KR102205180B1 - Digital asset transaction method - Google Patents

Abstract

The digital asset transaction method is realized using a connected device that can connect to the Internet and a closed device that cannot connect to the Internet, and includes the following steps: The connected device first checks according to the transaction data entered by the user. Displaying a message; The connected device transmitting the transaction data to the closing device after the user confirms that the first check message matches the transaction data; The closing device displaying a second check message according to the transaction data transmitted by the connected device; The closing device transmitting authentication data to the connected device after the user confirms that the second check message matches the transaction data; And executing the present digital asset transaction after the connected device receives the authentication data from the closed device. In the above-described way, the user can check the transaction details on different devices and decide whether to execute the transaction.

Description

Digital asset trading method {DIGITAL ASSET TRANSACTION METHOD}

The present invention relates to a digital asset transaction method, and more particularly, to a digital asset transaction method comprising multiple verifications on different devices of the exact contents of a digital asset transaction during the process of the transaction.

Due to the development of technology, the conventional way of trading by directly exchanging physical currency, asset deeds or other assets has been gradually replaced by digital transactions, which means that participants in the transaction do not need to meet each other to pay cash, It can be implemented in two remote locations by exchanging. However, unfortunately, new ways of cybercrime also emerge with the constant development of technologies that threaten the safety of digital transactions over the Internet.

In order to illegally acquire the victim's assets in the process of digital asset transaction, a malicious person attempts to directly insert a pirated program into the transaction system, possibly via the Internet, or some defect in the transaction program or an electronic device to perform the transaction. , Will attempt to obtain the user's transaction rights and use it to conduct transactions as a disguised user. Even if the malicious user has not illegally obtained the user's transaction authority, he can perform a transaction by falsifying the operation page or screen of an electronic device used by the user, or still change the amount of assets traded or the counterparty. As a result, a real user can grant a third party whose own assets are not actually known to transfer them without knowing their own losses.

Taiwan Patent Publication No. 201804395 (2018.02.01)

Therefore, a new digital asset transaction method that provides an improved method of verification and authentication to secure the safety of the transaction party's personal assets by effectively preventing the contents of the transaction or the interface used in the transaction process from being changed during the transaction process. It is desirable to develop.

The main object of the present invention is to provide a digital asset transaction method according to a method in which accurate content of a digital asset transaction performed through a network can be verified not only on a first electronic device, but also on a second electronic device different from the first electronic device Is to do. By double checking the content of the transaction on different electronic devices, it is possible to prevent the possibility that all electronic devices used in the transaction are illegally manipulated to change the content of the transaction by a malicious person.

Another object of the present invention is that a digital asset transaction is performed through a plurality of electronic devices, and the transaction content is verified multiple times on these electronic devices, and some of the electronic devices used in the transaction limit the possibility of other Internet connections, thereby By simply connecting to an electronic device, it is to provide a digital asset trading method by preventing the easy manipulation of all electronic devices by malicious people during the transaction process.

In order to achieve the above and other objects, the digital asset transaction method according to the present invention is a connected device capable of directly accessing the Internet, and a connected device capable of accessing the connected device, but cannot be directly connected through the Internet, and the connected device is digital. Implemented through a closed device capable of providing authentication data to allow asset transactions to be conducted. This digital asset transaction method includes:

A "displaying first check message" step, wherein the connected device displays a first check message according to transaction data entered therein by a user to trade a digital asset;

When the connected device receives the first check command entered here by the user to indicate that the first check message and the transaction data match each other, the connected device sends the transaction data to the closing device. Transmitting, "transmitting transaction data";

&Quot;displaying a second check message", wherein the closing device displays a second check message according to the transaction data received from the connected device;

The closing device transmits authentication data to the connected device when the closing device receives the second check command input here by the user to indicate that the second check message and the transaction data match each other. , "Transmitting authentication data" step; And

A "transaction execution" step in which the connected device executes the digital asset transaction according to the transaction data when the connected device receives the authentication data from the closed device.

According to an operable embodiment, with respect to the hardware design of the closure device, it is a security element (SE) for providing authentication data, and for determining whether or not the connected device is allowed access to the security element. It also includes a microcontroller unit (MCU) for generating a second check message.

According to a preferred embodiment, the authentication data is at least one of a private key and a digital signature used in digital asset transactions; The digital asset is at least one of electronic money and electronic authentication; In addition, the transaction data includes a type of digital asset to be transacted, a transaction amount, and a counterparty of the digital asset transaction.

In order to prevent the closed device from being arbitrarily connected to any connected device via the Internet, the method according to an operable embodiment of the present invention is after the "transfer transaction data" step and before the "display second check message" step. It may further include a "authentication" step. In the "authentication" step, the closing device receives and authenticates device pairing data generated by the connected device to indicate a connection between the closing device and the connected device.

According to a preferred embodiment of the present invention, the method further comprises a post-processing step after the user inputs the second confirmation command. In the post-processing step, the closing device generates and transmits a second digital signature to the connected device to serve as authentication data for completing the transaction.

The method of the present invention also includes the step of stopping the transaction. According to an operable embodiment, the present digital asset trading method may further include a "cancel" step after the "display second check message" step. In the "cancel" step, if the closing device does not transmit authentication data to the connected device after a preset time has elapsed, the present digital asset transaction is stopped.

Alternatively, according to another operable embodiment, the present digital asset trading method may further include a "cancel" step after the "display second check message" step. In the "cancel" step, the user inputs a stop command to the connected device to stop the present digital asset transaction, and thus, the connected device sends a "stop" message to the closed device to stop the present digital asset transaction. Stop trading.

In summary, in the digital asset transaction method according to the present invention, at least two different electronic devices are used in the process of the digital asset transaction to verify the exact contents of the transaction twice, and a plurality of checks are performed against malicious people in the transaction process. As a result, the possibility of illegally changing transaction data or counterparty is greatly reduced. And, in order to protect the contents of the transaction from unjustly altering the contents of the transaction, one of the electronic devices used to conduct the transaction is a connected device that can be directly connected to the Internet, and the other of the electronic devices has limited Internet connection functionality. It is a closed device that cannot directly connect to the Internet. Moreover, in the process of a transaction, the closing device determines whether or not it is connected to it by examining the first digital signature generated by the connected device, while the user also manually checks the content of the transaction multiple times. You have to enter a confirmation order for it, otherwise the transaction will be considered failed and will be automatically stopped. This arrangement can ensure the safety of users' digital assets.

The structure and technical means adopted by the present invention to achieve the above and other objects can be best understood by referring to the following preferred embodiments and the detailed description of the accompanying drawings. here,
1 is a general flow chart showing the steps involved in a digital asset trading method according to the present invention; And
2, 3 and 4 are detailed flow charts showing the steps involved in a preferred embodiment of a digital asset trading method according to the present invention.

Hereinafter, the present invention will be described with reference to the accompanying drawings and with preferred embodiments of the present invention.

Fig. 1, which is a general flow chart showing steps included in a digital asset trading method according to the present invention; And Figs. 2, 3 and 4, which are detailed flow charts showing steps included in a preferred embodiment of a digital asset trading method according to the present invention. The digital asset transaction method of the present invention is designed for use with a connected device that can be directly connected to the Internet, and a closed device that cannot be directly connected to the Internet but connectable to the connected device. The following is a description of steps included in the general flowchart shown in FIG. 1.

In step 10 "Display First Check Message", the connected device displays a first check message according to the transaction data entered therein by the user to trade the digital asset.

In "transfer transaction data" step 20, when the connected device receives the first check message and the first confirmation command entered here by the user to indicate that the transaction data match each other, the connected device is Transmit the transaction data to the closing device.

In step 30 of "Display second check message", the closing device displays a second check message according to the transaction data received from the connected device.

In step 40 of "transmitting authentication data", when the closing device receives the second check command input here by the user to indicate that the second check message and the transaction data match each other, the closing device connects the The authentication data to the device.

In a "transaction execution" step 50, when the connected device receives the authentication data from the closed device, the connected device executes the digital asset transaction according to the transaction data.

The following is a detailed description of the steps included in the detailed flowchart shown in FIGS. 2 and 3. In a preferred embodiment of the digital asset transaction method according to the present invention, the connected device is a mobile phone 200 and the closing device is an electronic card 300.

According to the present invention, there are no particular restrictions on the hardware type of the connected device and the closed device and the actual content of the digital asset to be traded. Thus, in another embodiment, the connected device may be a computer or a known smart wearable device already commercially available; And the closed device may be a computer or wearable device with limited Internet connection functionality. That is, according to the present invention, the electronic card 300 may be of any type as long as it has limited Internet access functionality.

In a preferred embodiment, the electronic card 300, which functions as a closing device, comprises a microcontroller unit (MCU) 301, a secure element (SE) 302, a display (not shown) displaying a second check message, and a user It includes an input device (not shown) that allows you to enter a second confirmation command. The secure element 302 may provide more than one type of authentication data required for digital asset transactions.

In another embodiment of the present invention, the digital asset may be a different type of electronic money or other electronic authorization required for asset transaction. Similarly, in different embodiments of the present invention, the authentication data may be a digital asset itself similar to a real currency or may be at least one of a private key and a digital signature to be used to make a digital asset transaction. For convenience of explanation, in a preferred embodiment of the present invention, the security element 302 stores a private key thereon for use in an electronic money transaction, and authentication data is by means of a private key for use in an electronic money transaction. It is a generated digital signature.

More details will be provided later.

The microcontroller unit 301 is connected to the secure element 302 to determine whether the access device connected to the electronic card 300 has permission to access the data stored in the secure element 302 or not, and Any connected device that is not paired with the card 300 is not allowed to access the data stored in the secure element 302 to ensure the stability of using the electronic card 300. How the microcontroller unit 301 determines whether the mobile phone 200 has permission to access data on the secure element 302 will be described below.

Returning to the digital asset trading method according to the present invention. See Figs. 2 and 3 for a detailed description of the steps involved in the method.

In step 10 of "Displaying the first check message", the user 100 operates the mobile phone 200 to activate the application program 201 and then inputs transaction data for making a desired digital asset transaction. Here, digital assets are the amount of electronic money. At this point, the application program 201 generates a first digital signature for use by the electronic card 300 later to compare and verify the contents of the transaction. On the other hand, the first check message is displayed on the mobile phone 200 to complete the "display first check message" step (10).

As mentioned above, in addition to electronic money, the electronic card 300 can also store data of other different digital assets thereon. In order to ensure the type of digital asset to be traded, the transaction data is the type of digital asset to be traded, which is electronic money in a preferred embodiment of the present invention; Transaction amount; And a counterparty. According to a preferred embodiment of the present invention, the counterpart is the counterpart's account address.

In step 20 of "transmitting transaction data", when the user 100 checks whether the transaction data input by the user 100 matches the first check message, the user 100 additionally inputs a first confirmation command to the mobile phone 200 Thus, the transaction data is transmitted from the mobile phone 200 to the electronic card 300.

According to a preferred embodiment of the present invention, the present digital asset transaction method further includes a "second check" to authenticate the application program 201 to access the data stored in the secure element 302 of the electronic card 300. It may further include a "authentication" step 21 before the message display" step 30.

More specifically, in the "authentication" step 21, the application program 201 transmits device pairing data to the electronic card 300. The device pairing device includes an input ID representing the mobile phone 200, a first digital signature, a message authentication code (Mac), and other related data similarly used to authenticate the electronic card 300. ) Can be connected to Upon receiving the device pairing data, the microcontroller unit 301 checks the contents of all data items in the device pairing data to determine whether it is safe to transmit the device pairing data to the secure element 302. When the microcontroller unit 301 verifies that all data items are correct, the "authentication" step 21 is completed.

Since a plurality of different first digital signatures may be required in the transaction of electronic money, the digital asset transaction method of the present invention is designed so that the application program 201 can transmit device pairing data multiple times through the first loop 211 do.

In order to allow the electronic card 300 and the application program 201 on the mobile phone 200 to identify each other, pairing is established between them before executing the digital asset transaction method of the present invention, and in the "authentication" step 21 A similarly used message authentication code and other data are generated to determine whether the electronic card 300 can be connected to the mobile phone 200 or not. Here, there is no particular limitation on the method of establishing pairing between the devices 200 and 300; And for the purposes of the present invention any conventional method of pairing different devices can be used.

Moreover, according to the invention, the "authentication" step 21 is not a prerequisite step. In some other embodiments of the present invention, even if the electronic card 300 is not paired with the application program 201 on the mobile phone 200, the electronic card 300 can still be connected to the mobile phone 200. However, for security purposes in these embodiments, some other authentication methods that do not use the device pairing data described above may still be used between the mobile phone 200 and the electronic card 300. For example, the code for verifying the electronic card 300 may be included in the transaction data or the first verification command; Alternatively, the code may be input through an input device on the electronic card 300 corresponding to the code generated by the mobile phone 200.

The "display second check message" step 30 begins after completion of the "authentication" step 21. In the "display second check message" step 30, when the microcontroller unit 301 receives transaction data from the mobile phone 200, it further transmits the transaction data to the secure element 302 and the security Read response data from element 302. Then, a second check message is displayed on the display device of the electronic card 300 according to the response data to complete the "displaying of the second check message" step.

In a preferred embodiment, the response data includes transaction volume and counterparty address as well as mode data used to determine the degree of detail of the message to be displayed on the display device. When the mode data indicates the first mode 31, the second check message displayed on the display device of the electronic card 300 includes the transaction amount and the counterparty in the transaction. Alternatively, in the second mode 32, only the transaction amount is displayed on the display device to act as a second check message.

Of course, in other operable embodiments, the mode data may be changed according to actual needs in use to include, for example, a third mode, where other information related to the transaction, such as the type of digital asset to be traded, is also It can be seen on the display device.

Then, in the "transmitting authentication data" step 40, when the user 100 confirms that the second confirmation message matches the transaction data entered by the user 100, the user 100 is the input device of the electronic card 300 Additionally input a second confirmation command to; And when the microcontroller unit 301 receives the second confirmation command, the microcontroller unit 301 sends a valid request to the secure element 302.

Then, the application program 201 will transmit at least one piece of signature information to the secure element 302, and the secure element 302 will suffice the second digital signature generated by the private key as authentication data. As with the conditions of the previous "authentication" step 21, since there is a possibility that a plurality of different second digital signatures may be required in the transaction, the application program 201 is a second loop for accepting the second digital signature. Signature information can be transmitted multiple times through 401.

After receiving the second digital signature, the application program 201 transmits a transaction-complete signal to the microcontroller unit 301 to notify the electronic card 300 that the transaction has been completed. On the other hand, the application program 201 generates a transaction authentication including a second electronic signature and transmits the transaction authentication to an electronic money transaction system through the Internet to complete all transaction procedures; And detailed data representing the transaction result is also displayed on the application program 201.

In conclusion, according to the digital asset trading method provided by the present invention, since the content of the digital asset to be accurately traded can be verified multiple times through different devices during the process of the transaction, thus, only one used to perform the transaction If there is an electronic device, the risk of illegally changing the device can be prevented. Moreover, because the closing device is used in addition to the connected device during the transaction process for further verification of the transaction, and because the closing device is disconnected from the Internet when it is not used to conduct the transaction, the closing device is illegally manipulated. The possibility of becoming can be prevented further.

According to a preferred embodiment of the invention, if someone attempts to access the closing device, the closing device will tuga the person trying to access the device. Thus, no application program 201 can access the data stored in the closed device. If a malicious person tries to fake the application program 201 used for transaction processing, that person is included in the device pairing data sent by the application program 201 to the electronic card 300 and the application program The authentication step that requires the first digital signature generated by 201 cannot be passed. Thus, the safety of digital assets is further protected from theft.

See FIG. 4 for how to stop trading digital assets. According to a preferred embodiment of the present invention, the "first cancel" step 41 can be performed after the "display second check message" step 30. In the "first cancellation" step 41, the user 100 can transmit a "stop" message to the electronic card 300 by operating the application program 201 using the mobile phone 200, so that the microcontroller unit 301 sends a "authentication failed" message to the secure element 302 to stop the transaction of the digital asset. According to the present invention, there are no restrictions on the person who allows the microcontroller unit 301 to manipulate the mobile phone to send a "authentication failure" message.

Alternatively, according to a preferred embodiment of the present invention, another "second cancel" step 42 can be performed after the "display second check message" step 30. In the "second cancellation" step 42, when the user 100 does not input a second confirmation command and the electronic card 300 does not transmit the authentication data after a certain period of time, the microcontroller unit 301 It will send a "authentication failed" message to the secure element 302 and stop trading the digital asset.

While the present invention has been described with their preferred embodiments, it should be understood that many changes and modifications may be made in the described embodiments without departing from the scope and spirit of the invention, which are intended to be limited only by the appended claims.

Claims (8)

Implemented through a connected device capable of directly accessing the Internet and a closed device capable of indirectly accessing the Internet by accessing the connected device and providing authentication data to allow the connected device to conduct digital asset transactions As a digital asset transaction method; The method is:
A "displaying first check message" step, wherein transaction data is generated by the connected device for trading digital assets and a first check message is displayed by the connected device based on the transaction data;
A first confirmation command is generated by the connected device to indicate that the first check message and the transaction data match each other and the transaction data is generated from the connected device based on the first confirmation command. A "transfer transaction data" step that is transmitted to;
A step of "displaying a second check message", wherein a second check message is displayed by the closing device based on the transaction;
A second confirmation command is generated by the closing device to indicate that the second check message and the transaction data match each other, and authentication data including a second digital signature is generated from the closing device based on the second confirmation command. "Transmitting authentication data", which is transmitted to the connected device; And
Transaction authentication is generated by the connected device to execute a digital asset transaction based on the second digital signature of the authentication data, and the transaction authentication is transmitted from the connected device to a transaction system to transmit the digital asset. Being, the "running the transaction" step
Digital asset trading method comprising a. The method of claim 1, wherein the closing device comprises a secure element (SE) and a microcontroller unit (MCU), and the authentication data is stored in the secure element, and the connected device is connected to the SE through the MCU. Authorized, the second check message is generated by the MCU, digital asset trading method. delete The method of claim 1, wherein the digital asset is at least one of electronic money and electronic authentication. The method of claim 1, wherein the transaction data includes a type of digital asset to be traded, a transaction amount in a digital asset transaction, and a counterparty. The method of claim 1, wherein the second check message is displayed by the closed device after receiving device pairing data indicating a connection between the closed device and the connected device from the connected device. The method of claim 1, wherein the transaction authentication is canceled to transmit from the closing device to the connected device after displaying the second check message without generating the second confirmation command at a preset time. . The method of claim 1, wherein a break message may be generated by the connected device after the closure device displays the second check message, and the break message is sent to the closure device to stop the digital asset transaction. Is, how to trade digital assets.

Images