TWI564825B - Authorization method for new currency trading device - Google Patents

Description

New method for authorizing bit currency trading devices

The present invention relates to a method for authorizing the addition of a cryptographic electronic money (Cryptocurrency) transaction device, and more particularly to a method for changing the state of a key between other newly added electronic devices and a storage device through an authenticated transaction device.

Bitcoin is a form of currency on the Internet. It is mainly an invisible virtual coin stored on a computer or related electronic device. It is different from the currency issued by the general countries. The bitcoin is a peer-to-peer network. The monetary unit in the system that is not regulated by the central or government agencies, does not rely on the support of the central bank, the government, the enterprise, or the credit guarantee, but relies on the participants in the peer-to-peer network system to perform together with the enterprise organization that conducts the bitcoin transaction. Construction.

Bitcoin is generated through a process called “mining”, where each time a network node or miner (ie, a computer in network communication) obtains a fee by processing transaction verification and transaction records. Bitcoin, or a bitcoin that yields new output.

Bitcoin mining and node software mainly conducts transaction verification through peer-to-peer network, digital signature and interactive proof system. Each network node broadcasts transactions to the network. These broadcast transactions are processed by miners. After verification, the mine union uses its own workload proof results to express the confirmation, and the confirmed transaction will be packaged into the data block, and the data blocks will be stringed together to form a continuous data block chain.

Since the bitcoin uses irreversible hash operations, it is very difficult to find the random bar adjustments that meet the requirements. Therefore, the mining network nodes need to continuously repeat the trial and error process until the random adjustments are found to make the generated hash values. Below a certain target. When any node finds a solution that meets the requirements, the node will broadcast its own results to the entire network, and other nodes will receive the newly solved data block and check whether it meets the rules, if other nodes calculate the hash value. If the discovery does meet the requirements (the operation target required by the bitcoin), then the data block is valid and the other nodes will accept the data block.

The main object of the present invention is to provide an authorization method for adding a new bit currency transaction device, so that an authentication device can be established between the storage device storing the bit coin data and the electronic device connected to the Internet, and Through the electronic device, another plurality of electronic devices are authorized to read the bit coin data inside the storage device.

A secondary object of the present invention is that each electronic device that has established an authentication relationship with the storage device can operate independently of each other such that the storage device adds other additional electronic devices to obtain authorization authentication.

In order to achieve the above object, the method for authorizing the new bit coin transaction device of the present invention comprises: providing a storage device and a first electronic device interconnected, wherein the storage device is set to be unable to directly connect to the Internet. a closed device, and no device key is recorded inside the storage device; a first device data is input by the first electronic device, and a new first device request is transmitted to the storage device, and the first device is added Requiring to include the first device data; the storage device receives the newly added first device request, and the first device data is calculated to generate a first key, and the first key is converted into a first data. Displaying on the storage device; the storage device detects that no key is recorded internally, determines the first key to be authenticated and stores, and inputs the first data to the first electronic device, and is operated by the first data The first key storage described above is generated.

The first electronic device has a first key that is calculated by the storage device, and the storage device determines that the first key is in an authenticated state. Therefore, the first electronic device can directly request the storage device. Transfer of bitcoin data.

In a first preferred embodiment, the method of the present invention further includes: inputting a second device data to the first electronic device, and transmitting a new second device request to the storage device, wherein the newly added second device requires The second device data and the verification data calculated by the first key; the storage device receives the newly added second device request, and the second device data is calculated to generate a second key, and the second key is simultaneously Converting to a second data displayed on the storage device; the storage device detecting the verification data that the newly added second device is required to comply with the first key of the memory, determining the second key to be authenticated and storing; providing one The second electronic device inputs the second data, and the second electronic device generates the second key by the second data operation and stores the second key.

Since the second electronic device has a second key that is calculated by the storage device, and the storage device determines that the second key is in an authenticated state, the second electronic device can directly request the storage device. Transfer of bitcoin data.

Subsequently, the authorization method of the present invention further includes: providing a third electronic device to input a third device data, and transmitting a new third device request to the storage device, wherein the newly added third device requesting the third device data; The storage device receives the newly added third device request, and the third device data is calculated to generate a third key, and the third key is converted into a third data and displayed on the storage device; the storage device Detecting that the newly added third device requires verification data that does not meet the first key of the memory, determining the third key as an unauthenticated state and storing the third key, and inputting the third data by the third electronic device, and the third The data operation produces the third key store described above.

The third electronic device has a third key that is calculated by the storage device, but the third key generated by the storage device belongs to an unauthenticated state before being authorized by another authenticated device. The third electronic device will not be able to request the storage device to transmit the bit currency data before the authentication is obtained.

Of course, if it is desired to enable the third electronic device to transmit data with the storage device, the first electronic device must transmit an enable third device request to the storage device, and the enable third device is required to contain the first secret. The verification data of the key calculus; the storage device receives the request for enabling the third device, and detects the verification data that the third device is required to comply with the first key of the memory, and determines that the stored third key is changed from the unauthenticated state to Authenticated status.

Alternatively, the second electronic device transmits an enabling third device request to the storage device, and the enabling third device requires the verification data calculated by the second key; the storage device receives the enabling third device request, And detecting the verification data that the third device is required to comply with the second key of the memory, and determining that the stored third key is changed from the unauthenticated state to the authenticated state.

Whether the third key is changed from the unauthenticated state to the authenticated state by the authenticated first electronic device or the second electronic device, the subsequent third electronic device may request the storage device to perform bit currency data transmission. .

In a second preferred embodiment, the authorization method of the present invention can also directly provide a second electronic device to input a second device data, and transmit a new second device request to the storage device, and the newly added second device requires The second device data; the storage device receives the newly added second device request, and the second device data is calculated to generate a second key, and the second key is converted into a second data to the storage device Displaying, the storage device detects that the newly added second device requires verification data that does not meet the first key of the memory, determines the second key as an unauthenticated state, and stores the second data, and inputs the second data to the second electronic device. And generating the second key storage by the second data operation.

Transmitting, by the first electronic device, an enabling second device requesting to the storage device, the enabling second device requesting verification data calculated by the first key; the storage device receiving the enabling second device request, and detecting the foregoing The second device is enabled to require the verification data conforming to the first key of the memory, and the stored second key is determined to be the authenticated state by the unauthenticated state change.

The first data, the second data, and the third data displayed by the storage device in all the foregoing embodiments are all set as one-time password (OTP), and the input manners of the first data, the second data, and the third data may be used. The self-operated input or the memory data transmitted by the storage device to the electronic device for automatic input, and the storage device and each electronic device can be selectively connected by wired plug connectors or connected by wireless transmission protocol. line. The storage device can be set as a smart card with a near field communication module or a flash drive with a connection socket.

The invention is characterized in that a closed storage device that cannot directly connect to the Internet is used, and the connection and transaction authentication relationship is established with an electronic device that can directly connect to the Internet, and the storage device has no confidentiality. Before the key is generated, the first generated key will be directly determined as the authenticated state, and the newly added electronic device must be authorized by the first electronic device to add the device, so that the storage device directly generates another authenticated key. Alternatively, the user can directly use other electronic devices to request the storage device to generate an unauthenticated key, and then the authorized electronic device (eg, the first electronic device) transmits an authorization new request to make the unauthenticated key of the storage device memory. The change is determined as an authenticated key, so that any electronic device that has established an authentication relationship with the storage device can operate independently, so that the storage device adds other additional electronic devices to obtain authorized authentication, thereby greatly enhancing the storage of the bit coin. The convenience of using the transaction.

In addition, the key establishment of the electronic device and the storage device is completed through indirect data (OTP), and the key is not exposed in the communication transmission during the process, thereby enhancing the security of the storage device.

In order to further clarify and understand the structure, the use and the features of the present invention, the preferred embodiment is described in detail with reference to the following drawings:

Referring to FIG. 1 , the bit coin transaction device of the present invention mainly comprises a storage device storing bit coin data and a plurality of electronic devices capable of operating bit coin transactions, wherein the storage device is set to be incapable of directly connecting. A closed device for the Internet, and the electronic device is an open device that can be directly connected to the Internet.

In a possible embodiment of the present invention, the first electronic device of the present invention is configured as a smart phone 10, and the storage device is configured as a smart card 20, and the surface of the smart card 20 has a display for the user to view. The screen 21 and a convenient operation interface 22 are internally stored with one piece of currency data, but no key data is stored.

Wherein, the smart phone 10 and the smart card 20 are connected to each other by using a wireless transmission protocol, and both of them are installed with an application capable of connection, transaction, calculation and authentication, and the wireless transmission protocol may include : Infrared, Bluetooth, ISO14443, ISO7816 and other different short-range communication methods.

In the first preferred embodiment, the smart card 20 is wirelessly connected to the smart phone 10 through the control interface 22, as shown in FIG. 2, and then on the smart phone 10. Entering a first device data 11, the first device data 11 may be composed of any data such as an account number, a password, a personal resource, a mobile phone chip serial number, etc., and the smart phone 10 converts the first device data 11 into a new one. A device request 12 is transmitted to the smart card 20 as described above.

Referring to FIG. 3, when the smart card 20 receives the new first device request 12, the first device data 11 in the newly added first device request 12 is calculated to generate a first key 23. And simultaneously converting the first key 23 into a first data 24 to be displayed on the display screen 21; the subsequent smart card 20 detects that no device key data is recorded internally, and directly directly uses the first key. 23 is determined to be in an authenticated state and stored.

Then, after the user knows the first data 24 from the display screen 21 on the smart card 20, the first data 24 can be input by the smart phone 10, or the data of the memory can be read by the smart card 20. The first smart phone 10 is automatically input to the first data 24, and the first data 24 is calculated to generate the first key 23; since the smart phone 10 has the same authentication as the smart card 20 The first key 23, therefore, the smart card 20 determines that the smart phone 10 is an authenticated device, and the user can use the smart phone 10 to extract the bit coin data in the smart card 20.

Referring to FIG. 4, when the user wants to add another electronic device (such as the tablet 30 in FIG. 5) through the smart phone 10, the second device data 31 can be input by operating the smart phone 10. The smart phone 10 calculates the first key 23 to form a verification data, and converts the second device data 31 and the verification data calculated by the first key 23 into a new second device requirement 32. The above-mentioned new second device request 32 is transmitted to the smart card 20 described above.

Referring to FIG. 5, after receiving the new second device request 32, the smart card 20 calculates the second device data 31 to generate a second key 25, and converts the second key 25 into A second data 26 is displayed on the smart card 20, and the smart card 20 detects that the key verification data included in the newly added second device requirement 32 conforms to the internal storage of the authenticated first key 23 The verification data is such that the second key 25 is determined to be in an authenticated state and stored.

Then, after the user knows the second data 26 from the display screen 21 on the smart card 20, the user inputs the second data 26 by using the tablet 30 with the application program, or the smart card 20 The data data of the memory is transferred to the tablet computer 30 to automatically input the second data 26, and the tablet computer 30 calculates and stores the second key 25 by the second data 26. Since the tablet 30 has the authenticated second key 25 calculated in the same manner as the smart card 20, when the smart card 20 and the tablet 30 are connected to each other, the smart card 20 determines the above. The tablet 30 is also an authenticated device, and the user can use the tablet 30 to extract the bitcoin data in the smart card 20.

If the user wishes to add a third electronic device 40 to perform the bit coin transaction with the smart card 20, the smart phone 10 (first electronic device) or the tablet computer 30 (second electronic device) may be used. The authenticated device can be directly connected to the smart card 20 directly by using a new third electronic device 40 (such as another smart phone, a tablet computer or a notebook computer). line.

Referring to FIG. 6 , if it is desired to establish a connection with the smart card 20 by using a new electronic device, a third electronic device 40 must be provided to input a third device data 41 and transmit a new third device request. 42. For the smart card 20, the newly added third device request 42 includes the third device data 41; the smart card 20 receives the newly added third device request 42 and operates the third device data 41 to generate a The third key 27 simultaneously converts the third key 27 into a third data 28 for display on the smart card 20; the smart card 20 will detect that the newly added third device request 42 does not conform to internal storage. The third key 27 is determined to be in an unauthenticated state and stored by the verification data checked by the first key 23 described above.

Referring to FIG. 7, after the user knows the third data 28 from the display screen 21 on the smart card 20, the user inputs the third data 28 by using a third electronic device 40 equipped with the application. Alternatively, the data card of the memory is transmitted by the smart card 20 to the third electronic device 40 to automatically input the third data 28, and the third data 28 is calculated to generate the third key 27 for storage. The third electronic device 40 has the third key 27 calculated by the smart card 20, but the third key 27 generated by the smart card 20 does not have other authenticated devices (such as smart type). The authorization of the mobile phone 10 or the tablet 30) is unauthenticated. Therefore, the third electronic device 40 cannot request the smart card 20 to transmit the bitcoin data until the authentication has been obtained.

Of course, if it is desired to change the third key 27 stored in the smart card 20 from the unauthenticated device to the authenticated state, the third electronic device 40 can perform data transmission with the smart card 20. The authenticated electronic device (such as the smart phone 10 or the smart card 20) must be transmitted again to enable the third of the authentication data containing the authenticated key (eg, the first key 23 or the second key 25). The device request 43 is sent to the smart card 20; after receiving the enabling third device requirement 43, the smart card 20 detects the verification data of the authenticated key that enables the third device requirement 43 to meet the memory, if any The verification data verified by the authenticated key will determine the third key 27 from the unauthenticated state change to the authenticated state, and the third electronic device 40 may subsequently request the smart card 20 to perform the bit currency data. transmission.

The foregoing storage device is designed as a smart card 20 for convenience of illustration and does not limit its product structure. In other words, the storage device can also be designed as a hard disk, a flash drive or a memory card that is connected by a plug-in method.

Referring to FIG. 9A to FIG. 9B , it can be seen from the foregoing embodiments that the method of the present invention for adding a new device includes: step (A) providing a storage device and a first electronic device interconnecting the storage device. No device key is recorded internally; step (B) inputs a first device data to the first electronic device, and transmits a new first device request to the storage device, and the newly added first device request includes the first device Device data; step (C) the storage device receives the newly added first device request, and the first device data is calculated to generate a first key, and the first key is converted into a first data in the storage Displaying on the device; step (D) the storage device detecting that no key is recorded internally, determining the first key to be authenticated and storing; and (E) inputting the first data to the first electronic device, And generating, by the first data operation, the first key storage; the step (F), the first electronic device inputting a second device data, and transmitting a new second device request to the storage The device, the newly added second device is required to include the second device data and the verification data verified by the first key; and the step (G), the storage device receives the newly added second device request, and the second device data is The operation generates a second key, and simultaneously converts the second key into a second data for display on the storage device; and (H) the storage device detects that the newly added second device is required to meet the first key of the memory Verifying the data, determining the second key as an authenticated state and storing; step (I) provides a second electronic device and inputting the second data, and the second electronic device generates the second dense by the second data operation Key and save.

Referring to the second preferred embodiment shown in FIG. 10, after the authentication relationship is completed between the smart phone 10 and the smart card 20, the tablet 30 directly inputs a second device data 31, and Transmitting a new second device request 32 to the smart card 20, the newly added second device request 32 only containing the second device data 31, and there is no verification data calculated by the first key 23; The type card 20 receives the new second device request 32, and the second device data 31 is operated to generate a second key 25, and the second key 25 is converted into a second data 26 to the smart card. The above-mentioned smart card 20 detects that the newly added second device request 32 does not meet the verification data calculated by the first key 23 of the memory, and determines the second key 25 as an unauthenticated state and stores it; The computer 30 inputs the second data 26 and generates the second key 25 by the second data 26 operation.

Referring to FIG. 11 , in the following, as in the process of adding the third electronic device 40 in the previous embodiment, the smart phone 10 transmits an enable second device request 33 to the smart card 20, and the second device is enabled. The request 33 includes verification data verified by the first key 23; the smart card 20 receives the enabling second device request 33, and detects that the enabling second device request 33 conforms to the verification of the memory first key 23 The data is used to determine that the stored second key 25 is changed from the unauthenticated state to the authenticated state, and the tablet 30 may subsequently request the smart card 20 to transmit the bitcoin data.

Referring to FIG. 12A to FIG. 12B , it can be seen from the foregoing embodiments that the method for adding an unauthenticated device according to the present invention includes: step (A) providing a storage device and a first electronic device interconnected, the storage device No key is recorded internally; step (B) inputs a first device data to the first electronic device, and transmits a new first device request to the storage device, wherein the newly added first device requires the first device to be included The data storage device receives the new first device request, and the first device data is generated to generate a first key, and the first key is converted into a first data to the storage device. The above-mentioned storage device detects that no key is recorded internally, determines the first key to be authenticated and stores it; and (E) inputs the first data to the first electronic device, and Generating the first key storage by the first data operation; step (F) providing a second electronic device to input a second device data, and transmitting a new second device request to the storage The second adding device is required to include the second device data; the step (G) is that the storing device receives the newly added second device request, and the second device data is calculated to generate a second key, and the foregoing Converting the second key into a second data to be displayed on the storage device; and (H) the storing device detects that the newly added second device requires the verification data calculated by the first key of the memory not to match the second key Determining the key as an unauthenticated state and storing; the step (I) inputting the second data to the second electronic device, and generating the second key storage by the second data operation; and (J) by the first electronic device Transmitting an enable second device request to the storage device, the enabling second device requesting the authentication data calculated by the first key; and (K) the storing device receiving the enabling second device request, and detecting the enabling The second device is required to comply with the verification data calculated by the first key of the memory, and the stored second key is determined to be in an authenticated state by the unauthenticated state change.

The above embodiments are intended to be illustrative only, and are not intended to limit the scope of the present invention. It is included in the scope of the following patent application.

10‧‧‧Smart mobile phone
11‧‧‧ First device data
12‧‧‧New first device requirements
20‧‧‧Smart card
21‧‧‧ Display screen
22‧‧‧Control interface
23‧‧‧ First key
24‧‧‧ first data
25‧‧‧second key
26‧‧‧ Second data
27‧‧‧ Third key
28‧‧‧ Third data
30‧‧‧ tablet
31‧‧‧Second device information
32‧‧‧Addition of second device requirements
33‧‧‧Enable second device requirements
40‧‧‧ Third electronic device
41‧‧‧ Third device information
42‧‧‧New third device requirements
43‧‧‧Enable third device requirements

1 is a schematic diagram of a first electronic device connection storage device of the present invention; FIG. 2 is a schematic diagram of a first electronic device transmitting a first device requirement to a storage device according to the present invention; FIG. 3 is a storage device generating an authenticated key according to the present invention; FIG. 4 is a schematic diagram of the first electronic device transmitting a second device required to the storage device according to the present invention; FIG. 5 is a schematic diagram of the device for generating the authenticated key data by the user device according to the present invention; FIG. 6 is a schematic diagram of a third electronic device transmitting a third device request to a storage device according to the present invention; FIG. 7 is a view showing that the storage device generates unauthenticated key data and is input by a user. FIG. 8 is a schematic diagram of a first electronic device requiring a storage device to initiate authentication of a third electronic device according to the present invention; and FIGS. 9A to 9B are flowcharts showing a first preferred embodiment of the authorization method of the present invention; The second electronic device transmits a schematic diagram of the newly added second device request to the storage device; FIG. 11 shows the unauthenticated key data generated by the storage device of the present invention. A schematic view of a second user input from the electronic device; FIGS. 12A to 12B flowchart of a second preferred embodiment of the present invention, authorization method.

Claims (13)

A method for authorizing a new bit currency transaction device includes: providing a storage device that cannot be directly connected to the Internet and interconnecting a first electronic device directly connected to the Internet; the storage device is not recorded internally Any key, and storing a piece of coin data; inputting a first device data in the first electronic device, and transmitting a new first device request to the storage device, the newly added first device requesting the foregoing a device data; the storage device receives the newly added first device request, and the first device data is calculated to generate a first key, and the first key is converted into a first data and displayed on the storage device The storage device detects that no key is recorded internally, determines the first key to be authenticated and stores the first key, inputs the first data to the first electronic device, and generates the first data by the first data operation The key storage enables the first electronic device to extract the bit coin data in the storage device. The method for authorizing a new bit currency transaction device according to claim 1, wherein the method further includes: inputting, by the first electronic device, a second device data, and transmitting a new second device request to the storage device The newly added second device is required to include the second device data and the verification data calculated by the first key; the storage device receives the newly added second device request, and generates the second device data to generate a second a key, wherein the second key is converted into a second data and displayed on the storage device; the storage device detects that the newly added second device requires the verification data calculated by the first key of the memory, and the second The key is determined to be in an authenticated state and stored; a second electronic device is provided and the second data is input, and the second electronic device generates the second key by the second data operation and stores the second key. The method for authorizing a new bit currency transaction device according to the second aspect of the patent application scope, further comprising: providing a third electronic device to input a third device data, and transmitting a new third device request to the storage device The device, the newly added third device is required to include the third device data; the storage device receives the newly added third device request, and the third device data is calculated to generate a third key, and the third key is simultaneously Converting to a third data displayed on the storage device; the storage device detecting the verification data calculated by the newly added third device not conforming to the first key of the memory, determining the third key as an unauthenticated state and storing And inputting the third data to the third electronic device, and generating the third key storage by the third data operation. The method for authorizing a new bit coin transaction device according to claim 3, further comprising: transmitting, by the first electronic device, an enabling third device request to the storage device, wherein the enabling third device requires The verification data calculated by the first key; the storage device receives the request for enabling the third device, and detects that the third device requires the verification data calculated according to the first key of the memory, and stores the stored third key. The unauthenticated state change is determined to be the authenticated state. The method for authorizing a new bit currency transaction device according to claim 3, further comprising: transmitting, by the second electronic device, an enabling third device request to the storage device, wherein the enabling third device requires The verification data calculated by the second key; the storage device receives the request for enabling the third device, and detects the verification data calculated by the enabling third device to meet the second key of the memory, and stores the stored third key The unauthenticated state change is determined to be the authenticated state. The method for authorizing a new bit coin transaction device according to item 3 of the patent application scope, wherein all data is input by one of a user's own operation input or the memory device transmits the memory data to the electronic device for automatic input. The method for authorizing a new bit currency transaction device according to claim 1, wherein the method further includes: providing a second electronic device to input a second device data, and transmitting a new second device request to the storage device The device, the newly added second device is required to include the second device data; the storage device receives the newly added second device request, and the second device data is calculated to generate a second key, and the second key is simultaneously Converting to a second data displayed on the storage device; the storage device detecting that the newly added second device requires verification data not calculated according to the first key of the memory, determining the second key to be unauthenticated and storing And inputting the second data to the second electronic device, and generating the second key storage by the second data operation. The method for authorizing a new bit currency transaction device according to the seventh aspect of the application, wherein the method further includes: transmitting, by the first electronic device, an activation second device request to the storage device, wherein the enabling the second device is required to be included The verification data calculated by the first key; the storage device receives the enabling second device requirement, and detects that the enabling second device requires the verification data calculated by the first key of the memory, and stores the stored second key The unauthenticated state change is determined to be the authenticated state. According to the authorization method of the new bit coin transaction device described in claim 7, wherein all the data is input by one of the user's own operation input or the memory device transmits the memory data to the electronic device for automatic input. The method for authorizing a new bit currency transaction device according to the first aspect of the patent application scope, wherein the storage device is a closed device that cannot directly connect to the Internet. The method for authorizing a new bit currency transaction device according to claim 10, wherein the storage device is set as a smart card having a near field communication module. The method for authorizing a new bit coin transaction device according to claim 10, wherein the storage device is provided as a flash drive having a connection socket. The method for authorizing a new bit coin transaction device according to the first aspect of the patent application, wherein the data displayed by the storage device is a one-time password (OTP).