CN106850200B - A security method, system and terminal using blockchain-based digital currency - Google Patents

Abstract

The invention discloses a security method, system and terminal for using blockchain-based digital currency. The method includes: the digital currency client sends a request to apply for a digital certificate to the blockchain, and the receiving blockchain returns a request after the identity and request verification pass. Corresponding customer information; according to the customer information, send a digital certificate application to the security chip through the trusted execution environment; the security chip generates a key pair and digital currency wallet address based on the customer information, and outputs digital currency to the digital currency client through the trusted execution environment Wallet address; the digital currency client sends the digital currency wallet address to the blockchain, so that the blockchain can obtain a digital certificate from the certification center according to the digital currency wallet address; after the digital currency client receives the digital certificate sent by the blockchain, it passes the trusted The execution environment sends a digital certificate installation request to the security chip to make the security chip install the digital certificate; through the security chip and the trusted execution environment, the security of the blockchain digital currency wallet is improved.

Description

A security method, system and terminal using blockchain-based digital currency

technical field

The present invention relates to the field of communication technology, and in particular to a security method, system and terminal using blockchain-based digital currency.

Background technique

In the current Bitcoin system, the Bitcoin address is the public key in a set of asymmetric keys, which are generated by the elliptic algorithm. The address and private key of the user account are stored in the Bitcoin wallet (that is, the digital currency wallet) file, and the private key is encrypted and decrypted by the Bitcoin client software. Currently, digital currency wallet technologies based on blockchain technology are all based on Bitcoin, which can be classified into: web wallets, multi-signature wallets, desktop wallets, and mobile wallets.

Due to the decentralization and anonymity of the entire bitcoin system, once the digital currency wallet is lost, the bitcoins stored in all addresses in the digital currency wallet may be stolen. Once bitcoins are stolen, they cannot be retrieved. Therefore, it is necessary to ensure the security of digital currency wallets. The existing digital currency wallet solutions all back up the private key online to form a backup digital currency wallet. Although many security measures have been taken to ensure the security of applications and data, numerous attack cases and system vulnerabilities show that this still cannot guarantee the security of digital currency wallets. Security of digital currency in currency wallet. Therefore, how to ensure the security of blockchain-based digital currency is a technical problem to be solved by those skilled in the art.

Contents of the invention

The purpose of the present invention is to provide a security method, system and terminal using blockchain-based digital currency, and improve the security of the blockchain digital currency wallet through a security chip and a trusted execution environment.

In order to solve the above technical problems, the present invention provides a security method using blockchain-based digital currency, the security method comprising:

The digital currency client sends a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns corresponding customer information to the digital currency client after the verification is passed;

The digital currency client sends a digital certificate application to the security chip through a trusted execution environment according to the customer information;

The security chip generates a key pair and a digital currency wallet address according to the customer information, and outputs the digital currency wallet address to the digital currency client through the trusted execution environment;

The digital currency client sends the digital currency wallet address to the block chain, so that the block chain obtains a digital certificate from the certification center according to the digital currency wallet address;

After the digital currency client receives the digital certificate sent by the blockchain, it sends a digital certificate installation request to the security chip through the trusted execution environment;

The security chip installs a digital certificate according to the digital certificate installation request.

Optionally, the security chip generates a key pair and a digital currency wallet address according to the customer information, including:

The security chip generates a private key according to the customer information, and uses the private key to generate a public key;

A hash algorithm is used to process the public key to obtain a public key hash, and a digital currency wallet address is generated according to the public key hash.

Optionally, after installing the digital certificate, also include:

The sender's digital currency client calculates the original text of the transaction data using a predetermined hash algorithm in the trusted execution environment to obtain summary information, and obtains the sender's private key from the security chip;

The sender's digital currency client uses the encryption algorithm to generate a digital signature with the summary information and the sender's private key under the trusted execution environment, and sends the digital signature and the original text of the transaction data to in the blockchain.

Optionally, after the receiver's digital currency client obtains the digital signature and the original text of the transaction data from the blockchain, it further includes:

The recipient's digital currency client calculates the original text of the transaction data using the predetermined hash algorithm in the trusted execution environment to obtain the first summary information;

The receiver's digital currency client uses a decryption algorithm to decrypt the digital signature according to the sender's public key in the trusted execution environment to obtain the second summary information;

A transaction is performed when the first summary information is consistent with the second summary information.

Optionally, when the sender's digital currency client or the receiver's digital currency client is offline, it also includes:

The sender's digital currency client sends a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification in the trusted execution environment;

The receiver's digital currency client returns confirmation information to the sender's digital currency client after receiving and verifying the transaction application in the trusted execution environment, and updates the transaction record;

The sender's digital currency client updates transaction records under the trusted execution environment;

The sender's digital currency client and the receiver's digital currency client synchronize the transaction records with the block chain when the network status meets the conditions, so that the block chain and the corresponding third-party server synchronize the transaction Record.

Optionally, the acquisition method of the digital currency client includes:

Pre-installing the executable program of the digital currency client in the security chip, or downloading the executable program of the digital currency client online and installing it.

The present invention also provides a security system using blockchain-based digital currency, including:

The digital currency client is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns the corresponding client to the digital currency client after the verification is passed. information; according to the customer information, send a digital certificate application to the security chip through a trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can be authenticated from the digital currency wallet address according to the The center obtains a digital certificate; after receiving the digital certificate sent by the block chain, sends a digital certificate installation request to the security chip through the trusted execution environment;

The security chip module is used to generate a key pair and a digital currency wallet address according to the customer information, and output the digital currency wallet address to the digital currency client through the trusted execution environment; according to the digital currency The certificate installation request installs a digital certificate;

The trusted execution environment module is used to provide a trusted execution environment.

Optionally, the digital currency client also includes:

The transaction sending unit is used to calculate the original text of the transaction data using a predetermined hash algorithm in the trusted execution environment to obtain summary information, and obtain the private key of the sender from the security chip; party’s private key, use an encryption algorithm to generate a digital signature, and send the digital signature and the original text of the transaction data to the block chain;

The transaction receiving unit is configured to use the predetermined hash algorithm to calculate the original text of the transaction data in the trusted execution environment to obtain the first summary information; according to the sender's public key, use the decryption algorithm to decrypt the digital signature Obtaining second summary information; performing a transaction when the first summary information is consistent with the second summary information.

Optionally, the digital currency client also includes:

An offline transaction sending unit, configured to send a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification under the trusted execution environment; After receiving and verifying the transaction application in the letter execution environment, receive the confirmation information returned by the receiver's digital currency client, and update the transaction record;

The offline transaction synchronization unit is used for synchronizing the transaction records with the block chain when the network state of the digital currency client meets the conditions, so that the block chain and the corresponding third-party server will synchronize the transaction records.

The present invention also provides a terminal, including:

The digital currency client processor is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns a corresponding certificate to the digital currency client after the verification is passed. customer information; according to the customer information, send a digital certificate application to the security chip through a trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can use the digital currency wallet address according to the Obtain a digital certificate from a certification center; after receiving the digital certificate sent by the blockchain, send a digital certificate installation request to the security chip through the trusted execution environment;

The security chip is used to generate a key pair and a digital currency wallet address according to the customer information, and output the digital currency wallet address to the digital currency client through the trusted execution environment; according to the digital certificate Install requests to install digital certificates;

A trusted execution environment processor, configured to provide the trusted execution environment.

The security method for using blockchain-based digital currency provided by the present invention, the security method includes: the digital currency client sends a request to apply for a digital certificate to the blockchain, so that the blockchain performs user verification according to the request. Identity and request verification and return corresponding customer information to the digital currency client after the verification is passed; the digital currency client sends a digital certificate application to the security chip through a trusted execution environment according to the customer information; the security The chip generates a key pair and a digital currency wallet address according to the customer information, and outputs the digital currency wallet address to the digital currency client through the trusted execution environment; the digital currency client sends the block The chain sends the digital currency wallet address, so that the block chain obtains a digital certificate from the certification center according to the digital currency wallet address; after the digital currency client receives the digital certificate sent by the block chain, it passes The trusted execution environment sends a digital certificate installation request to the security chip; the security chip installs a digital certificate according to the digital certificate installation request;

It can be seen that since the security chip has both hardware tamper-proof modification and software security encryption function, the trusted execution environment has a certain hardware protection capability; therefore, this security method improves the blockchain digital currency wallet through the security chip and trusted execution environment. security. The combination of software and trusted hardware platform provides complete security for digital currency wallets. The present invention also provides a security system and terminal using blockchain-based digital currency, which have the above beneficial effects and will not be repeated here.

Description of drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings on the premise of not paying creative efforts.

Fig. 1 is a flow chart of a security method using blockchain-based digital currency provided by an embodiment of the present invention;

Fig. 2 is a schematic diagram of the initialization process of the digital currency client provided by the embodiment of the present invention;

Fig. 3 is a schematic diagram of the mapping relationship between a private key and a digital currency wallet address provided by an embodiment of the present invention;

Fig. 4 is a schematic diagram of the process of using the digital currency client transaction provided by the embodiment of the present invention;

Fig. 5 is a schematic diagram of the offline use process of the digital currency client provided by the embodiment of the present invention;

Figure 6 is a schematic diagram of the overall use of the digital currency client provided by the embodiment of the present invention;

FIG. 7 is a structural block diagram of a security system using blockchain-based digital currency provided by an embodiment of the present invention;

FIG. 8 is a structural block diagram of a terminal provided by an embodiment of the present invention.

Detailed ways

The core of the present invention is to provide a security method, system and terminal using blockchain-based digital currency, and improve the security of the blockchain digital currency wallet through a security chip and a trusted execution environment.

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

The specific implementation of this embodiment includes three layers: the bottom layer is a security chip with both hardware tamper-proof modification and software security encryption (such as SE); the middle layer, the trusted execution environment (such as TEE) has certain Hardware protection capability, and compared with the lowest level of security units, it does not have hardware tamper-resistant modification, which is a relatively low-cost security architecture. The top layer is the open operating system layer, which only has software protection capabilities, and the lowest level of security protection. It is also the layer where the digital currency client is downloaded and installed. Based on this structure, this embodiment can improve the security of the blockchain digital currency wallet. Please refer to FIG. 1 for details. FIG. 1 is a flowchart of a security method using blockchain-based digital currency provided by an embodiment of the present invention; the security method may include:

S100, the digital currency client sends a request to apply for a digital certificate to the blockchain, so that the blockchain performs user identity and request verification according to the request, and returns corresponding customer information to the digital currency client after the verification is passed;

S110. The digital currency client sends a digital certificate application to the security chip through the trusted execution environment according to the customer information;

S120. The security chip generates a key pair and a digital currency wallet address according to the customer information, and outputs the digital currency wallet address to the digital currency client through a trusted execution environment;

S130, the digital currency client sends the digital currency wallet address to the blockchain, so that the blockchain obtains a digital certificate from the certification center according to the digital currency wallet address;

S140. After receiving the digital certificate sent by the blockchain, the digital currency client sends a digital certificate installation request to the security chip through the trusted execution environment;

S150. The security chip installs the digital certificate according to the digital certificate installation request.

Among them, the digital currency wallet here can be understood as a digital currency client, and users cannot do without the digital currency client when conducting bitcoin transactions, so when using digital currency, they must first download and install the digital currency client. This embodiment does not limit the specific way of downloading and installing the digital currency client, which can be adaptively selected according to different terminals, so as to improve the adaptability of the digital currency client. Preferably, the method of obtaining the digital currency client may include: obtaining and installing the executable program of the digital currency client preinstalled in the security chip, or downloading the executable program of the digital currency client online and installing it. That is, the digital wallet application can be pre-installed in the security chip (such as SE) or installed through online downloading.

Specifically, S100 to S150 of this embodiment can realize the digital currency wallet initialization process, and the initialization of the digital currency wallet is safer than the initialization of the digital currency client in the prior art, which is only completed at the top open operating system layer. . In this embodiment, the initialization process and the data interaction process in the terminal are all completed under the trusted execution environment. Moreover, the installation of digital certificates and the generation of key pairs related to the use of digital currency are all completed in a highly secure security chip. That is, during the initialization process of the entire digital currency wallet, the three layers each play their most important functions and jointly protect the digital currency client. In this way, external attacks can be fundamentally prevented, thereby improving the security of the blockchain digital currency wallet.

The above-mentioned process can be illustrated below by using Figure 2: in Figure 2, the security chip is SE, and its control process is implemented by the SE security service application, and the digital currency client in Figure 2 is located in the mobile terminal.

During initialization, the user first submits a request for digital certificate application to the blockchain through the digital currency client, and the blockchain commercial bank node performs the customer's identity authentication and request verification, and the SE security service application generates a key pair and outputs Digital currency wallet address (also called wallet address for short); the user transmits the digital wallet address to the commercial bank node through the digital currency client, and the commercial bank issues a digital certificate based on the wallet address. During this process, SE Security is responsible for the encryption Key generation and certificate installation.

Further in order to improve the security of the digital currency wallet address. In this embodiment, the digital currency wallet address is an irreversible mapping of the public key. That is, optionally, the security chip generates a key pair and a digital currency wallet address based on customer information may include:

The security chip generates a private key based on customer information, and uses the private key to generate a public key;

The hash algorithm is used to process the public key to obtain the public key hash, and the digital currency wallet address is generated according to the public key hash.

Specifically, please refer to Figure 3. The digital currency money address, that is, the wallet address, can be mapped to the public key hash, but the public key cannot be mapped to the public key, and the public key cannot be mapped to the private key. Such a setting can further protect the security of the private key. Thereby improving the security of digital currency.

Based on the above technical solution, the embodiment of the present invention provides a security method using blockchain-based digital currency. Since the security chip has both hardware tamper-proof modification and software security encryption function, the trusted execution environment has certain hardware protection. Capability; therefore, this security method improves the security of the blockchain digital currency wallet through a security chip and a trusted execution environment. The combination of software and trusted hardware platform provides complete security for digital currency wallets.

Based on the above-mentioned embodiments, after the digital certificate is successfully installed, that is, after the initialization of the digital currency client is completed, the process of using the digital currency wallet is the transaction process (for example, it may include how to generate a digital signature and verify the signature, etc.). include:

The sender's digital currency client calculates the original text of the transaction data using a predetermined hash algorithm in a trusted execution environment to obtain summary information, and obtains the sender's private key from the security chip;

The sender's digital currency client uses the encryption algorithm to generate a digital signature with the digest information and the sender's private key in a trusted execution environment, and sends the digital signature and the original transaction data to the blockchain.

After the receiver's digital currency client obtains the digital signature and the original transaction data from the blockchain, it also includes:

The receiver's digital currency client calculates the original text of the transaction data using a predetermined hash algorithm in a trusted execution environment to obtain the first summary information;

The receiver's digital currency client uses the decryption algorithm to decrypt the digital signature according to the sender's public key in a trusted execution environment to obtain the second summary information;

A transaction is performed when the first summary information matches the second summary information.

Specifically, it can be seen from the above that the data interaction in the transaction process is also carried out in a trusted execution environment, so that not only the digital currency wallet is protected during the initialization process of the digital currency client, but also the digital currency wallet is continuously protected during the transaction process. The currency wallet is protected, which can improve the security of digital currency and ensure the safety of users' property. And all the information about the key pair needs to be obtained through interaction with the security chip, thus fundamentally protecting the security of the digital currency. This embodiment does not limit the specific predetermined hash algorithm, as long as the sender and the receiver use the same hash algorithm. This embodiment also limits the specific content of the encryption algorithm and the decryption algorithm, as long as the encryption algorithm and the decryption algorithm are a pair of matching algorithms.

The above process can be illustrated in the following figure 4: the original text in Figure 4 is the original text of the transaction data, the summary is the summary information, and the Hash algorithm is the hash algorithm. The digital currency client in Figure 4 is located in the mobile terminal

Before the transaction data is transmitted, the sender calculates the original text according to the agreed Hash algorithm to obtain a summary, and uses its own private key (obtained from the security chip) to encrypt the summary to obtain a digital signature, and sends it to the receiver together with the original text, and the receiver uses The same Hash algorithm calculates the digest of the original text, and then compares it with the digest obtained by decrypting the number with the sender's public key.

Based on the above technical solution, the embodiment of the present invention provides a security method using a blockchain-based digital currency, which improves the security of the blockchain digital currency wallet through a security chip and a trusted execution environment, and the security of the necessary data during transactions Acquisition relies on a trusted execution environment and a security chip, so that the transaction process is also protected by a three-tier structure in real time, thereby improving the security of digital currency.

Based on any of the above embodiments, since the existing digital currency wallets can only conduct transactions online, this method will affect the transaction efficiency when there is a communication bottleneck. This embodiment can realize the offline transaction function that the existing digital currency wallet does not have, and meet the security and convenience requirements of digital currency data and transactions. In this embodiment, when the digital currency client of the sender or the digital currency client of the receiver is offline, the method may include:

The sender's digital currency client sends a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification in a trusted execution environment;

After receiving and verifying the transaction application in a trusted execution environment, the receiver's digital currency client returns confirmation information to the sender's digital currency client and updates the transaction record;

The sender's digital currency client updates the transaction records in a trusted execution environment;

The sender's digital currency client and the receiver's digital currency client synchronize transaction records to the blockchain when the network status meets the conditions, so that the blockchain and the corresponding third-party server synchronize the transaction records.

Wherein, when the network status satisfies the condition, it may be that the network status is good, or there is a safe network with a strong signal. This embodiment does not limit it. The detection of the network status here may be performed in real time or periodically. This embodiment does not limit it. Users can set according to their own needs, or manually detect the network status. The transaction application here may refer to a unique digital currency data string containing transaction information.

Specifically, in an offline state, transactions can be conducted between the sender and the receiver, and when the transaction is completed, the transaction records are updated on the corresponding digital currency clients of the two, that is, the details of the transaction are recorded. In order to allow the relevant third party to obtain the transaction record if the network status permits. To meet the management of transaction information by relevant third parties. For example, regulators supervise transaction information, banks, etc. verify transaction information and implement it in a timely manner. That is, this embodiment realizes the offline transaction of digital currency, so that the transaction of digital currency no longer depends on the network, and improves the convenience of users.

Please refer to FIG. 5 to illustrate the above offline transaction process of the digital currency wallet: the digital currency client in FIG. 5 is located in the mobile terminal.

During the transaction, the terminals of both parties are offline, that is, only the sender and receiver participate. The transaction sender initiates the transaction and performs identity authentication (which can be understood as the authentication process including transaction information), data verification and other operations. The receiver accepts and verifies the transaction request and returns confirmation information, and both parties update the transaction record file. Detect the network status, read the transaction record file from time to time when the network status is good, and synchronize the transaction with the commercial bank server through the blockchain, and update and maintain the local transaction record.

Further, in this embodiment, operations such as transaction inquiry can also be performed. Please refer to FIG. 6 for details. The overall usage process may include: installation and download of the application, initialization of the application, use of the application, and the like. The digital currency client performs key pair generation, encryption process, decryption process, signature verification, etc. in a trusted execution environment. Digital currency operations such as certificate applications, transactions, and inquiries can be performed between the blockchain and terminals, as well as third parties (such as commercial banks in Figure 6).

Based on the above technical solution, the embodiment of the present invention proposes a security method using a blockchain-based digital currency. By building an application software-TEE-SE three-layer technical architecture, the software and hardware platforms are combined to provide digital currency clients with complete security. And realize the offline transaction of digital currency. It enables users to conduct digital currency transactions more conveniently and safely.

The following is an introduction to the security system and terminal using blockchain-based digital currency provided by the embodiment of the present invention. The security system and terminal using blockchain-based digital currency described below are the same as those described above using blockchain-based The security methods of digital currencies can be referred to each other.

Please refer to Figure 7, Figure 7 is a structural block diagram of a security system using blockchain-based digital currency provided by an embodiment of the present invention; the security system may include:

The digital currency client 100 is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns corresponding customer information to the digital currency client after the verification is passed; according to the customer information , send a digital certificate application to the security chip through a trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can obtain a digital certificate from the certification center according to the digital currency wallet address; after receiving the digital certificate sent by the blockchain, Send a digital certificate installation request to the security chip through the trusted execution environment;

The security chip module 200 is used to generate a key pair and a digital currency wallet address according to customer information, and output the digital currency wallet address to the digital currency client through a trusted execution environment; install the digital certificate according to the digital certificate installation request;

The trusted execution environment module 300 is configured to provide a trusted execution environment.

Based on the above embodiments, the digital currency client 100 may also include:

The transaction sending unit is used to calculate the original text of the transaction data using a predetermined hash algorithm to obtain summary information in a trusted execution environment, and obtain the sender's private key from the security chip; generate the summary information and the sender's private key using an encryption algorithm Digital signature, and send the digital signature and the original transaction data to the blockchain;

The transaction receiving unit is used to calculate the original text of the transaction data using a predetermined hash algorithm in a trusted execution environment to obtain the first summary information; according to the sender's public key, use the decryption algorithm to decrypt the digital signature to obtain the second summary information; A transaction is performed when the first summary information is consistent with the second summary information.

Based on the above embodiments, the digital currency client 100 may also include:

The offline transaction sending unit is used to send a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification in a trusted execution environment; After verifying the transaction application, receive the confirmation message returned by the receiver's digital currency client, and update the transaction record;

The offline transaction synchronization unit is used for synchronizing transaction records with the block chain when the network status of the digital currency client meets the conditions, so that the block chain and the corresponding third-party server can synchronize transaction records.

Please refer to FIG. 8. FIG. 8 is a structural block diagram of a terminal provided by an embodiment of the present invention; the terminal may include:

The digital currency client processor 10 is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns corresponding customer information to the digital currency client after the verification is passed; Customer information, send a digital certificate application to the security chip through the trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can obtain a digital certificate from the certification center according to the digital currency wallet address; receive the digital certificate sent by the blockchain After that, send a digital certificate installation request to the security chip through the trusted execution environment;

The security chip 20 is used to generate a key pair and a digital currency wallet address according to customer information, and output the digital currency wallet address to the digital currency client through a trusted execution environment; install the digital certificate according to the digital certificate installation request;

Trusted execution environment processor 30, configured to provide a trusted execution environment.

Specifically, this embodiment does not limit the terminal. The terminal here may be a mobile terminal.

Each embodiment in the description is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

The security method, system and terminal using blockchain-based digital currency provided by the present invention have been introduced in detail above. In this paper, specific examples are used to illustrate the principle and implementation of the present invention, and the descriptions of the above embodiments are only used to help understand the method and core idea of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, some improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims (10)

1. A safe method using blockchain-based digital currency, characterized in that the method comprises: The digital currency client sends a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns corresponding customer information to the digital currency client after the verification is passed; The digital currency client sends a digital certificate application to the security chip through a trusted execution environment according to the customer information; The security chip generates a key pair and a digital currency wallet address according to the customer information, and outputs the digital currency wallet address to the digital currency client through the trusted execution environment; The digital currency client sends the digital currency wallet address to the block chain, so that the block chain obtains a digital certificate from the certification center according to the digital currency wallet address; After the digital currency client receives the digital certificate sent by the blockchain, it sends a digital certificate installation request to the security chip through the trusted execution environment; The security chip installs a digital certificate according to the digital certificate installation request. 2. The security method according to claim 1, wherein the security chip generates a key pair and a digital currency wallet address according to the customer information, including: The security chip generates a private key according to the customer information, and uses the private key to generate a public key; A hash algorithm is used to process the public key to obtain a public key hash, and a digital currency wallet address is generated according to the public key hash. 3. The security method according to claim 2, characterized in that, after installing the digital certificate, further comprising: The sender's digital currency client calculates the original text of the transaction data using a predetermined hash algorithm in the trusted execution environment to obtain summary information, and obtains the sender's private key from the security chip; The sender's digital currency client uses the encryption algorithm to generate a digital signature with the summary information and the sender's private key under the trusted execution environment, and sends the digital signature and the original text of the transaction data to in the blockchain. 4. The security method according to claim 3, characterized in that, after the recipient's digital currency client obtains the digital signature and the original text of the transaction data from the blockchain, it further includes: The recipient's digital currency client calculates the original text of the transaction data using the predetermined hash algorithm in the trusted execution environment to obtain the first summary information; The receiver's digital currency client uses a decryption algorithm to decrypt the digital signature according to the sender's public key in the trusted execution environment to obtain the second summary information; A transaction is performed when the first summary information is consistent with the second summary information. 5. The security method according to any one of claims 1-4, characterized in that, when the sender's digital currency client or the receiver's digital currency client is offline, further comprising: The sender's digital currency client sends a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification in the trusted execution environment; The receiver's digital currency client returns confirmation information to the sender's digital currency client after receiving and verifying the transaction application in the trusted execution environment, and updates the transaction record; The sender's digital currency client updates transaction records under the trusted execution environment; The sender's digital currency client and the receiver's digital currency client synchronize the transaction records with the block chain when the network status meets the conditions, so that the block chain and the corresponding third-party server synchronize the transaction Record. 6. The security method according to claim 5, wherein the acquisition method of the digital currency client includes: Pre-installing the executable program of the digital currency client in the security chip, or downloading the executable program of the digital currency client online and installing it. 7. A security system using blockchain-based digital currency, characterized in that it includes: The digital currency client is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns the corresponding client to the digital currency client after the verification is passed. information; according to the customer information, send a digital certificate application to the security chip through a trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can be authenticated from the digital currency wallet address according to the The center obtains a digital certificate; after receiving the digital certificate sent by the block chain, sends a digital certificate installation request to the security chip through the trusted execution environment; The security chip module is used to generate a key pair and a digital currency wallet address according to the customer information, and output the digital currency wallet address to the digital currency client through the trusted execution environment; according to the digital currency The certificate installation request installs a digital certificate; The trusted execution environment module is used to provide a trusted execution environment. 8. The security system according to claim 7, wherein the digital currency client further comprises: The transaction sending unit is used to calculate the original text of the transaction data using a predetermined hash algorithm in the trusted execution environment to obtain summary information, and obtain the private key of the sender from the security chip; party’s private key, use an encryption algorithm to generate a digital signature, and send the digital signature and the original text of the transaction data to the block chain; The transaction receiving unit is configured to use the predetermined hash algorithm to calculate the original text of the transaction data in the trusted execution environment to obtain the first summary information; according to the sender's public key, use the decryption algorithm to decrypt the digital signature Obtaining second summary information; performing a transaction when the first summary information is consistent with the second summary information. 9. The security system according to claim 7 or 8, wherein the digital currency client further comprises: An offline transaction sending unit, configured to send a transaction application to the receiver's digital currency client after performing transaction data information authentication and data verification under the trusted execution environment; After receiving and verifying the transaction application in the letter execution environment, receive the confirmation information returned by the receiver's digital currency client, and update the transaction record; The offline transaction synchronization unit is used for synchronizing the transaction records with the block chain when the network state of the digital currency client meets the conditions, so that the block chain and the corresponding third-party server will synchronize the transaction records. 10. A terminal, characterized in that, comprising: The digital currency client processor is used to send a request to apply for a digital certificate to the block chain, so that the block chain performs user identity and request verification according to the request and returns a corresponding certificate to the digital currency client after the verification is passed. customer information; according to the customer information, send a digital certificate application to the security chip through the trusted execution environment; send the digital currency wallet address to the blockchain, so that the blockchain can use the digital currency wallet address according to the Obtain a digital certificate from a certification center; after receiving the digital certificate sent by the blockchain, send a digital certificate installation request to the security chip through the trusted execution environment; The security chip is used to generate a key pair and a digital currency wallet address according to the customer information, and output the digital currency wallet address to the digital currency client through the trusted execution environment; according to the digital certificate Install requests to install digital certificates; A trusted execution environment processor, configured to provide the trusted execution environment.