CN107230076B

CN107230076B - Method and system for online payment of digital currency

Info

Publication number: CN107230076B
Application number: CN201610178583.6A
Authority: CN
Inventors: 姚前; 李会锋; 温信祥; 李连三; 王栋兵; 刘浩; 赵欣; 唐晓雪; 刘文舒
Original assignee: Digital Currency Institute of the Peoples Bank of China
Current assignee: Digital Currency Institute of the Peoples Bank of China
Priority date: 2016-03-25
Filing date: 2016-03-25
Publication date: 2021-02-12
Anticipated expiration: 2036-03-25
Also published as: CN107230076A

Abstract

The invention provides a method and a system for paying digital currency on line, which can flexibly and conveniently trade the digital currency. The method comprises the following steps: the first user terminal extracts digital currency with the amount equal to the amount specified by the payment instruction according to the received payment instruction, generates a first request and sends the first request to the commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency; after receiving the first request, the commercial bank digital currency system generates a second request and then sends the second request to the central bank digital currency system; the central bank digital currency system executes the operation of the preset item according to the second request and returns the indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency; the commercial bank digital currency system sends the digital currency to a second user terminal; wherein the first request and the second request are for making owner changes to the digital currency.

Description

Method and system for online payment of digital currency

Technical Field

The invention relates to the technical field of computer networks and computer software, in particular to a method and a system for paying digital currency online.

Background

Digital currency is currency that converts cash values into a series of electronically encrypted serial numbers, and the security of the currency itself relies on cryptographic algorithms to protect it. In the aspect of cryptographic algorithm, the security of the digital currency system relates to symmetric cipher, asymmetric cipher, message digest algorithm and identity-based cryptographic system, and the overall security of the cryptographic system, the selection of cryptographic algorithm, the implementation of cryptographic algorithm, the design of interactive protocol, the compatibility of international and domestic standards, etc. must be deeply considered in the aspect of system implementation to ensure the transaction security of the digital currency.

With the development and popularization of the mobile internet, the mobile payment industry is rapidly changed and promoted, business modes based on various technologies such as the mobile internet, NFC, HCE, Token, biological recognition and the like are continuously innovated, application scenes are continuously expanded and enriched, and the integrated development of online and offline businesses is accelerated. The new mobile payment technology provides diversified and convenient payment services for users, and leads the transformation, upgrading and development of industries such as communication, finance, internet and the like. The wide development prospect of mobile payment has become a wide consensus of the whole industry, and the mobile payment is considered to be an important cut-in point on a connecting line. The transaction system of digital currency should be designed with mobile payment as the core for business model.

In mobile payment business mode, the key storage carrier for digital currency can be provided by hardware SE modules (security modules), HCEs and TEEs. The hardware SE is widely applied to the prior debit and credit cards and electronic cash because the safe computing environment provided by the hardware SE is approved by the field of financial transactions, and has wide user foundation, good acceptance environment and use habit. With the continuous development of mobile payment technology, the form of the SE module is changed, and new solutions are practiced.

On a data transmission channel between a transaction acceptance terminal (POS machine) and a payment instrument (such as between a card and a mobile phone), there are currently a plurality of transmission modes: RF radio frequency communication, text messaging, code scanning, sound waves, photons, coexistence of multiple modes provides convenience for communication between payment carriers.

The authentication method can be classified into password-based authentication, password + smart card-based authentication, and biometric feature (fingerprint, face) based authentication. The password and the biometric authentication are mostly used for far-field payment, and the smart card authentication is mostly used for near-field payment.

Cloud computing is the mainstream direction of a background server side in the future, and a background system of digital currency should adopt a cloud-based solution.

In electronic commerce, the requirements for digital currency are different due to different roles: customers require digital currency to be convenient to use, safe to store and anonymous; the merchant requires the digital currency to be certifiable and to be exchanged into real currency; the bank requires that the digital money cannot be illegally used and forged, and thus, the digital money D-RMB should have the following characteristics:

1. safety: can prevent any party in the business from changing or illegally using the digital currency;

2. non-repeatable expense: the digital currency can be used only once, and the repeated cost can be easily checked;

3. controllable anonymity: the bank and the merchant are mutually hooked and cannot track the use of the digital currency, and the system cannot be required to link the purchasing behaviors of users of electronic cash together, so that the purchasing history of the users of the digital currency is concealed, but the issuer of the digital currency can track the use of the digital currency;

4. non-forgeability: digital currency that the user cannot counterfeit;

5. fairness: the payment process is fair, so that the transaction of both parties is successful or no loss is generated between both parties, and a certain transaction party is prevented from being damaged in the transaction;

6. compatibility: the issuing process and circulation link of digital currency in the D-RMB system refer to the issuing and circulation of physical currency as much as possible.

And for digital currency, the currency can be adapted to various use scenes of the existing currency and can be freely exchanged with the existing currency.

Online payment is a form of electronic payment, which is an instant payment method through a payment interface provided by a third party and a bank, and the bank provides a business of online fund settlement service for the payment interface. The method has the advantages that the funds can be directly transferred from the bank card of the user or the account of other third-party payment platforms to the account of the website or the account of both transaction parties, the remittance, the transfer or the payment operation can be immediately realized, and the manual confirmation is not needed. The online payment can be carried out between two online transaction parties by adopting various electronic payment modes such as credit cards, electronic wallets, electronic checks, electronic cash and the like, the expenditure of the transaction is saved by adopting the mode of online electronic payment, and the online payment is safe, quick and convenient.

With the continuous development of computer technology, mobile terminal devices are also abundant, and a mobile terminal or a mobile communication terminal refers to a computer device that can be used in mobile, and may include a notebook, a POS machine, even a vehicle-mounted computer, and the like, in addition to a mobile phone or a smart phone and a tablet computer having a plurality of application functions. However, at present, the use of digital currency usually uses bank cards (magnetic cards, smart cards) as media, which greatly limits the widespread use and circulation of digital currency.

Disclosure of Invention

In view of the above, the present invention provides a method and system for online payment of digital currency to solve the above-mentioned shortcomings in the prior art. Other objects, effects, and advantages of the present invention can be derived from the embodiments.

To achieve the above object, according to one aspect of the present invention, there is provided a method of paying digital money online.

The method for paying digital currency online comprises the following steps: the method comprises the steps that a first user terminal extracts digital currency with the amount equal to the amount specified by a payment instruction according to the received payment instruction, generates a first request and sends the first request to a commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency, and the first request is used for carrying out owner change on the digital currency; after receiving the first request, the commercial bank digital currency system generates a second request and then sends the second request to a central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency; the central bank digital currency system executes the operation of a preset item according to the second request and returns the indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency; and after receiving the indication of successful operation, the commercial bank digital currency system sends the digital currency to a second user terminal.

Optionally, before the generating of the second request, the commercial bank digital currency system further comprises: the merchant bank digital currency system confirms that the digital currency included in the first request is legitimate, that the amount of the digital currency withdrawn is equal to the payment amount, and that the second user terminal has completed registration in the digital currency system.

Optionally, before the central bank digital currency system performs an operation of a preset item according to the second request, the central bank digital currency system further includes: the central bank digital currency system confirms that the owner of the digital currency included in the second request is the first user terminal.

Optionally, the operation of the owner change includes: and modifying the owner of the digital currency from the first user terminal to the second user terminal.

Optionally, after the commercial bank digital currency system sends the digital currency to the second user terminal, the method further includes: and the commercial bank digital currency system sends prompt information of successful transaction to the first user terminal and the second user terminal.

Optionally, the digital currency is a character string; the user terminal is a mobile phone, and the identifier of the user terminal is a mobile phone number.

According to another aspect of the present invention, there is provided a system for paying digital money online.

The invention discloses a system for paying digital currency online, which comprises a first user terminal, a commercial bank digital currency system, a central bank digital currency system and a second user terminal, wherein the first user terminal is used for extracting digital currency with the amount equal to the amount specified by a payment instruction according to the received payment instruction, generating a first request and sending the first request to the commercial bank digital currency system, the first request comprises a second user terminal identifier and the digital currency, and the first request is used for carrying out owner change on the digital currency; the commercial bank digital currency system is used for generating a second request after receiving the first request and then sending the second request to the central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency; and sending the digital currency to a second user terminal upon receiving an indication that the operation was successful from the central bank digital currency system; the central bank digital currency system is used for receiving the second request, executing operation of a preset item according to the second request and returning an indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency; the second user terminal is used for receiving the digital currency sent by the commercial bank digital currency system.

Optionally, the commercial bank digital currency system, prior to generating the second request, is further to: the merchant bank digital currency system confirms that the digital currency included in the first request is legitimate, that the amount of the digital currency is equal to the payment amount, and that the second user terminal has completed registration in the digital currency system.

Optionally, the central bank digital currency system, before performing the operation of the preset item according to the second request, is further configured to: the central bank digital currency system confirms that the owner of the digital currency included in the second request is the first user terminal.

Optionally, the commercial bank digital currency system, after sending the digital currency to the second user terminal, is further configured to: and the commercial bank digital currency system sends prompt information of successful transaction to the first user terminal and the second user terminal.

According to the technical scheme of the invention, the digital currency can be flexibly and conveniently transacted by using the user terminal equipment to carry out the operation of online payment of the digital currency; multiple times of verification are carried out in each link, and related information is organized and sent according to transaction rules, so that the security of transaction can be enhanced; the owner of the digital currency is changed through the digital currency system of the central bank, so that the central bank can record the transaction condition of the digital currency in a unified way, and the safety and unified management of the digital currency are realized. The digital currency is intuitive, user-friendly and low in cost, various user operations are facilitated, and the user experience is good; reliable safety guarantee can be provided, hardware manufacturers are not completely depended on, and popularization is more convenient; electronic transaction records can be provided, and financial statistics of users is facilitated; the privacy of the user is ensured, and the risk of illegal transactions can be effectively avoided.

Drawings

FIG. 1 is a schematic diagram of the main flow of the operation of a prefabricated card in connection with an embodiment of the present invention;

FIG. 2 is a schematic diagram of a process for a user to register a D-RMB account in connection with an embodiment of the invention;

FIG. 3 is a schematic diagram of a D-RMB transaction process relating to an embodiment of the present invention;

FIG. 4 is a diagram illustrating one configuration of an overall framework when the D-RMB digital money system provides online services according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a computer system included in a commercial bank digital currency system according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of an architecture for interconnecting a commercial bank digital currency system with external systems, in accordance with an embodiment of the present invention;

fig. 7 is a schematic diagram of the main steps of a method of paying digital money online according to an embodiment of the present invention;

fig. 8 is a schematic diagram of main components of a system for on-line payment of digital money according to an embodiment of the present invention.

Detailed Description

Exemplary embodiments of the present invention are described below with reference to the accompanying drawings, in which various details of embodiments of the invention are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.

In the embodiment of the invention, a digital currency (hereinafter referred to as D-RMB) design scheme based on crypto-mathematics is described, and the main operation mode is that a central bank and each commercial bank together build a D-RMB system in a grading way. The central bank here is a currency issuing organization, such as the chinese people's bank. In the following description, a central bank is sometimes simply referred to as a "central bank", and similarly, a commercial bank is sometimes simply referred to as a "business bank". Further, the digital money is denoted by "D_{Coin (coin)}”。

The D-RMB system is based on D_{Coin (coin)}A funds transfer system for transactions operated jointly by a central bank with commercial banks. The D-RMB system comprises a D running on a core server of a particular digital center_{Coin (coin)}The system comprises an issuing module, a client login module, a client account management module, a transaction management module, a fraud detection module and a core service module, and also comprises terminal client programs needing to interact with a core server, such as a mobile phone and a notebook computer of a user end, and also comprises a server D_{Coin (coin)}The funds-transfer system operates over an open form of electronic communications network, including the internet, mobile communications networks, and so on, nationwide. Before discussing the D-RMB system, it is clear that:

1. and the method is compatible with the current physical currency circulation. The digital currency in the D-RMB system is stored through three links, namely a digital currency issuing bank at the central bank (namely digital currency fund); the bank of the commercial bank, namely the stock digital cash of the commercial bank; and thirdly, a client application program at the user end, namely the electronic wallet. During this different process, the D-RMB registration center will complete the relevant registration operation.

D-RMB digital currency does not use blind signatures. Limited anonymous protection during use.

The 3.D-RMB digital currency can be circulated by different networks, and can be stored in various electronic equipment terminals such as mobile phones, IC card chips, notebook computers and the like in an electronic digital form, and the discussion is mainly carried out by taking the mobile phones and the IC cards as carriers to store the D-RMB digital currency, but the D-RMB digital currency is not limited to only taking the mobile phones and the IC cards as the carriers.

The payment mode for the D-RMB system design relies on the transfer of D-RMB digital currency (i.e., D: D)_{Coin (coin)}Transaction).

5, the D-RMB system is subject to the relevant system requirements of cash management in China. The specific requirements are determined by the requirements of the business department.

6. To avoid a homogeneous competition with existing billing payment systems, the D-RMB system may be designed for limited-line payments.

To facilitate the subsequent description, the following notation is given:

enc: and encrypting, namely after downloading a private key from the IBC center, a user signs the sent information with the private key of the user and encrypts the information with the public key of the other party.

And Dec: and decrypting, specifically, the user decrypts the incoming text by using the own private key, and signs and confirms the information sent by the user by using the mobile phone number of the opposite party as a corresponding public key (or a direct public key).

D_Bank: the bank is a deposit account opened in the central system of the central bank for accounting.

D_{Coin (coin)}: the D-RMB digital currency generated by the finger row according to the own encryption mechanism is a string of characters and represents a certain amount of RMB.

D_{Coin 100}: D-RMB digital currency generated by the instruction row according to an own encryption mechanism is a string of numbers and represents 100 yuan RMB, and the like, and subscript numbers represent the actual RMB amount.

B_{Account number}: the bank account number of the bank where the user is located.

H (M): the hash operation is performed on M to obtain a value, where M may be a mobile phone number, an organization code, or a string of characters and numbers.

The D-RMB is used as digital currency, established by China's bank as legal currency, issued into circulation, and used as final credit to provide guarantee to participate in exchange, remittance and consumption in national standard architecture. It is a string of codes with the same monetary meaning as the "face value" in actual circulation. D-RMB digital currency simulates the issuing and managing process of paper currency in the central row, and digital currency is generated at one time according to the issuing amount of the current digital currency in the central row in a D-RMB issuing bank.

In the design of D-RMB system, D_{Coin (coin)}The system can be generated according to the minimum unit denomination, the specific withdrawal amount of a user, the real-object currency denomination in circulation, and the specific mode which can be set in the initial process through system parameters. For the sake of closeness, the fixed denomination in circulation is taken as an example for the following explanation.

The D-RMB in the distribution library completely simulates the face value in circulation, the printing generates digital representation of 'one circle, five circle, puzzling circle, two puzzling circle, five puzzling circle, one herborist circle' and the like, and the encrypted text represents the D-RMB digital currency of the face value.

Producing D-RMB at a fixed denomination, e.g., producing a representative D-RMB according to the fifth set (production required: D)_{Coin 1}、D_{Coin 5}、D_{Coin 10}、D_{Coin 20}、D_{Coin 50}、D_{Coin 100}) Then:

step 1: six basic encryption ciphers are generated from the master cipher and the numbers 1, 5, 10, 20, 50 and 100, respectively.

Step 2: the system random number is generated by a hash algorithm. The random number may be understood as a crown number.

And step 3: the encryption password is generated by encrypting a basic encryption password representing different currency values and a random number.

And 4, step 4: the secret password is signed by the private key of the central row, and represents the generation of a new coin. If the payee wants to provide D representing 100 Yuan RMB_{Coin 100}Then, in the actual withdrawal process, the unique random number representing 100 yuan and the corresponding basic encryption password can be encrypted to generate an encryption ciphertext m, and then the secret key at the central row signs the m.

In the D-RMB system, there are a digital money issuing bank at the central bank, a digital money bank at a commercial bank, and an electronic wallet at a user side (e.g., a mobile phone). The basic content of digital money transfers includes:

(1) according to the total amount of issued digital money, digital money (i.e., the fund for digital money) is generated at the central bank and stored in the central bank.

(2) According to the demand application of the digital currency of the commercial bank, the digital currency is sent to a database of the corresponding commercial bank for storing the digital currency, namely the digital currency is sent from an issuing bank to a bank.

For example, 10 hundred million D-RMB are issued by the central row at a certain time according to the total amount of money issued, and these D-RMB are released in the issuing bank of the central row after being issued. Later, 2 billion of the 10 billion D-RMBs are extracted from the 10 billion D-RMBs according to the application of a certain bank, the extracted 2 billion D-RMBs are stored in the bank of the bank (the bank accounts for the deposit preparation money at the central bank are reduced by 2 billion, meanwhile, 2 billion D-RMBs are stored in the bank of the commercial bank, the operation of the bank accounts is equal to the payment of the current real money), and at the registration center, the owner corresponding to the digital money is changed from the central bank to the commercial bank, and the information of the corresponding operation flow and the like is recorded.

(3) When a user applies for extracting digital money, the digital money enters a storage medium (such as a mobile phone) of a user client from a bank to a circulation link, namely from the bank to an electronic wallet of the user. In the registration center, the owner corresponding to the digital currency is changed into the user by the commercial bank, and the information such as the corresponding operation flow is recorded.

(4) In the circulation link, the essence of the digital money is to transfer between the electronic purses of two users to complete payment, and the payment is divided into online transaction and offline transaction, and the detailed business process is analyzed in detail later. In the registration center, the owner corresponding to the digital currency is changed from the user 1 to the user 2, and information such as corresponding operation flow is recorded.

In the above digital money transfer process, the registration center of the D-RMB system needs to verify the validity of the transaction digital money, record the transaction flow and correct the new owner of the corresponding digital money, and register other required information (specifically determined by the business requirements).

If the IC card is used as a carrier, the work of preparing the card exists, and in the work of preparing the card, a central bank digital currency system and a commercial bank digital currency system carry out a series of operations on a D-RMB chip card containing a storage medium, and the operations mainly comprise: the central bank digital currency system generates personalized data of the D-RMB chip card according to the pre-designated content; the commercial bank digital currency system writes personal information of a user applying for the D-RMB chip card into the D-RMB chip card; the commercial bank digital currency system applies an IBC private key to the authentication system by using a user IBC public key, wherein the user IBC public key is the identification of the D-RMB chip card or the identification of the user. The main flow involved in the above operations is shown in fig. 1, and fig. 1 is a schematic view of the main flow of the operation of the prefabricated card relating to the embodiment of the present invention.

As a card base D_{Coin (coin)}The safety vector of (2), in D_{Coin (coin)}Each link of circulation is to guarantee D_{Coin (coin)}The security of (1) has a certain reinforcing effect (a separate physical carrier IC card is also referred to as a 'D-RMB chip card' for short).

(1) Production of D-RMB chip cards

The production of D-RMB chip cards must be produced by a company certified by a central bank with production qualifications for which the quantity and quality of the production manufacture is strictly controlled by the central bank (or other departments authorized by the central bank). The enterprise qualification authentication process comprises the following steps: submitting an application, examining and verifying materials, detecting a sample card, evaluating on site, authorizing qualification and the like.

(2) Personalization of D-RMB chip cards

The personalized data in the D-RMB chip card is generated by a central bank, and related departments are authorized to establish a personalized center to perform personalized operation on the newly produced D-RMB chip card.

(3) Issuing of D-RMB chip cards

The system can support real-name card issuing and anonymous card issuing.

Card issuing in a real name system: the D-RMB chip card is applied by the user, the card is issued in real name, the central bank authorizes the commercial bank to issue the card, the commercial bank checks the real name of the user and registers the related data, after the check is passed, the secondary card issuing is carried out on the D-RMB chip card of the central bank, and the personal information of the user is written into the D-RMB chip card.

Anonymous card issuing: the user directly applies the D-RMB chip card to the commercial bank, and the commercial bank can select whether to verify the identity information of the applicant according to the actual situation.

And the commercial bank selects the unique identification number of the D-RMB chip card or the mobile phone number of the user as the public key of the IBC of the user according to the actual situation, and further applies for the private key from the IBC authentication center.

The D-RMB system supports the selection of online or offline transactions using computer devices, mobile phones, POS, ATM, and Web as carriers, and the examples herein will be mainly described using mobile phones as carriers.

With regard to the mobile phone terminal, various unlocking settings such as digital passwords, graphic passwords and the like and power-on passwords can effectively protect the security of personal information on the mobile phone. With the coming of the smart phone era, various fingerprint mobile phones based on biological characteristics enter common consumer groups, different fingerprint encryption can be adopted according to different applications and different specific information, and the application of the new technologies can effectively ensure the storage safety of digital currency and related transaction information on the mobile phones.

In order to ensure the safety of the transfer of the digital currency between the mobile phones, a safety certification system needs to be introduced into the D-RMB system. The existing CA authentication center is utilized between the central bank and the financial institution, and social users (including individuals and enterprises) can utilize an IBC (Identity-Based cryptography) authentication center to perform Identity authentication.

For private keys and public keys in a central row generated in IBC and PKI, Secure Element (SE) is required to be stored in a Secure exclusive area of a mobile phone, and the SE area may be implemented by hardware (mobile phone Card change) or host Card emulation (hce). If the user adopts the card change to protect the secret key, the secret key is downloaded to the SE area of the mobile phone in the card change application process.

In the construction process of the authentication system, the PKI system can be designed according to the traditional PKI authentication system, the PKI system is uniformly established, a CA (certificate authority) provides a strong digital signature, the PKI system can also be designed according to an IBC (identity based certificate), and a user mobile phone number is taken as a public key to manage, so that the PKI system seems to be more convenient and fast especially for off-line payment of a tiny amount. All business introductions below will be explained in terms of IBC authentication. Fig. 2 is a schematic diagram of a process of registering a D-RMB account by a user in connection with an embodiment of the present invention, and fig. 3 is a schematic diagram of a D-RMB transaction process in connection with an embodiment of the present invention.

When registering a user, the following procedures are mainly performed: after receiving the identification information sent by the terminal equipment used by the user, the central bank digital currency system sends application software suitable for the terminal equipment to the terminal equipment; the central bank digital currency system sends an IBC public key and an IBC private key to the terminal equipment running the application software, and then performs identity authentication session and session key negotiation with the terminal equipment; and the central bank digital currency system receives the user account sent by the terminal equipment running the application software and then sends a user password to the terminal equipment.

50-dollar digital currency D for online payment of user 1 to user 2_{Coin 50}For example, to illustrate the involvement of D in the transaction process_{Coin 50}Security protocol at transfer time. The user 1 logs in the APP of the mobile phone of the user to complete the identity authentication of the two parties with the D-RMB system, and executes a transaction protocol after a session key is negotiated in an SSL mode. Taking a mobile phone number as an IBC public key as an example, at a mobile phone client of the user 1: mobile phone client automatically selects 50-yuan digital currency D_{Coin 50}The related information M is organized according to transaction rules, where M may be designed as: m | | | mobile phone number 1| | | D ═ transaction code | | |_{Coin 50}The | | | payment amount | | | cell-phone number 2, the hash operation of the information section gets the message H (M), sign H (M) with the private key that the cell-phone number 1 corresponds to gets m, in order toAnd the encryption mode sends M to the D-RMB system.

D-RMB system end: decrypting the message according to the protocol to obtain M | M, verifying the validity of the message, namely verifying M and H (M) by using a public key, namely a mobile phone number 1, and preventing the message from being tampered in the transmission process; verification D_{Coin 50}If it is legal, the transaction rule and related information are read and the corresponding operation is executed, which mainly includes the change of registration center after service verification_{Coin 50}And the owner changes the bound mobile phone number 1 into a mobile phone number 2 and records the corresponding running water. Sending D_{Coin 50}And the mobile phone 2 is given, and the successful transaction is prompted to the two parties.

In order to further enhance anonymity, the mobile phone number corresponding to the right of the registration center can be changed into the hash of the mobile phone number (i.e. borrowing the address of the bitcoin wallet, which consists of public key hash), which is specifically described as follows:

the client side organizes the message unchanged, and at the mobile phone client side of the user 1: automatic selection of 50-dollar digital currency D_{Coin 50}The related information M | | M is organized according to the transaction rule, where M may be designed as M ═ transaction code | | mobile phone number 1| | | D_{Coin 50}The method comprises the steps of | | | payment amount | | | mobile phone number 2, carrying out hash operation on an information segment to obtain a message H (M), signing the message H (M) by using a private key corresponding to the mobile phone number 1 to obtain M, and sending the M | | | M to a D-RMB system in an encryption mode.

D-RMB system end: decrypting the message according to the protocol to obtain M | M, verifying the validity of the message, namely verifying M and H (M) by using a public key, namely a mobile phone number 1, and preventing the message from being tampered in the transmission process; verification D_{Coin 50}If it is legal, the transaction rule and related information are read and the corresponding operation is executed, which mainly includes the change of registration center after service verification_{Coin 50}And the owner changes the bound H (mobile phone number 1) into H (mobile phone number 2), and records the corresponding running water. Sending D_{Coin 50}And the mobile phone 2 is given, and the successful transaction is prompted to the two parties.

With respect to system convenience design, in embodiments of the present invention, there are a variety of interfaces and portals for transactions. In the scene example process, only one entrance is used for example, if a registered user transacts business in a commercial bank, the user can directly log in the D-RMB system by taking a mobile phone, and the commercial bank can log in the D-RMB system.

Regarding the problem of the account password, whether the user needs to input the account password can be flexibly designed according to the business needs. Based on the D-RMB system being a micropayment system, the proposal may consider whether to set a password freely selected by the user. In the description of the embodiments of the present invention, the description is made without leaving a password, but in the implementation, the description may be made according to the actual situation.

Regarding the problem of the client application program, the user can download the corresponding client application program on the corresponding terminal (such terminal software is equivalent to a "wallet" tool), for example, the mobile phone user can download the D-RMB mobile phone terminal program (also called as mobile phone APP). The terminal program may be designed to include the following functions: one is D_{Coin (coin)}And (5) management functions. (1) The terminal program can automatically count all D_{Coin (coin)}An amount; (2) can automatically find D in the wallet according to the amount of money input by the user_{Coin (coin)}Combining and automatically selecting matched D in the payment process_{Coin (coin)}Performing a transaction; (3) after the transaction is completed, D for participating in expenditure is automatically selected_{Coin (coin)}Deleting; (4) the digital currency which is not checked in the center row in the wallet can be automatically distinguished from the checked and registered digital currency. And secondly, completing the functions required by the business, such as business functions of online registration application, extraction, payment, cashing, offline payment request and the like, and automatically completing operations of public key encryption, private key signature and the like in the transaction process.

In general, the core elements of the D-RMB system are a currency, two types of libraries and three centers:

one type of coin, namely "D-RMB", also known as D_{Coin (coin)}In particular to a series of encrypted digital strings representing a specific amount signed by a central line.

Two types of libraries: respectively an issuing bank and a banking bank of the D-RMB. The digital currency is expressed as digital currency fund at the central row in the issuing bank; the digital currency is presented in the bank vault as digital cash in stock by the commercial bank.

Three centers: the first is a registration center (including currency generation, circulation, counting, check and death whole process record); the other two are the certification centers, namely the CA certification center (Based on the PKI system, centralized management of the certificates of organizations and users, such as CFCA) and the IBC certification center, namely the certification center established Based on the cryptographic technology of identification (Identity-Based cryptography). Two tables can be designed in the registration center, one is a digital currency ownership registration table for recording the attribution of digital currency, and the other is a transaction flow meter.

The identity-based cryptosystem IBC in the embodiment of the invention can directly use the identity of the user as a public key, the authentication of the public key is not dependent on a certificate any more, the use and management of the secret key are simplified, and the identity-based cryptosystem IBC has the advantages of no catalogue, convenience in use, easiness in maintenance and the like.

For the identity identification, the individual user can adopt a mobile phone number, and also can adopt an E-mail address matched with the mobile phone or other converted character strings, so that the individual user can conveniently memorize the identity identification, and other people can not know the identity identification), and the purpose of controllable anonymity can be achieved. Enterprise users may use an organization code or a custom code as an identity of the IBC center, and the identity is used as a public key, which is described in the following example only by using a mobile phone number as an example.

The D-RMB system is a hierarchical system, namely, a central bank and each commercial bank are built together, the central bank digital currency system is a computer system which is operated and maintained by the central bank or a designated organization of the central bank and is used for processing information about digital currency, the main functions of the central bank digital currency system comprise the responsibility for issuing and verifying and monitoring the digital currency, the commercial bank is a computer system which is operated and maintained by the commercial bank or the designated organization of the commercial bank and is used for processing the information about the digital currency, the commercial bank performs various functions about the currency of the existing bank, namely bank functions, and the D-RMB system mainly comprises the responsibility for directly facing the society after applying for the digital currency from the central bank, and meets various requirements for providing digital currency circulation services.

In the basic structure of the digital money system according to the embodiment of the present invention, the digital money system mainly includes a central bank digital money system, a commercial bank digital money system (which may be a plurality of commercial bank digital money systems in practice), and an authentication system. The central bank digital currency system is used for generating and issuing digital currency and performing ownership registration on the digital currency; a commercial bank digital currency system for performing banking functions on digital currency; the authentication system is used for providing authentication for interaction between the central bank digital currency system and a terminal device used by a user of digital currency, and for providing authentication for interaction between the central bank digital currency system and the commercial bank digital currency system.

Fig. 4 is a schematic diagram of one structure of an overall framework when the D-RMB digital money system provides an online service according to an embodiment of the present invention.

In the overall framework shown in fig. 4, the core of the D-RMB digital currency operation is the commercial bank digital currency system, and the central bank D-RMB system is connected to the merchant bank D-RMB system and is responsible for transaction confirmation. The commercial D-RMB system and the central D-RMB system can fully utilize advanced cloud technology to carry out decentralized deployment, and meanwhile, the commercial D-RMB system is interconnected and communicated with internal systems thereof.

As can be seen from fig. 4, the commercial bank digital currency system is connected to other networks or systems at a core location, and can be constructed using "cloud computing" technology. The D-RMB digital currency system supports network data of various protocols, such as Virtual Private Networks (VPNs), private lines, satellite networks, Public Switched Telephone Networks (PSTN), global system for mobile communications (GSM), Public Land Mobile Networks (PLMNs), and different networks can be directly or indirectly connected with the central server.

The business digital currency system is connected with a central bank registration center and also comprises four basic functional modules: the system comprises an electronic wallet function module for automatically tracking the amount of D-RMB digital money owned by an account, a supervision function module for automatically tracking the transfer of the D-RMB digital money among all parties and identifying suspicious transactions, an electronic banking function and a Customer Relationship Management (CRM) function module.

The logical layout of the server in the commercial bank digital currency system adopts a three-layer architecture mode: namely, the presentation layer, namely, the front-end application system 200; a back-end application system 202, also called a session layer, an application layer, or a transaction logic layer; the background database 204 is a data layer. A corresponding physical machine deployment block diagram is shown in fig. 5, and fig. 5 is a schematic diagram of a computer system included in a commercial bank digital currency system according to an embodiment of the present invention.

The front-end application 200 is an application, such as a Web application, deployed here as a Web server cluster, for running users that interact directly with money transfer service operators. The user and money transfer service operator interact with these applications through a user interface, such as a personal computing device 114 and a mobile device. The user can access the functions of the electronic wallet, the supervision function, the virtual bank function and the CRM function through the entrance. Open source software such as apache can be adopted on the Web server.

The back-end application system 202 is mainly used to support the back-end functions of the front-end application system 200, such as data access, business logic processing, and the like. This area deploys the application servers. D-RMB digital currency can use JBOSS tool under Red Hat open source system to develop applications.

The back-office database 204 is essentially a database management system DBMS that includes a data repository that stores sales transactions for transferring money, customer profiles, and other data needed to track and regulate the central bank digital money system for D-RMB digital money transfers. The D-RMB digital currency system can be designed using Oracle's DBMS as a database system.

The digital currency system of the business department can be interconnected with an external system, and an alternative architecture is shown in fig. 6, and fig. 6 is a schematic diagram of an architecture for interconnecting the digital currency system of the commercial bank with the external system according to the embodiment of the invention.

The above figure illustrates the physical and logical layout of a commercial bank digital currency system with various external system adapters including central bank servers, other commercial bank systems. There are monetary transaction data adapters, cell phone service provider SMS gateway adapters, retailer system adapters, ATM data supply system adapters, etc. by means of this interconnection the central server can accept digital monetary transfer requests and responses from each type of entity. Fig. 6 illustrates well the support of the D-RMB digital currency system to various channels, different protocol networks, which is also a manifestation of its open nature.

The following describes various business processes of operating the D-RMB by taking a user mobile phone as a terminal mode and a mobile phone number as an identity, and mainly describes the processes of downloading and logging, extracting, paying, depositing, cashing and the like by a client side and a face-to-face transaction mode. The client login, extraction and cashing processes of the user require that the user needs to complete in an online state, the payment process can be divided into online payment and offline payment, so a plurality of scene states and corresponding processes are formed, and the aim of each process is achieved by a series of operation steps. In addition to the mobile phone, other intelligent terminals which may appear at present and in the future can be used as carriers of the D-RMB and perform various service processes.

The outline of the flow (hereinafter, "flow explanation") and the scene state (hereinafter, "scene explanation") and the steps of realizing the flow in the scene (hereinafter, "step explanation") are described below one by one, respectively.

The downloading and logging of the user client side are executed according to the following procedures:

description of the flow: the user downloads an APP installation program provided by a commercial bank through a mobile phone to log in the D-RMB system process.

Scene description: and a qualified commercial bank (such as an industrial and commercial bank) is connected with the CA authentication center, the IBC authentication center and the registration center to provide digital currency services for the user. The user downloads an APP installation program provided by the commercial bank through the mobile phone to log in the commercial bank D-RMB system.

Description of the steps:

step 1, a user logs in a D-RMB system page of a business (such as a Chinese industrial and commercial bank) by a mobile phone, downloads a mobile phone APP installation program provided by the commercial bank, and can directly log in a user with an existing account number (IBC authentication center); for a new user, account initialization operation needs to be performed first;

step 2, initialization: inputting related information (such as name, address, e-mail address, mobile phone number, identity card number, registered account number, namely mobile phone number) into a page, and clicking to send the information;

step 3, commercial bank: connecting with an IBC authentication center, creating a unique account number of the D-RMB digital currency system for the user, and verifying the uniqueness of the account number at the IBC authentication center. An individual user can adopt a mobile phone number to generate a user initial login password and send the user initial login password to a user mobile phone; the IBC center generates a private key of a user according to the mobile phone number, the public key is the mobile phone number of the user, and the public key is used as an account number for transaction circulation;

step 4, the user mobile phone end: and activating an account after receiving the initial login password, downloading a user private key and a public key of a central bank to a mobile phone security protection area, and modifying the login password by logging in the mobile phone APP again to complete initialization.

If the user applies for changing the mobile phone card, the key can be pre-planted in the SE area of the card in advance.

The method and system for online payment of digital money according to the embodiments of the present invention will be described in further detail below.

Fig. 7 is a schematic diagram of main steps of a method for paying digital money online according to an embodiment of the present invention. As shown in fig. 7, the method for paying digital money online of the present invention mainly includes the following steps S71 to S74.

Step S71: the first user terminal extracts digital currency with the amount equal to the amount specified by the payment instruction according to the received payment instruction, generates a first request and sends the first request to the commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency, and the first request is used for carrying out owner change on the digital currency;

step S72: after receiving the first request, the commercial bank digital currency system generates a second request and then sends the second request to the central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency;

step S73: the central bank digital currency system executes the operation of the preset item according to the second request and returns the indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency;

step S74: the commercial bank digital currency system sends the digital currency to the second user terminal after receiving the indication of successful operation.

According to the technical solution of the present invention, before the commercial bank digital money system generates the second request in step S72, it is further required to confirm that the digital money included in the first request is legal, the amount of the extracted digital money is equal to the payment amount, and the second user terminal has completed registration in the digital money system. In the confirmation of the above information, it is generally carried out by judging the validity of the digital money, judging whether the amount of the extracted digital money is equal to the payment amount, judging whether the second user terminal has completed registration in the digital money system, or the like, and when all of the above judgments are yes, step S72 is executed.

In step S73, before the central bank digital money system performs the operation of the preset item according to the second request, it is further necessary to confirm that the owner of the digital money included in the second request is the first user terminal. Also, the confirming that the owner of the digital money included in the second request is the first user terminal is performed by determining whether the owner of the digital money is the first user terminal, and if the owner of the digital money is the first user terminal, the central banking digital money system performs an operation of a preset item according to the second request.

The operation of changing the owner of the digital money extracted by the digital money system of the commercial bank included in the operation of the preset item may specifically be: and modifying the owner of the digital currency from the first user terminal to a second user terminal. In the invention, the operation of the preset item is carried out in the registration center of the central bank digital currency system, when the registration center registers the owner information of the digital currency, the corresponding owner information can be recorded as public key hash, such as H (mobile phone number), so as to enhance anonymity, or in the registration center, the public key can be set by the user, and the user can also represent the public key by a string of nonsense codes.

In addition, the operation of the preset item may further include recording corresponding transaction detail information, where the transaction detail information includes, for example: the time when the transaction occurs, the time when the owner changes, the owner information before and after the change and the like can be recorded according to different transaction contents so as to be inquired later. When a digital money transaction is performed, it is necessary to change and record owner information of a character string corresponding to the digital money in a registration center of a central bank digital money system so as to indicate that the owner of the digital money has changed.

In addition, after the digital currency is sent to the second user terminal by the commercial bank digital currency system, prompt information of successful transaction can be sent to the first user terminal and the second user terminal so as to prompt that the transaction is successfully executed.

In the technical scheme of the invention, the digital currency is a character string; the user terminal is a mobile phone, and the identifier of the user terminal is a mobile phone number. The user terminal may also comprise other network-enabled mobile devices, such as a tablet computer, etc., according to the actual usage requirement, and the identifier of the user terminal may be a custom string of unique characters or an email address, etc., for example.

The following describes the detailed steps of the method for online payment of digital money according to the present invention, taking the example that the payer 1 pays digital money to the user 2 through the mobile phone APP.

Step 1: the payment user 1 logs in the mobile phone client APP, selects the function 'payment', inputs information such as payment amount (such as 200 yuan) and payee mobile phone number (such as mobile phone number 2), and clicks 'send';

step 2: the mobile phone client side: automatically extracting digital currency D with total amount of 200 yuan according to information such as payment instruction input by the payer 1_{Coin 100}And D_{Coin 100}' in the invention, the operation of extracting digital currency by the mobile phone client is actually an application program APP installed on the mobile phone client, namely the operation of recording character strings corresponding to the digital currency is executed by the digital currency system, and related information is organized according to transaction rules and sent to a D-RMB system of a commercial bank; here, the transaction rule may include, for example: transaction code of payment operation, first user terminal identification (namely: user 1 mobile phone number), and proposedDigital money taken (D)_{Coin 100}And D_{Coin 100}'), the payment amount, and the second user terminal identification (i.e.: the mobile phone number of user 2) to form a first information segment; carrying out encryption operation (such as Hash operation) on the first information segment to obtain a second information segment; signing the second information segment by using a private key corresponding to the first user terminal identification to obtain a third information segment; the first and third pieces of information are sent to the commercial bank digital currency system in an encrypted manner. For example: assuming that the transaction code of the payment operation is F, the first user terminal identification and the second user terminal identification are both mobile phone numbers, and the identification code of the extracted digital currency is represented by D_{Coin (coin)}Meaning that the payment amount is 200 dollars, then the first piece of information M may be expressed as:

m | | | mobile phone number 1| | | D_{Coin (coin)}Mobile phone number 2 |200 yuan | |;

then, carrying out Hash operation on the first information segment M to obtain a second information segment H (M);

then, signing the second information segment H (M) by using a private key corresponding to the mobile phone number 1 to obtain a third information segment m;

finally, M is sent to the commercial bank digital currency system in an encrypted manner. The encryption mode is various and can be flexibly set according to the application requirement;

and step 3: commercial bank digital currency system: interpreting transaction rules and related information to verify the validity of the payment request, such as: verification of digital currency D_{Coin 100}、D_{Coin 100}After the verification is passed, the message is reorganized according to the transaction rule to forward the payment request to a digital currency system D-RMB of the central bank; here, the transaction rule may include, for example: transaction code to be paid, first user terminal identification (i.e. user 1's mobile phone number), extracted digital currency (D)_{Coin 100}And D_{Coin 100}'), and a second user terminal identification (i.e.: the mobile phone number of user 2) to form a first information segment; carrying out encryption operation (such as Hash operation) on the first information segment to obtain a second information segment; by a first user terminalThe private key corresponding to the end identification carries out signature processing on the second information segment to obtain a third information segment; the first and third pieces of information are sent to the commercial bank digital currency system in an encrypted manner. For example: assuming that the transaction code of the payment operation is F, the first user terminal identification and the second user terminal identification are both mobile phone numbers, and the identification code of the extracted digital currency is represented by D_{Coin (coin)}Then the first information segment M can be represented as:

m | | | mobile phone number 1| | | D_{Coin (coin)}| mobile phone number 2;

then, the second information segment H (M) is signed by a private key corresponding to the commercial bank to obtain a third information segment m;

and finally, sending M M to the central bank digital currency system in an encrypted mode. The encryption mode has various modes, and can be flexibly set according to the application requirement. The transaction rules can be flexibly set according to the content needing to be verified; depending on the actual application, the merchant bank may, when organizing the payment request, if other transaction requests are accompanied, such as: when the user purchases the financial products of the commercial bank at the same time, the commercial bank can reorganize and generate a new request according to the transaction rule and send the new request to the digital currency system of the central bank for processing;

and 4, step 4: central bank digital currency system: after receiving the payment request, the transaction rule and the related information are interpreted, and the validity of the related content is verified, such as: d_{Coin 100}、D_{Coin 100}' whether the owner is user 1, etc., and after the authentication is passed, the registration center will perform the following related operations: change D_{Coin 100}、D_{Coin 100}Owner information of `, i.e. will D_{Coin 100}，D_{Coin 100}The owner of' changes the previously bound wallet address of user 1 (for example, the mobile phone number of user 1) into the wallet address of user 2, namely, public key hash, and records the corresponding transaction flow; in the present invention, the owner of the appearing digital money refers to the holder of the digital money;

step (ii) of5: commercial bank digital currency system: sending D_{Coin 100}、D_{Coin 100}' the corresponding character string is sent to the mobile phone of the user 2, and prompt information of successful transaction is sent to the mobile phones of the user 1 and the user 2 respectively.

Fig. 8 is a schematic diagram of main components of a system for on-line payment of digital money according to an embodiment of the present invention. As shown in fig. 8, the system 80 for on-line payment of digital money of the present invention mainly includes a first user terminal 81, a commercial bank digital money system 82, a central bank digital money system 83, and a second user terminal 84.

The first user terminal 81 is used for extracting digital currency with the amount equal to the amount specified by the payment instruction according to the received payment instruction, generating a first request and sending the first request to the commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency, and the first request is used for carrying out owner change on the digital currency; the commercial bank digital currency system 82 is used for generating a second request after receiving the first request and then sending the second request to the central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency; and sending the digital currency to a second user terminal upon receiving an indication that the operation was successful from the central bank digital currency system; the central bank digital currency system 83 is configured to receive the second request, execute an operation of a preset item according to the second request, and return an indication of success of the operation to the commercial bank digital currency system, where the operation of the preset item includes an operation of performing owner change on the digital currency; the second user terminal 84 is for receiving the digital currency sent by the commercial bank digital currency system.

The commercial bank digital currency system 82 may also be configured to confirm that the digital currency included in the first request is legitimate, that the amount of the digital currency is equal to the payment amount, and that the second user terminal has completed registration in the digital currency system before generating the second request and then sending it to the central bank digital currency system.

The central bank digital money system 83 may be further configured to, before performing an operation of a preset item according to the second request, confirm that the owner of the digital money included in the second request is the first user terminal.

Wherein the operation of the owner change comprises: and modifying the owner of the digital currency from the first user terminal to the second user terminal.

The commercial bank digital currency system 82, after sending the digital currency to the second user terminal, may be further configured to send a prompt to the first user terminal and the second user terminal that the transaction was successful.

In the present invention, the digital money is a character string; the user terminal is a mobile phone, and the identifier of the user terminal is a mobile phone number.

Repetitive transaction detection is described below. In the case of online transactions, the D-RMB system passes through D_{Coin (coin)}And the user account is bound to prevent repeated transactions. The registration center in the D-RMB system has a rights registration form, and the record form pattern can be designed as shown in Table 1:

TABLE 1

Digital currency name	Owner of an animal	Remarks for note
			Pbc100adfkl09987766670	138xxxxx001	D_{Coin 100}
……	……	……
			Pbc50cadfkl09987766670	137xxxxx002	D_{Coin 50}

User 1 (cell phone number 138xxxxx001) is paying D to user 2 (cell phone number 138xxxxx002)_{Coin 100}In the process, the D-RMB system registers a central ownership registration form: modification of D_{Coin 100}Corresponding to the owner, the wallet address of the original mobile phone number 138xxxxx001 in the owner field is changed into the wallet address of the mobile phone number 138xxxxx002, if the user 1 also wants to use D_{Coin 100}The payment to other users, whose owner is not the user 1, can not be completed, thereby preventing the repeated payment.

If the registry authority ownership registry represents the owner with a public key hash in the D-RMB system, the registry authority ownership registry can be designed as table 2:

TABLE 2

Assuming that H (138xxxxx001) has a value of 1Xadcfdgdadg and H (138xxxxx002) has a value of 2xcfdald3xgdf, user 1 (mobile phone number 138xxxxx001) pays for D to user 2 (mobile phone number 138xxxxx002)_{Coin 100}In the process, the D-RMB system registers a central ownership registration form: modification of D_{Coin 100}Corresponding to the owner, change 1Xadcfdgdadg in the owner field to 2xcfdald3xgdf if user 1 also wants to use D_{Coin 100}The payment to other users, whose owner is not the user 1, can not be completed, thereby preventing the repeated payment.

In the case of offline transactions, repeated payment checks are discovered and relied upon with lag, and at present, repeated payment checks performed by almost all electronic cash systems are delayed, i.e., they are performed after the payment process is completed.

Meanwhile, the transaction set by the user is a small payment (less than 1000 yuan), the transaction is an acceptable range for an individual user, and bad records are input into a credit system to be punished by adopting a posterior responsibility tracing mechanism.

According to the technical scheme of the embodiment of the invention, the user terminal equipment is used for carrying out online payment operation, so that the digital currency can be flexibly and conveniently transacted; multiple times of verification are carried out in each link, and related information is organized and sent according to transaction rules, so that the security of transaction can be enhanced; the owner of the digital currency is changed through the digital currency system of the central bank, so that the central bank can record the transaction condition of the digital currency in a unified way, and the safety and unified management of the digital currency are realized. The digital currency is intuitive, user-friendly and low in cost, various user operations are facilitated, and the user experience is good; reliable safety guarantee can be provided, hardware manufacturers are not completely depended on, and popularization is more convenient; electronic transaction records can be provided, and financial statistics of users is facilitated; the privacy of the user is ensured, and the risk of illegal transactions can be effectively avoided.

In terms of convenience, a scheme (hereinafter referred to as a mobile phone scheme) of taking a mobile phone as a terminal carrier provides more implementation modes and use means, the system is convenient to deploy, the user operation convenience is good, and the popularization is easier.

In view of safety, the mobile phone is used as a D-RMB carrier, and HCE and TEE schemes can be adopted, so that a larger storage space is provided, a hardware manufacturer is not completely depended on, and the popularization is more convenient.

Compared with other currency systems replacing paper money in the market, the D-RMB has the characteristics of good convenience, high safety and the like, and the convenience is shown in the following aspects:

in the issuing mode, the D-RMB is the digitization of the currency, and does not depend on any bank account and a single network;

in the storage mode, the storage medium of the D-RMB can be a mobile phone, and can also be electronic equipment such as a card, a magnetic disk, a computer and the like, so that various choices are provided for a user. Especially, the D-RMB taking the mobile phone as a carrier can fully utilize the functions of the mobile phone, such as keyboard, display, positioning, storage, calculation, communication and the like, and can be developed for the second time, thereby greatly expanding the payment scene and convenience;

in the payment mode, the online payment transaction similar to paper money can be provided, the online remote payment transaction similar to an electronic payment system can also be provided, the online transaction and the offline transaction can be supported, and the mode is convenient and flexible;

the payment speed is greatly improved in the transaction speed compared with an online card swiping payment mode. Is very suitable for small amount quick payment;

in the use habit, the method can be compatible with the original card swiping payment mode, can also provide face-to-face digital currency payment, and can also provide electronic transaction records, thereby being convenient for financial statistics and having high user acceptability.

The safety is expressed in the following aspects:

in contrast to other digital currency systems, D-RMB digital currency is a series of electronic encrypted serial numbers converted from cash values, and payment transactions are completed through the transfer of these encrypted serial numbers. The safety of the currency is protected by a cryptographic algorithm, so that the confidentiality and the integrity of currency information can be effectively guaranteed, and the safety is high;

the safety of the D-RMB digital currency carrier realizes end-to-end safety by using a chip technology at a mobile terminal and a trusted technology at a background cloud;

the safety of the D-RMB digital currency transaction system depends on the traditional electronic payment system safety technology on one hand, and meanwhile, the strong D-RMB cloud computing system is utilized by the background to further guarantee the transaction safety;

in the aspect of user privacy protection, the user privacy is ensured and the risk of illegal transactions is avoided by means of 'foreground voluntary and background real name'.

The above-described embodiments should not be construed as limiting the scope of the invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions can occur, depending on design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method of paying digital currency online, comprising:

the method comprises the steps that a first user terminal extracts digital currency with the amount equal to the amount specified by a payment instruction according to the received payment instruction, generates a first request and sends the first request to a commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency, and the first request is used for carrying out owner change on the digital currency;

after receiving the first request, the commercial bank digital currency system generates a second request and then sends the second request to a central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency;

the central bank digital currency system executes the operation of a preset item according to the second request and returns the indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency;

and after receiving the indication of successful operation, the commercial bank digital currency system sends the digital currency to a second user terminal.

2. The method of claim 1, wherein prior to the commercial bank digital currency system generating the second request, further comprising:

the merchant bank digital currency system confirms that the digital currency included in the first request is legitimate, that the amount of the digital currency withdrawn is equal to the payment amount, and that the second user terminal has completed registration in the digital currency system.

3. The method of claim 1, wherein prior to the central bank digital currency system performing the predetermined set of items in accordance with the second request, further comprising:

the central bank digital currency system confirms that the owner of the digital currency included in the second request is the first user terminal.

4. The method of claim 1, wherein the operation of the owner change comprises:

and modifying the owner of the digital currency from the first user terminal to the second user terminal.

5. The method according to claim 1, wherein after the commercial bank digital currency system sends the digital currency to the second user terminal, further comprising:

and the commercial bank digital currency system sends prompt information of successful transaction to the first user terminal and the second user terminal.

6. The method of claim 1, wherein the digital currency is a character string; the user terminal is a mobile phone, and the identifier of the user terminal is a mobile phone number.

7. A system for on-line payment of digital money comprising a first user terminal, a commercial bank digital money system, a central bank digital money system, and a second user terminal,

the first user terminal is used for extracting digital currency with the amount equal to the amount specified by the payment instruction according to the received payment instruction, generating a first request and sending the first request to a commercial bank digital currency system, wherein the first request comprises a second user terminal identification and the digital currency, and the first request is used for carrying out owner change on the digital currency;

the commercial bank digital currency system is used for generating a second request after receiving the first request and then sending the second request to the central bank digital currency system, wherein the second request is used for carrying out owner change on the digital currency; and sending the digital currency to a second user terminal upon receiving an indication that the operation was successful from the central bank digital currency system;

the central bank digital currency system is used for receiving the second request, executing operation of a preset item according to the second request and returning an indication of successful operation to the commercial bank digital currency system, wherein the operation of the preset item comprises the operation of carrying out owner change on the digital currency;

the second user terminal is used for receiving the digital currency sent by the commercial bank digital currency system.

8. The system for paying for digital money online according to claim 7, wherein the commercial bank digital money system, before generating the second request, is further configured to:

the merchant bank digital currency system confirms that the digital currency included in the first request is legitimate, that the amount of the digital currency is equal to the payment amount, and that the second user terminal has completed registration in the digital currency system.

9. The system for on-line payment of digital currency according to claim 7, wherein the central bank digital currency system, prior to performing the operation of the preset item according to the second request, is further configured to:

10. The system for on-line payment of digital currency according to claim 7, wherein the operation of owner change comprises:

11. The system for paying for digital money online according to claim 7, wherein the commercial bank digital money system, after sending the digital money to the second user terminal, is further configured to:

12. The system for on-line payment of digital currency according to claim 7, wherein the digital currency is a character string; the user terminal is a mobile phone, and the identifier of the user terminal is a mobile phone number.