KR20200015679A - Digital asset transaction method - Google Patents

Abstract

A digital asset transaction method is embodied by using a connected device which can be connected to the Internet, and a closed device which cannot be connected to the Internet. In particular, the method comprise the following steps: the connected device displays a first check message according to transaction data inputted by a user; the connected device transmits the transaction data to the closed device after the user checks whether the first check message corresponds to the transaction data; the closed device displays a second check message according to the transaction data which are transmitted by the connected device; the closed device transmits authentication data to the connected device after the user checks whether the second check message corresponds to the transaction data; and the connected device receives the authentication data from the closed device before executing a digital asset transaction. Therefore, the user can check a transaction history through different devices in order to determine whether to execute the transaction.

Description

Digital asset trading Method {DIGITAL ASSET TRANSACTION METHOD}

The present invention relates to a digital asset trading method, and more particularly, to a digital asset trading method that includes verifying the exact contents of a digital asset transaction in different devices during the process of the transaction.

Due to the development of technology, the traditional way of trading by directly exchanging physical currency, deeds or other assets has been gradually replaced by digital trading, which means that digital assets can be exchanged without the need for trading participants to meet and pay cash. This can be done at two remote locations by exchanging. Unfortunately, however, new ways of cybercrime also emerge as a constant development of technologies that threaten the safety of digital transactions over the Internet.

In order to illegally acquire the victim's assets in the course of a digital asset transaction, a malicious person may attempt to insert a counterfeit program directly into the trading system, possibly through the Internet, or some defect of the trading program or an electronic device for performing the transaction. Will attempt to obtain the user's transactional authority and use it to conduct the transaction as a disguised user. Even if the malicious user did not illegally acquire the transaction right of the user, the user may forge the operation page or screen of the electronic device used by the user to perform the transaction or change the amount of the traded asset or the counterparty. As a result, the actual user can be authorized to transfer to a third party who does not actually know his or her assets without knowing his own loss.

Taiwan Patent Publication No. 201804395 (2018.02.01)

Therefore, a new digital asset trading method is provided that effectively prevents the contents of the transaction or the interface used during the transaction from being changed during the transaction process, providing an improved method of verification and certification to ensure the safety of the trading partners' personal assets. It is desirable to develop.

It is a primary object of the present invention to provide a digital asset trading method in accordance with how the exact content of a digital asset transaction performed over a network can be verified on the second electronic device different from the first electronic device as well as on the first electronic device. It is. By checking the contents of the transaction twice in different electronic devices, it is possible to prevent the possibility that all electronic devices used in the transaction are illegally manipulated to change the contents of the transaction by a malicious person.

Another object of the present invention is that some of the electronic devices in which digital asset transactions are carried out through a plurality of electronic devices, the transaction contents are verified multiple times on these electronic devices, and used for transactions, limit the possibility of other Internet connections and thereby By connecting to an electronic device, it is simply to provide a digital asset trading method by preventing malicious people from easily manipulating all electronic devices during the transaction process.

In order to achieve the above and other objects, the digital asset transaction method according to the present invention is a connected device that can be directly connected to the Internet, and can be connected to the connected device but cannot be directly connected through the Internet, and the connected device is digital. It is implemented through a closed device that can provide authentication data to allow to perform asset transactions. This digital asset trading method includes:

Displaying, by the connected device, a first check message in accordance with the transaction data entered here by the user to trade the digital asset;

The connected device sends the transaction data to the closed device when the connected device receives the first confirmation command entered here by the user to indicate that the first check message and the transaction data match each other. Transmitting, "transfer transaction data" step;

Displaying a second check message according to the transaction data received from the connected device by the closing device;

The closure device sends authentication data to the connected device when the closure device receives the second confirmation command entered here by the user to indicate that the second check message and the transaction data match each other. "Send authentication data" step; And

Executing the digital asset transaction in accordance with the transaction data when the connected device receives the authentication data from the closed device.

According to an operable embodiment, with respect to the hardware design of the closure device, this is for determining a secure element (SE) for providing authentication data and for determining whether the connected device is allowed access to the secure element. As well as a microcontroller unit (MCU) for generating a second check message.

According to a preferred embodiment, the authentication data is at least one of a private key and a digital signature used in a digital asset transaction; The digital asset is at least one of electronic money and electronic authentication; And the transaction data includes the type of digital asset to be traded, the transaction amount and the counterpart of the digital asset transaction.

In order to prevent the closure device from being arbitrarily connected to any connected device via the Internet, the method according to an operable embodiment of the invention is carried out after the "transfer transaction data" step and before the "second check message display" step. It may further comprise a "authentication" step. In the " authentication " step, the closed device receives and authenticates the device pairing data generated by the connected device to indicate a connection between the closed device and the connected device.

According to a preferred embodiment of the invention, the method further comprises a post-processing step after the user enters a second confirmation command. In the post-processing step, the closure device generates and transmits a second digital signature to the connected device to serve as authentication data to complete the transaction.

The method also includes stopping the transaction. According to an operable embodiment, the present digital asset trading method may further comprise a "cancel" step after the "display second check message" step. In the " cancel " step, the digital asset transaction is stopped if the closure device does not transmit authentication data to the connected device after a preset time has elapsed.

Alternatively, according to another operable embodiment, the present digital asset trading method may further comprise a "cancel" step after the "display second check message" step. In the " cancel " step, the user enters an abort command to the connected device to abort the present digital asset transaction, and thus the connected device sends a " stop " message to the closed device to view the digital asset. Stop the transaction.

In summary, the digital asset trading method according to the present invention is characterized in that at least two different electronic devices are used in the process of digital asset trading to verify the exact contents of the transaction twice, and the plurality of checks are directed to malicious people in the transaction process. Thereby greatly reducing the possibility of illegally changing the transaction data or the transaction counterpart. In order to protect the contents of the transaction from being tampered with, one of the electronic devices used to perform the transaction is an connected device capable of directly connecting to the Internet, and the other of the electronic devices has limited Internet connection functionality. It is a closed device that cannot connect directly to the Internet. Moreover, in the course of a transaction, the closure device determines whether it is connected to it by checking the first digital signature generated by the connected device, while the user also manually confirms the content of the transaction multiple times. A confirmation command must be entered, otherwise the transaction will be considered failed and will be automatically stopped. This arrangement ensures the safety of the user's digital assets.

The structures and technical means adopted by the present invention for achieving the above and other objects can be best understood by referring to the following preferred embodiments and the detailed description of the accompanying drawings. here,
1 is a general flow diagram illustrating the steps involved in a digital asset trading method according to the present invention; And
2, 3 and 4 are detailed flowcharts illustrating the steps involved in the preferred embodiment of the digital asset trading method according to the present invention.

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described with preferred embodiments of the invention and with reference to the accompanying drawings.

1 is a general flow diagram illustrating the steps involved in a digital asset trading method according to the present invention; And detailed flowcharts illustrating the steps included in the preferred embodiment of the digital asset trading method according to the present invention. The digital asset trading method of the present invention is designed for use with a connected device that can be directly connected to the Internet, and a closed device that can not be directly connected to the Internet, but can be connected to the connected device. The following is a description of the steps included in the general flow diagram shown in FIG.

In the step 10 of “displaying the first check message”, the connected device displays the first check message according to the transaction data entered here by the user to trade the digital asset.

In step 20, the connected device receives the first confirmation command entered here by the user to indicate that the first check message and the transaction data match each other. Send the transaction data to the closure device.

At step 30 of displaying a second check message, the closing device displays a second check message according to the transaction data received from the connected device.

In step 40, the closing device receives the second confirmation command entered here by the user to indicate that the second check message and the transaction data coincide with each other, and the closure device receives the connection. Authentication data to the device.

In step 50, when the connected device receives the authentication data from the closed device, the connected device executes the digital asset transaction in accordance with the transaction data.

The following is a detailed description of the steps included in the detailed flowcharts shown in FIGS. 2 and 3. In a preferred embodiment of the digital asset trading method according to the invention, the connected device is a mobile phone 200 and the closing device is an electronic card 300.

According to the present invention, there is no particular limitation on the hardware type of connected and closed devices and the actual content of the digital asset to be traded. Thus, in another embodiment, the connected device may be a computer or a known smart wearable device already on the market; And the closure device may be a computer or wearable device with limited internet connectivity functionality. That is, according to the present invention, the electronic card 300 may be of any type as long as it has limited internet access functionality.

In a preferred embodiment, the electronic card 300 functioning as a closing device comprises a microcontroller unit (MCU) 301, a secure element (SE) 302, a display (not shown) displaying a second check message, a user Includes an input device (not shown) to enable input of a second confirmation command. The secure element 302 can provide more than one type of authentication data required for digital asset trading.

In another embodiment of the invention, the digital asset may be a different type of electronic money or other electronic authorization required for asset trading. Similarly, in different embodiments of the present invention, the authentication data may be a digital asset itself similar to a real currency or may be at least one of a private key and a digital signature to be used to make a digital asset transaction. For convenience of explanation, in a preferred embodiment of the present invention, the secure element 302 stores a private key thereon for use in an electronic money transaction, and the authentication data is stored by the private key for use in an electronic money transaction. It is a generated digital signature.

More details will be provided later.

The microcontroller unit 301 is connected to the secure element 302 to determine whether the connected device connected to the electronic card 300 has permission to access data stored in the secure element 302, and the electronic Any connected device that is not paired with the card 300 is not allowed to access data stored in the secure element 302 to ensure stability using the electronic card 300. How the microcontroller unit 301 determines whether the mobile phone 200 has permission to access data on the secure element 302 will be described later.

Returning to the digital asset trading method according to the present invention. Reference is made to FIGS. 2 and 3 for a detailed description of the steps involved in the method.

In step 10 of "displaying the first check message", the user 100 operates the mobile phone 200 to activate the application program 201 and then inputs transaction data for trading the desired digital asset. Here, digital assets are the amount of electronic money. At this point, the application program 201 generates a first digital signature for use by the electronic card 300 to later compare and verify the contents of the transaction. On the other hand, the first check message is displayed on the mobile phone 200 to complete the step " first check message display "

As mentioned above, in addition to electronic money, the electronic card 300 may also store data of other different digital assets thereon. To ensure the type of digital asset to be traded, the transaction data is the type of digital asset to be traded, which is electronic money in a preferred embodiment of the present invention; Transaction amount; And a counterparty. According to a preferred embodiment of the present invention, the other party is the other party's account address.

In step 20 of "transfer transaction data", if the user 100 confirms that the transaction data entered by the user and the first check message match, the user 100 further inputs the first confirmation command to the mobile phone 200. Thus, transaction data is transmitted from the mobile phone 200 to the electronic card 300.

According to a preferred embodiment of the present invention, the present digital asset trading method further includes " second check to authenticate the application program 201 to be allowed to access the data stored in the secure element 302 of the electronic card 300. Message " authentication " step 21 before step 30).

More specifically, in the "authentication" step 21, the application program 201 transmits device pairing data to the electronic card 300. The device pairing device includes an input ID representing the mobile phone 200, a first digital signature, a message authentication code (Mac), and other related data similarly used to authenticate the electronic card 300 includes a mobile phone 200. Can be connected). Upon receipt of the device pairing data, the microcontroller unit 301 examines the contents of all data items in the device pairing data to determine whether it is safe to send the device pairing data to the secure element 302. If the microcontroller unit 301 verifies that all data items are correct, the "authentication" step 21 is completed.

Since a plurality of different first digital signatures may be required in a transaction of electronic money, the digital asset trading method of the present invention is designed such that the application program 201 can transmit device pairing data multiple times through the first loop 211. do.

In order to allow the electronic card 300 and the application program 201 on the mobile phone 200 to identify each other, pairing is set up between them in the "authentication" step 21 before executing the digital asset trading method of the present invention. Similarly, message authentication codes and other data are used to determine whether the electronic card 300 can be connected to the mobile phone 200. Here, there is no particular limitation on how to set up pairing between the devices 200, 300; And any conventional method of pairing different devices may be used for the purposes of the present invention.

Moreover, according to the invention, the "authentication" step 21 is not a prerequisite step. In some other embodiments of the present invention, the electronic card 300 may still be connected to the mobile phone 200 even if the electronic card 300 is not paired with the application program 201 on the mobile phone 200. However, for security purposes, in these embodiments, some other authentication methods that do not use the device pairing data described above may still be used between the mobile phone 200 and the electronic card 300. For example, code for verifying electronic card 300 may be included in transaction data or the first confirmation command; Alternatively, the code may be input via an input device on the electronic card 300 corresponding to the code generated by the cellular phone 200.

The step " second check message display " step 30 begins after completion of the " authentication " step 21. In step " second check message display " step 30, when the microcontroller unit 301 receives transaction data from the mobile phone 200, it further sends the transaction data to the secure element 302 and the security Read response data from element 302. Then, according to the response data, a second check message is displayed on the display device of the electronic card 300 to complete the step of "displaying the second check message".

In a preferred embodiment, the response data includes the transaction amount and the counterpart address as well as the mode data used to determine the degree of detail of the message to be displayed on the display device. If the mode data indicates the first mode 31, the second check message that appears on the display device of the electronic card 300 includes the transaction amount and the counterpart in the transaction. Alternatively, in the second mode 32, only the transaction amount is displayed on the display device to act as the second check message.

Of course, in other operable embodiments, the mode data may be changed according to actual needs in use to include, for example, a third mode, where other information related to the transaction, such as the type of digital asset to be traded, is also Can be shown on the display device.

Then, in the "transfer authentication data" step 40, when the user 100 confirms that the second confirmation message matches the transaction data entered by him, the user 100 enters the input device of the electronic card 300. Further enters a second confirmation command; And when the microcontroller unit 301 receives the second confirmation command, the microcontroller unit 301 sends a valid request to the secure element 302.

The application program 201 will then send the at least one piece of signature information to the secure element 302, which will then replicate the second digital signature generated by the private key as authentication data. As with the conditions of the previous " authentication " step 21, since there is a possibility that a plurality of different second digital signatures may be required in the transaction, the application program 201 performs a second loop to accept the second digital signature. Through the 401, the signature information may be transmitted several times.

After receiving the second digital signature, the application program 201 sends a transaction-completion signal to the microcontroller unit 301 to notify the electronic card 300 that the transaction has been completed. On the other hand, the application program 201 generates a transaction certificate including the second electronic signature and transmits the transaction certificate to the electronic money trading system via the Internet to complete all the transaction procedures; And detailed data representing the transaction result is also displayed on the application program 201.

In conclusion, according to the digital asset trading method provided by the present invention, the content of a digital asset that is correctly traded can be verified many times through different devices during the course of the trade, so that only one that is used to perform the transaction If there is an electronic device, the risk of illegally changing the device can be prevented. Moreover, because the closure device is used in addition to the connected device during the transaction process for further verification of the transaction, and because the closure device is disconnected from the Internet when it is not used to conduct the transaction, the closure device is illegally operated. Can be further prevented.

According to a preferred embodiment of the present invention, if someone attempts to access the closure device, the closure device will investigate in person the person attempting to access the device. Thus, no application program 201 can access the data stored in the closed device. If a malicious person tries to fake the application program 201 used for transaction processing, the person is included in the device pairing data sent by the application program 201 to the electronic card 300 and the application program The authentication step requiring the first digital signature generated by 201 cannot be passed. Thus, the security of digital assets is further protected from theft.

See FIG. 4 for how to stop trading digital assets. According to a preferred embodiment of the present invention, the "first cancellation" step 41 may be performed after the "displaying the second check message" step 30. In the "first cancellation" step 41, the user 100 can operate the application program 201 using the mobile phone 200 to send a "stop" message to the electronic card 300, thereby providing a microcontroller unit. 301 sends a "Authentication Failed" message to secure element 302 to stop the transaction of the digital asset. According to the present invention, there is no limitation on the person who makes it possible for the microcontroller unit 301 to operate the cellular phone to send an "authentication failure" message.

Alternatively, according to a preferred embodiment of the present invention, another "second cancellation" step 42 may be performed after the "displaying the second check message" step 30. In the "second cancellation" step 42, if the user 100 does not enter a second confirmation command and after a certain time elapses, the electronic card 300 does not transmit authentication data, the microcontroller unit 301 It will send a "Authentication Failed" message to secure element 302 and stop trading the digital asset.

Although the present invention has been described in their preferred embodiments, it should be understood that many changes and modifications may be made in the described embodiments without departing from the scope and spirit of the invention, which is intended to be limited only by the appended claims.

Claims (8)

Connected devices capable of directly accessing the Internet and closed devices capable of providing access to the connected devices but not directly connected to the Internet and capable of providing authentication data for allowing the connected devices to conduct digital asset transactions. As a digital asset trading method implemented through; The method is:
Displaying, by the connected device, a first check message in accordance with the transaction data entered here by the user to trade the digital asset;
The connected device sends the transaction data to the closed device when the connected device receives the first confirmation command entered here by the user to indicate that the first check message and the transaction data match each other. Transmitting, "transfer transaction data"step;
Displaying a second check message according to the transaction data received from the connected device by the closing device;
The closure device sends authentication data to the connected device when the closure device receives the second confirmation command entered here by the user to indicate that the second check message and the transaction data match each other. "Send authentication data"step; And
A "trade execution" step in which the connected device executes the digital asset transaction in accordance with the transaction data when the connected device receives the authentication data from the closed device.
Digital asset trading method comprising a. The method of claim 1, wherein the closure device generates a second check message as well as a secure element (SE) for providing authentication data and for determining whether the connected device is allowed access to the secure element. A digital asset trading method comprising a microcontroller unit (MCU). The method of claim 1 or 2, wherein the authentication data is at least one of a private key and a digital signature used in a digital asset transaction. The method of claim 1, wherein the digital asset is at least one of electronic money and electronic authentication. The method of claim 1, wherein the transaction data includes a type of digital asset to be traded, a transaction amount in a digital asset transaction, and a counterpart. 2. The method of claim 1, further comprising: an "authentication" step after the "transfer transaction data" step and before the "display second check message" step; And wherein in the " authentication " step, the closed device receives and authenticates device pairing data generated by the connected device to indicate a connection between the closed device and the connected device. The method of claim 1, further comprising: a "cancel" step after the "display second check message" step; And wherein in the " cancel " step, the digital asset transaction is stopped if the closed device does not transmit authentication data to the connected device after a preset time has elapsed. The method of claim 1, further comprising: a "cancel" step after the "display second check message" step; And wherein in the " cancel " step, the user inputs an abort command to the connected device to abort the digital asset transaction, and thus the connected device sends a " stop " message to the closed device to A method of trading digital assets that stops trading.

Images