WO2020199028A1

WO2020199028A1 - Security chip, security processing method and related device

Info

Publication number: WO2020199028A1
Application number: PCT/CN2019/080650
Authority: WO
Inventors: 谢美伦
Original assignee: 华为技术有限公司
Priority date: 2019-03-29
Filing date: 2019-03-29
Publication date: 2020-10-08
Also published as: CN113574828A

Abstract

Disclosed are a security chip, a security processing method and a related device. A secure element comprises a processor, a first memory and a second memory, which are integrated into a semiconductor chip, wherein the processor is used for running a secure operating system and a blockchain wallet program based on the secure operating system; the first memory is used for providing, for the processor, the memory space required to run the secure operating system and the blockchain wallet program; the processor is also used for generating a mnemonic symbol under the action of the blockchain wallet program, acquiring a wallet private key of a blockchain wallet based on the mnemonic symbol, and writing the wallet private key into the second memory; and the second memory is used for storing the wallet private key. By using the present application, the security of a blockchain wallet can be improved.

Description

Security chip, security processing method and related equipment

Technical field

This application relates to the field of blockchain technology, in particular to a security chip, a security processing method and related equipment.

Background technique

Blockchain technology is a kind of Internet database technology, which is characterized by decentralization, openness and transparency, allowing everyone to participate in database records. Its essence is a distributed public ledger. Anyone can check this ledger, but there is no single user who can control it, that is, the participants in the blockchain system must maintain together in accordance with strict rules and consensus. The update of the ledger, therefore, is also called distributed ledger technology.

As the application of blockchain technology becomes more and more widespread, and there are more and more transactions based on blockchain technology, the development and use of blockchain wallets will become more frequent and important. As a tool for token transactions, blockchain wallets are used to generate blockchain private keys, public keys, and addresses that meet a certain public chain specification. They are divided into hot wallets and cold wallets. Hot wallets are also called online wallets, such as mobile phones. Wallets, computer client wallets, browser plug-in wallets, web wallets and other wallets that have been connected to the Internet. This type of wallet is convenient to use but has low security; cold wallets are also called offline wallets, such as hardware wallets, paper wallets, brain wallets, etc. Wallets that are not connected to the Internet have high security but are inconvenient to carry and use.

For example, in a hot wallet, the blockchain wallet business is carried out through a personal computer (PC), a client provided by a mobile phone, a browser plug-in, and a web page. The security mechanism depends on the system security provided by Windows and Android. If the system itself is vulnerable Many and insecure, it will cause security problems such as the leakage of the blockchain wallet key and transaction interception. In the cold wallet, because the wallet information is stored on a physically isolated network (such as a computer, mobile phone, paper with a private key or a small notebook) that is not connected to the Internet, it is necessary to carry an extra cold wallet for each transaction and use the online The terminal and the cold wallet carry out multiple signature authentication interactions, resulting in a complicated transaction process. In addition, the cold wallet also has risks such as artificial copying and cracking of wallet information.

In summary, there is an urgent need to provide a convenient, flexible, and highly secure blockchain wallet to solve the problem of cumbersome operations and low security for users in the blockchain transaction process.

Summary of the invention

The embodiments of the present invention provide a secure element, a secure processing method, and related equipment to enhance the flexibility and security of a blockchain wallet.

In the first aspect, an embodiment of the present invention provides a secure element, which may include: a processor, a first memory, and a second memory, the processor, the first memory, and the second memory are integrated in a semiconductor chip Wherein, the processor is used to run a secure operating system and a blockchain wallet program based on the secure operating system; the first memory is used to provide the processor to run the secure operating system and all The memory space required by the blockchain wallet program; the processor is also used to generate a mnemonic under the action of the blockchain wallet program, and obtain the wallet of the blockchain wallet based on the mnemonic The private key is used to write the wallet private key into the second memory; the second memory is used to store the wallet private key.

In the embodiment of the present invention, the application of the blockchain wallet is run inside the secure element, and the wallet private key of the blockchain wallet (including the generation of the mnemonic) is generated inside the secure element, from the blockchain wallet private key The source of generation guarantees its security, and the generated wallet private key is stored in the secure element to avoid illegal acquisition, which further improves the security of the blockchain wallet; and, because the secure element can use the The communication and networking functions in the smart device perform transactions, so the above-mentioned shortcomings of the cold wallet can be overcome, making transactions more flexible and convenient. That is, the security element has both the flexibility of a hot wallet and the security of a cold wallet.

In a possible implementation manner, the processor is further configured to read the wallet private key from the second memory, and use the wallet private key to verify the blockchain in the secure element. The transaction data of the wallet is decrypted or signed.

In the embodiment of the present invention, by storing the wallet private key of the blockchain wallet in the secure element, when the wallet private key needs to be used for decryption or signing and other related operations, it is read from the corresponding memory and stored in the secure element. Perform decryption or signature inside, avoid exposing the wallet private key to the ordinary external environment, so as to improve the security performance of the blockchain wallet.

In a possible implementation manner, the secure element further includes: an encryption and decryption engine for performing security processing on the wallet private key after the processor generates the wallet private key, and the security processing Including at least one of security encryption or integrity protection; the processor is specifically configured to write the wallet private key after the security processing into the second memory; the second memory is specifically used To store the wallet private key after the security processing.

In the embodiment of the present invention, since the encryption and decryption engine is independent of the processor in the secure element, it is dedicated to achieving security processing/verification related functions, and can be used to perform security processing on the wallet private key after the processor generates the wallet private key to ensure The wallet private key will not be leaked or tampered with before use, which is beneficial to improve the processing performance during security verification. Optionally, the encryption and decryption engine may be a hardware accelerator.

In a possible implementation manner, the processor is specifically configured to read the wallet private key after the security processing from the second memory, and to transfer the wallet after the security processing The private key and the transaction data of the blockchain wallet are sent to the encryption and decryption engine; the encryption and decryption engine is also used to perform security verification on the wallet private key after the security processing, and after the security verification is successful , Using the wallet private key to decrypt or sign the transaction data of the blockchain wallet, and feedback the decrypted or signed transaction data to the processor, and the security verification is the reverse operation of the security processing .

In the embodiment of the present invention, after the wallet private key has been processed by the encryption and decryption engine, the processor of the secure element needs to use the wallet key to sign the blockchain assets sold, or perform the blockchain assets that need to be purchased. When decrypting, it reads the security-processed wallet private key from the second storage and sends it to the encryption and decryption engine for security verification. After the encryption and decryption engine is successfully verified, the wallet private key pair is used in the encryption and decryption engine. The transaction data is decrypted or signed, and the result is fed back to the processor. Avoid exposing the wallet private key outside the secure element, and the performance of the security processing and verification process can be enhanced through a dedicated encryption and decryption engine.

In a possible implementation manner, the secure element further includes: a random number generator, configured to generate a random number; the processor is specifically configured to obtain the random number from the random number generator, based on the The random number generates the mnemonic. Optionally, the processor is further specifically configured to generate a seed of the blockchain wallet according to the mnemonic, and generate at least one wallet private key of the blockchain wallet according to the seed.

In the embodiment of the present invention, the random number used to generate the mnemonic is generated in the random number generator in the secure element, and the random number generated by the random number generator is random, therefore, the mnemonic can be guaranteed The absolute security of the mnemonic can guarantee the security of the seed and the wallet private key generated according to the mnemonic. Optionally, the random number generator is a true random number generator.

In a possible implementation, the blockchain wallet program is stored in a first security domain in the second memory, and the first security domain is a storage space dedicated to the blockchain wallet program; The processor is specifically configured to load the blockchain wallet program from the first security domain to the second security domain of the first memory for operation, and the second security domain is the zone A dedicated operating space for blockchain wallet programs. Optionally, the wallet private key is stored in the first security domain of the second memory.

In the embodiment of the present invention, the dedicated storage space and dedicated operating space of the blockchain wallet application are opened up in the storage space and memory space inside the secure element, so that other programs in the secure element are logically isolated from the blockchain wallet. It further improves the security of the storage and operation of the blockchain wallet program.

In a possible implementation manner, the transaction data of the blockchain wallet includes blockchain asset purchase data or blockchain asset sale data. In the embodiment of the present invention, using the wallet private key to decrypt or sign the transaction data of the blockchain wallet in the secure element may include using the wallet private key to decrypt the blockchain asset purchase data, or Including the use of the wallet private key to sign the block chain asset sale data, that is, the block chain wallet transaction data includes the two-way buying and selling process in the block chain transaction.

In a possible implementation manner, the processor is further configured to: generate a wallet public key and a wallet address according to the wallet private key. In the embodiment of the present invention, the public key or wallet address used for external transactions in the blockchain wallet is generated inside the secure element to ensure the integrity and security of the blockchain wallet transaction function.

In the second aspect, an embodiment of the present invention provides a security device, which may include:

The security element according to any one of the foregoing first aspect and at least one central processing unit coupled to the security element;

The at least one central processing unit is configured to run general operating system software and communicate with the secure element under the action of the general operating system software.

In a possible implementation, the at least one central processing unit is further configured to send transaction data of the blockchain wallet to the secure element in a trusted execution environment.

In the embodiment of the present invention, the security element provided in the first aspect and the central processing unit coupled with the security element are provided in the security device, so that the security element can be used as a dedicated security processing chip in the security device for processing Related sensitive data in the blockchain wallet (including the generation and use of the wallet private key, etc.), while the central processing unit runs the general operating system to process the non-sensitive data of the blockchain wallet and other application data. It not only ensures the security and isolation of the blockchain wallet program in the security device, but also realizes other common functions of the security device.

In the embodiment of the present invention, the security device is divided into a three-tier architecture of rich execution environment, trusted execution environment, and safe execution environment, so that the sub-sensitive data in the blockchain wallet can be processed through the trusted execution environment, that is, the block The data of the blockchain wallet is divided into multiple security levels according to its sensitivity and importance, and the different levels of execution environment in the security device are used to make the data of the blockchain wallet complete security protection.

In a possible implementation manner, the security device further includes: a memory located outside the semiconductor chip.

In a fourth aspect, an embodiment of the present invention provides a security processing method, which is characterized in that it includes:

Running a secure operating system and a blockchain wallet program based on the secure operating system through the processor in the secure element;

The first memory in the secure element provides the processor with memory space required to run the secure operating system and the blockchain wallet program;

Under the action of the blockchain wallet program, the processor generates a mnemonic, obtains the wallet private key of the blockchain wallet based on the mnemonic, and stores the wallet private key in the secure element In the second memory.

In a possible implementation manner, the method further includes: reading the wallet private key from the second memory by the processor, and using the wallet private key to register the wallet in the secure element The transaction data of the blockchain wallet is decrypted or signed.

In a possible implementation, the method further includes: the encryption and decryption engine in the secure element performs security processing on the wallet private key after the processor generates the wallet private key, and the security The processing includes at least one of security encryption or integrity protection; the storing, by the processor, of the wallet private key in the second memory of the secure element includes: passing through the processor by the processor The securely processed wallet private key is written into the second memory.

In a possible implementation manner, the processor reads the wallet private key from the second memory, and uses the wallet private key to perform transactions on the blockchain wallet in the secure element Decrypting or signing the data includes: reading the wallet private key after the security processing from the second memory by the processor, and converting the wallet private key and the area after the security processing The transaction data of the blockchain wallet is sent to the encryption and decryption engine; the method further includes: the encryption and decryption engine performs security verification on the wallet private key after the security processing, and after the security verification is successful, Using the wallet private key to decrypt or sign the transaction data of the blockchain wallet, and feedback the decrypted or signed transaction data to the processor, the security verification is the reverse operation of the security processing.

In a possible implementation manner, the method further includes: generating a random number by a random number generator in the secure element; and generating the mnemonic by the processor includes: The random number is acquired from the random number generator, and the mnemonic is generated based on the random number. Optionally, the obtaining the wallet private key of the blockchain wallet based on the mnemonic includes: generating a seed of the blockchain wallet according to the mnemonic, and generating the blockchain according to the seed At least one of the wallet private keys of the wallet.

In a possible implementation, the blockchain wallet program is stored in a first security domain in the second memory, and the first security domain is a storage space dedicated to the blockchain wallet program; The operation of the secure operating system and the blockchain wallet program based on the secure operating system through the processor in the secure element includes: the processor removes the blockchain wallet program from the first secure domain It is loaded into the second security domain of the first memory for operation, and the second security domain is a dedicated operating space for the blockchain wallet program.

In a possible implementation manner, the wallet private key is stored in the first security domain of the second memory.

In a possible implementation manner, the transaction data of the blockchain wallet includes blockchain asset purchase data or blockchain asset sale data.

In a possible implementation manner, the method further includes: generating, by the processor, a wallet public key and a wallet address according to the wallet private key.

In a fifth aspect, the present application provides a security device that has the function of realizing any of the foregoing security processing methods. This function can be realized by hardware, or by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above-mentioned functions.

In a sixth aspect, the present application provides a terminal that includes a secure element, and the secure element is configured to support the terminal to perform a corresponding function in a secure processing method provided in the fourth aspect. The terminal may also include a memory, which is used for coupling with the secure element and stores necessary program instructions and data for the terminal. The terminal may also include a communication interface for the terminal to communicate with other devices or communication networks.

In a seventh aspect, the present application provides a computer storage medium that stores a computer program that, when executed by a secure element, implements the process of the security processing method described in any one of the foregoing fourth aspects.

In an eighth aspect, an embodiment of the present invention provides a computer program, the computer program including instructions, when the computer program is executed by a secure element, the secure element can execute the secure processing method described in any one of the fourth aspect Process.

In a ninth aspect, the present application provides a chip system that includes a secure element for implementing the functions involved in the process of the secure processing method described in any one of the fourth aspects. In a possible design, the chip system further includes a memory, which is used to store program instructions and data necessary or related to the security processing method. The chip system can be composed of chips, or include chips and other discrete devices.

Description of the drawings

FIG. 1 is a schematic structural diagram of a security element provided by an embodiment of the present invention;

Figure 2 is a schematic structural diagram of another security element provided by an embodiment of the present invention;

3 is a schematic structural diagram of another security element provided by an embodiment of the present invention;

Figure 4 is a security device provided by an embodiment of the present invention;

5 is a simplified schematic diagram of a software system architecture for secure transactions of blockchain wallets according to an embodiment of the present invention;

Figure 6 is a diagram of a remote configuration network architecture based on a TSM architecture provided by an embodiment of the invention;

FIG. 7 is a schematic flowchart of a security processing method provided by an embodiment of the present invention.

detailed description

The embodiments of the present invention will be described below in conjunction with the drawings in the embodiments of the present invention. The terms "first", "second", "third" and "fourth" in the description and claims of the application and the drawings are used to distinguish different objects, rather than describing a specific order . In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes unlisted steps or units, or optionally also includes Other steps or units inherent to these processes, methods, products or equipment. Reference to "embodiments" herein means that a specific feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art clearly and implicitly understand that the embodiments described herein can be combined with other embodiments.

The terms "component", "module", "system", etc. used in this specification are used to denote computer-related entities, hardware, firmware, a combination of hardware and software, software, or software in execution. For example, the component may be, but is not limited to, a process, a processor, an object, an executable file, an execution thread, a program, and/or a computer running on a processor. Through the illustration, both the application running on the computing device and the computing device can be components. One or more components may reside in processes and/or threads of execution, and components may be located on one computer and/or distributed among two or more computers. In addition, these components can be executed from various computer readable media having various data structures stored thereon. The component may be based on, for example, a signal having one or more data packets (such as data from two components interacting with another component in a local system, a distributed system, and/or a network, such as the Internet that interacts with other systems through signals) Communicate through local and/or remote processes.

First, some terms in this application are explained to facilitate the understanding of those skilled in the art.

(1) Integrated Circuit (IC), that is, an IC chip is an integrated circuit formed by a large number of microelectronic components (transistors, resistors, capacitors, etc.) on a plastic base to make a chip.

(2) Rich Execution Environment (REE), generally used to run Android and other feature-rich operating systems, and defined by Trustzone ARM that can support a fully trusted execution environment (TEE) and security-aware applications and security The service platform technology is different.

(3) Trusted execution environment (TEE) is a security zone separated from the rich execution environment REE. TEE consists of a trusted application (Trusted Application, TA) and a trusted operating system (Trusted OS, Trusted Operating System). It is separated from the rich execution environment and the applications on the rich execution environment to ensure that various sensitive data are stored, processed and protected in a trusted environment. At the same time, the trusted execution environment provides a security for the trusted applications loaded in it. Execution environment.

(4) Bitcoin, also known as "Bit Gold", is a virtual currency on the Internet. Netizens can use Bitcoin to buy some virtual items, such as clothes, hats, and equipment in online games. Netizens also use it to buy reality. The condition of the item.

(5) Public key and private key: The holder of the private key is the holder of the currency in the bank card. The private key can calculate the public key, the public key can generate a wallet address through a series of digital signatures, and the data encrypted with the private key can be decrypted with the public key, and vice versa.

(6) Wallet address: Similar to a bank card number, one person can have multiple bank cards, and similarly, he can also have multiple wallet addresses. One wallet address can only correspond to one private key.

(7) True Random Number Generator (TRNG) is a device that generates random numbers through physical processes instead of computer programs. TRNG is a very flexible random number generator library. It allows sequential and parallel applications, and the library does not depend on any specific communication library.

(8) Application Protocol Data Unit (APDU) is an information unit transmitted between the smart card and the smart card reader.

(9) Key Derivation Function (KDF) is a key derivation function used in the encryption and decryption process. Its function is to derive key data from a shared secret bit serial port. During the key negotiation process, the key The key derivation function acts on the secret bit string obtained by the key exchange to generate the required session key or the key data required for further encryption.

Please refer to FIG. 1, which is a schematic structural diagram of a secure element provided by an embodiment of the present invention. The secure element 10 may include a processor 101, a first memory 102, and a second memory 103, and the processor 101, the first memory The memory 102 and the second memory 103 are integrated in the semiconductor chip IC1. Among them, the processor 101 is used to run a secure operating system and a blockchain wallet program based on the secure operating system. This security operating system is different from ordinary operating systems, it can be an on-chip operating system (Chip Operating System, COS), which is also called COS mirroring, which can be equivalent to a resident smart card or a financial integrated circuit (IC) card Operating system software inside. The secure operating system can be used to run applications installed in the secure element, such as the blockchain wallet program in this application, or other applications that require security protection, such as bank payment applications, bus payment applications, identity authentication applications, etc. It should be noted that the blockchain wallet is software for generating and managing keys, addresses, tracking balances, and creating transactions. The blockchain wallet program stored and running in the secure element 10 in this application can be a complete The blockchain wallet software can also be a part of the functional programs in the blockchain wallet software. For example, the blockchain wallet program can be a small application Applet that requires high security.

The first memory 102 is configured to provide the processor 101 with memory space required for running the secure operating system and the blockchain wallet program. That is, the first memory 102 can store intermediate data or temporary data generated by the processor 101 running a secure operating system and a blockchain wallet program, which can also be referred to as memory data. The memory data includes not only the aforementioned intermediate data or temporary data, but also various intermediate calculation result data or configuration data generated by running algorithms or processes. Since the memory data is process data generated by running a software, it does not need to be stored for a long time, and may be lost when the equipment or device is powered off. Therefore, the first memory 102 may be a random access memory (Random Access Memory, RAM) or a power-off volatile storage device, such as a static random access memory (Static Random Access Memory, SRAM) and a dynamic random access memory (Dynamic Random Access Memory, SRAM). Random Access Memory (DRAM) or synchronous dynamic random access memory (Synchronous DRAM, SDRAM), double rate SDRAM (Dual Data Rate SDRAM, DDR SDRAM), etc.

The processor 101 is further configured to generate a mnemonic under the action of the blockchain wallet program, obtain the wallet private key of the blockchain wallet based on the mnemonic, and write the wallet private key to all In the second memory 103. As in the blockchain wallet, the backup of the wallet private key (private key for short) is very important. Once the private key is obtained, the right to use the blockchain wallet corresponding to the private key is obtained, and all the accounts on the account are obtained. Assets, therefore, users must remember and keep the private key to avoid illegal acquisition. But under normal circumstances, the private key has 256 bits and is represented by a 64-bit hexadecimal hash value string. It is easy for users to make clerical errors if they copy directly, and they will be difficult to remember because the string is too long. Therefore, in blockchain wallets, mnemonics are used to help users remember complex private keys. mnemonics are generally composed of 12, 15, 18, 21 words (which can be English, French, Chinese, or even dialects, etc.) These words are all taken from a fixed vocabulary, and their generation sequence is also based on a certain algorithm. Mnemonic can be considered as another form of expression of the plaintext private key, so it is usually not stored in the blockchain wallet. On the terminal device, it is stored in other places, such as a notebook or a brain. In the embodiment of the present invention, the processor 101 generates a mnemonic inside the secure element, and obtains the private key of the blockchain wallet based on the mnemonic. The specific obtaining process may be based on the assistance in the processor 101 The wallet private key is calculated by combining the token with a preset private key algorithm (such as a hash algorithm); it can also be the processor 101 that controls other dedicated function modules (such as the encryption and decryption engine described later) inside the secure element 10 to generate the wallet The private key is not specifically limited in this application. Since both the mnemonic and the wallet private key are generated inside the secure element 10, the security of the wallet private key can be ensured from the source and process of generating the wallet private key.

The second memory 103 is used to store the wallet private key. Since the wallet private key of the blockchain wallet is different from the intermediate data or temporary data of the processor 101 running the secure operating system and the blockchain wallet program, as a result of the data, it needs to be called in subsequent blockchain transactions for decryption or Signed, so it needs to be stored for a long time. Therefore, the second memory 103 may be a read-only memory (Read Only Memory, ROM) or a non-power-down volatile memory, such as a programmable ROM (Programmable ROM, PROM), an erasable programmable ROM (Erasable Programmable ROM, EPROM), electrically erasable programmable ROM (Electrically Erasable Programmable ROM, EEPROM), flash ROM (FLASH ROM), etc. In a possible implementation manner, the wallet private key may also be stored in the second memory 103 after undergoing security processing (such as encryption or integrity protection, etc.) by the processor 101. Optionally, the second memory 103 may also be used to store the blockchain wallet program or other security applications in the embodiment of the present invention. Further optionally, the second storage 103 may also store related transaction information, account information, asset information, etc. of the blockchain wallet.

In a possible implementation, the processor 101 is further configured to read the wallet private key from the second memory 103, and use the wallet private key to perform transaction data on the blockchain wallet in the secure element 10. Decrypt or sign. In the blockchain transaction process, the private key is equivalent to the bank card password and is non-public, used to prove the identity and assets of the user, while the public key is equivalent to the bank card number, which is public and used for other users to transfer money. . For example, if user A sells his own blockchain assets to user B, he will use the private key A that can prove A’s identity to sign the blockchain asset to prove that the asset belongs to A and will be signed by the private key A The blockchain asset is encrypted by user B’s public key B'(known), indicating that it is sent to user B’s address. Therefore, user B uses his private key B to decrypt the address and finds that the blockchain asset is Send to yourself, and then use A's public key A'(known) to verify the blockchain asset. After the verification is successful, it means that the blockchain asset is indeed issued by A. So far, user A and user B have completed the transaction of blockchain assets. In the above-mentioned blockchain transaction process, the seller A uses (own private key A + the other party's public key B') to securely process the sold blockchain assets, and the buyer B uses (the other party's public key A' +Own private key B) Perform security verification on the purchased blockchain assets, thereby completing the secure transaction of blockchain assets. Therefore, when the user is in the seller role, the private key is used to sign the seller, when the user is in the buyer role, the private key is used to decrypt the buyer; when the user is the seller, the public key is used to verify the signature for the other party (buyer). When the user is the buyer, the public key is used to encrypt the other party (seller); that is, the public key is disclosed by the user, used to encrypt and verify the signature, and is for others; the private key is used for decryption and signature. It is for my own use. In the embodiment of the present invention, the processor 101 performs the process of using the wallet private key (including decryption or signature) inside the secure element, that is, when the private key needs to be used, the processor 101 reads the private key from the second memory 103 It is then used inside the secure element 10 to avoid exposing the wallet private key to the ordinary external environment, which improves the security performance of the blockchain wallet.

In a possible implementation manner, the transaction data of the blockchain wallet includes blockchain asset purchase data or blockchain asset sale data. That is, in the embodiment of the present invention, using the wallet private key to decrypt or sign the transaction data of the blockchain wallet in the secure element 10 may include using the wallet private key to decrypt the blockchain asset purchase data, It can also include using the wallet private key to sign the blockchain asset sale data, that is, the transaction data of the blockchain wallet includes the two-way buying and selling process in the blockchain transaction.

Since the secure element in the embodiment of the present invention has an independent processor 101, memory (first memory 102), and storage unit (second memory 103), the central operating system and applications of the smart device coupled with the secure element 10 can be realized The physical isolation of the software execution environment, therefore, can provide a higher security environment for the blockchain wallet program running inside the secure element 10, and because the secure element can use the communication and networking functions in the smart device to which it is coupled Therefore, it can overcome the shortcomings of cold wallets and make transactions flexible and convenient. Further, by generating a mnemonic and a wallet private key inside the secure element 10, the security of the wallet private key generation is ensured from the source and the generation process, and at the same time, the generated wallet private key is stored in the first part of the secure element 10. On the second memory 103, the leakage or illegal tampering of the private key is avoided, and the security of the wallet private key storage is ensured; further, when the blockchain wallet needs to use the private key, the processor 101 reads the storage in the second The private key in the memory 103 is decrypted or signed inside the secure element 10, which ensures the security of the wallet private key. In summary, the embodiment of the present invention realizes the core functions of the blockchain wallet such as secure startup, activation, storage, and transaction, and at the same time has the flexibility of a hot wallet and the security of a cold wallet, and can greatly improve the blockchain For the security and reliability of the wallet, the secure element 10 in this application can be applied to smart IC (integrated circuit) cards, encryption machines, smart terminals (such as smart phones, smart wearable devices, tablet computers, etc.), computers, etc. In order to support the function of blockchain wallet in various devices.

Please refer to FIG. 2, which is a schematic structural diagram of another secure element provided by an embodiment of the present invention. The secure element 10 includes the processor 101, the first memory 102, and the second memory 103 in FIG. In addition to the corresponding functions of the embodiment in FIG. 1, it may also include a random number generator 104 and/or an encryption and decryption engine 105 coupled to the processor 101, and the random number generator 104 and the encryption and decryption engine 105 may also be connected to the processor 101. , The first memory 102 and the second memory 103 are integrated in the semiconductor chip IC1. Wherein, the encryption and decryption engine 105 is configured to perform security processing on the wallet private key after the processor 101 generates the wallet private key, and the security processing includes at least one of security encryption or integrity protection, for example, Integrity protection is the use of a preset hash algorithm to generate the hash value of the wallet private key, etc. This application does not specifically limit the specific security processing method. The processor 101 is specifically configured to write the wallet private key after the security processing into the second memory 103; the second memory 103 is specifically configured to store the wallet private key after the security processing. Further, in a possible implementation manner, the processor 101 is specifically configured to read the wallet private key after the security processing from the second memory 103, and to store the security processing The wallet private key and the transaction data of the blockchain wallet are sent to the encryption and decryption engine 105; the encryption and decryption engine 105 is also used to perform security verification on the wallet private key after the security processing, and after the security verification is successful , Using the wallet private key to decrypt or sign the transaction data of the blockchain wallet, and feedback the decrypted or signed transaction data to the processor 101, the security verification is the inverse of the security processing operating. For example, when the processor 101 receives a related transaction instruction for a blockchain wallet and needs to use the wallet private key, the processor 101 needs to first read the wallet private key that has undergone security processing from the second memory 103, and The wallet private key is sent to the encryption and decryption engine 105 for security verification. After ensuring that the wallet private key has not been illegally tampered with after it is safely stored, it is determined that the wallet private key is used for blockchain transaction related processing. That is, after the private key is generated inside the secure element 10, the wallet private key is not directly stored in plaintext, but the wallet private key is encrypted for storage and/or integrity protection, so as to prevent the wallet private key from being easily obtained or illegally tampered with. At the same time, it can also ensure that the wallet private key is only used by the blockchain wallet program after the verification is successful, so as to avoid the irreversible loss of the user's blockchain assets if the wallet private key is tampered with. Therefore, the embodiment of the present invention can further enhance the security of the storage and use of the wallet private key inside the secure element 10. Optionally, the encryption and decryption engine 105 may be a hardware accelerator that includes a circuit structure. Since the encryption and decryption engine 105 in the form of hardware is independent of the processor 101, it is dedicated to implementing related security processing or verification functions, which is beneficial to improve security processing. performance.

Alternatively, the function of the encryption and decryption engine 105 can also be replaced by the processor 101. In this case, there is no need for an independent hardware encryption and decryption engine 105 to read from the second memory 103 or to the second memory. The wallet private key written in the memory 103 is used for security processing, but the processor 101 itself integrates the security function.

In a possible implementation manner, the secure element 10 may further include a random number generator 104 for generating random numbers; the processor 101 is specifically configured to obtain the random number from the random number generator 104, based on the random number generator 104. The mnemonic is generated by counting, the seed of the blockchain wallet is generated according to the mnemonic, and at least one private key of the blockchain wallet is generated according to the seed. Optionally, the random number generator 104 may be a true random number generator (TRNG). The TRNG generates random numbers through a physical process rather than a computer program, and can obtain unpredictable random numbers based on physical signals. Since the random number is generated inside the secure element 10, the security of the mnemonic generation can be guaranteed, and it is generated by the dedicated random number generator 104, which can improve the randomness of random number generation. For example, the process of generating the wallet private key inside the secure element 10 in this application can be specifically as follows:

1. Inside the secure element 10, a random sequence of 128 to 256 bits (which can be called entropy) is generated by the random number generator 104;

2. The processor 101 takes the first n bits (n=entropy length/32) after the entropy hash (SHA256) as the checksum, adds the checksum to the end of the random sequence, and performs every 11 bits of the result Cutting, matching each value containing 11-bit bytes with a predefined thesaurus, the generated sequenced word group is the mnemonic;

3. The processor 101 or the encryption and decryption engine 105 derives and generates a longer (512-bit) seed based on the mnemonic and adopts the key extension function (PBKDF2function), wherein the obtained seed is used to construct a deterministic wallet ( deterministic Wallet) and derive the wallet key;

4. The processor 101 or the encryption and decryption engine 105 uses the HMAC-SHA512 algorithm to generate a parent key according to the seed;

5. The processor 101 or the encryption and decryption engine 105 generates a large number of child keys through a child key derivation (CKD) function according to the mother secret key. It is understandable that the wallet private key in this application can be the above-mentioned parent key or one of the above-mentioned sub-keys.

Alternatively, the function of the random number generator 104 can also be replaced by the processor 101. In this case, an independent random number generator 104 is not needed to generate random numbers, but the processor 101 itself integrates the Random number generation function.

In a possible implementation manner, the processor 101 is further configured to generate a wallet public key and a wallet address according to the wallet private key. Since in the blockchain wallet, the public key and the private key exist in pairs, the private key is generated by the mnemonic, and the public key is derived from the private key through an algorithm. But because the public key is too long, for simplicity and practicality, an "address" is generated. Usually, the public key is not displayed in the transaction, only the transfer between two addresses is displayed, and the address is derived from the public key. It should be noted that these derivation processes are one-way irreversible, that is, addresses cannot be derived from public keys, and public keys cannot be derived from private keys. In the embodiment of the present invention, the public key or wallet address used for external transactions in the blockchain wallet is generated inside the secure element to ensure the integrity and security of the blockchain wallet transaction function. Optionally, the wallet public key can be stored in the second memory 103 the same as the wallet private key, or can be stored in an external memory coupled with the secure element 10, for example, can be stored in the second memory 103 coupled with the secure element 10. The memory in the trusted execution environment TEE may also be stored in the memory in the rich execution environment REE coupled with the secure element 10, which is not specifically limited in the embodiment of the present invention.

In a possible implementation manner, please refer to Figure 3. Figure 3 is a schematic structural diagram of yet another secure element provided by an embodiment of the present invention, as a refinement of some functional modules in the secure element in Figure 1 or Figure 2 , The blockchain wallet program is stored in the first security domain 1031 in the second memory 103, the first security domain 1031 is a storage space dedicated to the blockchain wallet program; the processor 101 , Specifically used to load the blockchain wallet program from the first security domain 1031 to the second security domain 1021 of the first memory 102 for operation, and the second security domain 1021 is the zone A dedicated operating space for blockchain wallet programs. That is, inside the secure element 10, a dedicated storage area and an operating area are divided for the blockchain wallet program. In the embodiment of the present invention, the storage space and the operating space inside the secure element 10 are further divided, so that different applications are divided into areas to avoid mutual interference and further secure isolation. For example, in addition to loading and running the blockchain wallet program, the secure element 10 also runs other applications, such as identity authentication applications, facial recognition applications, fingerprint recognition applications, etc., secure payment applications, etc., where different applications are located Different security domains can correspond to different security services. It should be noted that, in the embodiment of the present invention, the security domain is a logical area that can be divided according to the business type, security level, etc. of the application. Different security domains have different security access control strategies to realize different security domains. Access control between different security domains safely isolates different security domains and ultimately protects the operation of applications in each security domain.

Please refer to FIG. 4, which is a security device 20 provided by an embodiment of the present invention. The security device 20 may include any one of the security elements 10 corresponding to FIGS. 1 to 3, and a device coupled to the security element 10 At least one central processing unit 201 (take one as an example in FIG. 3); the at least one central processing unit 201 can be integrated in the semiconductor chip IC1 together with the security element 10, or on a different semiconductor chip. The at least one central processing unit 201 is configured to run general operating system software, and communicate with the secure element 10 under the action of the general operating system software. In a possible implementation, the at least one central processing unit 201 is further configured to send transaction data of the blockchain wallet to the secure element 10 in a trusted execution environment. Optionally, the security device 20 may also include a memory 202 that can be used to store data generated by the central processing unit 201 or the secure element 10. The memory 202 can be integrated in the semiconductor with the secure element 10 and at least one central processing unit 201. The chip IC1 may also be separately located on different semiconductor chips, and the memory 202 and the at least one central processing unit 201 may also be located on different semiconductor chips. For example, the secure element 10 and at least one central processing unit 201 are integrated on IC1, the memory 202 is located on IC2, or the secure element 10 is integrated on IC1, and the memory 202 and at least one central processing unit 201 are integrated on IC2. This is not specifically limited. In the embodiment of the present invention, by setting any one of the security elements 10 corresponding to FIGS. 1 to 3 in the security device 20, and the central processing unit 201 coupled with the security element 10, the security element 10 can be used as the security device 20. A dedicated security processing chip is used to process related sensitive data in the blockchain wallet (including the generation and use of the wallet’s private key, etc.), while the central processing unit 201 runs a general operating system to prevent the The processing of sensitive data and data of other applications not only ensures the security and isolation of the blockchain wallet program in the security device 20, but also realizes other common functions of the security device 20. The security device 20 can be an encryption machine, a smart terminal (such as a smart phone, a smart wearable device, a tablet computer, etc.), a smart device, a computer, and other types of devices.

In the various embodiments of the present invention, a semiconductor chip is also referred to as a chip for short. It may be a collection of integrated circuits fabricated on an integrated circuit substrate (usually a semiconductor material such as silicon) using integrated circuit technology. Usually encapsulated by semiconductor packaging materials. The integrated circuit may include a Metal-Oxide-Semiconductor (MOS) transistor, a bipolar transistor, a diode, or the like. The semiconductor chip can work independently or under the action of necessary driver software to realize various functions such as communication, calculation, or storage.

The following describes the specific application of the security device 20 under the security architecture based on the relevant functional description of the security device 20 (for example, a mobile terminal) and combined with the three-layer security architecture of REE+TEE+SEE. Please refer to Figure 5. Figure 5 is a simplified schematic diagram of a software system architecture for blockchain wallet secure transactions provided by an embodiment of the present invention, where REE is a rich execution environment, running security-insensitive programs and storing security-insensitive Data, there are certain security risks; TEE is a trusted execution environment, runs security-sensitive programs and saves security-sensitive data, provides a certain level of security isolation, SEE is a secure execution environment, runs high-security programs such as financial payments, and saves financial payments, etc. High security data provides a higher level of security isolation. The Trusted Application (TA) in the TEE system is used to receive and process the commands on the REE side, send APDU commands to the SEE module as needed, and then the SEE module to respond to related commands.

The Secure Element (SE) 10 described in FIGS. 1 to 3 in this application can be used as the SEE layer in the software system architecture in FIG. 5. The trusted execution environment executed by the central processing unit 201 and the general operating system software (such as the Android system environment) also executed by the central processing unit 201 respectively serve as the TEE layer and the REE layer in the software system architecture in FIG. 5. Although run by the same central processing unit 201, there are two independent software systems between the trusted execution environment and the general operating system software, and there is security isolation, and the security isolation is very good. General operating system software and running programs of general application software based on the operating system cannot freely access the trusted execution environment. The trusted execution environment can exchange data with the environment formed by the processor 101 running the blockchain wallet program, that is, with the secure element 10. Therefore, there is a security isolation between the general operating system software, the trusted execution environment, and the secure element 10, so that the general operating system software or the running program of the common application software based on the software can affect the trusted execution environment and the secure element 10 The access is not random. Even if the access is executed, it needs to pass through a specific software or hardware security interface, and the security isolation between the trusted execution environment and the secure element 10 is relatively low, and the operation is relatively convenient. The common application software may include various non-secure payment related software, such as instant messaging software, games, office software, e-book software, or audio and video streaming media players.

In a possible implementation, the management of the public key of the blockchain wallet is implemented in a trusted execution environment, including storage and use. Specifically, the public key may be stored in a storage part of the memory 202 corresponding to the trusted execution environment. It is also possible to use the public key to encrypt or verify the transaction data of the blockchain wallet in a trusted execution environment.

Optionally, the trusted execution environment may also provide a visualized user interface (UI) for blockchain transactions or other financial services, so that users can input instructions and obtain visual information through the UI. The UI is a trusted UI (Trust UI), which is different from the ordinary UI provided by general operating system software, so that the instructions input by the user are transmitted to the secure element 10 through the trusted execution environment, and the secure element 10 can also be made The visual information that needs to be displayed on the user interface is displayed safely through the UI without being illegally tampered with, so as to ensure the safety of the user completing the information interaction with the secure element 10 through the UI. For example, in the process of fetching, depositing, paying, receiving and querying blockchain transactions, the security device 20 needs to interact with the user in the scene. For example, the blockchain wallet needs to display account information (QR code information or asset information, etc.) ), in the process of opening and binding the blockchain wallet, the camera needs to be turned on to collect the user's biological characteristics, and the blockchain wallet transaction requires the user to enter confirmation information, etc., which can be processed by the trusted UI supported by the TEE or controlled by the TEE Corresponding hardware devices (such as cameras, physical buttons, touch screens, etc.) are implemented, while meeting the requirements of high performance and high security, while ordinary software in REE cannot directly display or control the interface, preventing counterfeiting, phishing and malicious transactions on the trading interface Software counterfeiting and data theft.

Further, the aforementioned security device 20 (for example, a mobile terminal) can also use the TSM remote configuration service provided by the remote comprehensive maintenance system (Tivoli Storage Manager, TSM) to improve the security of keys and algorithms, thereby improving the blockchain wallet The security of the key. Please refer to FIG. 6, which is a diagram of a remote configuration network architecture based on the TSM architecture provided by an embodiment of the invention. The mobile terminal 20, whether as a buyer or seller of a blockchain transaction, can use the mobile communication included in the mobile terminal 20 The wireless communication link 30 provided by the unit 203 is connected to a radio access network (Radio Access Network, RAN) 40, thereby connecting to the Internet, and finally interacting with the TSM on the network side. For the same reason, if there is another The related service systems of other blockchains are also in the same position as the TSM in FIG. 6 and similar to the interaction process of the mobile terminal 20, so they will not be introduced here. Specifically, the security element 10 (such as the first security domain 1031 of the second memory 103 in the secure element 10) stores the business secret key (which may include the wallet private key, public key, etc.) and algorithm configuration of the blockchain wallet parameter. Remotely update, replace, configure, and upgrade the service key and algorithm configuration parameters stored in the first security domain 1031 through the putkey and Storedata commands of TSM 50. For example, the key can be replaced and updated through the Putkey command of TSM 50, or the previous key can be invalidated so that it can no longer be used. For example, TSM50 completes the issuance of modified configuration through Storedata commands, such as the parameters used in secret key calculations (enable, algorithm identification, key length, operation mode, filling method), so that encryption and decryption support higher security levels, the same is true It can also be configured that encryption and decryption are not available. Optionally, when the mobile terminal is stolen or lost, remotely disable the secret key and algorithm stored in the secure element 10 through the putkey and Storedata commands of TSM 50, so that the blockchain mobile wallet cannot be used and avoids the blockchain wallet loss. That is, when the mobile terminal is stolen or lost, there is no need to deal with the whole machine, and the blockchain mobile wallet can be further processed accurately.

Please refer to FIG. 7. FIG. 7 is a schematic flowchart of a security processing method provided by an embodiment of the present invention. The security processing method is applicable to any one of the security elements in FIGS. 1 to 3 and 4 and includes the Security element equipment (such as security device 20). The method may include the following steps S701 to S703, wherein, step S701: run a secure operating system and a blockchain wallet program based on the secure operating system through the processor in the secure element; step S702: use the second in the secure element A memory provides the processor with the memory space required to run the secure operating system and the blockchain wallet program; step S703: under the action of the blockchain wallet program, the processor generates an assistant A token, a wallet private key of a blockchain wallet is obtained based on the mnemonic, and the wallet private key is stored in the second memory of the secure element.

In a possible implementation manner, the method further includes: reading the wallet private key from the second memory by the processor, and using the wallet private key to compare the wallet private key in the secure element The transaction data of the blockchain wallet is decrypted or signed.

In a possible implementation manner, the processor reads the wallet private key from the second memory, and uses the wallet private key to verify the blockchain wallet in the secure element. Decrypting or signing the transaction data includes: reading the securely processed wallet private key from the second memory by the processor, and converting the securely processed wallet private key The transaction data with the blockchain wallet is sent to the encryption and decryption engine; the method further includes: the encryption and decryption engine performs security verification on the wallet private key after the security processing, and After the verification is successful, the transaction data of the blockchain wallet is decrypted or signed using the wallet private key, and the decrypted or signed transaction data is fed back to the processor, and the security verification is the security processing The inverse operation.

It should be noted that, for the specific flow of the security processing method described in the embodiment of the present invention, refer to the related description in the embodiment of the present invention described in FIG. 1 to FIG. 6, which will not be repeated here.

The embodiment of the present invention further provides a computer storage medium, wherein the computer storage medium may store a program, and when the program is executed by the secure element, it includes part or all of the steps of any one of the above method embodiments.

The embodiment of the present invention also provides a computer program, which includes instructions, when the computer program is executed by a secure element, the secure element can execute part or all of the steps of any secure processing method.

In the above-mentioned embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in an embodiment, reference may be made to related descriptions of other embodiments.

It should be noted that for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should know that this application is not limited by the described sequence of actions. Because according to this application, some steps may be performed in other order or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by this application.

In the several embodiments provided in this application, it should be understood that the disclosed device may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the above-mentioned units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or integrated. To another system, or some features can be ignored, or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical or other forms.

The units described above as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.

If the above integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , Including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc., specifically a processor in a computer device) execute all or part of the steps of the foregoing methods of the various embodiments of the present application. Among them, the aforementioned storage medium may include: U disk, mobile hard disk, magnetic disk, optical disk, read-only memory (Read-Only Memory, abbreviation: ROM) or Random Access Memory (Random Access Memory, abbreviation: RAM), etc. A medium that can store program codes.

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, a person of ordinary skill in the art should understand that: The technical solutions recorded in the embodiments are modified, or some of the technical features are equivalently replaced; these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

A security element, characterized by comprising a processor, a first memory and a second memory, the processor, the first memory and the second memory are integrated in a semiconductor chip; wherein

The processor is configured to run a secure operating system and a blockchain wallet program based on the secure operating system;

The first memory is configured to provide the processor with memory space required to run the secure operating system and the blockchain wallet program;

The processor is also used to generate a mnemonic under the action of the blockchain wallet program, obtain the wallet private key of the blockchain wallet based on the mnemonic, and write the wallet private key to In the second memory;

The second memory is used to store the wallet private key.
The secure element according to claim 1, wherein the processor is further configured to read the wallet private key from the second memory, and use the wallet private key to pair in the secure element The transaction data of the blockchain wallet is decrypted or signed.
The security element according to claim 2, wherein the security element further comprises:

The encryption and decryption engine is configured to perform security processing on the wallet private key after the processor generates the wallet private key, and the security processing includes at least one of security encryption or integrity protection;

The processor is specifically configured to write the wallet private key after the security processing into the second memory;

The second memory is specifically used to store the wallet private key after the security processing.
The security element according to claim 3, wherein:

The processor is specifically configured to read the wallet private key after the security processing from the second memory, and perform the transaction between the wallet private key after the security processing and the blockchain wallet Sending data to the encryption and decryption engine;

The encryption and decryption engine is also used to perform security verification on the wallet private key after the security processing, and after the security verification is successful, use the wallet private key to perform transaction data on the blockchain wallet Decrypt or sign, and feed the decrypted or signed transaction data to the processor, and the security verification is the reverse operation of the security processing.
The security element according to any one of claims 1 to 4, wherein the security element further comprises: a random number generator for generating random numbers;

The processor is specifically configured to obtain the random number from the random number generator, and generate the mnemonic based on the random number.
The security element according to any one of claims 1-5, wherein the blockchain wallet program is stored in a first security domain in the second memory, and the first security domain is the Storage space dedicated to blockchain wallet program;

The processor is specifically configured to load the blockchain wallet program from the first security domain to the second security domain of the first memory for operation, and the second security domain is the zone A dedicated operating space for blockchain wallet programs.
According to the secure element of claim 6, the wallet private key is stored in the first secure domain of the second memory.
The security element according to any one of claims 1-7, wherein the processor is further configured to:

Generate a wallet public key and wallet address according to the wallet private key.
A safety device, characterized by comprising:

The security element according to any one of claims 1 to 8 and at least one central processing unit coupled to the security element;

The at least one central processing unit is configured to run general operating system software and communicate with the secure element under the action of the general operating system software.
The security device according to claim 9, wherein the at least one central processing unit is further configured to send transaction data of the blockchain wallet to the secure element in a trusted execution environment.
The safety device according to claim 9 or 10, further comprising:

A memory located outside the semiconductor chip.
A safe processing method, characterized in that it comprises:

Run a secure operating system and a blockchain wallet program based on the secure operating system through the processor in the secure element;

The first memory in the secure element provides the processor with memory space required to run the secure operating system and the blockchain wallet program;

Under the action of the blockchain wallet program, the processor generates a mnemonic, obtains the wallet private key of the blockchain wallet based on the mnemonic, and stores the wallet private key in the secure element In the second memory.
The method according to claim 12, wherein the method further comprises:

The processor reads the wallet private key from the second memory, and uses the wallet private key to decrypt or sign the transaction data of the blockchain wallet in the secure element.
The method according to claim 13, wherein the method further comprises: after the processor generates the wallet private key, the encryption and decryption engine in the secure element performs security processing on the wallet private key , The security processing includes at least one of security encryption or integrity protection;

The storing, by the processor, the wallet private key in the second memory of the secure element includes: writing, by the processor, the wallet private key after the security processing into the second In the memory.
The method according to claim 14, wherein the processor reads the wallet private key from the second memory, and uses the wallet private key to check the block in the secure element. Decrypting or signing the transaction data of the chain wallet includes: reading the wallet private key after the security processing from the second memory by the processor, and storing the wallet after the security processing The private key and the transaction data of the blockchain wallet are sent to the encryption and decryption engine;

The method also includes: performing security verification on the wallet private key after the security processing by the encryption and decryption engine, and after the security verification is successful, using the wallet private key to verify the blockchain wallet The transaction data is decrypted or signed, and the decrypted or signed transaction data is fed back to the processor, and the security verification is the reverse operation of the security processing.
The method according to any one of claims 12-15, wherein the method further comprises: generating a random number by a random number generator in the secure element;

The generating of the mnemonic by the processor includes:

The processor obtains the random number from the random number generator, and generates the mnemonic based on the random number.
The method according to any one of claims 12-16, wherein the blockchain wallet program is stored in a first security domain in the second memory, and the first security domain is the zone Dedicated storage space for blockchain wallet programs;

The running a secure operating system and a blockchain wallet program based on the secure operating system through the processor in the secure element includes:

The processor loads the blockchain wallet program from the first security domain to the second security domain of the first memory for operation, and the second security domain is the blockchain wallet Run space dedicated to the program.
The method of claim 17, wherein the wallet private key is stored in the first security domain of the second memory.
The method according to any one of claims 12-18, wherein the method further comprises: generating, by the processor, a wallet public key and a wallet address according to the wallet private key.
A computer storage medium, characterized in that the computer storage medium stores a computer program, and when the computer program is executed by a secure element, the method according to any one of claims 12-19 is realized.
A computer program, characterized in that, the computer program includes instructions that, when the computer program is executed by a secure element, cause the secure element to execute the method according to any one of claims 12-19.