WO2019019153A1

WO2019019153A1 - Scheme for generating, storing and using private key

Info

Publication number: WO2019019153A1
Application number: PCT/CN2017/094918
Authority: WO
Inventors: 吴思进; 王志文
Original assignee: 杭州复杂美科技有限公司
Priority date: 2017-07-28
Filing date: 2017-07-28
Publication date: 2019-01-31

Abstract

Provided is a scheme for generating, storing and using a private key. The private key is stored in an encryption chip, can be generated in the chip, and can also be imported externally. However, the private key in the chip cannot be exported out of the chip, and content needing to be signed or decrypted by means of the private key can be transmitted into the encryption chip, and a signature result and the decrypted content can be sent out of the encryption chip.

Description

Instruction Manual Name: Private Key Generation Storage and Use Solution Technical Field

[0001] The present invention relates to the field of data processing technologies, and in particular, to a scheme for generating and using a private key.

Background technique

[0002] At present, the blockchain is widely used, and the key step is to use the private key to sign the transaction. Therefore, how to securely store and manage the private key is more important for blockchain transactions. The current private key is mainly encrypted by the symmetric encryption algorithm, so the user needs to remember the password to be able to solve the problem and operate the private key later. And the password is regularly updated for security reasons. If it is necessary to maintain multiple wallets or private keys, the maintenance cost is high and it is inconvenient to use. Therefore, how to securely and conveniently store and manage multiple private keys in different blockchains is a technical problem that needs to be solved by those skilled in the art.

technical problem

[0003] An object of the present invention is to provide a scheme for generating and storing a private key, which is convenient for safe operation of a blockchain by using a commonly used mobile phone, and the method and system are as follows;

Problem solution

Technical solution

[0004] The private key is stored in the encryption chip, and can be generated in the chip or externally, but the private key in the chip cannot be exported to the chip, and the content to be signed or decrypted by the private key can be transmitted to the encryption chip. The signature result and the decrypted content can be sent outside the encryption chip.

[0005] Randomly generate certain mnemonics that reach a safe length, and can be artificially modified to increase randomness, can be recorded in Base58 format, plus personal custom mnemonics, and use a certain number of hash calculations or other The algorithm stores the result as a private key in the encryption chip. The encryption chip can be built in the mobile phone, or can be a SIM card chip of the mobile phone or a SIM card encryption chip with wireless communication function, and the mnemonic should be stored in a safe place. After the chip is lost, the mnemonic can be used to regenerate the private key.

[0006] The device for storing the private key and the encryption chip therein can be completely separated from the Internet communication, and the content that needs to be signed or decrypted is generated into an image form such as a two-dimensional code, and the information is transmitted by scanning or photographing, and then transmitted to the encryption chip through processing. Processing, private key signature or decrypted results can generate two-dimensional code, by scanning If the private key is decrypted, the private key is encrypted with another private key corresponding to the public key, and the other private key may be stored in the encryption chip.

[0007] The private key is randomly generated in the encryption chip, and the private key is not exportable, and the other private key is encrypted by using the corresponding public key, and the result after encrypting the private key may be output, and a two-dimensional code may be generated, which may be photographed or Save the print, save it in a safe place, restore other private keys, input the encryption result into the encryption chip, decrypt it with the corresponding private key in the original chip, and write the decrypted private key to the encryption chip.

[0008] Multiple sets of private keys and public key addresses can be stored in the encryption chip.

[0009] Encryption chip card Pin code authorization may be required. Of course, the App may have a corresponding secret-free setting, and the size may be set. When a large transaction is required, the Pin code is required to be input.

[0010] When the Pin code is continuously input incorrectly for more than a certain number of times, the encrypted chip card will be locked, and the real name authentication or authorization can be unlocked.

[0011] Before inputting the PIN code, the encryption chip must be input after a continuous power-on, and the inter-turn interval of the input PIN code is specified. There is such a rule that the number of times the PIN code is allowed to be input can be increased but not lowered. safety.

[0012] The output of the encryption chip can be sent by wireless means such as short message or Bluetooth, or sent to other devices, such as a mobile phone or a display interface, to check whether the original data of the signature or decryption is illegally replaced, and then sent out.

Advantageous effects of the invention

Beneficial effect

[0013] Secure and conveniently store and manage multiple private keys of different blockchains.

Brief description of the drawing

DRAWINGS

1 is a schematic diagram of a SIM card encryption chip used after being loaded into a SIM card slot of a mobile phone;

[0015] FIG. 2 is a flow chart of private key backup and import.

BEST MODE FOR CARRYING OUT THE INVENTION

[0016] The core of the present invention is to provide a scheme for private key generation storage and use. Embodiments of the invention

[0017] The user obtains the SIM card by real-name authentication, or after registration.

[0018] randomly generate certain mnemonics that reach a safe length, and can be artificially modified to increase randomness, can be recorded in Base58 format, plus personal custom mnemonics, and use a certain number of hash calculations or other The algorithm stores the result as a private key in the encryption chip. The encryption chip can be built in the mobile phone, or can be a SIM card chip of the mobile phone or a SIM card encryption chip with wireless communication function, and the mnemonic should be stored in a safe place. After the chip is lost, the mnemonic can be used to regenerate the private key.

[0019] The user receives the transaction:

[0020] The user mobile phone app obtains the public key in the card and converts it into a corresponding blockchain address, and provides the coin to the person who plays the coin, and the coin player pays the coin according to the address (adding Pin code authentication).

[0021] Import private key:

[0022] The user mobile phone App scans the private key QR code and fills in the private key type to import the private key into the SIM card, and the SIM card generates a corresponding public key according to different private key types. If the original private key needs to be overwritten, the first need to be The certificate is authenticated by the Pin code, and the assets corresponding to the private key are transferred before being overwritten.

[0023] User initiated transaction:

[0024] The user mobile phone App signs the transaction data with the private key in the SIM card, and the mobile phone App sends the transaction to the blockchain network, which can be authenticated by Pin code, and the authentication code is required for the large transaction. The coin person confirms receipt of the corresponding blockchain virtual currency through the blockchain network

[0025] Backup encrypted private key:

[0026] After the user authenticates through the Pin code, the scanned private key is encrypted by the in-card encryption algorithm using the public key generated by the SIM card, and then the print is saved offline.

[0027] Decrypt the backup private key:

[0028] After the user authenticates through the Pin code, the offline encrypted private key data is decrypted by using the public key generated by the SIM card. After the decryption is successful, the private key can be processed.

[0029] The user's wallet private key A, encrypted by an encryption algorithm in the SIM card (asymmetric algorithm), generates A' data and a two-dimensional code, and prints the A' and the two-dimensional code onto paper or other secure storage place, if When the private key is needed, after scanning the data with the mobile phone, the SIM card decrypts it by a decryption algorithm (asymmetric algorithm), and Import it into the SIM card security chip for use.

Industrial applicability

[0030] The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the various embodiments may be referred to each other.

Sequence table free content

[0031] A person skilled in the art will further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate the hardware. Interchangeability with software, the components and steps of the examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

[0032] The above describes a scheme for generating and storing a private key provided by the present invention. The above description of the embodiments is merely for assisting in understanding the method of the present invention and its core idea. It should be noted that those skilled in the art can make various modifications and changes to the present invention without departing from the spirit and scope of the invention.

Claims

Claim

The private key generates a storage and usage scheme, wherein the private key is stored in the encryption chip, can be generated in the chip, or can be externally imported, but the private key in the chip cannot be exported to the chip, and the private key is used for signature. Or the decrypted content can be transmitted to the encryption chip, and the signature result and the decrypted content can be sent outside the encryption chip.

The scheme for generating and storing a private key according to claim 1, wherein a certain mnemonic that reaches a safe length is randomly generated, and can be artificially modified to increase randomness.

, can be recorded in Base58 format, plus personal custom mnemonics, and use a certain number of hash calculations or other algorithms, the result is stored as a private key in the encryption chip, the encryption chip can be built into the mobile phone, or It is a SIM card chip in the mobile phone, or a SIM card encryption chip with wireless communication function. The mnemonic should be kept in a safe place, so that after the chip is lost, the mnemonic can be used to regenerate the private key.

The scheme for storing and using a private key according to claim 1, wherein the device for storing the private key and the encryption chip therein can completely separate from the Internet communication, and generate an image form such as a two-dimensional code for the content that needs to be signed or decrypted. The information is transmitted by scanning or photographing, and processed by the incoming encryption chip, and the result of the private key signature or decryption can generate a two-dimensional code, which is transmitted by scanning, and if the private key is decrypted, the private key is decrypted. The other private key of the public key encryption can be stored in the encryption chip.

The private key generation storage and usage scheme according to claim 1, wherein a private key is randomly generated in the encryption chip, the private key is not exportable, and the other private key is encrypted by using the corresponding public key, and the encryption may be performed. The result output after the private key can generate a two-dimensional code, which can be saved by taking photos or printing, stored in a safe place, and restored with other private keys. The encryption result can be input into the encryption chip and decrypted with the corresponding private key in the original chip. The decrypted private key is written into the encryption chip.

The private key generation storage and usage scheme according to claim 1, wherein a plurality of sets of private keys and public key addresses are stored in the encryption chip.

The scheme for generating and storing a private key according to claim 1, wherein the encryption of the chip code of the chip card may be required, and of course, the App may have a corresponding secret-free setting, and Set the size, you need to enter the Pin code for large transactions.

The private key generation storage and usage scheme according to claim 1, wherein when the P in code is continuously input incorrectly for more than a certain number of times, the encrypted chip card is locked, and the real name authentication or authorization can be unlocked.

The scheme for storing and using the private key generation according to claim 1, wherein the encryption chip must be input after a continuous power-on after the PIN code is input, and the interval between the input PIN codes is specified. There are such regulations that increase the number of times a PIN code is allowed to be mistyped without reducing security.

The scheme for generating and storing a private key according to claim 1, wherein the output of the encryption chip can be sent by wireless means such as short message or Bluetooth, or sent to other devices, such as a mobile phone or a display interface, to view Whether the original data signed or decrypted is illegally replaced and sent out.