CN107369018A - The binding method and binding system of digital cash wallet - Google Patents

Abstract

The invention provides a digital currency wallet binding method and a binding system, which can perform digital currency wallet binding operations through bank wallet access authorization, and realize access to bank wallets through application wallets. The binding method includes: the account bank user accessing the system receives a wallet binding request provided by the user; generating a bank wallet query request according to the wallet binding request and then sending it to the account bank application system; the account bank application system sends the bank wallet query request to the account Bank digital currency system, the account bank digital currency system queries according to the real-name authentication information, and then returns the bank wallet information to the account bank application system; the account bank application system returns the bank wallet information to the account bank user access system, and the account bank user access system Return to the user, and then send the binding confirmation information sent by the user to the account bank wallet access authentication system; the account bank wallet access authentication system performs the binding operation of the application wallet and the bank wallet.

Description

Binding method and binding system of digital currency wallet

technical field

The present invention relates to the field of computer technology, in particular to a digital currency wallet binding method and binding system.

Background technique

Any kind of currency needs to be carried, and digital currency can be embodied or carried in a digital currency wallet. Since my country's currency issuance follows the dual system from the central bank to commercial banks, and the current social and economic activities are mainly carried out based on the commercial bank account system, the bank account system can be used to make full use of the bank's mature bank account system in the design of the digital currency wallet system. IT (Information Technology, information technology) infrastructure, applications and service systems can greatly reduce the threshold for the promotion of digital currency, improve the convenience and flexibility of use, and help the largest customer base to use digital currency.

The core and basic functions of digital currency wallets provided by commercial banks are based on bank wallets, which can provide application wallets for applications, and application wallets can call bank wallets to realize digital currency transfer and other functions. How to carry out the binding operation of the bank wallet and the application wallet, and how to access the bank wallet through the application wallet is a problem that needs to be solved urgently.

Contents of the invention

In view of this, the present invention provides a digital currency wallet binding method and binding system, which can perform the binding operation of the bank wallet and the application wallet through the bank wallet access authorization, and realize the access to the bank wallet through the application wallet.

To achieve the above object, according to one aspect of the present invention, a method for binding a digital currency wallet is provided.

A digital currency wallet binding method, comprising: the account bank user access system receives a wallet binding request provided by the user, the wallet binding request includes the user's real-name authentication information and application wallet identification; according to the wallet binding A bank wallet query request is generated according to a given request, and then sent to the account bank application system, the bank wallet query request includes the real-name authentication information; the account bank application system sends the bank wallet query request to the account bank digital currency system, The digital currency system of the account bank performs an inquiry according to the real-name authentication information, and then returns the inquired bank wallet information to the account bank application system, the bank wallet information includes the bank wallet identification; the account bank application The system returns the bank wallet information to the account bank user access system, and the account bank user access system returns the bank wallet information to the user, and then sends the binding confirmation information sent by the user to The account bank wallet access authentication system, the binding confirmation information includes the application wallet identifier and the bank wallet identifier corresponding to the binding operation; the account bank wallet access authentication system performs the binding of the application wallet and the The above-mentioned binding operation of the bank wallet.

Optionally, the wallet binding request also includes: authentication information of the application wallet system; and, before the step of generating a bank wallet query request according to the wallet binding request, the account bank user access system further includes: the The account bank user access system sends a client authentication request to the account bank client authentication system, and the client authentication request includes the authentication information; the account bank client authentication system performs a check on the application wallet system according to the authentication information. authentication, and then send the authentication result to the account bank user to access the system.

Optionally, after the account bank customer authentication system sends the authentication result to the account bank user access system, the account bank user access system generates a bank wallet query request according to the wallet binding request Before the step, it also includes: the account bank user access system sends an authentication element acquisition request to the user according to the real-name authentication information, and sends the user authentication request to the user after receiving the wallet authentication element sent by the user. Send to the account line wallet access authentication system, the user authentication request includes the wallet authentication element; the account line wallet access authentication system uses the wallet access authentication method to authenticate the user according to the wallet authentication element, Then the result of passing the authentication is sent to the account bank user to access the system.

Optionally, before the step of the account bank user access system sending the binding confirmation information sent by the user to the account bank wallet access authentication system, it also includes: the account bank user access system utilizes the user's application The wallet authentication certificate verifies the digital signature of the binding confirmation message sent by the user.

According to another aspect of the present invention, a digital currency wallet binding system is provided.

A binding system for a digital currency wallet, comprising: an account bank user access system, an account bank application system, an account bank digital currency system, and an account bank wallet access authentication system, wherein the account bank user access system is used to receive user provided wallet binding request, the wallet binding request includes the real-name authentication information of the user and the application wallet identification; then generate a bank wallet query request according to the wallet binding request and then send it to the account bank application system, the The bank wallet query request includes the real-name authentication information; and the bank wallet information returned by the account line application system is returned to the user, and the bank wallet information includes the bank wallet identification; finally, the binding confirmation sent by the user The information is sent to the account bank wallet access authentication system, and the binding confirmation information includes the application wallet ID and bank wallet ID corresponding to the binding operation; the account bank application system is used to send the bank wallet query request to the account bank number currency system, and return the bank wallet information returned by the account bank digital currency system to the account bank user access system; the account bank digital currency system is used to query the user's bank wallet according to the real-name authentication information information, and then return the queried bank wallet information to the account bank application system; the account bank wallet access authentication system is used to execute the connection between the application wallet and the bank wallet according to the binding confirmation information. bind operation.

Optionally, the wallet binding request also includes: authentication information of the application wallet system; the system also includes an account bank customer authentication system, and the account bank user access system generates a bank account according to the wallet binding request. Before the wallet query request, the account bank user access system is also used for: sending the client authentication request to the account bank client authentication system, the client authentication request including the authentication information; the account bank client authentication system is also used for: According to the authentication information, the application wallet system is authenticated, and then the authentication result is sent to the account bank user access system.

Optionally, after the account bank client authentication system sends the authentication result to the account bank user access system, and before the account bank user access system generates a bank wallet query request according to the wallet binding request, the The account bank user access system is also used to: send an authentication element acquisition request to the user according to the real-name authentication information, and send the user authentication request to the user after receiving the wallet authentication element sent by the user. The account line wallet access authentication system, the user authentication request includes the wallet authentication element; the account line wallet access authentication system is also used for: according to the wallet authentication element, use the wallet access authentication method to authenticate the user , and then send the result of passing the authentication to the account bank user to access the system.

Optionally, the account bank user access system is further configured to: before the account bank user access system sends the binding confirmation information sent by the user to the account bank wallet access authentication system, use the user's application The wallet authentication certificate verifies the digital signature of the binding confirmation message sent by the user.

According to yet another aspect of the present invention, a computer-readable storage medium is provided.

A computer-readable storage medium, the computer-readable storage medium stores computer instructions, and the computer instructions can be executed by a computer or computer system, so that the computer or computer system can execute the digital currency wallet provided by the present invention The binding method.

The above invention has the following advantages or beneficial effects: the bank wallet and the application wallet are bound through the bank wallet access authorization, and the bank wallet is accessed through the application wallet. After the binding is successful, the user can access the bound bank wallet by sending an instruction signed with the application wallet authentication certificate, thus realizing the management of digital currency.

The further effects of the above-mentioned non-conventional alternatives will be described below in conjunction with specific embodiments.

Description of drawings

The accompanying drawings are used to better understand the present invention, and do not constitute improper limitations to the present invention. in:

Fig. 1 is a digital currency management system architecture diagram of the present invention;

Figure 2 is a schematic diagram of trading channels for different types of currencies;

Fig. 3 is the overall architecture diagram of the digital currency management system of the present invention;

Figure 4 is a schematic diagram of the realization of the binding of bank accounts and digital currency wallets;

Fig. 5 is a schematic diagram of main steps of a binding method of a digital currency wallet according to an embodiment of the present invention;

Fig. 6 is a schematic diagram of the process of binding a digital currency wallet according to an embodiment of the present invention;

Fig. 7 is a schematic diagram of main modules of a digital currency wallet binding system according to an embodiment of the present invention.

detailed description

Exemplary embodiments of the present invention are described below in conjunction with the accompanying drawings, which include various details of the embodiments of the present invention to facilitate understanding, and they should be regarded as exemplary only. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.

In order to solve the problem of system management of digital currency, the present invention proposes a technical solution for digital currency management through a digital currency wallet (deposit box).

Taking my country as an example, although the pure digital currency system may not be associated with bank accounts, since my country's currency issuance follows the dual system from the central bank to commercial banks, and the current social and economic activities are mainly carried out based on the commercial bank account system, if you can use The bank account system, making full use of the bank's existing mature IT (Information Technology, information technology) infrastructure and application and service system, will greatly reduce the promotion threshold of digital currency, improve its convenience and flexibility, and help the broadest Customer groups use digital currency. Based on the integration of digital currency into existing applications, more abundant and diversified scenarios will be developed, and the service capabilities and competitiveness of digital currency will be further enhanced.

With the help of the account system, the most direct way is to expand the scope of access to the central bank's balance sheet. Indeed, central bank claims held by commercial banks and some other financial institutions in the form of central bank deposits have been digitized. But should central banks provide such services to a wider range of counterparties? Can the non-financial sector, including households, hold accounts with the central bank? These issues have aroused extensive discussion. In order to avoid the transfer of deposits from commercial banks to the central bank, resulting in the narrowing of the entire banking system and becoming a "narrow bank", it is necessary to facilitate the expansion of digital currency wallets on the basis of the existing bank account system. Accordingly, the present invention proposes an overall solution based on "commercial bank traditional account system + digital currency wallet attribute".

In order to buffer the impact of establishing a separate digital currency system on the existing banking system, and to protect the existing system investment of commercial banks to the greatest extent, in actual implementation, digital currency can be introduced on top of the traditional account system of commercial banks. The "wallet" attribute enables the management of both existing electronic currency and digital currency under one account. Electronic currency and digital currency have commonalities in management, such as account use, identity authentication, fund transfer, etc., but there are also differences. Digital currency management should comply with the design standards for digital wallets formulated by digital currency issuers. Similar to the concept of a safe deposit box, the bank will manage the safe deposit box according to the agreed authority with the customer (for example, there must be two keys from the customer and the bank to open it, etc.) ), retaining all the properties of digital currency as a cryptocurrency, so that applications can be flexibly customized using these properties.

Fig. 1 is a diagram of the architecture of the digital currency management system of the present invention. As shown in Figure 1, the digital currency management system of the present invention follows the approach of the dual system of currency issuance. According to the division of currency levels in my country, digital currency belongs to the M0 category (that is, cash in circulation), and is the liability of the banknote issuing bank. , outside the balance sheet of the account line (the bank where the customer has a bank account). Since the account bank is still substantially managing customers and accounts, it will not cause commercial banks to be channelized or marginalized. Unlike previous cash deposits, digital currency does not rely entirely on bank accounts, and can be directly confirmed by the issuing bank, using the client's digital currency wallet to achieve peer-to-peer cash transactions.

In the present invention, the issuance of digital currency can be carried out by combining the central bank's independent issuance and authorized issuance.

The note-issuing bank can be a currency-issuing institution designated by the currency-issuing place, or a note-issuing institution authorized by the central bank (such as the Hong Kong dollar issuance model). Which distribution method to choose can be determined according to the actual situation. In an environment where the central bank centrally and uniformly issues digital currency, the digital currency in the bank library of the commercial bank belongs to the asset of the commercial bank and the liability of the central bank; the digital currency in the customer account of the commercial bank belongs to the asset of the customer and the liability of the central bank. Point-to-point digital currency transactions between customers are confirmed and managed by the central bank’s digital currency issuance system, and the central bank assumes transaction responsibilities; the transaction of electronic currency is consistent with the existing process, through the central bank’s inter-bank payment system and the commercial bank’s core business system. Finish.

In the environment where the central bank authorizes the issuance of legal digital currency, the digital currency in the bank library of the commercial bank belongs to the asset of the commercial bank and the liability of the note-issuing bank; the digital currency in the customer account of the commercial bank belongs to the asset of the customer and the banknote-issuing bank. Liabilities (note-issuing bank is not necessarily the account bank).

Figure 2 is a schematic diagram of transaction channels for different types of currencies. As shown in Figure 2, the point-to-point transaction of digital currency between customers is confirmed and managed by the legal digital currency note issuing bank (whoever issues it manages it), and the central bank undertakes the supervision responsibility; the transaction of electronic currency is consistent with the existing process, It is completed through the inter-bank payment system of the central bank and the core business system of commercial banks. It should be noted that the interconnection between the note-issuing bank and the central bank and between the note-issuing banks will be realized through the central bank.

The design scheme of the digital currency wallet is introduced below.

Any currency needs to have a specific form and carrying method. The specific form of the digital currency is an encrypted string, and the encrypted string includes the amount of the digital currency, the identifier of the issuer and the identifier of the owner. Digital currency can be embodied or carried in digital wallets, and digital wallets can be applied to mobile terminals, computer PC terminals or card bases (bank cards used for payment).

From a general point of view, digital currency can be stored through a digital currency safe deposit box. The digital currency wallet (referred to as "digital wallet") is a digital currency safe deposit box for enterprises and individuals. The digital currency bank vault (referred to as "bank vault") is the digital currency safe deposit box of commercial banks.

From the perspective of application, digital currency wallets can be divided into digital currency application wallets (referred to as "application wallets") and digital currency bank wallets (referred to as "bank wallets" or "payment wallets"). Application wallets provide digital currency application services for enterprises and individuals by non-bank entities, including various financial services, e-commerce and other Internet application scenario services. Bank wallets are digital currency-based custody, exchange, and payment services provided by banks for businesses and individuals. The bank wallet provides an interface for the application wallet, and the application wallet can be bound to the bank wallet after being authorized by the user, so that the bank wallet interface can be called through the application wallet to access the basic functions of the bank wallet.

A digital currency wallet based on bank account expansion is a bank wallet. The most basic function of the bank wallet is to store the digital currency string of the wallet user as the owner. Users can query the available amount, quantity, and string details of digital currency through the bank wallet. The bank wallet extended through the bank account supports users to access the bank wallet through bank account authentication without requiring separate authentication again, providing bank users with a function similar to single sign-on. Bank wallets can also provide users with access portals, such as mobile apps or web services.

The bank wallet is structurally divided into three layers, from top to bottom: interface layer, application layer and data structure layer.

1. The interface layer is mainly to provide access for users, which can be divided into parallel user display layer and API access layer;

2. The application layer mainly provides wallet application services. In addition to basic functions such as activation, binding, cancellation, query, exchange, and payment, it also includes services such as security control and extended applications;

3. The data structure layer is the core part of the bottom layer of the bank wallet, which can be further subdivided into three layers:

1) Application data layer: mainly includes security keys, binding bank account information, and some public parameters, time, counters, etc.;

2) Basic layer: including the basic attributes of the wallet, such as wallet ID, customer name, customer number, opening date, opening organization, available amount, digital currency list index, smart contract index, status information, etc. The digital currency list includes a list of valid digital currency strings stored in bank wallets and corresponding information such as amount and status. The smart contract index includes a set of smart contract scripts related to bank wallets;

3) Detailed layer: It records the detailed information of the bank wallet used for transactions, including transaction serial number, transaction date, transaction initiator, transferee, original digital currency string, transferee, new digital currency string, amount, Transaction channels, timestamps, status, etc.

In the present invention, in terms of the specific implementation means of the digital currency wallet, the commercial bank's customer-centered thinking can be continued, and the digital currency wallet identification field can be added to the basic account of the bank. The wallet functions as a safe deposit box and does not participate in day-end withdrawal and other services, minimizing the impact on the existing core business system of the bank. The confirmation of digital currency depends on the issuing bank. The combination of traditional accounts and digital currency can greatly enhance the bank's KYC (Know your customer, fully understand your customer, strengthen the review of account holders, and is used for anti-money laundering to prevent corruption. system basis) and AML (anti-money laundering, anti-money laundering) capabilities.

In terms of wallet design, all digital currency wallets must comply with the specifications provided by the central bank. The digital currency wallet on the bank side is relatively light, and only provides security control and necessary attributes related to the account layer, focusing on the management of digital currency; the client wallet provided by the application service provider is relatively heavy, and its functions will be extended to the display layer and application layer. On the client side, the application of smart contracts can be fully displayed, which is also one of the core competitiveness of application service providers.

The following takes the special subsidy payment process as an example to give an exemplary introduction to the application scenarios of digital currency wallets.

A certain ministry issues special subsidy funds, which are distributed level by level to the enterprises or individuals who receive the subsidy funds. If it is necessary to track the actual status of subsidy distribution, it is difficult to achieve it under the traditional model, and it is often necessary to summarize and submit it level by level. The information flow and capital flow cannot be completely matched. During the implementation, there are phenomena such as insufficient implementation in various places, and allocation of expenditures. . Relying on the trackable characteristics of digital currency and assisting certain smart contract rights management, ministries and commissions will be able to directly grasp the distribution of subsidies at all levels without relying on other business participants, avoiding the risk of subsidy misappropriation by lower-level institutions, and realizing earmarked funds.

If the digital currency wallet attribute is not implanted in the bank account system, it is inevitable that institutions at all levels and beneficiaries of subsidies will open and use digital wallets. Not only the choice of the physical carrier of the digital wallet needs to be considered, but also many participants are involved. The central bank will directly Facing end users, promotion is difficult. Based on the commercial bank account system, the application part can be transformed and solved in the background of the commercial bank. For end users at all levels, using existing accounts, the operation is consistent with previous daily habits, and the service can be completed through existing channels such as bank counters, online banking, and mobile banking.

It can be seen from this that by adding digital currency attributes to the commercial bank account system, the legal digital currency can not only integrate into the "central bank-commercial bank" dual system and reuse the existing mature financial infrastructure, but more importantly The most remarkable thing is that this approach, because of the special consideration of the issue of "settling down" digital currency in the commercial banking system, can make it independent and can be used in layers. The note-issuing bank only needs to be responsible for the digital currency itself, and the account Banks undertake the actual business, and application development service providers implement specific implementations. Each performs its duties and has clear boundaries. If it is supplemented by other means (such as a discretionary charge for storage fees, which is essentially equivalent to negative interest rates), it may reduce the occurrence of narrow-sense banks. possibility.

Accordingly, the present invention proposes a wallet-based digital currency management system.

Fig. 3 is an overall architecture diagram of the digital currency management system of the present invention. As shown in Figure 3, where:

1. Users include individual users and enterprise users;

2. The entire digital currency management system includes: the banknote issuing bank digital currency system and the account bank system. The account bank system includes: the account bank user access system is used to provide user front-end access (Web, or APP) or application service provider API access; the account bank application system is used to provide account and wallet service functions; the account bank account core system is used to Handle user bank account bookkeeping, transactions, etc.; the account bank digital currency system manages the account bank bank library, user wallets, and is responsible for issuing CA (Certification Authority) certificates for user wallet openings;

3. The system that directly faces users is the account bank user access system, and the digital currency system of the note-issuing bank does not directly face users;

4. Account behavior The user provides two authentication channels for accessing the digital currency wallet:

1) One is the default channel, which is also the main channel, which is to authenticate through the bank account CA system of the account bank (through this method of authentication, it is equivalent to the user logging in to the bank account's CA to access the wallet function, which is a kind of account CA Authentication Extension Access Mode);

2) The other is to authenticate through the account bank wallet CA system (through this method of authentication, the wallet can have an independent authentication entrance, the wallet function access is separated from the account function access, and the wallet provides an independent API interface for user applications. service provision support);

5. The same wallet access operation can also have two different ways as mentioned above;

6. In the two methods, the user request processing paths are also slightly different. After being authenticated by the bank account CA system, the account bank application system can access both the account core system and the digital currency system. Through the wallet CA system authentication, the account bank application system can only access the digital currency system (it can also call the account core system to enter the account when exchanging deposits with digital currency);

7. The digital currency system of the account bank calls the digital currency system of the note-issuing bank to complete the underlying functions of the final digital currency, such as: wallet opening, cancellation, digital currency transfer, etc.;

8. The digital currency wallet opened by the account bank corresponds to the bank account of the account bank, and the logic of the corresponding relationship is determined by the business rules. There are many ways to realize the corresponding relationship. It is a design of the corresponding relationship that the bank account saves the wallet ID and then can be mapped to the wallet.

(2) Binding relationship between bank account and digital currency wallet

Accounts opened through traditional bank counters that meet all the strict requirements of the real-name system are set as full-function first-class accounts. Depositors can handle deposits, purchase financial products such as investment and wealth management products, withdraw cash, transfer funds, consume and pay fees through the first-class account. A type of bank account can be bound to a wallet. This binding is achieved by storing the wallet identification ID in a class of accounts, while also storing the associated bank account ID in the wallet. As shown in Figure 4, it is a schematic diagram of the binding realization of the bank account and the digital currency wallet. Add a column of "wallet ID" to the account attribute of the bank account, and add a column of "bank account ID" to the wallet attribute of the digital currency wallet, so as to realize the binding of the bank account and the digital currency wallet.

After the bank account is bound to the wallet, the wallet can be accessed through the CA authentication of the account, but the account cannot be accessed through the wallet CA authentication; moreover, the digital currency exchange in the wallet can be carried out through the bound bank account.

In order to manage the digital currency, the user needs to apply to the account bank to open the account bank digital currency wallet. The account bank digital currency wallet (also called bank wallet) opened by the user is authenticated by the bank account CA system of the account bank, and is opened based on the existing basic bank account or a type of account. Bank wallets have the same strong real-name authentication as basic accounts or first-class accounts.

For digital currency wallets opened through bank account authentication, the bank account is bound to the wallet by default, and the user specifies the binding relationship during the opening process. After successful opening, the bank account ID will be associated with the digital currency wallet ID to achieve binding. It can be seen from this that the digital currency wallet is the same as the bank's basic account or a type of account. Each person has only one bank wallet in the same account line, and it is bound to the basic account.

In order to better improve the functions of the digital currency wallet, the present invention proposes a method for binding the digital currency wallet. The binding operation is performed through the access authorization of the digital currency wallet, and the bank wallet can be accessed through the application wallet. After the binding is successful, the user can access the bound bank wallet by sending an instruction signed with the application wallet CA certificate. In the present invention, the user's bank wallet is independently accessible. Here, independent access means that when a user opens a digital currency bank wallet, the account bank distributes the private key of the authentication certificate of the bank wallet to the user, and the user can directly use the private key of the bank wallet to access the digital currency wallet without going through Bank account for authentication and authorization. Wherein, the private key of the authentication certificate of the bank wallet may exist, for example, in the form of a medium with a private key assigned to the user, or stored on a certain chip card of the user's mobile phone. It should be known that when using the bank wallet authentication method to access the bank wallet, since the authentication certificate is only used to access the bank wallet, it cannot access other content in the user's bank account, such as financial products purchased by the user, fixed deposits, etc. information.

Fig. 5 is a schematic diagram of main steps of a digital currency wallet binding method according to an embodiment of the present invention. As shown in FIG. 5 , the digital currency wallet binding method of the present invention mainly includes the following steps S501 to S504.

Step S501: The account bank user access system receives the wallet binding request provided by the user. The wallet binding request includes the user's real-name authentication information and application wallet identification; generates a bank wallet query request according to the wallet binding request, and then sends it to the account bank application system , the bank wallet query request includes real-name authentication information.

The user initiates a wallet binding request through the service provider's application wallet system. The application wallet system is a front-end application system that provides users with digital currency payment tools, which can be in the form of mobile APP or Web application. When the user initiates a wallet binding request in the application wallet system, he needs to enter the real-name authentication information and the information of the application wallet to be bound. In addition, he also needs to provide the account line information for receiving the request. Among them, the real-name authentication information is the personal name, ID number, mobile phone number and other information that the user needs to provide in the process of binding the wallet; the application wallet information to be bound is, for example, the application wallet identification and the application wallet authentication certificate. The application wallet identifier is, for example, the name of the application wallet or the character number of the application wallet. The account line information is the account line information corresponding to the wallet after the user opens it, such as the name of the bank.

After receiving the real-name authentication information provided by the user, the application wallet system generates a wallet binding request, and sends the wallet binding request to the corresponding account bank. The account bank user access system provides service providers with an API interface for data interaction with the application wallet system. The wallet binding request generated by the application wallet system will include the user's real-name authentication information and the identification of the application wallet to be bound by the user. Wherein, the application wallet identifier is, for example, the name of the application wallet, the number assigned to it by the service provider of the application wallet, and the like. The account bank can obtain the application wallet information to be bound according to the application wallet identifier contained in the wallet binding request, and can obtain the bank wallet information to be bound according to the user's real-name authentication information and account bank information. Since the user's bank wallet has a strong real name, and each user's bank wallet in the account line is bound to the bank's basic account or a type of bank account, the user's bank wallet can be found correspondingly according to the user's real-name authentication information information.

In addition, according to the technical solution of the present invention, the wallet binding request may also include some other information, such as: the authentication information of the application wallet system, the account line information corresponding to the bank wallet, and the application wallet authentication certificate. And the security of the operation request can also include the digital signature of the application wallet system and the user's digital signature.

Among them, when the user applies to the service provider to open the application wallet, he will get an application wallet authentication certificate. When the user accesses the application wallet, he will use the private key of the application wallet authentication certificate to sign to confirm his identity. When the user initiates a wallet binding request through the service provider's application wallet system, it will also sign with the private key of the application wallet authentication certificate, and the account bank extracts the public key of the application wallet authentication certificate from the received wallet binding request, thereby Requests sent through the service provider's application wallet system can be authenticated. For example: the user access system of the account bank uses the extracted public key to verify the user's digital signature to verify that the operation initiated by the holder of the private key of the application wallet certificate.

The authentication information of the application wallet system is used to enable the account bank to determine that the other party's behavior subject is a service provider based on the authentication information. The authentication information of the application wallet system is the information that needs to be provided when the service provider and the account bank are connected to the system for authentication according to the authentication method agreed by the two parties. Generally, the service provider encrypts the application wallet ID with the digital certificate key agreed by both parties.

After the account bank user's access system receives the wallet binding request, in order to determine the data source and the security of the operation request, the service provider's application wallet system that sends the request can be authenticated according to the authentication information of the application wallet system to determine the service provider's application wallet system. The merchant is an authenticated client. When the application wallet system is authenticated by the account bank customer authentication system, the public key of the application wallet authentication certificate can be used to calculate the digital certificate signature result of the service provider's application wallet system, and then compare whether the operation result is consistent with the signature content. When the comparison is consistent, the authentication is passed, and then the result of the authentication is sent to the account bank user to access the system; otherwise, the authentication fails, and an error message will be returned to prompt the user and the service provider to apply the wallet system.

After the authentication of the service provider's application wallet system is passed, and the account bank customer authentication system sends the authentication result to the account bank user access system, the account bank user access system can also authenticate the user who initiates the wallet binding request to verify Whether it is an operation authorized by the user himself or the user, in order to prevent the risk of the service provider. If the user's own authentication is not passed, the user and the account bank must agree that the user entrusts the service provider to complete it, and the user has no objection. If there is no agreement, the user needs to be authenticated.

When authenticating the user, the account bank user can access the system to send the authentication element acquisition request to the user according to the real-name authentication information, and send the user authentication request to the account bank wallet after receiving the wallet authentication element sent by the user. In the access authentication system, the user authentication request includes wallet authentication elements; the account bank wallet access authentication system uses the wallet access authentication method to authenticate the user according to the wallet authentication elements, and then sends the authentication result to the account bank user access system. Among them, the wallet authentication element is, for example, the account number and password of the user's bank wallet, and the password can be a static password, a dynamic password, an electronic password, a digital certificate or a fingerprint, etc., and can be entered through a USB shield or manually. When the user submits the wallet authentication elements, he may input through the interface of the account bank, or in the form of a SMS verification code on a specific page provided by the account bank. When the account bank wallet access authentication system passes the authentication of the wallet authentication elements, the authentication result is sent to the account bank user access system, and the account bank can query the user's bank wallet information; otherwise, an error message will be sent if the authentication fails To prompt users and service providers to apply the wallet system.

After the account bank user access system receives the wallet binding request provided by the user, and authenticates the service provider's application wallet system and the user respectively and passes the authentication, it will generate a bank wallet query request and send it to the account bank application system for use The account bank application system can search the user's bank wallet information according to the user's real-name authentication information included in the bank wallet query request.

Step S502: The account bank application system sends the bank wallet query request to the account bank digital currency system, and the account bank digital currency system performs the query according to the real-name authentication information, and then returns the queried bank wallet information to the account bank application system, and the bank wallet information Includes bank wallet logo.

According to the bank's system architecture and functional division described above, for the security of digital currency, it is necessary to query relevant bank wallet information through the digital currency system. Therefore, after the account bank application system receives the bank wallet query request from the account bank user access system, it will send the bank wallet query request to the account bank digital currency system to query the user's bank wallet information.

The account bank digital currency system can query the user's bank wallet information according to the user's real-name authentication information in the bank wallet query request. Since the bank wallet identifier is a meaningless string of characters, it is necessary to access the account line to query the bank wallet information after the user's personal information is authenticated, and then the user can finally confirm the bank wallet corresponding to the binding relationship.

After the account bank digital currency system inquires about the user's bank wallet information, it returns the bank wallet information to the account bank application system.

Step S503: The account bank application system returns the bank wallet information to the account bank user access system, the account bank user access system returns the bank wallet information to the user, and then sends the binding confirmation information sent by the user to the account bank wallet access authentication system , the binding confirmation information includes the application wallet ID and bank wallet ID corresponding to the binding operation.

Since the account bank needs to interact with the user through the interface provided by the account bank user access system, the account bank application system needs to return the bank wallet information to the account bank user access system in order to return the bank wallet information to the user.

After receiving the bank wallet information returned by the account bank user's access system, the user will check the bank wallet information. After confirming that it is correct, select the bank wallet and send the binding confirmation information for binding with the application wallet to the account bank user Access the system. The confirmation information generally includes the digital signature of the authentication certificate assigned to the user through the service provider's application wallet system for accessing the application wallet.

Afterwards, the account bank user access system sends the user's binding confirmation information to the account bank wallet access authentication system, so that the account bank wallet access authentication system performs the following step S504.

Before the account bank user access system sends the binding confirmation information sent by the user to the account bank wallet access authentication system, the user's application wallet authentication certificate can also be used to verify the digital signature of the binding confirmation information sent by the user. The user access system of the account bank uses the extracted public key to verify the user's digital signature to verify that the operation initiated by the holder of the private key of the application wallet certificate. According to the application wallet ID included in the binding confirmation information, the public key of the application wallet's authentication certificate can be obtained, and then the user's application wallet can be used by authenticating the digital signature contained in the binding confirmation information sent by the user. The authentication certificate verifies the digital signature of the binding confirmation message sent by the user.

After the verification is passed, the account bank user access system sends the binding confirmation information sent by the user to the account bank wallet access authentication system.

Step S504: The account bank wallet access authentication system executes the binding operation of the application wallet and the bank wallet according to the binding confirmation information.

Since the user binds the wallet through the wallet authentication method, when the account bank wallet access authentication system performs the binding operation of the application wallet and the bank wallet, the authentication certificate of the application wallet is bound to the user's bank wallet , during specific implementation, a data table can be created to store the association relationship between the authentication certificate of the application wallet and the relevant identification of the user's bank wallet. Correspondingly, the data table can also save the corresponding application wallet and application wallet. The association relationship between the authentication certificate and the relevant identification of the bank wallet. When the account line binding operation is successfully executed, the user and service provider will be notified to apply the wallet system.

According to the above steps S501 to S504, the wallet authentication method can be used to realize the binding of the application wallet and the bank wallet. After the binding is successful, the user can send an instruction signed with the application wallet authentication certificate Bank wallet for access.

Fig. 6 is a schematic diagram of a digital currency wallet binding process according to an embodiment of the present invention. As shown in Figure 6, the process of binding the digital currency wallet of the present invention mainly includes the following steps:

Step S1: The user initiates the wallet binding operation through the service provider application wallet system;

Step S2: The service provider application wallet system sends a binding application to the API interface of the account bank user access system, including: service provider authentication information, user real-name authentication information, application wallet information to be bound, and service provider digital certificate signature;

Step S3: The account bank user access system calls the account bank customer authentication system to authenticate the service provider authentication information and digital signature;

Step S4: After the authentication is passed, the account bank user access system feeds back the application wallet binding application information to the user and waits for the user to perform identity authentication;

Step S5: The user conducts identity authentication through the wallet authentication method of the account bank, and submits wallet authentication elements;

Step S6: The account bank user access system submits the wallet authentication elements to the account bank wallet access authentication system;

Step S7: After the account bank wallet access authentication system passes the authentication, the account bank user access system sends the authenticated user identity information to the account bank application system, and requests the account bank application system to query the bank wallet information of the authenticated user;

Step S8: The account bank application system sends the bank wallet inquiry request to the account bank digital currency system;

Step S9: The account bank digital currency system returns the bank wallet information corresponding to the authenticated user to the account bank application system;

Step S10: the account bank application system returns the bank wallet information to the account bank user access system;

Step S11: The account bank user access system feeds back the user's bank wallet information to the user;

Step S12: The user selects the bank wallet and binds it with the application wallet, and sends the binding confirmation information to the user access system of the account bank. The confirmation information may include the application wallet allocated to the user through the service provider application wallet system for accessing the application wallet The signature of the certification certificate;

Step S13: The account bank user access system uses the user's application wallet authentication certificate to verify the digital signature of the binding confirmation information sent by the user, and then sends the user's confirmation binding information to the account bank wallet access authentication system for application wallet authentication The binding of the certificate and the bank wallet can be implemented by creating a data table to save the application wallet, the association relationship between the authentication certificate of the application wallet and the relevant identification of the bank wallet. And after receiving the successful binding notification from the account bank wallet access authentication system, feedback to the user and service provider to apply the wallet system.

Fig. 7 is a schematic diagram of main modules of a digital currency wallet binding system according to an embodiment of the present invention. As shown in FIG. 7 , the digital currency wallet binding system 700 of the present invention mainly includes an account bank user access system 701 , an account bank application system 702 , an account bank digital currency system 703 and an account bank wallet access authentication system 704 .

Among them, the account bank user access system 701 is used to receive the wallet binding request provided by the user. The wallet binding request includes the user's real name authentication information and the application wallet identification; and then generates a bank wallet query request according to the wallet binding request and then sends it to the account bank. Application system 702, the bank wallet query request includes real-name authentication information; and the bank wallet information returned by the account bank application system 702 is returned to the user, and the bank wallet information includes the bank wallet identifier; finally, the binding confirmation information sent by the user is sent to The account bank wallet accesses the authentication system 704, and the binding confirmation information includes the application wallet ID and the bank wallet ID corresponding to the binding operation.

The account bank application system 702 is used to send the bank wallet inquiry request to the account bank digital currency system 703 , and return the bank wallet information returned by the account bank digital currency system 703 to the account bank user access system 701 .

The account bank digital currency system 703 is used to query the user's bank wallet information according to the real-name authentication information, and then return the queried bank wallet information to the account bank application system 702.

The account bank wallet access authentication system 704 is used to perform the binding operation of the application wallet and the bank wallet according to the binding confirmation information.

According to the embodiment of the present invention, the wallet binding request may also include: authentication information of the application wallet system; in addition, the digital currency wallet binding system 700 of the present invention may also include an account bank customer authentication system (not shown in the figure) , and, before the account bank user access system 701 generates a bank wallet query request according to the wallet binding request, the account bank user access system 701 can also be used to: send the customer authentication request to the account bank customer authentication system, and the customer authentication request includes authentication Information; the account bank customer authentication system can also be used to: authenticate the application wallet system according to the authentication information, and then send the authentication result to the account bank user access system 701 .

In the embodiment of the present invention, after the account bank customer authentication system sends the authentication result to the account bank user access system 701, and before the account bank user access system 701 generates a bank wallet query request according to the wallet binding request, the account bank user The access system 701 can also be used to: send an authentication element acquisition request to the user according to the real-name authentication information, and send the user authentication request to the account bank wallet access authentication system 704 after receiving the wallet authentication element sent by the user. The authentication request includes wallet authentication elements; the account bank wallet access authentication system 704 can also be used to: use the wallet access authentication method to authenticate the user according to the wallet authentication elements, and then send the authentication result to the account bank user access system 701.

The account bank user access system 701 can also be used to: before the account bank user access system 701 sends the binding confirmation information sent by the user to the account bank wallet access authentication system 704, use the user's application wallet authentication certificate to verify the binding confirmation information sent by the user. The digital signature of the binding confirmation message is verified.

According to the technical solution of the embodiment of the present invention, the bank wallet and the application wallet are bound through the bank wallet access authorization, so that the bank wallet can be accessed through the application wallet. After the binding is successful, the user can access the bound bank wallet by sending an instruction signed with the application wallet authentication certificate, thus realizing the management of digital currency.

The above specific implementation methods do not constitute a limitation to the protection scope of the present invention. It should be apparent to those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (9)

1. A method for binding a digital currency wallet, comprising: The account bank user access system receives the wallet binding request provided by the user, and the wallet binding request includes the user's real-name authentication information and application wallet identification; generates a bank wallet query request according to the wallet binding request, and then sends it to the account Bank application system, the bank wallet query request includes the real-name authentication information; The account bank application system sends the bank wallet query request to the account bank digital currency system, and the account bank digital currency system performs the query according to the real-name authentication information, and then returns the queried bank wallet information to the account bank digital currency system. In the account line application system, the bank wallet information includes a bank wallet identification; The account bank application system returns the bank wallet information to the account bank user access system, and the account bank user access system returns the bank wallet information to the user, and then sends the binding information sent by the user. Confirmation information is sent to the account bank wallet access authentication system, and the binding confirmation information includes the application wallet identification and bank wallet identification corresponding to the binding operation; The account bank wallet access authentication system executes the binding operation of the application wallet and the bank wallet according to the binding confirmation information. 2. binding method according to claim 1, is characterized in that, The wallet binding request also includes: authentication information of the application wallet system; And, before the step of generating a bank wallet query request according to the wallet binding request, the account bank user access system also includes: the account bank user access system sends a customer authentication request to the account bank customer authentication system, so The customer authentication request includes the authentication information; the account bank customer authentication system authenticates the application wallet system according to the authentication information, and then sends the authentication result to the account bank user access system. 3. The binding method according to claim 1 or 2, characterized in that, after the account bank customer authentication system sends the result of authentication to the account bank user to access the system, the account bank user Before the step of the access system generating a bank wallet query request according to the wallet binding request, it also includes: The account bank user access system sends an authentication element acquisition request to the user according to the real-name authentication information, and sends the user authentication request to the account bank after receiving the wallet authentication element sent by the user. Wallet access authentication system, the user authentication request includes the wallet authentication elements; The account bank wallet access authentication system uses the wallet access authentication method to authenticate the user according to the wallet authentication elements, and then sends the authentication result to the account bank user access system. 4. The binding method according to claim 1, wherein, before the step of sending the binding confirmation information sent by the user to the account bank wallet access authentication system by the account bank user access system, it also includes: The account bank user access system uses the user's application wallet authentication certificate to verify the digital signature of the binding confirmation information sent by the user. 5. A binding system for a digital currency wallet, characterized in that it includes: an account bank user access system, an account bank application system, an account bank digital currency system, and an account bank wallet access authentication system, wherein, The account bank user access system is used to receive the wallet binding request provided by the user, and the wallet binding request includes the user's real-name authentication information and application wallet identification; and then generates a bank wallet query request according to the wallet binding request Then send to the account line application system, the bank wallet query request includes the real-name authentication information; and the bank wallet information returned by the account line application system is returned to the user, and the bank wallet information includes the bank wallet identification; Finally, send the binding confirmation information sent by the user to the account bank wallet access authentication system, the binding confirmation information includes the application wallet identification and bank wallet identification corresponding to the binding operation; The account bank application system is used to send the bank wallet query request to the account bank digital currency system, and return the bank wallet information returned by the account bank digital currency system to the account bank user access system; The account bank digital currency system is used to query the user's bank wallet information according to the real-name authentication information, and then return the queried bank wallet information to the account bank application system; The account bank wallet access authentication system is configured to perform a binding operation between the application wallet and the bank wallet according to the binding confirmation information. 6. The binding system according to claim 5, wherein the wallet binding request further includes: authentication information of the application wallet system; the system also includes an account bank customer authentication system, and, in the account Before the bank user access system generates a bank wallet query request according to the wallet binding request, The account bank user access system is also used to: send a client authentication request to the account bank client authentication system, where the client authentication request includes the authentication information; The account bank client authentication system is further configured to: perform authentication on the application wallet system according to the authentication information, and then send the authentication result to the account bank user access system. 7. The binding system according to claim 5 or 6, characterized in that, after the account bank customer authentication system sends the result of the authentication to the account bank user access system, the account bank user access system Before generating a bank wallet query request according to the wallet binding request, The account bank user access system is also used to: send an authentication element acquisition request to the user according to the real-name authentication information, and send the user authentication request to the user after receiving the wallet authentication element sent by the user. The account line wallet access authentication system, the user authentication request includes the wallet authentication elements; The account bank wallet access authentication system is further configured to: use the wallet access authentication method to authenticate the user according to the wallet authentication elements, and then send the authentication result to the account bank user access system. 8. The binding system according to claim 5, wherein the account bank user access system is also used for: Before the account bank user access system sends the binding confirmation information sent by the user to the account bank wallet access authentication system, use the user's application wallet authentication certificate to verify the binding confirmation information sent by the user Digital signatures are verified. 9. A computer-readable storage medium, wherein computer instructions are stored in the computer-readable storage medium, wherein the computer instructions can be run by a computer or a computer system, so that the computer or computer system can execute the claims The method described in any one of 1-4.