KR20220041692A - Method and system for payment for central bank digital currency - Google Patents

Abstract

Provided are a payment method and system that can process payment using central bank digital currency (CBDC) without double payment even in an offline situation (the situation where a user's terminal cannot connect to a server through network). The payment method, in a computer device, comprises a security zone, a hardware security module (HSM), and at least one processor.

Description

Payment method and system for central bank digital currency

The description below relates to a payment method and system for central bank digital currency.

Central Bank Digital Currency (CBDC) is an electronic currency issued by the central bank. The CBDC implementation method is a single ledger method (account method) in which the central bank or bank stores and manages CBDC accounts and related transaction information. ) and a distributed ledger method in which multiple transaction participants manage the same transaction records.

[Prior literature number]

Korean Patent No. 10-1862637

Provides a payment method and system that can process payments using Central Bank Digital Currency (CBDC) without double payment even in offline situations (the situation where the user's terminal cannot connect to the server through the network).

A payment method for a computer device, wherein the computer device includes a security area, a Hardware Security Module (HSM), and at least one processor, wherein the payment method is performed by the at least one processor through short-distance communication in an offline situation receiving a nonce value from a terminal of an end user to receive remittance; By the at least one processor, a remittance transaction including the first last transaction information stored in the secure area, the received nonce value, and the hash value of the security value is signed using the private key of the HSM and transmitted to the terminal to do; transmitting, by the at least one processor, an original text of the security value to the terminal when a verification success message is received from the terminal; and storing, by the at least one processor, second last transaction information according to the remittance transaction and the latest balance of the electronic wallet in the secure area.

According to one side, the security area may include a Trusted Execution Environment (TEE) security area or a White-Box Cryptographic (WBC) security area.

According to another aspect, the transaction occurring in the offline situation may be synchronized by transmitting the original text of the remittance transaction and the security value from the terminal to the CBDC ledger in response to the change of the offline situation to the online situation.

According to another aspect, the payment method may further include, by the at least one processor, authenticating the terminal by exchanging a certificate with the terminal.

According to another aspect, the certificate is issued to include device-specific information of the device from which the certificate is issued, public information of the HSM included in the device, issuing authority information, and the validity period, and is stored in a security area included in the device. It can be characterized as being.

According to another aspect, in the terminal, the signature verification of the remittance transaction may be processed using the public information of the HSM included in the certificate of the computer device.

According to another aspect, in the step of signing the remittance transaction using the private key of the HSM and transmitting it to the terminal, the public information of the HSM is further transmitted to the terminal, and the public information of the HSM is transmitted from the terminal. It may be characterized in that the signature verification of the remittance transaction is processed using

A payment method for a computer device, wherein the computer device includes a first security area, a Hardware Security Module (HSM), and at least one processor, wherein the payment method is performed by the at least one processor for short-distance communication in an offline situation transmitting the nonce value to the terminal of the end user who makes the remittance through receiving, by the at least one processor, a remittance transaction signed using the private key of the HSM of the terminal from the terminal, the remittance transaction comprising the first last transaction information stored in the second secure area of the terminal; Contains the hash value of the passed nonce value and security value -; signature-verifying, by the at least one processor, the received remittance transaction; verifying, by the at least one processor, a nonce value included in the received remittance transaction; transmitting, by the at least one processor, a verification success message to the terminal when the signature verification and verification of the nonce value are successful; storing, by the at least one processor, the received remittance transaction and a second last transaction in the first secure area; and receiving, by the at least one processor, the original text of the security value transmitted in response to receiving the verification success message from the terminal.

According to one side, each of the first security area and the second security area may include a Trusted Execution Environment (TEE) security area or a White-Box Cryptographic (WBC) security area.

According to another aspect, in order to synchronize the transaction occurring in the offline situation in response to the change of the offline situation to the online situation, the payment method may include, by the at least one processor, the remittance transaction stored in the first secure area. and transmitting the original text of the security value to the CBDC ledger.

According to another aspect, the payment method may further include, by the at least one processor, exchanging a certificate with the terminal to authenticate the terminal.

According to another aspect, the certificate is issued to include device-specific information of the device from which the certificate is issued, public information of the HSM included in the device, issuing authority information, and the validity period, and is stored in a security area included in the device. It can be characterized as being.

According to another aspect, the verifying of the signature may include verifying the signature of the remittance transaction using public information of the HSM included in the terminal, the issuing organization information, and the validity period.

According to another aspect, the receiving of the signed remittance transaction further includes receiving public information of the HSM included in the terminal from the terminal, and the verifying the signature includes using the received public information of the HSM. to verify the signature of the remittance transaction.

Provided is a computer program stored in a computer-readable recording medium in combination with a computer device to execute the method on the computer device.

It provides a computer-readable recording medium in which a program for executing the method in a computer device is recorded.

at least one processor implemented to execute computer-readable instructions; security area; and a Hardware Security Module (HSM), wherein, by the at least one processor, a nonce value is received from a terminal of an end user to receive remittance through short-distance communication in an offline situation, and the first last transaction information stored in the security area , when a remittance transaction including the received nonce value and the hash value of the security value is signed using the private key of the HSM and transmitted to the terminal, and a verification success message is received from the terminal, the original text of the security value to the terminal, and to store second last transaction information according to the remittance transaction and the latest balance of the electronic wallet in the secure area.

at least one processor implemented to execute computer-readable instructions; a first security area; and a Hardware Security Module (HSM), wherein, by the at least one processor, a nonce value is transmitted to a terminal of an end user who makes a remittance through short-distance communication in an offline situation, and a secret key of the HSM of the terminal from the terminal to receive a signed remittance transaction, wherein the remittance transaction includes first last transaction information stored in a second security area of the terminal, a hash value of the transmitted nonce value, and a security value; Signature verification of the received remittance transaction, verification of a nonce value included in the received remittance transaction, and if the signature verification and verification of the nonce value are successful, transmit a verification success message to the terminal; Stores the remittance transaction and the second last transaction in the first security area, and receives the original text of the security value transmitted in response to receiving the verification success message from the terminal.

Even in an offline situation (the situation where the user's terminal cannot connect to the server through the network), payment can be processed using the Central Bank Digital Currency (CBDC) without double payment.

1 is a diagram illustrating an example of a network environment according to an embodiment of the present invention.
2 is a block diagram illustrating an example of a computer device according to an embodiment of the present invention.
3 is a diagram illustrating an example of an internal configuration of an end user terminal according to an embodiment of the present invention.
4 is a flowchart illustrating an example of an online payment method according to an embodiment of the present invention.
5 is a flowchart illustrating an example of an offline payment method according to an embodiment of the present invention.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

The payment system according to embodiments of the present invention may be implemented by at least one computer device. In this case, the computer program according to an embodiment of the present invention may be installed and driven in the computer device, and the computer device may perform the payment method according to the embodiments of the present invention under the control of the driven computer program. The above-described computer program may be stored in a computer-readable recording medium in combination with a computer device to execute a payment method on a computer.

1 is a diagram illustrating an example of a network environment according to an embodiment of the present invention. The network environment of FIG. 1 shows an example including a plurality of electronic devices 110 , 120 , 130 , 140 , a plurality of servers 150 , 160 , and a network 170 . 1 is an example for explaining the invention, and the number of electronic devices or the number of servers is not limited as in FIG. 1 . In addition, the network environment of FIG. 1 only describes one example of environments applicable to the present embodiments, and the environment applicable to the present embodiments is not limited to the network environment of FIG. 1 .

The plurality of electronic devices 110 , 120 , 130 , and 140 may be a fixed terminal implemented as a computer device or a mobile terminal. Examples of the plurality of electronic devices 110 , 120 , 130 , 140 include a smart phone, a mobile phone, a navigation device, a computer, a notebook computer, a digital broadcasting terminal, a personal digital assistant (PDA), and a portable multimedia player (PMP). ), tablet PCs, etc. As an example, in FIG. 1 , the shape of a smartphone is shown as an example of the electronic device 110 , but in embodiments of the present invention, the electronic device 110 is substantially different through the network 170 using a wireless or wired communication method. It may refer to one of various physical computer devices capable of communicating with the electronic devices 120 , 130 , 140 and/or the servers 150 and 160 .

The communication method is not limited, and not only a communication method using a communication network (eg, a mobile communication network, a wired Internet, a wireless Internet, a broadcasting network) that the network 170 may include, but also short-range wireless communication between devices may be included. For example, the network 170 may include a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), and a broadband network (BBN). , the Internet, and the like. In addition, the network 170 may include any one or more of a network topology including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or a hierarchical network, etc. not limited

Each of the servers 150 and 160 communicates with the plurality of electronic devices 110 , 120 , 130 , 140 and the network 170 through a computer device or a plurality of computers that provides commands, codes, files, contents, services, etc. It can be implemented in devices. For example, the server 150 provides a service (eg, a payment service, a virtual exchange service, a risk monitoring service, and an instant messaging service) to the plurality of electronic devices 110 , 120 , 130 , and 140 accessed through the network 170 . service, game service, group call service (or voice conference service), messaging service, mail service, social network service, map service, translation service, financial service, search service, content providing service, etc.).

2 is a block diagram illustrating an example of a computer device according to an embodiment of the present invention. Each of the plurality of electronic devices 110 , 120 , 130 , 140 or the servers 150 and 160 described above may be implemented by the computer device 200 illustrated in FIG. 2 .

As shown in FIG. 2 , the computer device 200 may include a memory 210 , a processor 220 , a communication interface 230 , and an input/output interface 240 . The memory 210 is a computer-readable recording medium and may include a random access memory (RAM), a read only memory (ROM), and a permanent mass storage device such as a disk drive. Here, a non-volatile mass storage device such as a ROM and a disk drive may be included in the computer device 200 as a separate permanent storage device distinct from the memory 210 . Also, an operating system and at least one program code may be stored in the memory 210 . These software components may be loaded into the memory 210 from a computer-readable recording medium separate from the memory 210 . The separate computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, a disk, a tape, a DVD/CD-ROM drive, and a memory card. In another embodiment, the software components may be loaded into the memory 210 through the communication interface 230 instead of a computer-readable recording medium. For example, the software components may be loaded into the memory 210 of the computer device 200 based on a computer program installed by files received through the network 170 .

The processor 220 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input/output operations. The instructions may be provided to the processor 220 by the memory 210 or the communication interface 230 . For example, the processor 220 may be configured to execute a received instruction according to a program code stored in a recording device such as the memory 210 .

The communication interface 230 may provide a function for the computer device 200 to communicate with other devices (eg, the storage devices described above) through the network 170 . For example, a request, command, data, file, etc. generated by the processor 220 of the computer device 200 according to a program code stored in a recording device such as the memory 210 is transmitted to the network ( 170) to other devices. Conversely, signals, commands, data, files, etc. from other devices may be received by the computer device 200 through the communication interface 230 of the computer device 200 via the network 170 . A signal, command, or data received through the communication interface 230 may be transferred to the processor 220 or the memory 210 , and the file may be a storage medium (described above) that the computer device 200 may further include. persistent storage).

The input/output interface 240 may be a means for an interface with the input/output device 250 . For example, the input device may include a device such as a microphone, keyboard, or mouse, and the output device may include a device such as a display or a speaker. As another example, the input/output interface 240 may be a means for an interface with a device in which functions for input and output are integrated into one, such as a touch screen. At least one of the input/output devices 250 may include the computer device 200 and one device. For example, like a smart phone, a touch screen, a microphone, a speaker, etc. may be implemented in a form included in the computer device 200 .

Also, in other embodiments, the computer device 200 may include fewer or more components than those of FIG. 2 . However, there is no need to clearly show most of the prior art components. For example, the computer device 200 may be implemented to include at least a portion of the above-described input/output device 250 or may further include other components such as a transceiver and a database.

In order to process payment using Central Bank Digital Currency (CBDC), the end-user terminal must frequently communicate with the server to update information on the ledger. Meanwhile, even in an offline situation, such as a situation in which the end user terminal cannot be connected to a network, payment must be made between end users. In this case, double payment should not occur and end users should be able to be authenticated.

3 is a diagram illustrating an example of an internal configuration of an end user terminal according to an embodiment of the present invention. The first end user terminal 310 and the second end user terminal 320 according to the present embodiment may process payment while communicating with the server 330, but in an offline situation, the end user terminals (the first end user terminal) Offline payment between the end user terminals may be processed through communication between the 310 and the second end user terminal 320 . Thereafter, when communication with the server 330 is enabled, the end user terminals may synchronize the contents of the offline payment with the server 330 through communication with the server 330 . The server 330 may be a server device of a service provider that processes payment using CBDC between the CBDC platform and end user terminals. Hereinafter, the term “server” used without particular limitation in the present specification may mean a server of a service provider.

In order to prevent double payment during offline payment, the first end user terminal 310 has a P2P communication module 311 , a Hardware Security Module (HSM) 312 and a Trusted Execution Environment (TEE) security as shown in FIG. 3 . region 313 may be included. The second end user terminal 320 may also have the same or similar internal configuration as the first end user terminal 310 . The first end user terminal 310 and the second end user terminal 320 may be implemented by the computer device 200 described with reference to FIG. 2 , and are not essential for offline payment in the embodiment of FIG. 3 . elements have been omitted.

The P2P communication module 311 may include a communication module for the purpose of short-range communication, such as Bluetooth or Near Field Communication (NFC). In order for the payment to be made between end users even in a situation in which the user cannot communicate with the server through the network (eg, an offline situation such as a temporary network failure or a failure due to a disaster, etc.), at least the terminals of the end users (eg, Therefore, since communication between the first end user terminal 310 and the second end user terminal 320 of FIG. 3 should be possible, the P2P communication module 311 may be required.

The HSM 312 may include a module for managing and protecting a private key that cannot be physically copied and extracted. In general, in the encryption API, instead of using a method in which a secret key such as an encryption key is loaded in memory, etc., the HSM 312 sends data to the inside of the HSM 312 when encrypting and decrypting data to receive the result value. there is. Therefore, since the secret key is managed internally and is not leaked to the outside and the cryptographic operation itself can be performed inside the HSM 312, it is possible to fundamentally prevent the leak of the secret key. As an example, the computer device 200 of FIG. 2 may further include a physical device for this HSM 312 .

The TEE security area 313 may provide a security area independent of hardware to provide security functions such as application program integrity and data confidentiality in a safe execution environment. For example, the processor 220 included in the computer device 200 of FIG. 2 may include a TEE function for providing the TEE security area 313 .

In addition, the TEE security area 313 configured in hardware according to an embodiment may be replaced by software technology. For example, White-Box Cryptographic (WBC) is a software technology that can safely store data and prevent stored data from being revealed even when an encryption algorithm is executed in an untrusted terminal.

It will be easily understood that the TEE-based security area described later may be extended to a "security area" including either a hardware security area or a software security area.

Since Bluetooth or NFC for short-distance communication, HSM for security, TEE, and the like are already well known, a detailed description will be omitted.

In order to process payment in an offline situation, it is assumed that the following conditions (1) to (5) are satisfied in the payment method according to the present embodiments.

(1) Each of the end user terminals (eg, each of the first end user terminal 310 and the second end user terminal 320 ) may be an HSM device having a unique secret key. In other words, two or more end user terminals do not have the same secret key.

(2) The latest information signed by the end-user terminal is recorded in the TEE, and the signature can be processed by utilizing the information recorded in the TEE each time it is signed. For example, the latest information signed by the first end user terminal 310 may be recorded in the TEE secure area 313 , and the first end user terminal 310 may be recorded in the TEE secure area 313 . With up-to-date information, the following signatures can be processed.

(3) Information on the final balance synchronized with the server is recorded in the TEE. For example, the first end user terminal 310 may record information on the final balance synchronized through communication with the server in the TEE security area 313 .

(4) Enable the electronic wallet of users who have completed KYC (Know Your Customer) authentication to be used. According to an embodiment, KYC authentication may be selectively processed so that foreigners can also use it. If it is allowed to use an electronic wallet without KYC authentication, restrictions such as limiting the upper limit of the amount that can be paid can be set to be applied to the electronic wallet.

(5) A PKI-based certificate is issued from the CA (Certification Authority) to the only device that will use the HSM. In this case, the certificate is prevented from being issued twice, and the certificate may be stored in the TEE (eg, the TEE security area 313 ). The certificate information may include device-specific information, HSM public information, issuing authority information, and expiration date. As an example, the device-specific information may include information that can uniquely identify the end-user terminal, and the public information may include information (eg, public key) disclosed in response to a private key stored in the HSM. .

In the embodiment of FIG. 3 above, an embodiment in which the first end user terminal 310 includes all of the P2P communication module 311 , the HSM 312 and the TEE security area 313 has been described, but a device supporting TEE ( For example, a device that supports a network or a combination of a smart phone) and a smart HSM (eg, ledger Nano, Trezor, YubiKey, etc.) and TEE and HSM A device (eg, an HSM card having a secure storage device) may be implemented in a combined form.

In the case of smartphones, portable charging devices or equipment that can be charged with batteries can be purchased at low prices, so you can easily prepare for no power. In addition, in the case of a separately developed end-user terminal, it is possible to prepare for no power by providing a built-in battery that can be charged with a micro-USB or USB-C so that it can be charged with a portable charging device or a battery. In addition, when the end-user terminal is developed as a card-type small device, battery replacement can be made possible, and a design that can be used for a long time with low power is required.

On the other hand, when the end user terminal (eg, the first end user terminal 310 or the second end user terminal 320) is issued, or when setting the use of the possessed end user terminal, an intermediary (eg, the central Other financial institutions (except banks) can perform authentication processes such as KYC authentication and/or ID/password authentication.

In addition, a certificate may be issued to the end user terminal for which authentication has been completed. As already described, the certificate may include device-specific information, HSM public information, issuing authority information, and expiration date signed and included. The validity period can be used to ensure that the latest information is maintained by periodically reissuing the certificate.

In addition, when the user uses the end user terminal, device user authentication may be processed through a password or biometric authentication such as fingerprint, iris, or face recognition. For example, the payment program installed and driven in the end user terminal may control the end user terminal so that when the user wants to proceed with payment using the end user terminal, the end user terminal proceeds with device user authentication to authenticate the user first. can

When performing online or offline authentication between users, the information used for authentication from the CA, such as device-specific information and HSM public information, and issuing authority information and validity period, together with the certificate, is shared with the server or other users. It is transmitted to the end user terminal and authentication of the user's end user terminal may be performed.

4 is a flowchart illustrating an example of an online payment method according to an embodiment of the present invention. The online payment method according to the present embodiment may be performed by the computer device 200 implementing the end user terminal. In this case, the processor 220 of the computer device 200 may be implemented to execute a control instruction according to a code of an operating system included in the memory 210 or a code of at least one computer program. Here, the processor 220 causes the computer device 200 to perform steps 410 to 470 included in the method of FIG. 4 according to a control command provided by a code stored in the computer device 200 . can control

In step 410, when the computer device 200 is authenticated by the CA, such as a certificate issued to the computer device 200, device-specific information of the computer device 200, public information of the HSM, and issuing authority information and validity period, etc. The used information can be transmitted to the server of the service provider. In this case, the server of the service provider uses information used when receiving authentication from the CA, such as the transmitted certificate, device-specific information and HSM public information, and issuing authority information, validity period, etc. to the computer device 200 as an end-user terminal. can be authenticated.

In step 420, the computer device 200 may inquire the latest balance and last transaction information (sequence number) of the user's electronic wallet through the server.

In step 430 , the computer device 200 may store the searched latest balance and last transaction information in the TEE. As already described, the TEE-based security area configured in hardware may be replaced by software technology such as WBC.

In step 440 , the computer device 200 may receive remittance information. For example, the computer device 200 may receive a remittance amount and recipient information from a user.

In operation 450, the computer device 200 may use the HSM to sign the last transaction information and remittance information. For example, last transaction information and remittance information may be signed through a secret key included in the HSM.

In step 460, the computer device 200 may transmit the signed information to the server. The server may process the payment by delivering the remittance amount to the recipient's e-wallet according to the transmitted information and deducting the remittance amount from the user's e-wallet.

In operation 470 , the computer device 200 may check the processing result. In this case, when the processing is completed, the computer device 200 may store the latest balance of the electronic wallet and last transaction information in the TEE.

5 is a flowchart illustrating an example of an offline payment method according to an embodiment of the present invention. In this embodiment, when communication with the server of the service user is impossible, the end user terminal a 510 of the end user A sending the money and the end user terminal b 520 of the end user B receiving the money are P2P using a local area network. An example of processing payment through communication (hereinafter, short-distance communication) will be described. First, the end user terminal a 510 and the end user terminal b 520 may exchange certificates through short-distance communication to confirm that they are mutually authenticated devices. Each of the end user terminal a 510 and the end user terminal b 520 may be implemented by the computer device 200 and may include a TEE security area and an HSM, respectively.

In step 531 , the end user terminal b 520 may transmit a nonce value for the transaction to the end user terminal a 510 . The nonce value may be a randomly generated value.

In step 532 , the end user terminal a 510 may transmit a remittance transaction including the last transaction information 1, a nonce value, and a hash value of a specific security value to the end user terminal b 520 . Here, the last transaction information 1 may include a sequence number stored in the TEE, and the specific security value may be a randomly generated value. In this case, the remittance transaction may be signed with the private key of the HSM, and may be transmitted to the end user terminal b 520 together with the public key as public information of the HSM. According to an embodiment, without the need for the end user terminal a (510) to transmit the public key as public information of the HSM to the end user terminal b (520), the end user terminal b (520) receives the certificate from the end user terminal a (510). It is also possible to obtain a public key as public information of the HSM.

In step 533, the end user terminal b 520 may verify the received remittance transaction and the nonce value. As an example, the end user terminal b 520 may process signature verification for the received remittance transaction using the public key, and check whether the nonce value included in the remittance transaction is the same as the nonce value transmitted in step 510 . can At this time, if the signature verification for the received remittance transaction fails, the received nonce value is different from the nonce value transmitted in step 510, or an already processed nonce value is received, the end user terminal b 520 is the final A failure message may be transmitted to the user terminal a 510 . Also, the end user terminal b 520 may store the received remittance transaction together with the last transaction information 2 . Here, the last transaction information 2 may be information about a current transaction, unlike the last transaction information 1 .

In step 534 , the end user terminal b 520 may transmit the verification result to the end user terminal a 510 . For example, the end user terminal b 520 may transmit a verification success message or a verification failure message to the end user terminal a 510 .

In step 535 , when the verification result is successful, the end user terminal a 510 may transmit the original text of the security value of the remittance transaction to the end user terminal b 520 . If the end user terminal b 520 does not receive the verification success message from the end user terminal b 520 within a predetermined time, the transaction may be canceled. In this case, the end user terminal b 520 does not receive the original text of the security value.

In step 536, the end user terminal a 510 may store the last transaction information 2 and the latest balance in the TEE. The latest balance may be the latest balance of end user A's electronic wallet.

Then, when communication is restored, the end user terminal b 520 transmits the original text of the remittance transaction and security value received from the end user terminal a 510 to the CBDC ledger, and the end user terminal a 510 sends the end user terminal b ( 520), it is possible to synchronize the transactions that occurred in the offline situation with the ledger in order. If, in step 550, the end user terminal b 520 does not receive the original text of the security value, synchronization with the ledger may fail, and the transaction may be substantially canceled. Since the last transaction information must be updated through this transaction, the last transaction information 2 may be information about the current transaction, unlike the last transaction information 1 . According to an embodiment, the last transaction information 2 stored in the TEE of the end user terminal a 510 in step 536 and the last transaction information 2 stored in the TEE of the end user terminal b 520 in step 533 are at least part may be information with different contents.

Depending on the embodiment, the following restrictions (a) to (c) may be applied.

(a) Transaction amounts received in offline situations cannot be used online without synchronization with the CBDC ledger service.

(b) The amount available on the end user terminal may be limited.

(c) By setting at least one of the limit of the amount that can be used offline, the number of transactions, and the valid time for conducting transactions in an offline situation, transactions may be restricted if the limit, number or time is exceeded.

According to this embodiment, all transactions of the electronic wallet linked with the HSM are processed in the end user terminal including the corresponding HSM. For example, since the private key of the HSM cannot be copied, it can be guaranteed that all transactions of the linked electronic wallet are processed in the end user terminal including the corresponding HSM. In addition, it cannot be used in other devices because it checks whether the device-specific information recorded in the certificate and the public information of the HSM are the same through the authentication of the electronic wallet. In addition, according to the present embodiment, since the completed transaction is stored in the TEE, it cannot be forcibly modified. At this time, since the transaction proceeds only in one end user terminal, the latest information is always stored in the information stored in the TEE. Thus, double payment can be prevented.

In addition, although the present embodiment describes a TEE-based security area configured in hardware, this TEE may be replaced with a software technology such as WBC.

As such, according to embodiments of the present invention, payment is processed using Central Bank Digital Currency (CBDC) without double payment even in an offline situation (the user's terminal cannot be connected to the server through the network) can do.

The system or apparatus described above may be implemented as a hardware component or a combination of a hardware component and a software component. For example, devices and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA). , a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. A processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

Software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or apparatus, to be interpreted by or to provide instructions or data to the processing device. may be embodied in The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The medium may continuously store a computer executable program, or may be a temporary storage for execution or download. In addition, the medium may be various recording means or storage means in the form of a single or several hardware combined, it is not limited to a medium directly connected to any computer system, and may exist distributedly on a network. Examples of the medium include a hard disk, a magnetic medium such as a floppy disk and a magnetic tape, an optical recording medium such as CD-ROM and DVD, a magneto-optical medium such as a floppy disk, and those configured to store program instructions, including ROM, RAM, flash memory, and the like. In addition, examples of other media may include recording media or storage media managed by an app store for distributing applications, sites supplying or distributing other various software, and servers. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, although the embodiments have been described with reference to the limited embodiments and drawings, various modifications and variations are possible from the above description by those skilled in the art. For example, the described techniques are performed in an order different from the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (20)

In the payment method of a computer device,
The computer device includes a security area, a Hardware Security Module (HSM) and at least one processor,
The payment method is
receiving, by the at least one processor, a nonce value from a terminal of an end user who will receive remittance through short-distance communication in an offline situation;
By the at least one processor, a remittance transaction including the first last transaction information stored in the secure area, the received nonce value, and a hash value of the security value is signed using the private key of the HSM and transmitted to the terminal to do;
transmitting, by the at least one processor, an original text of the security value to the terminal when a verification success message is received from the terminal; and
Storing, by the at least one processor, second last transaction information according to the remittance transaction and the latest balance of the electronic wallet in the secure area
A payment method comprising a. According to claim 1,
The security area is a TEE (Trusted Execution Environment) security area or WBC (White-Box Cryptographic) payment method, characterized in that it comprises a security area. According to claim 1,
The payment method, characterized in that the transaction occurring in the offline situation is synchronized by transmitting the original text of the remittance transaction and the security value from the terminal to the CBDC ledger in response to the change of the offline situation to the online situation. According to claim 1,
The payment method is
Authenticating the terminal by exchanging a certificate with the terminal by the at least one processor
Payment method, characterized in that it further comprises. 5. The method of claim 4,
The certificate is issued to include device-specific information of the device to which the certificate is issued, public information of the HSM included in the device, issuing authority information, and the validity period, and is stored in the security area included in the device
A payment method characterized by 6. The method of claim 5,
In the terminal, the signature verification of the remittance transaction is processed using the public information of the HSM included in the certificate of the computer device
A payment method characterized by According to claim 1,
The step of signing the remittance transaction using the private key of the HSM and transmitting the remittance transaction to the terminal comprises:
Further transmitting the public information of the HSM to the terminal,
Signature verification of the remittance transaction is processed using the public information of the HSM in the terminal
A payment method characterized by In the payment method of a computer device,
The computer device includes a first security zone, a Hardware Security Module (HSM) and at least one processor,
The payment method is
transmitting, by the at least one processor, a nonce value to a terminal of an end user who makes a remittance through short-distance communication in an offline situation;
receiving, by the at least one processor, a remittance transaction signed by using the private key of the HSM of the terminal from the terminal, wherein the remittance transaction includes first last transaction information stored in a second secure area of the terminal; Contains the hash value of the passed nonce value and security value -;
signature-verifying, by the at least one processor, the received remittance transaction;
verifying, by the at least one processor, a nonce value included in the received remittance transaction;
transmitting, by the at least one processor, a verification success message to the terminal when the signature verification and verification of the nonce value are successful;
storing, by the at least one processor, the received remittance transaction and a second last transaction in the first secure area; and
Receiving, by the at least one processor, the original text of the security value transmitted in response to receiving the verification success message from the terminal
A payment method comprising a. According to claim 1,
Each of the first security area and the second security area comprises a Trusted Execution Environment (TEE) security area or a White-Box Cryptographic (WBC) security area. 9. The method of claim 8,
In order to synchronize the transaction occurring in the offline situation in response to the offline situation changing to the online situation, the payment method includes:
transmitting, by the at least one processor, the original text of the remittance transaction and the security value stored in the first security area to the CBDC ledger;
Payment method, characterized in that it further comprises. 9. The method of claim 8,
The payment method is
Authenticating the terminal by exchanging a certificate with the terminal by the at least one processor
Payment method, characterized in that it further comprises. 12. The method of claim 11,
The certificate is issued to include device-specific information of the device to which the certificate is issued, public information of the HSM included in the device, issuing authority information, and the validity period, and is stored in the security area included in the device
A payment method characterized by 13. The method of claim 12,
The signature verification step includes:
Signature verification of the remittance transaction using the public information of the HSM included in the terminal, the issuing organization information, and the validity period
A payment method characterized by 9. The method of claim 8,
Receiving the signed remittance transaction comprises:
Further receiving from the terminal the public information of the HSM included in the terminal,
The signature verification step includes:
Signature verification of the remittance transaction using the received public information of the HSM
A payment method characterized by A computer program stored in a computer-readable recording medium in combination with a computer device to cause the computer device to execute the method of any one of claims 1 to 14. A computer-readable recording medium in which a computer program for executing the method of any one of claims 1 to 14 in a computer device is recorded. at least one processor implemented to execute instructions readable by a computer device;
security area; and
Hardware Security Module (HSM)
including,
by the at least one processor;
Receive the nonce value from the terminal of the end user who will receive remittance through short-distance communication in an offline situation,
The remittance transaction including the first last transaction information stored in the secure area, the received nonce value and the hash value of the security value is signed using the private key of the HSM and transmitted to the terminal;
When receiving the verification success message from the terminal, transmitting the original text of the security value to the terminal,
Storing the second last transaction information according to the remittance transaction and the latest balance of the electronic wallet in the secure area
A computer device comprising a. 18. The method of claim 17,
Synchronization of the transaction occurring in the offline situation by transmitting the original text of the remittance transaction and the security value to the CBDC ledger from the terminal in response to the change of the offline situation to the online situation
A computer device comprising a. at least one processor implemented to execute computer-readable instructions;
a first security area; and
Hardware Security Module (HSM)
including,
by the at least one processor;
In an offline situation, the nonce value is transmitted to the terminal of the end user who makes a remittance through short-distance communication,
receive a remittance transaction signed by using the private key of the HSM of the terminal from the terminal, wherein the remittance transaction is a hash of the first last transaction information stored in a second secure area of the terminal, the transmitted nonce value, and the security value contains value -;
signature verification of the received remittance transaction;
verifying the nonce value included in the received remittance transaction;
When the signature verification and verification of the nonce value are successful, a verification success message is transmitted to the terminal,
storing the received remittance transaction and the second last transaction in the first secure area;
Receiving the original text of the security value transmitted in response to receiving the verification success message from the terminal
A computer device comprising a. 20. The method of claim 19,
by the at least one processor;
To synchronize transactions occurring in the offline situation in response to the offline situation changing to an online situation,
Transmitting the original text of the remittance transaction and the security value stored in the first security area to the CBDC ledger
A computer device comprising a.

Images