TWI774211B - Expandable binding type electronic wallet system - Google Patents
Expandable binding type electronic wallet system Download PDFInfo
- Publication number
- TWI774211B TWI774211B TW110102709A TW110102709A TWI774211B TW I774211 B TWI774211 B TW I774211B TW 110102709 A TW110102709 A TW 110102709A TW 110102709 A TW110102709 A TW 110102709A TW I774211 B TWI774211 B TW I774211B
- Authority
- TW
- Taiwan
- Prior art keywords
- electronic wallet
- binding
- account
- electronic
- bound
- Prior art date
Links
Images
Landscapes
- Telephone Function (AREA)
- Credit Cards Or The Like (AREA)
Abstract
Description
本發明係有關於一種電子錢包系統,尤其是指一種可供機關團體或個人進行擴充綁定之擴充綁定型電子錢包系統。The present invention relates to an electronic wallet system, in particular to an extended binding electronic wallet system that can be used for extended binding by organizations or individuals.
由於環保意識抬頭和購物型態的轉變,在消費者逐漸減少運用實體貨幣支付消費款項。此外,在企業方面,在過去收取消費者所支付之實體貨幣後,基於清點和保管所收取之實體貨幣的需要,因而需要負擔較大的人力成本和保管風險。Due to the rising awareness of environmental protection and changes in shopping patterns, consumers are gradually reducing the use of physical currency to pay for consumption. In addition, on the enterprise side, after receiving the physical currency paid by consumers in the past, based on the need to count and keep the received physical currency, it needs to bear greater labor costs and custody risks.
有鑒於消費者和企業雙方都覺得有以新的貨幣支付方式來因應新的消費型態或清算營業所得之需求,電子支付技術逐漸廣為社會大眾所應用。在電子支付中,雖然仍以實體貨幣為計價單位,並利用電子憑證進行支付行為,但是大部分的個人資料(特別是身分驗證資料)、支付運算資料、清算資料與帳戶資料,都過度集中儲存在雲端伺服器中處理,在使用者利用行動式通信裝置與雲端伺服器進行資料驗證與傳輸的過程中,相對比較容易被駭客侵入竊取個人資料或竄改交易紀錄。此外,由於目前的電子支付仍需借助金融機構或系統管理業者之系統資源,因而在完成交易後,通常會被扣取一部分之交易手續費,造成企業額外的損失。 Since both consumers and enterprises feel that there is a need to use new currency payment methods to meet the needs of new consumption patterns or liquidation of business income, electronic payment technology is gradually being widely used by the general public. In electronic payment, although physical currency is still used as the denomination unit, and electronic vouchers are used for payment, most of the personal data (especially identity verification data), payment calculation data, settlement data and account data are excessively centrally stored Processing in the cloud server is relatively easy for hackers to invade and steal personal information or tamper with transaction records during the process of data verification and transmission between the user using the mobile communication device and the cloud server. In addition, since the current electronic payment still needs to rely on the system resources of financial institutions or system management operators, after the transaction is completed, a part of the transaction fee is usually deducted, resulting in additional losses for the enterprise.
為了有效避免將大部份的交易資料都集中儲存在雲端伺服器,而導致容易暴露於交易紀錄被竊取或竄改的風險中,一種利用利用加密貨幣支付的新型態交易方式就孕育而生。在加密貨幣支付的交易方式中,是透過區塊鏈技術,使得過去需要透過中心集中發行和驗證的模式,可以單純依靠分散式的電腦節點達到驗證和價值傳輸的功能,所以可以去中心化地運作。 In order to effectively avoid storing most of the transaction data in the cloud server, which may easily be exposed to the risk of transaction records being stolen or tampered with, a new type of transaction method using cryptocurrency payment was born. In the transaction method of cryptocurrency payment, it is through blockchain technology that in the past, the mode of centralized issuance and verification through the center can only rely on decentralized computer nodes to achieve the functions of verification and value transmission, so it can be decentralized. operate.
在現有的加密貨幣電子支付系統中,是利用區塊鏈上的一加密貨幣帳戶位址與一組加貨幣私鑰來進行簽證與交易。因此,多半需要先設置一硬體電子錢包,然後將一組加密貨幣私鑰儲存在硬體電子錢包中。若每次進行交易時都要攜帶硬體電子錢包,將會增加使用上的不便利性。於此同時,由於智慧型手機的日益普及,每個人幾乎都會隨身攜帶智慧型手機,因此,就衍伸出軟體電子錢包技術。也就是在智慧型手機中安裝一電子錢包應用程式,並將硬體電子錢包所儲存的加密貨幣私鑰傳送到智慧型手機後,由智慧型手機利用加密貨幣私鑰執行電子錢包應用程式而在智慧型手機中建立一軟體電子錢包,藉以使消費者可以利用智慧型手機的軟體電子錢包而隨身進行電子支付消費。 In the existing cryptocurrency electronic payment system, a cryptocurrency account address and a set of cryptocurrency private keys on the blockchain are used to conduct visas and transactions. Therefore, it is often necessary to set up a hardware electronic wallet first, and then store a set of encrypted currency private keys in the hardware electronic wallet. If you have to carry a hardware electronic wallet every time you make a transaction, it will increase the inconvenience of use. At the same time, due to the increasing popularity of smart phones, almost everyone carries a smart phone with them. Therefore, software electronic wallet technology has been developed. That is, after installing an electronic wallet application in the smart phone, and after transmitting the encrypted currency private key stored in the hardware electronic wallet to the smart phone, the smart phone uses the encrypted currency private key to execute the electronic wallet application A software electronic wallet is established in the smart phone, so that consumers can use the software electronic wallet of the smart phone to carry out electronic payment and consumption.
由於硬體電子錢包中儲存了亟需保密的加密貨幣私鑰等隱私性資料,不便與他人共用,因此,在現有技術中,基於保護加密貨幣私鑰的考量,每一個硬體電子錢包通常會被設計為僅供單一個電子支付裝置使用者所用。然而,在一些特定的使用需求下,多個電子支付裝置用途可能存在特定的關聯性,需要有一個核心的管理者。譬如:同一位使用者可能會有多個電子支付裝置,依照不同的場合與消費型態而使用對應的電子支付裝置;又譬如:一個家庭或機關團體中,可能會有一個核心的管理者(如家長或機關團體中的管理者)以及多個周邊的使用者(如未成年子女或機關團體中的基層成員)。Since the hardware electronic wallet stores private information such as the private key of the encrypted currency that needs to be kept secret, it is inconvenient to share with others. Therefore, in the prior art, based on the consideration of protecting the private key of the encrypted currency, each hardware electronic wallet usually Designed for use by a single electronic payment device user only. However, under some specific usage requirements, multiple electronic payment device uses may have specific correlations, requiring a core manager. For example: the same user may have multiple electronic payment devices, and use corresponding electronic payment devices according to different occasions and consumption patterns; another example: in a family or organization, there may be a core manager ( Such as parents or managers in organizations) and multiple surrounding users (such as minor children or grassroots members in organizations).
在上述的使用需求下,若要讓一個使用者購買多個硬體電子錢包,或是讓每一個周邊的使用者都購買一個硬體電子錢包,然後各自建立獨立的軟體電子錢包,不僅非常浪費,而且也不便於核心的管理者對多個電子支付裝置進行管理或監控。Under the above-mentioned usage requirements, it is not only very wasteful to let one user buy multiple hardware electronic wallets, or to let each surrounding user buy a hardware electronic wallet and then establish independent software electronic wallets. , and it is inconvenient for the core administrator to manage or monitor multiple electronic payment devices.
有鑒於在先前技術中,在面對上述特定的使用需求下,普遍存在需要購買硬體電子錢包以及不便於核心的管理者對多個電子支付裝置進行管理或監控的問題。本發明為解決先前技術中之上述種種問題所採用之技術手段係提供一種擴充綁定型電子錢包系統,其係包含一行動式硬體電子錢包、L個備選行動通信裝置與一主電子支付裝置。 In view of the prior art, in the face of the above-mentioned specific usage requirements, there are generally problems that a hardware electronic wallet needs to be purchased, and it is inconvenient for a core administrator to manage or monitor multiple electronic payment devices. The technical means adopted by the present invention to solve the above-mentioned problems in the prior art is to provide an expanded binding electronic wallet system, which includes a mobile hardware electronic wallet, L alternative mobile communication devices and a main electronic payment system device.
行動式硬體電子錢包係儲存有一種子密鑰。每一備選行動通信裝置係儲存有一備選帳號位址,並用以將備選帳號位址輸入至行動式硬體電子錢包。主電子支付裝置係用以自行動式硬體電子錢包讀取種子密鑰與L個上述之備選帳號位址,並且包含一擴充配對綁定模組與一子密鑰推導函數運算模組。 The mobile hardware e-wallet stores a seed key. Each alternative mobile communication device stores an alternative account address, and is used for inputting the alternative account address into the mobile hardware electronic wallet. The main electronic payment device is used for reading the seed key and the L above-mentioned alternative account addresses from an automatic mobile hardware electronic wallet, and includes an expansion pairing and binding module and a sub-key derivation function operation module.
擴充配對綁定模組係用以針對L個備選帳號位址進行一配對綁定而在L個備選帳號位址中設定出M個配對綁定帳號位址,據以在L個備選行動通信裝置中定義出M個配對綁定電子支付裝置,並將M個配對綁定帳號位址傳送至行動式硬體電子錢包,其中L≧M≧1。 The expansion pairing and binding module is used for performing a pairing binding for the L candidate account addresses and setting M pairing and binding account addresses in the L candidate account addresses, so that the L candidate account addresses are The mobile communication device defines M paired and bound electronic payment devices, and transmits the M paired and bound account addresses to the mobile hardware electronic wallet, where L≧M≧1.
子密鑰推導函數運算模組係用以接收M個配對綁定帳號位址,依據種子密鑰進行一子密鑰推導函數(child key derivation function;CKD函數)運算,藉以推導產生N個電子錢包子密鑰與一擴充種子密鑰。N個電子錢包子密鑰係分別用以解析出對應於N種加密貨幣之N個加密貨幣帳戶位址,藉以使主電子支付裝置建立一主軟體電子錢包。子密鑰推導函數運算模組更依據擴充種子密鑰進行CKD函數運算藉以推導產生M個對應於M個配對綁定帳號位址之擴充子密鑰,並傳送至行動式硬體電子錢包,其中N≧1。 The child key derivation function operation module is used to receive M paired and bound account addresses, and perform a child key derivation function (CKD function) operation according to the seed key, so as to derive N electronic wallets. subkey and an extended seed key. The N electronic wallet subkeys are respectively used to resolve the N encrypted currency account addresses corresponding to the N encrypted currencies, so that the main electronic payment device can establish a main software electronic wallet. The sub-key derivation function operation module further performs CKD function operation according to the expanded seed key, thereby deriving and generating M expanded sub-keys corresponding to the M paired and bound account addresses, and transmitting them to the mobile hardware electronic wallet, wherein N≧1.
在完成該配對綁定後,M個配對綁定電子支付裝置中之任一者係依據所對應之配對綁定帳號位址自行動式硬體電子錢包接收對應之擴充種子密鑰,據以進行CKD函數運算而產生N個擴充電子錢包子密鑰,並依據N個擴充電子錢包子密鑰解析出對應於N種加密貨幣之N個擴充加密貨幣帳戶位址,藉以建立一擴充軟體電子錢包。After completing the pairing and binding, any one of the M pairing and binding electronic payment devices receives the corresponding expansion seed key from the mobile hardware electronic wallet according to the corresponding pairing and binding account address, and executes the process accordingly. The CKD function is operated to generate N extended electronic wallet subkeys, and according to the N extended electronic wallet subkeys, N extended encrypted currency account addresses corresponding to N kinds of cryptocurrencies are parsed, thereby establishing an extended software electronic wallet.
在上述必要技術手段的基礎下,更可延伸出以下附屬技術手段。主電子支付裝置之子密鑰推導函數運算模組更可利用種子密鑰進行CKD函數運算而產生L個帳號位址生成子密鑰,並藉由一短距離通信手段而通信連結於L個備選行動通信裝置,藉以將L個帳號位址生成子密鑰傳送給對應之L個備選行動通信裝置,使每一備選行動通信裝置分別依據L個帳號位址生成子密鑰之一者而產生對應之備選帳號位址。On the basis of the above necessary technical means, the following auxiliary technical means can be extended. The sub-key derivation function operation module of the main electronic payment device can further use the seed key to perform CKD function operation to generate L account addresses to generate sub-keys, and communicate with the L alternatives through a short-distance communication method The mobile communication device, so as to transmit the L account address generation sub-keys to the corresponding L alternative mobile communication devices, so that each alternative mobile communication device generates one of the sub-keys according to the L account addresses and generates Generate the corresponding alternate account address.
行動式硬體電子錢包更包含一帳戶密鑰對應表儲存單元,帳戶密鑰對應表儲存單元係儲存有一帳戶密鑰對應表,藉以儲存M個配對綁定帳號位址所分別對應之M個擴充種子密鑰。The mobile hardware electronic wallet further includes an account key correspondence table storage unit, and the account key correspondence table storage unit stores an account key correspondence table, so as to store the M extensions corresponding to the M paired and bound account addresses respectively. seed key.
較佳者,關於區塊鏈的連結方式,擴充綁定型電子錢包系統更可包含一區塊鏈管理模組,且主電子支付裝置或任一配對綁定電子支付裝置係經由區塊鏈管理模組而通信連結於N個對應於N種加密貨幣之加密貨幣區塊鏈。區塊鏈管理模組可包含一區塊鏈整合器,且區塊鏈整合器包含N個分別對應於N個加密貨幣區塊鏈之區塊鏈連結節點,藉以使主電子支付裝置或任一配對綁定電子支付裝置經由N個區塊鏈連結節點之一者而通信連結於對應之加密貨幣區塊鏈。Preferably, regarding the connection method of the blockchain, the expansion-bound electronic wallet system may further include a blockchain management module, and the main electronic payment device or any paired and bound electronic payment device is managed via the blockchain The module is communicatively linked to N cryptocurrency blockchains corresponding to N cryptocurrencies. The blockchain management module may include a blockchain integrator, and the blockchain integrator includes N blockchain connection nodes corresponding to the N cryptocurrency blockchains, so that the main electronic payment device or any The paired and bound electronic payment device is communicatively linked to the corresponding encrypted currency blockchain through one of the N blockchain link nodes.
為了便於管理者(即主電子支付裝置之使用者)對M個配對綁定電子支付裝置進行管理或監控,區塊鏈管理模組可包含一餘額監控模組,且餘額監控模組係電性連結於區塊鏈整合器,並用以通信連結於主電子支付裝置與M個配對綁定電子支付裝置,藉以在監控到任一配對綁定電子支付裝置發生一餘額不足事件時,將一餘額不足信號傳遞至該主電子支付裝置。In order to facilitate the administrator (ie the user of the main electronic payment device) to manage or monitor the M paired and bound electronic payment devices, the blockchain management module may include a balance monitoring module, and the balance monitoring module is electrical Connected to the blockchain integrator, and used to communicate with the master electronic payment device and the M paired and bound electronic payment devices, so that when an insufficient balance event occurs in any paired and bound electronic payment device, an insufficient balance is detected. The signal is communicated to the primary electronic payment device.
為了便於降低種子密鑰或擴充子密鑰外流的風險,較佳者,每一備選行動通信裝置可藉由短距離通信手段而通信連結於該行動式硬體電子錢包,藉以將備選帳號位址輸入至行動式硬體電子錢包。不僅如此,主電子支付裝置也可藉由短距離通信手段而通信連結於該行動式硬體電子錢包,藉以接收種子密鑰與L個備選帳號位址,並將M個配對綁定帳號位址與M個擴充種子密鑰傳送至行動式硬體電子錢包。其中,所述之短距離通信手段可為一藍芽通信手段或一近場無線通信(Near-field communication,NFC)手段。In order to reduce the risk of leakage of the seed key or the expansion sub-key, preferably, each alternative mobile communication device can communicate with the mobile hardware electronic wallet by means of short-range communication, so as to transfer the alternative account number to the mobile hardware electronic wallet. The address is entered into the mobile hardware wallet. Not only that, the main electronic payment device can also communicate with the mobile hardware electronic wallet by means of short-range communication, so as to receive the seed key and L alternative account addresses, and bind the M paired account positions. address and M extended seed keys to the mobile hardware electronic wallet. Wherein, the short-range communication means may be a bluetooth communication means or a near-field communication (Near-field communication, NFC) means.
行動式硬體電子錢包更具有一顯示器,顯示器係用以在完成配對綁定後,當任一配對綁定電子支付裝置通信連結於行動式硬體電子錢包時,顯示一組一次性密碼(One-Time Password, OTP)並在上述任一配對綁定電子支付裝置輸入該組一次性密碼後,行動式硬體電子錢包再依據所對應之配對綁定帳號位址傳送對應之擴充子密鑰。為了便於攜帶,上述主電子支付裝置與L個備選行動通信裝置中之任一者皆可為一智慧型手機。The mobile hardware electronic wallet further has a display, which is used to display a set of one-time passwords (One Time Password) when any pairing and binding electronic payment device is communicated with the mobile hardware electronic wallet after the pairing and binding are completed. -Time Password, OTP) and after inputting the set of one-time passwords in any of the above paired and bound electronic payment devices, the mobile hardware electronic wallet then transmits the corresponding expansion subkey according to the corresponding paired and bound account address. For portability, any one of the primary electronic payment device and the L alternative mobile communication devices can be a smart phone.
承上所述,在本發明所提供之擴充綁定型電子錢包系統中,係整合子密鑰推導(child key derivation, CKD)函數運算之分層確定(Hierarchical Deterministic)技術、電子配對綁定技術與區塊鏈分散式紀錄技術。藉由子密鑰推導(child key derivation, CKD)函數運算之分層確定(Hierarchical Deterministic)技術的單向推導解密特性,可以建立支援多種加密貨幣之軟體電子錢包,因此而有效提升解密的安全性與軟體電子錢包的使用便利性;藉由電子配對綁定技術,可以滿足在特定使用需求下,精簡行動式硬體電子錢包的使用數量,並提升管理或監控的便利性;藉由將交易紀錄分散式紀錄於加密貨幣區塊鏈而無法被竄改的特性,可以有效提升交易紀錄的明確性。毫無疑問地,本發明不論是在提升解密的安全性、精簡行動式硬體電子錢包的使用數量、提升管理或監控的便利性與提升交易紀錄的明確性等多個方面,皆具有顯著的功效。Based on the above, in the extended binding electronic wallet system provided by the present invention, the Hierarchical Deterministic (Hierarchical Deterministic) technology and the electronic pairing binding technology of the child key derivation (CKD) function operation are integrated Decentralized record technology with blockchain. Through the one-way derivation and decryption feature of the Hierarchical Deterministic technology of the child key derivation (CKD) function operation, a software electronic wallet that supports multiple cryptocurrencies can be established, thus effectively improving the security of decryption and The convenience of using software e-wallets; through electronic pairing and binding technology, it can meet specific usage needs, simplify the number of mobile hardware e-wallets used, and improve the convenience of management or monitoring; by decentralizing transaction records It is recorded in the cryptocurrency blockchain and cannot be tampered with, which can effectively improve the clarity of transaction records. Undoubtedly, the present invention has significant advantages in enhancing the security of decryption, reducing the number of mobile hardware electronic wallets used, improving the convenience of management or monitoring, and improving the clarity of transaction records. effect.
由於本發明所提供之擴充綁定型電子錢包系統,可廣泛應用於個人或團體(如家庭或機關團體)對於多個電子支付裝置的軟體電子錢包的管理與監控,其組合實施方式更是不勝枚舉,故在此不再一一贅述,僅列舉其中較佳的兩個實施例來加以具體說明。Because the expanded and bound electronic wallet system provided by the present invention can be widely used in the management and monitoring of software electronic wallets of multiple electronic payment devices by individuals or groups (such as families or institutions), the combination of implementation methods is even more numerous. It is enumerated, so it is not repeated here, and only two preferred embodiments are listed for specific description.
請參閱第一圖,其係顯示本發明第一實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以前之功能方塊圖。如第一圖所示,一種擴充綁定型電子錢包系統(以下簡稱「電子錢包系統」)100包含一行動式硬體電子錢包1、L個備選行動通信裝置、一主電子支付裝置3與一區塊鏈管理模組4。在本實施例中,L等於4,故包含備選行動通信裝置2a~2d。為了便於攜帶,上述主電子支付裝置3與備選行動通信裝置2a~2d皆可為一智慧型手機。Please refer to the first figure, which is a functional block diagram of the expanded binding electronic wallet system provided by the first embodiment of the present invention before the pairing and binding are completed. As shown in the first figure, an expanded and bound electronic wallet system (hereinafter referred to as "electronic wallet system") 100 includes a mobile hardware
行動式硬體電子錢包1包含一種子密鑰儲存單元11、一備選帳號位址儲存單元12、一帳戶密鑰對應表儲存單元13與一顯示器14。種子密鑰儲存單元11中係儲存有一種子密鑰。The mobile hardware
備選行動通信裝置2a~2d分別具有一子密鑰推導函數(child key derivation function ; CKD函數)運算模組(即CKD函數運算模組)21a~21d,並且安裝有電子錢包應用程式(圖未示)。The alternative
備選行動通信裝置2a~2d中之每一者係儲存有各自的一備選帳號位址。在備選行動通信裝置2a~2d利用短距離通信手段通信連結於行動式硬體電子錢包1時,可將各自的備選帳號位址輸入至行動式硬體電子錢包1,並且儲存於備選帳號位址儲存單元12,因此,備選帳號位址儲存單元12係對應於備選行動通信裝置2a~2d而共儲存了四個備選帳號位址。Each of the alternative
主電子支付裝置3係藉由短距離通信手段而通信連結於行動式硬體電子錢包1,用以自種子密鑰儲存單元11讀取種子密鑰,並自備選帳號位址儲存單元12中讀取L個(四個)備選帳號位址。此外,主電子支付裝置3還包含一擴充配對綁定模組31與一子密鑰推導函數運算模組(即CKD函數運算模組)32,並且安裝有一電子錢包應用程式(圖未示)。The main
擴充配對綁定模組31具有一擴充綁定設定介面311。CKD函數運算模組32係依據種子密鑰進行一子密鑰推導函數(child key derivation function ; CKD函數)運算,藉以推導產生N個電子錢包子密鑰與一擴充種子密鑰。N個電子錢包子密鑰係分別用以解析出對應於N種加密貨幣之N個加密貨幣帳戶位址。在依據N個電子錢包子密鑰與N個加密貨幣帳戶位址執行電子錢包應用程式(圖未示)後,可在主電子支付裝置3中建立一主軟體電子錢包33,其中N≧1。在本實施例中,共支援比特幣、乙太幣與萊特幣三種加密貨幣,故N=3。The expansion pairing and binding
在主電子支付裝置3完成建立主軟體電子錢包33後,即可通信連結於區塊鏈管理模組4。區塊鏈管理模組4中包含一區塊鏈整合器41,且區塊鏈整合器41中包含一BTC區塊鏈連結節點411、一ETH區塊鏈連結節點412與一LTC區塊鏈連結節點413等三個加密貨幣區塊鏈連結節點,且BTC區塊鏈連結節點411、ETH區塊鏈連結節點412與LTC區塊鏈連結節點413分別對應於一BTC區塊鏈200a、一ETH區塊鏈200b與一LTC區塊鏈200c。After the main
因此,當主電子支付裝置3之使用者需要使用主軟體電子錢包33進行交易時,可以藉由BTC區塊鏈連結節點411、ETH區塊鏈連結節點412或LTC區塊鏈連結節點413而通信連結於BTC區塊鏈200a、ETH區塊鏈200b或LTC區塊鏈200c。此外,較佳者,在本實施例中,備選行動通信裝置2a~2d中所儲存之四個備選帳號位址可利用以下較佳的方式產生。在此較佳的產生方式中,主電子支付裝置3之CKD函數運算模組32更利用該種子密鑰進行CKD函數運算而產生L個帳號位址生成子密鑰,並藉由一短距離通信手段而通信連結於L個(即四個)備選行動通信裝置2a~2d,藉以將L個(即四個)帳號位址生成子密鑰分別傳送給L個(即四個)備選行動通信裝置,使每一備選行動通信裝置分別依據L個(即四個)帳號位址生成子密鑰之一者而產生對應之備選帳號位址。Therefore, when the user of the main
請繼續參閱第二圖,其係顯示第二圖係顯示本發明第一實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以後之功能方塊圖,同時,請一併參閱第一圖。如第一圖與第二圖所示,在主電子支付裝置3藉由短距離通信手段自備選帳號位址儲存單元12中讀取L個(四個)備選帳號位址後,可藉由擴充配對綁定模組31之擴充綁定設定介面311進行一配對綁定。當電子錢包系統100用於一個家庭的電子錢包管理時,擴充綁定設定介面311所呈現之內容可如表一所示。Please continue to refer to the second figure, which shows that the second figure is a functional block diagram of the expanded and bound electronic wallet system provided by the first embodiment of the present invention after the pairing and binding are completed. At the same time, please refer to the first picture. As shown in the first and second figures, after the main
表一:擴充綁定設定介面呈現內容
假設該家庭中有一位家長與四位子女李小明、李小強、李小花與李小美,分別使用了上述四個備選行動通信裝置2a~2d,假設李小強與李小花有使用電子錢包消費的需求,而李小明與李小美沒有使用電子錢包消費的需求。此時家長可利用擴充綁定設定介面311進行配對綁定,將L個(本實施例L=4)備選帳號位址中M個(本實施例為兩個,即M=2)的備選帳號位址(即位址0002與位址0003)設定為配對綁定帳號位址,對應於配對綁定帳號位址(即位址0002與位址0003)之M個(即2個)備選行動通信裝置2b與2c則可定義為配對綁定電子支付裝置2b’與2c’。在完成配對綁定後,擴充配對綁定模組31可將M個(即2個)配對綁定帳號位址(即位址0002與位址0003)傳送至行動式硬體電子錢包1,其中L≧M≧1。
Suppose that there is a parent and four children, Li Xiaoming, Li Xiaoqiang, Li Xiaohua and Li Xiaomei in the family who use the above four alternative
在完成配對綁定後,CKD函數運算模組32更依據擴充種子密鑰進行CKD函數運算藉以推導產生M個(即2個)對應於M個(即2個)配對綁定帳號位址之擴充子密鑰,並傳送至行動式硬體電子錢包1。
After completing the pairing and binding, the CKD
行動式硬體電子錢包1依序藉由短距離通信手段接收到M個(即2個)配對綁定帳號位址(即位址0002與位址0003)與M個(即2個)對應之配對綁定帳號位址之擴充子密鑰後,會將配對綁定帳號位址(即位址0002與位址0003)與對應之擴充子密鑰,可建立一帳戶密鑰對應表,並將帳戶密鑰對應表儲存在帳戶密鑰對應表儲存單元13中。
The mobile hardware
在完成以上步驟後,當李小強或李小花持配對綁定電子支付裝置2b’與2c’以上述短距離通信手段與行動式硬體電子錢包1通信連結時,行動式硬體電子錢包1之顯示器14會顯示一組在特定時間內(如1分鐘內)有效之一次性密碼(One-Time Password,OTP),此時
李小強或李小花可觀看顯示器14上所顯示之該組一次性密碼,並利用配對綁定電子支付裝置2b’與2c’輸入並傳送出該組一次性密碼,經行動式硬體電子錢包1確認無誤後,行動式硬體電子錢包1可將配對綁定帳號位址(即位址0002或位址0003)所對應之擴充子密鑰傳送給配對綁定電子支付裝置2b’與2c’。
After completing the above steps, when Li Xiaoqiang or Li Xiaohua hold the paired and bound
在配對綁定電子支付裝置2b’與2c’接收到擴充子密鑰後,配對綁定電子支付裝置2b’與2c’中的CKD函數運算模組21b或21c可進行CKD函數運算而產生N個(即3個)擴充電子錢包子密鑰,並依據N個(即3個)擴充電子錢包子密鑰解析出對應於N種(即比特幣、乙太幣與萊特幣3種)加密貨幣之N個(即3個)擴充加密貨幣帳戶位址。在依據N個(即3個)擴充電子錢包子密鑰與N個(即3個)擴充加密貨幣帳戶位址執行電子錢包應用程式(圖未示)後,可在配對綁定電子支付裝置2b’或2c’中建立一擴充軟體電子錢包22b或一擴充軟體電子錢包22c。
After the paired and bound
與主電子支付裝置3相似,當配對綁定電子支付裝置2b’與2c’之使用者(即李小強或李小花)需要使用主軟體電子錢包33進行交易時,可以藉由BTC區塊鏈連結節點411、ETH區塊鏈連結節點412或LTC區塊鏈連結節點413而通信連結於BTC區塊鏈200a、ETH區塊鏈200b或LTC區塊鏈200c。
Similar to the main
上述之CKD函數運算,是一種符合BIP-32/BIP-44標準之分層推導確認(hierarchical deterministic)技術。種子密鑰經過一次CKD函數運算,可推導出多個子密鑰(第一代子密鑰);每個子密鑰再經過一次CKD函數運算可以推導出多個孫密鑰(第二代子密鑰),每個孫密鑰再經過一次CKD函數運算可以推導出多個曾孫密鑰(第三代子密鑰),餘此類推。CKD函數運算之特徵為單向推導與分層確認,也就是只能由種子密鑰推導出子密鑰,但不能由子密鑰反向推導出種子密鑰,藉以可分層推導確認。在本實施例中,第一代子密鑰即為上述之N個(即3個)電子錢包子密鑰與上述之擴充種子密鑰,第二代子密鑰即為上述之M個(即2個)擴充子密鑰,第三代子密鑰即為上述之N個(即3個)擴充電子錢包子密鑰。The above-mentioned CKD function operation is a hierarchical deterministic technology conforming to the BIP-32/BIP-44 standard. After one CKD function operation on the seed key, multiple sub-keys (first-generation sub-keys) can be deduced; each sub-key can be deduced by one CKD function operation to derive multiple grandchild keys (second-generation sub-keys) ), each grandchild key can be deduced by one CKD function operation to derive multiple great-grandchild keys (third-generation child keys), and so on. The characteristics of CKD function operation are one-way derivation and hierarchical confirmation, that is, only the sub-key can be derived from the seed key, but the seed key cannot be reversely derived from the sub-key, so that the confirmation can be derived hierarchically. In this embodiment, the first-generation sub-keys are the above-mentioned N (that is, 3) electronic wallet sub-keys and the above-mentioned extended seed keys, and the second-generation sub-keys are the above-mentioned M (that is, 3) electronic wallet sub-keys. 2) expansion sub-keys, and the third-generation sub-key is the above-mentioned N (that is, 3) expanded electronic wallet sub-keys.
以上所述之短距離通信手段可為一藍芽通信手段、一近場無線通信(Near-field communication,NFC)手段或其他可進行短距離通信之通信手段。The above-mentioned short-range communication means may be a bluetooth communication means, a near-field communication (Near-field communication, NFC) means or other communication means capable of short-distance communication.
請繼續參閱第三圖與第四圖,其中,第三圖係顯示本發明第二實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以前之功能方塊圖;第四圖係顯示本發明第二實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以後之功能方塊圖。如第三圖與第四圖所示,在本實施例中,主要係以另一電子錢包系統100a取代第一實施例中的電子錢包系統100。其中最主要的差異在於電子錢包系統100a中,以另一區塊鏈管理模組4a取代區塊鏈管理模組4,兩者間之差異在於區塊鏈管理模組4a除了包含上述之區塊鏈整合器41及其所包含之BTC區塊鏈連結節點411、ETH區塊鏈連結節點412與LTC區塊鏈連結節點413之外,還包含一餘額監控模組42。Please continue to refer to the third and fourth figures, wherein the third figure shows the functional block diagram of the expanded binding electronic wallet system provided by the second embodiment of the present invention before the pairing and binding are completed; the fourth figure shows A functional block diagram of the expanded binding electronic wallet system provided by the second embodiment of the present invention after the pairing and binding are completed. As shown in Figures 3 and 4, in this embodiment, the
餘額監控模組42係電性連結於區塊鏈整合器41,並用以通信連結於主電子支付裝置3與M個(即2個)配對綁定電子支付裝置2b’與2c’,藉以監控配對綁定電子支付裝置2b’與2c’所對應之擴充軟體電子錢包22b與22c中之上述三種加密貨幣(及比特幣、乙太幣與萊特幣)之餘額。The
在餘額監控模組42監控到任一配對綁定電子支付裝置(即配對綁定電子支付裝置2b’或2c’)發生一餘額不足事件時,係將一餘額不足信號傳遞至主電子支付裝置3。主電子支付裝置3在接收到該餘額不足信號時,可自餘額監控模組42得知配對綁定電子支付裝置2b’與2c’中之哪一者餘額不足,以及餘額尚有多少等信息,使主電子支付裝置3的使用者得以在獲知上述信息後,藉由轉帳或購買加密貨幣的方式增加餘額。所述的餘額不足事件可為餘額小於一設定下限值時之事件。When the
在以上實施例中,主要是列舉電子錢包系統100或100a應用於家庭中的使用情境。然而,必須要強調的是,電子錢包系統100或100a也可應用於對個人的多個備選行動通信裝置進行配對綁定,而使完成配對綁定的備選行動通信裝置成為配對綁定電子支付裝置。在此情況下,上述之主電子支付裝置3與備選行動通信裝置2a~2d之使用者為同一人。In the above embodiments, the usage scenarios in which the
此外,電子錢包系統100或100a也可應用於對機關團體之各成員的備選行動通信裝置進行配對綁定。此時,主電子支付裝置3之使用者可為機關團體中的財務管理者,備選行動通信裝置2a~2d之使用者可為機關團體的其餘成員。In addition, the
綜整以上所述,在本發明所提供之電子錢包系統100或100a中,係整合子密鑰推導(child key derivation, CKD)函數運算之分層確定(Hierarchical Deterministic)技術、電子配對綁定技術與區塊鏈分散式紀錄技術。藉由子密鑰推導(child key derivation, CKD)函數運算之分層確定(Hierarchical Deterministic)技術的單向推導解密特性,可以建立支援多種加密貨幣之軟體電子錢包,因此而有效提升解密的安全性與軟體電子錢包的使用便利性;藉由電子配對綁定技術,可以滿足在特定使用需求下,精簡行動式硬體電子錢包的使用數量,並提升管理或監控的便利性;藉由將交易紀錄分散式紀錄於加密貨幣區塊鏈而無法被竄改的特性,可以有效提升交易紀錄的明確性。毫無疑問地,本發明不論是在提升解密的安全性、精簡行動式硬體電子錢包的使用數量、提升管理或監控的便利性與提升交易紀錄的明確性等多個方面,皆具有顯著的功效。To sum up the above, in the
藉由以上較佳具體實施例之詳述,係希望能更加清楚描述本發明之特徵與精神,而並非以上述所揭露的較佳具體實施例來對本發明之範疇加以限制。相反地,其目的是希望能涵蓋各種改變及具相等性的安排於本發明所欲申請之專利範圍的範疇內。Through the detailed description of the preferred embodiments above, it is hoped that the features and spirit of the present invention can be described more clearly, and the scope of the present invention is not limited by the preferred embodiments disclosed above. On the contrary, the intention is to cover various modifications and equivalent arrangements within the scope of the claimed scope of the present invention.
100,100a:電子錢包系統
1:行動式硬體電子錢包
11:種子密鑰儲存單元
12:備選帳號位址儲存單元
13:帳戶密鑰對應表儲存單元
14:顯示器
2a~2d:備選行動通信裝置
2b’,2c’:配對綁定電子支付裝置
21a~21d:CKD函數運算模組
22b,22c:擴充軟體電子錢包
3:主電子支付裝置
31:擴充配對綁定模組
311:擴充綁定設定介面
32:CKD函數運算模組
33:主軟體電子錢包
4,4a:區塊鏈管理模組
41:區塊鏈整合器
411:BTC區塊鏈連結節點
412:ETH區塊鏈連結節點
413:LTC區塊鏈連結節點
42:餘額監控模組
200a:BTC區塊鏈
200b:ETH區塊鏈
200c:LTC區塊鏈
100,100a: Electronic Wallet System
1: Mobile hardware electronic wallet
11: Seed key storage unit
12: Alternate account address storage unit
13: Account key correspondence table storage unit
14:
第一圖係顯示本發明第一實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以前之功能方塊圖; 第二圖係顯示本發明第一實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以後之功能方塊圖; 第三圖係顯示本發明第二實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以前之功能方塊圖;以及 第四圖係顯示本發明第二實施例所提供之擴充綁定型電子錢包系統在完成配對綁定以後之功能方塊圖。 The first figure is a functional block diagram of the expanded binding electronic wallet system provided by the first embodiment of the present invention before the pairing and binding are completed; The second figure is a functional block diagram of the expanded binding electronic wallet system provided by the first embodiment of the present invention after the pairing and binding are completed; Figure 3 is a functional block diagram of the expanded binding electronic wallet system provided by the second embodiment of the present invention before the pairing and binding are completed; and The fourth figure is a functional block diagram of the expanded binding electronic wallet system provided by the second embodiment of the present invention after the pairing and binding are completed.
100:電子錢包系統
1:行動式硬體電子錢包
11:種子密鑰儲存單元
12:備選帳號位址儲存單元
13:帳戶密鑰對應表儲存單元
14:顯示器
2a,2d:備選行動通信裝置
2b’,2c’:配對綁定電子支付裝置
21a~21d:CKD函數運算模組
22b,22c:擴充軟體電子錢包
3:主電子支付裝置
31:擴充配對綁定模組
311:擴充綁定設定介面
32:CKD函數運算模組
33:主軟體電子錢包
4:區塊鏈管理模組
41:區塊鏈整合器
411:BTC區塊鏈連結節點
412:ETH區塊鏈連結節點
413:LTC區塊鏈連結節點
200a:BTC區塊鏈
200b:ETH區塊鏈
200c:LTC區塊鏈
100: Electronic Wallet System
1: Mobile hardware electronic wallet
11: Seed key storage unit
12: Alternate account address storage unit
13: Account key correspondence table storage unit
14:
Claims (11)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW110102709A TWI774211B (en) | 2021-01-25 | 2021-01-25 | Expandable binding type electronic wallet system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW110102709A TWI774211B (en) | 2021-01-25 | 2021-01-25 | Expandable binding type electronic wallet system |
Publications (2)
Publication Number | Publication Date |
---|---|
TW202230247A TW202230247A (en) | 2022-08-01 |
TWI774211B true TWI774211B (en) | 2022-08-11 |
Family
ID=83782552
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
TW110102709A TWI774211B (en) | 2021-01-25 | 2021-01-25 | Expandable binding type electronic wallet system |
Country Status (1)
Country | Link |
---|---|
TW (1) | TWI774211B (en) |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
TW201733303A (en) * | 2016-02-23 | 2017-09-16 | 恩鏈控股有限公司 | Determining a common secret for the secure exchange of information and hierarchical, deterministic cryptographic keys |
US20180288022A1 (en) * | 2017-03-31 | 2018-10-04 | Dr. Vijay Madisetti | Method and System for Identity and Access Management for Blockchain Interoperability |
US20190220852A1 (en) * | 2018-01-17 | 2019-07-18 | Medici Ventures, Inc. | Multi-approval system using m of n keys to restore a customer wallet |
CN112073183A (en) * | 2020-08-07 | 2020-12-11 | 深圳区块大陆科技有限公司 | Block chain account generation method |
-
2021
- 2021-01-25 TW TW110102709A patent/TWI774211B/en active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
TW201733303A (en) * | 2016-02-23 | 2017-09-16 | 恩鏈控股有限公司 | Determining a common secret for the secure exchange of information and hierarchical, deterministic cryptographic keys |
US20180288022A1 (en) * | 2017-03-31 | 2018-10-04 | Dr. Vijay Madisetti | Method and System for Identity and Access Management for Blockchain Interoperability |
US20190220852A1 (en) * | 2018-01-17 | 2019-07-18 | Medici Ventures, Inc. | Multi-approval system using m of n keys to restore a customer wallet |
CN112073183A (en) * | 2020-08-07 | 2020-12-11 | 深圳区块大陆科技有限公司 | Block chain account generation method |
Also Published As
Publication number | Publication date |
---|---|
TW202230247A (en) | 2022-08-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN107087432B (en) | Remote server encrypted data reservation system and method | |
US20240296429A1 (en) | Information transaction infrastructure | |
US10102510B2 (en) | Method and system of conducting a cryptocurrency payment via a mobile device using a contactless token to store and protect a user's secret key | |
JP6551850B2 (en) | Cloud-based transaction method and system | |
CN109479004B (en) | System and method for block chain implementation | |
US20140236835A1 (en) | System and method for application security | |
Liu et al. | State of the art: Secure mobile payment | |
US20120246075A1 (en) | Secure electronic payment methods | |
JP2018522353A (en) | Authentication system and method for server-based payment | |
EP0910028A1 (en) | Personal electronic settlement system, its terminal, and management apparatus | |
CN107230051A (en) | The method of payment and payment system of digital cash | |
Rezaeighaleh et al. | Deterministic sub-wallet for cryptocurrencies | |
WO2017058855A1 (en) | Secure shell file transfer protocol key administration | |
CN113221165A (en) | User element authentication method and device based on block chain | |
US20130138571A1 (en) | Systems and Protocols for Anonymous Mobile Payments with Personal Secure Devices | |
Rezaeighaleh et al. | Multilayered defense-in-depth architecture for cryptocurrency wallet | |
Ahmed et al. | A self-sovereign identity architecture based on blockchain and the utilization of customer’s banking cards: The case of bank scam calls prevention | |
KR20190090699A (en) | Method And Apparatus for Providing Wallet for Enhancing Security And keeping Crypto-currency | |
TWI792966B (en) | Traction confirming system for non-fungible token | |
TWI774211B (en) | Expandable binding type electronic wallet system | |
TWI741900B (en) | Cryptocurrency management system for business use | |
M'Raı̈hi et al. | E-commerce applications of smart cards | |
Rezaeighaleh | Improving security of crypto wallets in blockchain technologies | |
Yang et al. | DOT-M: a dual Offline transaction scheme of central bank digital currency for trusted mobile devices | |
KR20190099984A (en) | System for managing private key |