TW201935357A - Method and system for electrical transaction - Google Patents

Abstract

A method for electrical transaction is embodied by an electrical transaction system. The electrical transaction system includes a certificate authority server, a validation authority server, and a terminal electronic device. First, the terminal electronic device generates a data set for transaction application according to a transaction command, and transmits the data set for transaction application to the certificate authority server. The data set for transaction application includes transaction content data and a public key. Upon receiving the data set for transaction application, the certificate authority server generates a certificate according to the public key, considers the transaction content data and the certificate as an un-verified transaction data set, and automatically transmits the un-verified transaction data set to the validation authority server. Upon receiving the un-verified transaction data set and determining that the un-verified transaction data set conforms to a predetermined condition, the validation authority server executes an online-transaction according to the transaction content data.

Description

Electronic transaction method and system

The present invention relates to a transaction method, and particularly to an electronic transaction method involving online transactions. The invention also relates to an electronic transaction system for implementing the electronic transaction method.

In recent years, the use of electronic devices for online electronic transactions has gradually become popular. However, electronic transactions involve the transmission of many personal private information and account information. Therefore, ensuring the security of electronic transactions is always a topic that cannot be ignored.

The current electronic transaction method involves a user-end electronic device held by a user, and an electronic transaction system for receiving transaction data from the user-end electronic device. In terms of the existing electronic transaction methods, in order to ensure the legality of the transaction data received by the electronic transaction system, when a user wants to perform an electronic transaction with the user-end electronic device, the user must first use the user-end electronic device. The device sends a voucher application to the electronic transaction system. After the user-end electronic device receives the certificate issued by the electronic transaction system, the user needs to use the user-end electronic device to pass the certificate and the related electronic transaction. A piece of transaction information is transmitted to the electronic transaction system for verification by the electronic transaction system, and the electronic transaction is executed after the electronic transaction system verifies the legality of the transaction information. Although the existing electronic transaction method can improve the security of electronic transactions by using the certificate issuance and transaction verification mechanism of the electronic transaction system, for users, the operation process is too laborious and time-consuming, so there are still inconveniences.

Therefore, an object of the present invention is to provide an electronic transaction method which can overcome the inconvenience of the prior art.

Therefore, the electronic transaction method of the present invention is implemented by an electronic transaction system. The electronic transaction system includes a certificate authorization server, an authentication server, and a user-end electronic device. The electronic transaction method includes the following steps: (A) When it is used When the terminal electronic device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and transmits a transaction application data set to the certificate authorization server according to the transaction instruction, and the transaction application data set includes an information about the online transaction. And the public key of the pair of end-use electronic devices; (B) When the certificate authority server receives the transaction application data set, the certificate authority server generates a public key containing the public key based on the public key (C) the certificate authorization server uses the transaction content data and the certificate data as a set of transaction data to be verified and automatically transmits the set of transaction data to the verification server; and (D) When the verification server receives the transaction data set to be verified and judges that the transaction data set to be verified matches one of the certificate data When related to the predetermined condition, the verification server executes the online transaction according to the transaction content data included in the transaction data set to be verified.

In some implementation aspects of the electronic transaction method of the present invention, in step (C), the certificate authorization server transmits the transaction data set to be verified to the verification server via the user-end electronic device.

In some implementation aspects of the electronic transaction method of the present invention, in step (A), the transaction application data set further includes a pair of digital signature data of the end-use electronic device, and the end-use electronic device is based on the transaction. The content data and a pair of private keys corresponding to the public key generate the digital signature data; in step (C), the transaction data set to be verified also includes the public key and the digital signature data; and in step (D) , The predetermined condition includes that the public key included in the transaction data set to be verified matches the public key included in the certificate data.

In some implementation aspects of the electronic transaction method of the present invention, in step (A), the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private Key to encrypt the first string to generate the digital signature data; and in step (D), when the verification server receives the transaction data set to be verified, the verification server uses the transaction data set to be verified The public key included or the public key included in the credential data decrypts the digital signature data to obtain the first string, and applies the transaction content data included in the transaction data set to be verified to the hash function. The algorithm generates a second character string, and the predetermined condition further includes that the first character string matches the second character string.

In some implementation aspects of the electronic transaction method of the present invention, in step (A), before the consumer electronic device generates the transaction application data set, the consumer electronic device also generates a key pair, and the gold The key pair contains the public key and the private key.

Another electronic transaction method of the present invention is implemented by an electronic transaction system. The electronic transaction system includes a registration management server, a certificate authorization server, a verification server, and an end-use electronic device. The electronic transaction method includes the following: Steps: (A) When the consumer electronic device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and transmits a transaction application data set to the registration management server according to the transaction instruction, and the transaction application The data set contains a transaction content data about the online transaction and a pair of public keys that should be used by the electronic device; (B) When the registration management server receives the transaction application data set, the registration management server according to the The public key generates and sends a certificate application data containing the public key to the certificate authority server; (C) When the certificate authority server receives the certificate application data, the certificate authority server generates and transmits the certificate key based on the public key A certificate data containing the public key to the registration management server; (D) when the registration management server receives the certificate information , The registration management server generates a pending transaction data set containing the transaction content data and the voucher data, and automatically transmits the pending transaction data set to the verification server; and (E) when the verification server When the server receives the transaction data set to be verified and determines that the transaction application data set meets a predetermined condition related to the voucher data, the verification server executes the online according to the transaction content data included in the transaction application data set. transaction.

In some implementation aspects of the electronic transaction method of the present invention, the transaction application data set further includes a pair of digital signature data that should be used by the end-use electronic device, and the end-use electronic device is based on the transaction content data and a pair The digital signature data should be generated from the public key's private key; in step (D), the transaction data set to be verified also includes the public key and the digital signature data; and in step (E), the predetermined condition includes The public key contained in the transaction data set to be verified matches the public key contained in the certificate data.

In some embodiments of the electronic transaction method of the present invention, in step (A), the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then The private key encrypts the first string to generate the digital signature data; and in step (E), when the authentication server receives the transaction data set to be verified, the authentication server uses the transaction to be verified The public key contained in the data set or the public key contained in the certificate data decrypts the digital signature data to obtain the first string, and applies the transaction content data included in the transaction data set to be verified to the A hash function algorithm generates a second string, and the predetermined condition further includes that the first string is consistent with the second string.

In some implementation aspects of the electronic transaction method of the present invention, in step (A), before the consumer electronic device generates the transaction application data set, the consumer electronic device first generates a key pair, and The key pair includes the public key and the private key.

Another object of the present invention is to provide an electronic transaction system capable of implementing the electronic transaction method.

The electronic transaction system of the present invention includes a user-end electronic device, a certificate authorization server, and an authentication server. The certificate authority server can communicate with the consumer electronic device. The authentication server can communicate with the certificate authority server. Wherein, when the consumer electronic device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and transmits a transaction application data set to the certificate authorization server according to the transaction instruction, and the transaction application data set includes a Information about the transaction content of the online transaction and the public key of a pair of end-use electronic devices. The certificate authorization server generates a certificate data including the public key according to the public key in the transaction application data set, and uses the transaction content data and the certificate data as a set of transaction data to be verified and automatically transmits the transaction to be verified The data set is sent to the authentication server. When the verification server determines that the transaction data set to be verified meets a predetermined condition related to the voucher data, the verification server executes the online transaction according to the transaction content data contained in the transaction data set to be verified.

In some embodiments of the electronic transaction system of the present invention, the certificate authorization server transmits the transaction data set to be verified to the verification server via the user-end electronic device.

In some implementation aspects of the electronic transaction system of the present invention, the transaction application data set further includes a pair of digital signature data of the electronic device that should be used, and the electronic device of the user is based on the data of the transaction content and a pair of public information The private key of the key generates the digital signature data; the transaction data set to be verified also includes the public key and the digital signature data; the predetermined condition includes the public key and the certificate data included in the transaction data set to be verified The contained public key matches.

In some embodiments of the electronic transaction system of the present invention, the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private key to the first string. The digital signature data is generated by encryption; the verification server obtains the first word by decrypting the digital signature data with the public key included in the transaction data set to be verified or the public key included in the certificate data. String, and applying the transaction function data contained in the transaction data set to be verified to the hash function algorithm to generate a second string, the predetermined condition further includes that the first string is consistent with the second string.

In some implementation aspects of the electronic transaction system of the present invention, before the consumer electronic device generates the transaction application data set, the consumer electronic device also generates a key pair, and the key pair includes the public key and The private key.

Another electronic transaction system of the present invention includes a user-end electronic device, a registration management server capable of communicating with the user-end electronic device, a certificate authorization server capable of communicating with the registration management server, and a server capable of communicating with the The registration servers communicate with each other to authenticate the server. Wherein, when the consumer electronic device receives a transaction instruction related to an online transaction, the consumer electronic device generates and transmits a transaction application data set to the registration management server according to the transaction instruction, and the transaction application data set includes A transaction content data about the online transaction, and a pair of public keys of the end-use electronic device; when the registration management server receives the transaction application data set, the registration management server generates and transmits a The certificate application data containing the public key is sent to the certificate authorization server; when the certificate authorization server receives the certificate application data, the certificate authorization server generates and sends a certificate data containing the public key to the public key to The registration management server; when the registration management server receives the voucher data, the registration management server generates a set of transaction data to be verified including the transaction content data and the voucher data, and automatically generates the transaction to be verified The data set is sent to the verification server; when the verification server receives the transaction data set to be verified, When the transaction is determined that the application data set meet a predetermined condition associated with the voucher information, the authentication server executes the online transaction based on the transaction the transaction content information included in the application data set.

In some implementation aspects of the electronic transaction method of the present invention, the transaction application data set further includes a pair of digital signature data that should be used by the end-use electronic device, and the end-use electronic device is based on the transaction content data and A pair of private keys corresponding to the public key generates the digital signature data; the transaction data set to be verified also includes the public key and the digital signature data; the predetermined condition includes the public key and The public key contained in the certificate data matches.

In some implementation aspects of the electronic transaction method of the present invention, wherein the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private key for the The first string is encrypted to generate the digital signature data. When the verification server receives the transaction data set to be verified, the verification server uses the public key or the certificate information contained in the transaction data set to be verified. The public key contained in the digital signature data is decrypted to obtain the first string, and the transaction content data included in the transaction data set to be verified is applied to the hash function algorithm to generate a second string. The predetermined condition further includes that the first string matches the second string.

In some implementation aspects of the electronic transaction method of the present invention, before the consumer electronic device generates the transaction application data set, the consumer electronic device also generates a key pair, and the key pair includes the public key Key and the private key.

One of the effects of the electronic transaction method of the present invention is that after the certificate authorization server generates the certificate data and the transaction data set to be verified, it automatically sends the transaction data set to be verified to the verification server to verify the Legality and security of online transactions. The effect of another electronic transaction method of the present invention is that when the registration management server receives the voucher data, it automatically generates a set of transaction data to be verified including the transaction content data and the voucher data, and automatically The transaction data set to be verified is sent to the verification server. That is, the two electronic transaction methods and systems provided by the present invention can complete the application of the voucher data and the verification of the transaction data set to be verified at one time. Therefore, for the user holding the use-side electronic device, when the user wants to perform an online transaction, he only needs to input the transaction content data through the use-side electronic device and submit it, and then the application for the voucher data can be completed together. And it is not necessary to specifically execute the application process of the voucher data before performing online transactions, which is more convenient and quick to use.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are represented by the same numbers.

Referring to FIG. 1, a first embodiment of an electronic transaction system 1 of the present invention includes a Certificate Authority server 11, a Validation Authority server 12, and a consumer electronic device 13. In this embodiment, the user-end electronic device 13 may be, for example, a smartphone, a tablet computer, a notebook computer, or a desktop computer, and the certificate authorization server 11 is, for example, certified by the Taiwanese network (Taiwan A certificate server managed by a Certificate Authority (TWCA) center. The verification server 12 is, for example, a verification and transaction execution server managed by a bank, but it is not limited to this. In other embodiments, the number of the use-side electronic devices 13 may also be multiple, and is not limited to this embodiment.

With reference to FIG. 2, an electronic transaction method implemented by the electronic transaction system 1 of this embodiment is described in detail below.

First, step S1 is performed. The user-end electronic device 13 generates a transaction content data and a transaction instruction through a user operation, and the transaction content data and the transaction instruction are related to an online transaction. The online transaction may be, for example, a securities transaction or a stock transaction, but is not limited thereto. In this embodiment, the transaction content data indicates the actual transaction content of the online transaction, and the transaction content data is necessary information for the verification server 12 to actually execute the online transaction. In this embodiment, the transaction content data includes, for example, a product name, a product number, a transaction quantity, a transaction date, a transaction amount, and the like related to the online transaction, but is not limited thereto. Then, step S2 is executed.

In step S2, the user-end electronic device 13 generates a key pair corresponding to itself. The key pair includes a public key and a pair of private keys corresponding to the public key. The public key and the private key each represent a mathematical algorithm, and there is a unique corresponding mathematical relationship between the public key and the private key. For example: suppose the mathematical algorithm represented by the private key is f (x) , The mathematical algorithm represented by the public key is g (x). After encrypting an original message M with the private key to obtain an encrypted message M '(that is, M' = f (M)), When the encrypted message M 'obtains the original message M, the encrypted message M' can only be decrypted with the public key to obtain the original message M again, that is, g (f (M)) = M. In this embodiment, the consumer electronic device 13 generates the key pair only after generating the transaction content data and the transaction instruction. However, in other embodiments, the consumer electronic device 13 may also generate the key pair. Prior to the transaction content data and the transaction instruction, the key pair is generated in advance by installing an online transaction application, and is not limited to this embodiment. Then, step S3 is executed.

In step S3, the user-end electronic device 13 generates a digital signature data corresponding to itself. Specifically, the consumer electronic device 13 first applies a hash function algorithm to the transaction content data to generate a first string, and then encrypts the first string with the private key to generate the digital signature data. . The hash function algorithm may be, for example, a MD5 hash algorithm (Message-Digest algorithm 5), a SHA hash algorithm (Secure Hash Algorithm), a MAC hash algorithm (Message Authentication Code), or a HMAC hash algorithm (Hash- based Message Authentication Code). Then, step S4 is executed.

In step S4, the user-end electronic device 13 generates a transaction application data set and transmits the transaction application data set to the certificate authorization server 11. In this embodiment, the transaction application data set includes the transaction content data, the digital signature data, and the public key. The digital signature data is, for example, a public key cryptography standard (Public Key Cryptography Standards, PKCS). PKCS # 7 format, and the public key is, for example, the PKCS # 10 format in the public key encryption standard, but it is not limited to this. In this embodiment, the user-end electronic device 13 directly transmits the transaction application data set to the certificate authorization server 11.

In step S5, when the certificate authority server 11 receives the transaction application data set, the certificate authority server 11 generates a pair of certificate data that should be used by the end-use electronic device 13 according to the public key, and the certificate data includes Public key. Then, step S6 is executed.

In step S6, once the certificate authority server 11 receives the transaction application data set and generates the certificate data, the certificate authority server 11 automatically generates a certificate data server containing the certificate data, the public key, and the digital signature. Data and the transaction data set to be verified of the transaction content data, and automatically transmit the transaction data set to be verified to the verification server 12. In particular, in this embodiment, the certificate authorization server 11 transmits the transaction data set to be verified to the verification server 12 through the user-end electronic device 13, that is, the certificate authorization server 11 The transaction data set to be verified is first transmitted to the consumer electronic device 13, and when the consumer electronic device 13 receives the transaction data set to be verified from the certificate authorization server 11, the consumer electronic device 13 is The transaction data set to be verified is automatically transmitted to the verification server 12 without additional operation by the user. However, in other embodiments, the credential authorization server 11 may also directly transmit the to-be-verified transaction data set to the verification server 12 in step S8 without passing through the consumer electronic device 13. Then, step S7 is executed.

In step S7, when the verification server 12 receives the transaction data set to be verified from the user-end electronic device 13, the verification server 12 signs the digital signature with the public key included in the transaction data set to be verified. Chapter data is decrypted to obtain the first string, and the transaction content data included in the transaction data set to be verified is applied to the hash function algorithm to generate a second string. In other embodiments, the verification server 12 may also obtain the first string by decrypting the digital signature data with the public key included in the certificate data, and is not limited to this embodiment. Then, step S8 is executed.

In step S8, the verification server 12 determines whether the transaction data set to be verified meets a predetermined condition to verify the legality and security of the online transaction. Specifically, in this embodiment, the predetermined condition includes a first sub-condition related to the voucher data and a second sub-condition related to the digital signature data.

The first sub-condition represents that the public key included in the transaction data set to be verified matches the public key included in the certificate data. If the transaction data set to be verified meets the first sub-condition, it means that the public key contained in the transaction data set to be verified is verified by the certificate authority server 11 and that the public key is indeed from the consumer electronics装置 13。 Device 13.

The second sub-condition indicates that the first string matches the second string. Since the private key is only stored in the consumer electronic device 13, only the consumer electronic device 13 can generate the digital signature data with the private key. That is, if the transaction data set to be verified meets the second sub-condition, it means that the transaction content data is indeed generated by the user-side electronic device 13 and has not been intercepted by a third party to alter its content.

When the verification server 12 determines that the transaction data set to be verified meets the predetermined condition, step S9 is performed. When the verification server 12 determines that the transaction data set to be verified does not meet the predetermined condition, step S10 is executed.

In step S9, the verification server 12 executes the online transaction according to the transaction content data included in the transaction data set to be verified, generates a transaction success notification and sends it to the user-end electronic device 13, so that the use The terminal electronic device 13 outputs the transaction success notification when the verification server 12 receives the transaction success notification, thereby achieving the effect of reminding.

In step S10, the verification server 12 generates and sends a verification failure message to the user-end electronic device 13. Then, step S11 is executed.

In step S11, when the consumer electronic device 13 receives the verification failure message from the authentication server 12, the consumer electronic device 13 outputs the verification failure message, thereby achieving the effect of reminding.

Referring to FIG. 3, FIG. 3 is a second embodiment of an electronic transaction system 1 according to the present invention. The second embodiment is different from the first embodiment in that the electronic transaction system 1 further includes a server capable of communicating with the certificate. 11. A registration authority (Registration Authority) server 14 for communication between the authentication server 12 and the user-end electronic device 13. With reference to FIG. 4, the electronic transaction method implemented by the electronic transaction system 1 of the second embodiment is described below.

First, step S12 is executed. The user-end electronic device 13 generates the transaction content data and the transaction instruction through a user operation. Then, step S13 is executed.

In step S13, the consumer electronic device 13 generates the key pair including the public key and the private key. Then, step S14 is executed.

In step S14, the user-end electronic device 13 generates the digital signature data, and the method of generating the digital signature data is the same as that of the first embodiment, and details are not described herein again. Then, step S15 is performed.

In step S15, the user-end electronic device 13 generates the transaction application data set, and the content of the transaction application data set is the same as that in the first embodiment, and details are not described herein again. Different from the first embodiment, after the user-end electronic device 13 generates the transaction application data set, it transmits the transaction application data set to the registration management server 14. Then, step S16 is executed.

In step S16, when the registration management server 14 receives the transaction application data set from the consumer electronic device 13, the registration management server 14 generates a certificate application data containing the public key according to the public key, and Send the certificate application data to the certificate authority server. Then, step S17 is executed.

In step S17, when the certificate authority server receives the certificate application data, the certificate authority server generates the certificate data including the public key according to the public key, and returns the certificate data to the registration management server.器 14。 14. Then, step S18 is executed.

In step S18, when the registration management server 14 receives the voucher data, the registration management server 14 automatically generates the transaction data set to be verified and automatically transmits the transaction data set to be verified to the verification server. The content contained in the transaction data set to be verified is the same as that in the first embodiment, and is not repeated here. Then, step S19 is executed.

In step S19, when the verification server receives the transaction data set to be verified, the verification server 12 decrypts the digital signature data with the public key included in the transaction data set to be verified to obtain the first word. String, and applying the hash function algorithm to the transaction content data included in the transaction data set to be verified to generate the second string. Then, go to step 20.

In step S20, the verification server 12 determines whether the transaction data set to be verified meets the predetermined condition to verify the legality and security of the online transaction. The predetermined condition in this embodiment is the same as that in the first embodiment, and details are not described herein again. When the verification server 12 determines that the transaction data set to be verified meets the predetermined condition, step S21 is performed. When the verification server 12 determines that the transaction data set to be verified does not meet the predetermined condition, step S22 is performed.

In step S21, the verification server 12 executes the online transaction according to the transaction content data included in the transaction data set to be verified, generates a transaction success notification and sends it to the user-end electronic device 13 for the use. The terminal electronic device 13 outputs.

In step S22, the verification server 12 generates and sends a verification failure message to the user-end electronic device 13 for output by the user-end electronic device 13.

In summary, in the first embodiment, by implementing the electronic transaction method, the electronic transaction system 1 can enable the certificate authorization server 11 to automatically generate the transaction to be verified after generating the transaction data set to be verified. The data set is transmitted to the verification server 12 to verify the legality and security of the online transaction. In the second embodiment, when the registration management server 14 receives the voucher data, it can also automatically generate and transmit the transaction data set to be verified to the verification server 12. That is, whether in the first embodiment or the second embodiment, the electronic transaction system 1 can complete the application of the voucher data and the verification of the transaction data set to be verified at one time. For the user holding the use-side electronic device 13, when the user wants to perform an online transaction, he only needs to input the transaction content data through the use-side electronic device 13 and submit it, and then the application for the voucher data can be completed together. And it is not necessary to specifically execute the application process of the voucher information before performing online transactions, which is more convenient and fast to use, so it can indeed achieve the purpose of cost invention.

However, the above are only examples of the present invention. When the scope of implementation of the present invention cannot be limited in this way, any simple equivalent changes and modifications made in accordance with the scope of the patent application and the content of the patent specification of the present invention are still Within the scope of the invention patent.

1‧‧‧ electronic trading system

11‧‧‧Certificate Authorization Server

12‧‧‧ authentication server

13‧‧‧ Consumer electronics

14‧‧‧Registration Server

S1 ~ S11‧‧‧step

Other features and effects of the present invention will be clearly presented in the embodiment with reference to the drawings, wherein: FIG. 1 is a block diagram illustrating a first embodiment of the electronic transaction system of the present invention; FIG. 2 is a flowchart To explain an electronic transaction method executed by the first embodiment; FIG. 3 is a block diagram illustrating a second embodiment of the electronic transaction system of the present invention; and FIG. 4 is a flowchart illustrating the second embodiment. Another method of electronic trading performed.

Claims (18)

An electronic transaction method is implemented by an electronic transaction system. The electronic transaction system includes a certificate authorization server, an authentication server, and a user-end electronic device. The electronic transaction method includes the following steps: (A) When the user-end electronic When the device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and transmits a transaction application data set to the certificate authorization server according to the transaction instruction, and the transaction application data set includes a transaction regarding the online transaction The content data, and the public key of a pair of end-use electronic devices; (B) when the certificate authorization server receives the transaction application data set, the certificate authorization server generates a certificate containing the public key based on the public key Data; (C) the certificate authorization server generates a transaction data set to be verified containing the transaction content data and the certificate data, and automatically transmits the transaction data set to be verified to the verification server; and (D) when The verification server receives the transaction data set to be verified, and determines that the transaction data set to be verified matches one of the certificate data When related to the predetermined condition, the verification server executes the online transaction according to the transaction content data included in the transaction data set to be verified. The electronic transaction method according to claim 1, wherein in step (C), the credential authorization server transmits the transaction data set to be verified to the verification server via the user-end electronic device. The electronic transaction method according to claim 1, wherein: in step (A), the transaction application data set further includes a pair of digital signature data of the end-use electronic device, and the end-use electronic device is based on the transaction The content data and a pair of private keys corresponding to the public key generate the digital signature data; in step (C), the transaction data set to be verified further includes the public key and the digital signature data; and in step (D) , The predetermined condition includes that the public key included in the transaction data set to be verified matches the public key included in the certificate data. The electronic transaction method according to claim 3, wherein: in step (A), the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private Key to encrypt the first string to generate the digital signature data; and in step (D), when the verification server receives the transaction data set to be verified, the verification server uses the transaction data set to be verified The public key included or the public key included in the credential data decrypts the digital signature data to obtain the first string, and applies the transaction content data included in the transaction data set to be verified to the hash function. The algorithm generates a second character string, and the predetermined condition further includes that the first character string matches the second character string. The electronic transaction method according to claim 4, wherein in step (A), before the consumer electronic device generates the transaction application data set, the consumer electronic device first generates a key pair, and the gold The key pair contains the public key and the private key. An electronic transaction method is implemented by an electronic transaction system. The electronic transaction system includes a registration management server, a certificate authorization server, a verification server, and a user-end electronic device. The electronic transaction method includes the following steps: (A ) When the consumer electronic device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and transmits a transaction application data set to the registration management server according to the transaction instruction, and the transaction application data set includes a Regarding the transaction content data of the online transaction, and the public key of a pair of end-use electronic devices; (B) When the registration management server receives the transaction application data set, the registration management server generates and Send a certificate application data containing the public key to the certificate authorization server; (C) when the certificate authorization server receives the certificate application data, the certificate authorization server generates and sends a certificate containing the public key based on the public key Key certificate data to the registration management server; (D) when the registration management server receives the certificate data, the The registration management server generates a pending transaction data set containing the transaction content data and the voucher data, and automatically transmits the pending transaction data set to the verification server; and (E) when the verification server receives When the transaction data set to be verified and it is determined that the transaction application data set meets a predetermined condition related to the voucher data, the verification server executes the online transaction according to the transaction content data included in the transaction application data set. The electronic transaction method according to claim 6, wherein: in step (A), the transaction application data set further includes a pair of digital signature data of the end-use electronic device, and the end-use electronic device is based on the transaction The content data and a pair of private keys corresponding to the public key generate the digital signature data; in step (D), the transaction data set to be verified further includes the public key and the digital signature data; and in step (E) , The predetermined condition includes that the public key included in the transaction data set to be verified matches the public key included in the certificate data. The electronic transaction method according to claim 7, wherein: in step (A), the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private Key to encrypt the first string to generate the digital signature data; and in step (E), when the verification server receives the transaction data set to be verified, the verification server uses the transaction data set to be verified The public key included or the public key included in the credential data decrypts the digital signature data to obtain the first string, and applies the transaction content data included in the transaction data set to be verified to the hash function. The algorithm generates a second character string, and the predetermined condition further includes that the first character string matches the second character string. The electronic transaction method according to claim 8, wherein, in step (A), before the consumer electronic device generates the transaction application data set, the consumer electronic device first generates a key pair, and the gold The key pair contains the public key and the private key. An electronic transaction system includes: a consumer electronic device; a certificate authority server capable of communicating with the consumer electronic device; and an authentication server capable of communicating with the certificate authority server; wherein the client When the electronic device receives a transaction instruction related to an online transaction, the consumer electronic device generates and transmits a transaction application data set to the certificate authorization server according to the transaction instruction, and the transaction application data set includes an information about the online transaction. The transaction content data and a pair of public keys of the end-use electronic device; the certificate authorization server generates a certificate data containing the public key according to the public key in the transaction application data set, the transaction content data and the certificate data As a transaction data set to be verified, and automatically transmitting the transaction data set to be verified to the verification server; when the verification server determines that the transaction data set to be verified meets a predetermined condition related to the voucher data, The verification server executes according to the transaction content data included in the transaction data set to be verified. The online transactions. The electronic transaction system according to claim 10, wherein the certificate authorization server transmits the transaction data set to be verified to the verification server via the user-end electronic device. The electronic transaction system according to claim 10, wherein: the transaction application data set further includes a pair of digital signature information of the end-use electronic device, and the end-use electronic device is based on the transaction content data and a pair of public information. The private key of the key generates the digital signature data; the transaction data set to be verified also includes the public key and the digital signature data; and the predetermined condition includes the public key and the certificate data included in the transaction data set to be verified The contained public key matches. The electronic transaction system according to claim 12, wherein: the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private key to the first string The digital signature data is generated by encryption; and the verification server obtains the first digital signature data by decrypting the digital signature data with the public key included in the transaction data set to be verified or the public key included in the certificate data String, and applying the hash function algorithm to the transaction content data included in the transaction data set to be verified to generate a second string, the predetermined condition further includes that the first string is consistent with the second string. The electronic transaction system according to claim 13, wherein before the consumer electronic device generates the transaction application data set, the consumer electronic device first generates a key pair, and the key pair includes the public key and The private key. An electronic transaction system includes: a consumer electronic device; a registration management server capable of communicating with the consumer electronic device; a certificate authorization server capable of communicating with the registration management server; and an authentication server Can communicate with the registration management server; wherein, when the consumer electronic device receives a transaction instruction regarding an online transaction, the consumer electronic device generates and sends a transaction application data set to the transaction instruction according to the transaction instruction. The registration management server, the transaction application data set includes a transaction content data about the online transaction, and a pair of public keys of the end-use electronic device; when the registration management server receives the transaction application data set, the registration The management server generates and sends a certificate application data containing the public key to the certificate authorization server according to the public key; when the certificate authorization server receives the certificate application data, the certificate authorization server generates based on the public key And send a certificate data containing the public key to the registration management server; when the registration When the management server receives the voucher data, the registration management server generates a pending transaction data set containing the transaction content data and the voucher data, and automatically transmits the pending transaction data set to the verification server; And when the verification server receives the transaction data set to be verified and determines that the transaction application data set meets a predetermined condition related to the voucher data, the verification server according to the transaction included in the transaction application data set The content data executes the online transaction. The electronic transaction system according to claim 15, wherein: the transaction application data set further includes a pair of digital signature data of the end-use electronic device, and the end-use electronic device is based on the transaction content data and a pair of public information. The private key of the key generates the digital signature data; the transaction data set to be verified also includes the public key and the digital signature data; and the predetermined condition includes the public key and the certificate data included in the transaction data set to be verified The contained public key matches. The electronic transaction system according to claim 16, wherein: the consumer electronic device first applies a hash function algorithm to the transaction content data to generate a first string, and then uses the private key to the first string Encryption to generate the digital signature data; and when the verification server receives the transaction data set to be verified, the verification server uses the public key contained in the transaction data set to be verified or the certificate data The public key decrypts the digital signature data to obtain the first string, and applies the hash function algorithm to the transaction content data included in the transaction data set to be verified to generate a second string. The predetermined condition is also The first string is matched with the second string. The electronic transaction system according to claim 17, wherein before the consumer electronic device generates the transaction application data set, the consumer electronic device also generates a key pair, and the key pair includes the public key and The private key.