. In order to protect the private key 200, the terminal device 100 uses a secret sharing algorithm to decompose the private key 200 into three secret sharing data S1, S2, and S3, and storing the secret sharing data S1~S3 in the terminal respectively The device 100, the server 300, and the external storage device 400, and the confidential shared data S1 to S3 are respectively protected by different mechanisms. In this embodiment, the confidential shared data S1 is protected by the biometric access control mechanism of the terminal device 100, which means that whenever the user needs to access the confidential shared data S1, the fingerprint, face and/ or Various biological characteristics such as iris are recognized by the biological characteristics of the terminal device 100. If the user does not pass the biological recognition, the confidential share data S1 cannot be accessed; the confidential share data S2 is encrypted and protected with a password, which is provided by the user; The confidential shared data S3 is protected by physical isolation between the external storage device 400 and the outside world. In this embodiment, the distributed storage of confidential shared data S1~S3, as well as different protection mechanisms such as biometrics and password encryption, constitute the security mechanism of the decentralized multi-factor authentication of the present invention, and the protection of S1, S2, and S3 The mechanisms can be used interchangeably. For example, a password can be used to encrypt the confidential shared data S1, and the biometric identification access control mechanism of the terminal device 100 can be used to protect the confidential shared data S2.

The secret sharing algorithm used in this embodiment is Shamir's secret sharing scheme, which is based on the combination of polynomials in a finite field, using the difference complement method to find the coefficients of the polynomial subsets, and can use The secret s is shared by a combination of (k,n) thresholds, where k is the threshold, n is the total number of secrets, 0<k≦n, and secret s is the private key 200. In this embodiment, the threshold combination of k=2, n=3 is used to split the private key into 3 pieces of confidential shared data S1~S3. In the following, at least any 2 pieces of confidential shared data are required to participate in the sharing algorithm to form the original Private key 200.

In addition to keeping the second confidential share data S2, the server 300 also acts as a third-party supervisor in the process of blockchain transactions, providing information supervision and verification functions of the transaction process to ensure transaction transparency and avoid terminal equipment 100 Signed the altered transaction content when it was cracked or implanted with malicious software. In addition, in the event that the private key 200 or the password is lost, the user can use the confidential share data S3 of the external storage device 400 to connect to the server 300, and perform key recovery in conjunction with the confidential share data S2 kept by the server 300 And re-decomposition and storage operations. In addition, if the server 300 is out of service due to network or other problems, the terminal device 100 can also obtain the confidential share data S3 from the external storage device 400 to perform blockchain transactions in emergency situations. Therefore, the system of this embodiment 10 The method and process executed by it can achieve safe and transparent blockchain transactions and perfect private key protection and management functions.

The terminal device 100 can be an electronic device capable of information transmission, reception, and processing, such as a smart phone, a notebook computer, or a personal computer. The terminal device 100 includes a key share registration terminal module 101, a blockchain transaction terminal module 102, a key recovery terminal module 103, and a password reset terminal module 104. The above terminal modules 101~104 can be hardware, software or firmware. If the terminal modules 101~104 are software, they can be executed by the operating system of the terminal device 100, or the terminal modules 101~104 can be attached to the application program of the terminal device 100 and be called and executed by the application program. It can be, for example, a browser.

The server 300 includes a key registration server module 301, a transaction supervision server module 302, a key recovery server module 303, and a password reset server module 304. The above servo modules 301 to 304 correspond to the terminal modules 101 to 104, respectively, and the servo modules 301 to 304 can be hardware, software, or firmware. The terminal device 100 can be connected to the server 300 via a wired network or a wireless network.

The external storage device 400 is an information storage device or medium independent of the terminal device 100 and independent of the server 300, such as a flash drive, a hard disk, or an optical disk, and the present invention is not limited to the above types. When the confidential share data S3 is usually not required, the external storage device 400 is physically isolated from the outside world, so no protective measures such as password encryption or biometric identification are needed to protect the confidential share data S3 from hackers.

Hereinafter, referring to Figures 2 to 6B, the terminal modules 101 to 104 of the terminal device 100 and the server modules 301 to 304 of the server 300 will be described in conjunction with the key sharing and registration method, and the blockchain transaction supervision method. , The process of key recovery method, unsupervised blockchain transaction method, and password reset method.

Please refer to Figure 2, which is a flowchart of a method for key sharing and registration according to embodiments of the present invention. When the user needs to register an account for blockchain transactions, the terminal device 100 can be used to start the key sharing and registration method. First, the terminal device 100 produces the public key and the private key corresponding to each other of the user's account (S202). Then, the key sharing registration terminal module 101 of the terminal device 100 uses the secret sharing algorithm to decompose the private key into the secret sharing data S1, S2, and S3 (S204), and encrypts the secret sharing with the password entered by the user. Hold the data S2 to generate the cipher text of the confidential share data S2 (S206), use the private key to sign the public key, the cipher text of the confidential share data S2 and the account address to generate a digital signature (S208), and make it public The key, the ciphertext of the secret holding data S2, the account address and the digital signature are sent to the server 300 (S210). Among them, the account address is the user's transaction address in the blockchain 500.

Then, the key registration server module 301 of the server 300 receives the public key, the ciphertext of the confidential share data S2, the account address and the digital signature from the terminal device 100 (S212), and verifies the digital signature with the public key (S214). If the digital signature verification is incorrect, the process ends. If the digital signature verification is correct, the key registration server module 301 uses the account address as an index to create and store the registration data (S216), where the registration data includes the ciphertext of the public key and the secret sharing data S2. Then, the key registration server module 301 transmits the registration result to the terminal device 100 (S218).

Then, the key sharing registration terminal module 101 of the terminal device 100 receives the registration result (S220). If the registration result fails, the process ends. If the registration result is successful, the key share registration terminal module 101 uses the biometric access control mechanism to store the confidential share data S1 in the terminal device 100 (S222), and store the confidential share data S3 in the external storage The device 400 (S224). The process ends here.

Please refer to FIG. 3A and FIG. 3B, which are flowcharts of a block chain transaction supervision method according to an embodiment of the present invention. In order to perform a blockchain transaction, first, the user connects to the dedicated webpage provided by the server 300 with the encrypted security function of the browser of the terminal device 100, and enters the sender address, recipient address, and address of the blockchain transaction on the webpage. Transaction information such as transaction amount. For example, the sender address can be the user's account address. The browser thus obtains the above-mentioned transaction information (S302), and uses a secure connection to transmit the transaction information to the server 300 (S304). Then, the browser activates the blockchain transaction terminal module 102 of the terminal device 100, and the blockchain transaction terminal module 102 obtains the confidential share data S1 kept by the terminal device 100 through the biometric access control mechanism (S306), Here, the user must recognize the biological characteristics of the terminal device 100. If the identification fails, the process ends. If the identification is successful, the blockchain transaction terminal module 102 can successfully obtain the confidential share data S1 kept by the terminal device 100.

While the terminal device 100 executes step S306, the transaction supervision server module 302 of the server 300 receives transaction information from the terminal device 100 (S308), and then checks and records the transaction information (S310). The above check is to check whether the server 300 has stored the registration data corresponding to the sender address in the transaction information. If the registration information does not exist, the process ends. If the server 300 has stored the registration data, the transaction supervision server module 302 uses the sender address in the transaction information as an index to obtain the public key and confidential share data S2 in the registration data corresponding to the sender address The cipher text (S312) is used to generate a transaction identification code with a random random number (S314), and the cipher text of the confidential share data S2 and the transaction identification code are transmitted to the terminal device 100 (S316).

Then, the blockchain transaction terminal module 102 of the terminal device 100 receives the cipher text of the confidential share data S2 and the transaction identification code from the server 300 (S318), and decrypts the cipher text of the confidential share data S2 with the password entered by the user (S320). If the decryption fails due to a wrong password or other reasons, the process ends. If the decryption is successful, the blockchain transaction terminal module 102 can successfully obtain the confidential share data S2. Next, the blockchain transaction terminal module 102 uses the secret shared data S1 and S2 to combine the private key (S322), uses the private key to sign the transaction information and the transaction identification code to generate a digital signature (S324), and sends the transaction information , The transaction identification code and the digital signature are sent to the server 300 for blockchain transaction (S326).

Then, the transaction supervision server module 302 of the server 300 receives the transaction information, the transaction identification code and the digital signature from the terminal device 100 (S328), and verifies the digital signature with the public key (S330). If the verification is incorrect, the process ends. If the verification is correct, the transaction supervision server module 302 compares the transaction information recorded in step 310 with the transaction information received in step 328 (S332). If the two transaction information is inconsistent, the process ends. If the two pieces of transaction information are consistent, the transaction supervision server module 302 transmits the transaction information to the blockchain 500 to complete the blockchain transaction (S334), and transmits the transaction result to the terminal device 100 (S336). Then, the blockchain transaction terminal module 102 of the terminal device 100 receives the transaction result from the server 300, and displays the transaction result on the aforementioned webpage (S338). The process ends here.

Please refer to FIG. 4A and FIG. 4B, which are flowcharts of a key recovery method according to an embodiment of the present invention. When the terminal device 100 storing the confidential shared data S1 is lost or damaged, the user can use the encryption security function of the browser of another terminal device 100 to connect to the dedicated webpage provided by the server 300, enter the account address and Request a reply assignment. Then, the browser activates the key of the terminal device 100 to reply to the terminal module 103. The key recovery terminal module 103 obtains the account address entered by the user (S402), and transmits the account address to the server 300 (S404).

Then, the key recovery server module 303 of the server 300 receives the account address from the terminal device 100 (S406), and uses the account address as an index to obtain the public key and confidential share data in the registration data corresponding to the account address The cipher text of S2 (S408), and the cipher text of the public key and the secret sharing data S2 are transmitted to the terminal device 100 (S410).

Then, the key recovery terminal module 103 of the terminal device 100 receives the ciphertext of the public key and the secret shared data S2 from the server 300 (S412), and decrypts the ciphertext of the secret shared data S2 with the password entered by the user To obtain confidential share data S2 (S414). If the decryption fails, the process ends. If the decryption is successful, the key recovery terminal module 103 can obtain the confidential share data S2. Then, the key recovery terminal module 103 obtains the confidential share data S3 from the external storage device 400 (S416), uses the confidential share data S2 and S3 to combine the private key (S418), and uses the public key to verify whether the private key is correct (S420). If the verification is incorrect, the process ends. If the verification is correct, the key recovery terminal module 103 uses the secret sharing algorithm to re-decompose the private key into the secret sharing data S1', S2', and S3' (S422), and the secret sharing data S1', S2 'And S3' are different from the aforementioned confidential share data S1, S2, and S3. Next, the key recovery terminal module 103 encrypts the confidential share data S2' with the password entered by the user to generate the cipher text of the confidential share data S2' (S424), and signs the public key and the confidential share data with the private key The ciphertext and account address of S2' are used to generate a digital signature (S426), and the ciphertext, account address and digital signature of the public key, confidential share data S2', and the digital signature are sent to the server 300 (S428).

Then, the key recovery server module 303 of the server 300 receives the public key, the ciphertext of the confidential share data S2', the account address, and the digital signature from the terminal device 100 (S430), and verifies the digital signature with the public key Chapter (S432). If the verification is wrong, the process ends. If the verification is correct, the key recovery server module 303 replaces the cipher text of the confidential share data S2 in the registration data corresponding to the account address with the cipher text of the confidential share data S2' (S434), and sends the reply result To the terminal device 100 (S436).

Then, the key recovery terminal module 103 of the terminal device 100 receives the response result from the server 300 (S438), and uses the biometric access control mechanism to store the confidential share data S1' in the terminal device 100 to replace the confidential share Data S1 (S440), and store confidential shared data S3' externally The storage device 400 or another external storage device replaces the confidential shared data S3 (S442). The process ends here.

Please refer to Figure 5, which is a flowchart of an unsupervised blockchain transaction method according to an embodiment of the present invention. When the server 300 cannot provide services due to the Internet or other reasons, the user can activate the blockchain transaction terminal module 102 on the terminal device 100 and enter the sender address, recipient address, and transaction amount of the blockchain transaction. News. For example, the sender address can be the user's account address. Next, the blockchain transaction terminal module 102 obtains the transaction information input by the user (S502), and obtains the confidential share data S1 kept by the terminal device 100 through the biometric access control mechanism (S504), where if used If the user does not pass the biometric identification, the process ends. If the user passes the biometric identification, the blockchain transaction terminal module 102 can obtain the confidential share data S1. Then, the blockchain transaction terminal module 102 obtains the confidential share data S3 from the external storage device 400 (S506), uses the confidential share data S1 and S3 to combine the private key (S508), and uses the private key to sign the transaction information to generate Digital signature (S510), and then use the public key to verify the digital signature (S512). If the verification of the digital signature is incorrect, the process ends. If the verification is correct, the blockchain transaction terminal module 102 transmits the transaction information to the blockchain 500 to complete the blockchain transaction (S514), and displays the transaction result (S516). The process ends here.

Please refer to FIG. 6A and FIG. 6B, which are flowcharts of a password reset method according to an embodiment of the present invention. When the user forgets the password of the confidential share data S2, the password reset terminal module 104 of the terminal device 100 can be activated. Then, the password reset terminal module 104 obtains the confidential share data S1 kept by the terminal device 100 through the biometric identification access control mechanism (S602), where if the user does not pass the biometric identification, the process ends. If the biometric identification is used, the password reset terminal module 104 can obtain the confidential share data S1. Then, the password reset terminal module 104 obtains the confidential share data S3 from the external storage device 400 (S604), and uses the combination of the confidential share data S1 and S3 The private key (S606) uses the public key to verify the correctness of the private key (S608). If the verification of the private key is incorrect, the process ends. If the verification is correct, the password reset terminal module 104 uses the secret sharing algorithm to re-decompose the private key into the secret sharing data S1", S2" and S3" (S610), where the secret sharing data S1" , S2" and S3" are different from the aforementioned confidential shared data S1, S2, and S3, and also different from the aforementioned confidential shared data S1', S2', and S3'. Then, the password reset terminal module 104 encrypts the confidential share data S2" with the password entered by the user to generate the cipher text of the confidential share data S2" (S612), and signs the public key and the confidential share data with the private key The ciphertext of S2" and the account address are used to generate a digital signature (S614), and the ciphertext of the public key, the confidential share data S2", the account address and the digital signature are sent to the server 300 (S616).

Then, the password reset server module 304 of the server 300 receives the public key, the ciphertext of the confidential share data S2", the account address, and the digital signature from the terminal device 100 (S618), and verifies the digital with the public key Signature (S620). If the verification of the digital signature is incorrect, the process ends. If the verification is correct, the password resetting server module 304 replaces the registered information corresponding to the account address with the cipher text of the secret holding data S2" The secret in S2 holds the ciphertext of the data S2 (S622), and transmits the reset result to the terminal device 100 (S624).

Then, the password reset terminal module 104 of the terminal device 100 receives the reset result (S626), and uses the biometric access control mechanism to store the confidential share data S1" in the terminal device 100 to replace the confidential share data S1 ( S628), and store the confidential share data S3" in the external storage device 400 or another external storage device to replace the confidential share data S3 (S630). The process ends here.

In summary, the present invention adopts the security mechanism of confidentiality separation, multi-factor authentication and the third-party supervision framework process to achieve the following advantages:

First, compared with the conventional technology, the present invention avoids various security concerns caused by escrow users' private keys, such as guarding theft and hacking.

Second, the present invention improves the key loss or stolen problem caused by the user's self-keeping of the private key. When the user loses the key or password, the key recovery operation can be performed, and the virtual currency can also be avoided. steal.

Third, the blockchain transaction program of the present invention adopts a third-party supervision structure process, and has the security characteristics of transparent and verifiable and decentralized multi-factor verification.

The above-mentioned embodiments only exemplarily illustrate the principles and effects of the present invention, and are not intended to limit the present invention. Anyone who is familiar with this technique can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the rights of the present invention should be listed in the scope of patent application described later.

10: Blockchain key custody and transaction supervision system

100: terminal equipment

101: Key share registration terminal module

102: Blockchain transaction terminal module

103: Key recovery terminal module

104: Password reset terminal module

200: private key

300: server

301: Key registration server module

302: Transaction Supervision Servo Module

303: Key Recovery Servo Module

304: Password reset servo module

400: External storage device

500: Blockchain

600: digital signature

S1~S3: Confidential holding information

Claims (11)

A terminal device for producing corresponding public keys and private keys. The terminal device includes: a key share registration terminal module, which is used to generate a first secret based on the private key using a secret share algorithm The share data and the second secret share data, the first mechanism is used to encrypt the second secret share data to generate the ciphertext of the second secret share data, and the private key is used to sign the public key, the second After the ciphertext and account address of the confidential shared data are generated to generate the first digital signature, the public key, the ciphertext of the second confidential shared data, the account address and the first digital signature are sent to The server then uses the second mechanism to store the first secret shared data in the terminal device. For example, the terminal device described in item 1 of the scope of patent application further includes: a blockchain transaction terminal module for obtaining the first confidential share data through the second mechanism, and receiving the second confidential share from the server Use the first mechanism to decrypt the ciphertext of the second secret share data to obtain the second secret share data, use the first secret share data and the second secret share Combine the private key with the data, use the private key to sign the first transaction information and the transaction identification code to generate a second digital signature, and then the first transaction information, the transaction identification code, and the second digital signature Send to the server for blockchain transactions. For example, the terminal device described in item 1 of the scope of patent application, wherein the key share registration terminal module is further used to use the secret share algorithm to decompose the private key into the first secret share data, After the second secret share data and the third secret share data, the third secret share data is stored in an external storage device. The terminal equipment described in item 3 of the scope of patent application includes: The key recovery terminal module is used to obtain the account address, send the account address to the server, receive the ciphertext of the public key and the second secret shared data from the server, and use the first A mechanism to decrypt the ciphertext of the second secret share data to obtain the second secret share data, obtain the third secret share data from the external storage device, and use the second secret share data and the third secret Combine the shared data with the private key, use the public key to verify the private key, and use the secret sharing algorithm to re-decompose the private key into the fourth secret sharing data, the fifth secret sharing data, and The sixth secret share data, use the first mechanism to encrypt the fifth secret share data to generate the cipher text of the fifth secret share data, and use the private key to sign the public key and the fifth secret share The ciphertext of the data and the account address are used to generate the third digital signature, and the public key, the ciphertext of the fifth secret shared data, the account address and the third digital signature are sent to the server , Using the second mechanism to store the fourth confidential share data in the terminal device to replace the first confidential share data, and store the sixth confidential share data in the external storage device or another external storage device to Replace the third secret holding information. Such as the terminal device described in item 3 of the scope of patent application, wherein the blockchain transaction terminal module is further used to obtain second transaction information, obtain the first confidential share data through the second mechanism, and store it from the external The device obtains the third secret share data, uses the first secret share data and the third secret share data to combine the private key, and uses the private key to sign the second transaction information to generate a fourth digital signature , Verify the fourth digital signature with the public key, and then send the second transaction information to the blockchain to complete the blockchain transaction. For example, the terminal device described in item 3 of the scope of patent application further includes: a password reset terminal module for obtaining the first secret share data through the second mechanism, and obtain the third secret share from the external storage device Use the first secret share data and the third secret share data to combine the private key, use the public key to verify the private key, use the secret share to perform Algorithm, re-decompose the private key into seventh secret share data, eighth secret share data, and ninth secret share data, and use the first mechanism to encrypt the eighth secret share data to generate the eighth secret Use the private key to sign the public key, the ciphertext of the eighth secret shared data, and the account address to generate a fifth digital signature. The public key, the eighth The ciphertext of the confidential share data, the account address and the fifth digital signature are sent to the server, and the second mechanism is used to store the seventh confidential share data in the terminal device to replace the first confidential share Storing the ninth secret share data in the external storage device or another external storage device to replace the third secret share data. A server comprising: a key registration server module for receiving a public key from a terminal device, the ciphertext of the first secret shared data generated according to the private key corresponding to the public key, an account address, and the first A digital signature, the first digital signature is verified with the public key, and then the account address is used as an index to create and store registration data, where the registration data includes the public key and the first secret share data Ciphertext; and transaction supervision server module, used to receive transaction information from the terminal device, use the sender address in the transaction information as an index to obtain the public key and the first in the registration data corresponding to the sender address A ciphertext of a secret shared data is generated, a transaction identification code is generated, and the ciphertext of the first secret shared data and the transaction identification code are transmitted to the terminal device, and the transaction information and the transaction identification code are received from the terminal device And the second digital signature, verify the second digital signature with the public key, and then send the transaction information to the blockchain to complete the blockchain transaction. A server comprising: a key registration server module for receiving a public key from a terminal device, the ciphertext of the first secret shared data generated according to the private key corresponding to the public key, an account address, and the first A digital signature, with the public The key verifies the first digital signature, and then uses the account address as an index to create and store registration data, where the registration data includes the public key and the ciphertext of the first secret shared data; and key recovery The server module is used to receive the account address from the terminal device, use the account address as an index to obtain the public key and the first secret share data in the registration data corresponding to the account address Ciphertext, sending the public key and the cipher text of the first secret shared data to the terminal device, and receiving the public key from the terminal device and the secret of the second secret shared data generated based on the private key Text, the account address and the third digital signature, verify the third digital signature with the public key, and then replace the registered information corresponding to the account address with the ciphertext of the second secret shared data The ciphertext of the first secret shared data. A server comprising: a key registration server module for receiving a public key from a terminal device, the ciphertext of the first secret shared data generated according to the private key corresponding to the public key, an account address, and the first A digital signature, the first digital signature is verified with the public key, and then the account address is used as an index to create and store registration data, where the registration data includes the public key and the first secret share data And a password reset server module for receiving from the terminal device the public key, the cipher text of the third secret shared data generated according to the private key, the account address and the fifth digital signature Chapter, verify the fifth digital signature with the public key, and replace the cipher text of the first secret share data in the registration information corresponding to the account address with the cipher text of the third secret share data . A method for key sharing and registration is executed by a terminal device. The method includes: producing a corresponding public key and a private key; using a secret sharing algorithm to generate the first secret sharing data according to the private key, and Second secret holding information; Use the first mechanism to encrypt the second secret shared data to generate the ciphertext of the second secret shared data; use the private key to sign the public key, the ciphertext of the second secret shared data, and the account address To generate a first digital signature; send the public key, the ciphertext of the second secret shared data, the account address, and the first digital signature to the server; and use the second mechanism to send the first digital signature Confidential share information is stored in the terminal device. A key registration and transaction method, executed by a server, the method comprising: receiving a public key from a terminal device, the ciphertext of the first secret shared data generated according to the private key corresponding to the public key, and the account address And the first digital signature; use the public key to verify the first digital signature; use the account address as an index to create and store registration data, where the registration data includes the public key and the first secret share The ciphertext of the data; the transaction information is received from the terminal device; the sender address in the transaction information is used as an index to obtain the public key in the registration data corresponding to the sender address and the ciphertext of the first secret shared data ; Generate a transaction identification code, and then transmit the ciphertext of the first secret shared data and the transaction identification code to the terminal device; receive the transaction information, the transaction identification code and the second digital signature from the terminal device; and Use the public key to verify the second digital signature, and then send the transaction information to the blockchain to complete the blockchain transaction.

Images