CN114565382A - Transaction account anonymous payment method and system - Google Patents

Abstract

The invention relates to a transaction account anonymous payment method and system. The system includes: a client, a merchant server, a security management center, a customer authentication center, a merchant authentication center, a payment gateway, a payment bank terminal, and a collection bank terminal; Under the supervision of the management center, the circular authentication chain between transaction participants is executed. In the process of completing a commodity order payment, the merchant node is responsible for the identity authentication of the customer node, the payment gateway is responsible for the identity authentication of the merchant node, the customer node and the payment bank. The authentication of the final payment procedure between the nodes will disperse the work of identity authentication of both parties of the transaction that was solely undertaken by the payment gateway in the past to be distributed among the participating parties, which reduces the workload of the payment gateway or third-party payment platform, while avoiding the need for Disastrous consequences when payment gateways defect or are attacked.

Description

An anonymous payment method and system for a transaction account

technical field

The invention relates to the technical field of electronic payment, in particular to a transaction account anonymous payment method and system.

Background technique

Electronic payment refers to the use of secure electronic means between consumers, merchants and financial institutions to securely transmit payment information to banks or corresponding processing institutions through information networks to realize currency payment or capital flow. , Financial institutions are effectively united to form a new payment system. There are many technologies that can build a payment system. For the remote operation mode, compared to the payment verification mode mediated by SMS and smart cards, the client-side solution currently occupies the mainstream position. The solution is that the user uses the client to receive the payment request that the user needs to make, sends the payment request to the relevant server through the Internet, and the account management system transfers the funds between the user and the merchant, and feeds back the result of the transfer. The merchant provides the user with the product or service corresponding to the payment request.

Considering the financial security, identity privacy, transaction data integrity and other issues of the electronic payment system, a payment protocol with higher security should be selected as much as possible. The payment protocol mainly performs two tasks: secure communication and identity authentication. At present, the mainstream protocols on the market are SSL and SET. SSL (Secure Sockets Layer Secure Sockets Protocol) was developed by Netscape to ensure the security of data transmission on the Internet. Using data encryption technology, it can ensure that data will not be intercepted and eavesdropped during the transmission process on the network. It is based on the commitment of merchants to keep consumer information confidential, which is beneficial to merchants and not beneficial to consumers, and does not have the identity authentication function of both parties to the transaction. There is a danger of capital loss for both parties, and the security loopholes are obvious and the transaction mechanism is difficult to decide. Make improvements. In the initial stage of e-commerce, since most of the enterprises operating e-commerce are large companies with high reputation, this kind of problem has not been fully exposed. However, with the development of e-commerce, various small and medium-sized companies have also participated, so the problem of single authentication in the electronic payment process has become more and more prominent.

Due to the shortcomings of the SSL protocol, it cannot be widely used. In order to meet the market demand, the two major credit card organizations, Visa and MasterCard in the United States, and many international scientific and technological institutions jointly customized the SET protocol (Secure Electronic Transaction), which overcomes the To address the shortcomings of SSL, in order to protect the interests of customers, it provides a customer-to-business authentication function. However, the existing electronic online banking payment methods generally use a third-party payment platform. During the transaction process, the commodity order, the identities of the transaction parties and the account information of the payment and receipt are all known to the third-party payment platform. The security of transaction data depends entirely on the third-party payment platform. The credibility of the third-party payment platform and the reliability of the system, so there is a risk of user information being leaked. In addition, the SET security protocol is based on a fixed network, and requires the transaction party to pre-install the corresponding program before use. During the transaction process, there are too many operations for encryption, decryption, digital signature and verification, and the procedures for certificate delivery and identity authentication are cumbersome. Such complex operations and cumbersome procedures will inevitably lead to low efficiency of the SET protocol, and at the same time affect the user experience and increase the network burden.

SUMMARY OF THE INVENTION

In order to solve the transaction security problem existing in the above electronic payment system, the present invention provides an anonymous payment method and system for a transaction account. The present invention can realize anonymous payment of the bank accounts of both parties in the transaction, and isolate the user identity on the network from the real transaction account identity. , improve the security of transaction funds, for this reason, the anonymous payment method of the transaction account provided by the present invention specifically includes:

After the customer node generates a commodity order from the payment page of the e-commerce platform, the security management center provides the customer node with a collection of customer public keys of multiple customer nodes;

The customer node uses the customer public key set to generate the first ring signature data for the commodity order, and the commodity order includes the order number, the customer ID, the payment bank ID, the product details, the payment amount, and the payment account information encrypted by the first master key. , the customer public key set, the customer identity, and the first master key form a first mapping relationship in the security management center, use the public key of the merchant node to encrypt the first ring signature data and the commodity order, and attach the ciphertext to the commodity purchase request. The message is sent to the merchant node together;

After decryption, the merchant node obtains the first-ring signature data and the commodity order, and checks whether all the public keys in the customer public key set exist from the customer authentication center. Perform signature verification on the first ring signature, if the signature verification result is incorrect, feedback the client authentication failure message to the client node, otherwise, the security management center will provide the merchant node with the merchant public key set of multiple merchant nodes;

The merchant node uses the merchant public key set to sign the customer public key set, the commodity order, and the merchant settlement slip, and generates the second ring signature data. The merchant settlement slip includes the merchant identification, the receiving bank identification, and is encrypted by the second master key. The collection account information of the payment gateway, the merchant public key set, the merchant identity, and the second master key form a second mapping relationship in the security management center; use the payment gateway's public key to sign the second ring data, customer public key set, commodity Orders and merchant settlements are encrypted again, and the ciphertext is sent to the payment gateway along with the payment request message;

After decryption, the payment gateway obtains the second ring signature data, customer public key set, commodity order, and merchant settlement statement, and checks whether all public keys in the merchant public key set exist from the merchant authentication center. The node feeds back the merchant authentication failure message, otherwise the second ring signature is verified. If the verification result is incorrect, the merchant authentication failure message is fed back to the merchant node. Collections, commodity orders, and merchant settlements are encrypted and sent to the payment bank node;

After decryption, the paying bank node obtains the customer public key set, the merchant public key set, the commodity order, and the merchant settlement statement, extracts the customer public key set and the merchant public key set and sends it to the security management center. The customer ID, the first master key, the merchant ID, and the second master key corresponding to the public key set index are encrypted by the shared key of the two and sent to the paying bank node;

After decryption, the paying bank node extracts the first master key and the second master key, uses the first master key to decrypt the commodity order to obtain payment account information, and uses the second master key to decrypt the merchant's settlement slip Obtain the payment account information, send a payment confirmation request message to the client node, and the payment confirmation request message is encrypted by the first master key;

After decryption, the client node returns the payment confirmation message containing the payment password to the paying bank node after verifying that the payment confirmation request message is correct, and the payment confirmation message is encrypted by the first master key;

After decryption, the paying bank node verifies that the payment confirmation message is correct, and transfers the money to the payment account designated by the merchant according to the payment account designated by the customer. After successful payment, the paying bank node and the receiving bank node send corresponding messages to the customer node and the merchant node respectively. payment success message and payment success message.

Further preferably, the generation process of the client public key set is:

The client node generates _{a random number rc locally, uses its own private key to sign the random number rc and the client identity ID c to obtain the client signature data SIG c , and} uses the public key of the security management center to _{sign the client signature data SIG c ,} The random number _{rc and the customer identification ID c are} encrypted and sent to the security management center;

After decryption, the security management center extracts the public key corresponding to the customer identity ID _c to verify the signature of the customer signature data SIG _c , and generates a random number _{rs_1} locally when the confirmation is true, and concatenates the random number _{rc and the random number rs_1 .} Perform N hash iterative operations, use the hash value hi obtained by each _hash operation as a pointer to index the corresponding bit in the bit array, and extract the public key of the bit index, and the bit array is stored in the bit-by-bit index database The public keys to which different client nodes belong to;

The extracted N public keys are formed into a client public key set.

Further preferably, the generation process of the first master key is:

将公开参数y_c和随机数r_c一起发送给安全管理中心；The client node sets the secret value x _c , calculates the public parameter

Send the public parameter _{y c} and the random number rc to the security management center;

然后结合公开参数y_c和随机数r_{s_1}进一步生成第一主控密钥：The security management center sets the secret value x _{s_1} and calculates the public parameters

Then combine the public parameter y _c and the random number _{rs_1} to further generate the first master key:

The security management center sends the public parameter y _{s_1} together with the random number r _{s_1} to the client node;

The client node further generates the first master key according to the secret value x _c , the public parameter _{y s_1} and the random number rc:

Among them, k _sc =k _cs , q represents a large prime number, and g represents a generator on the finite field GF(q).

Further preferably, the generation process of the merchant public key set is:

The merchant node generates a random number rm locally, uses its own private key to sign the random number rm and the merchant identity ID _m to obtain the merchant signature data _{SIG m ,} and uses the public key of the security management center to _{sign the merchant signature data SIG m ,} The random number _{rm and the merchant identity ID m are} encrypted and sent to the security management center;

After decryption, the security management center extracts the public key corresponding to the merchant's identity ID _m to verify the signature of the merchant's signature data SIG _m , generates a random number _{rs_2} locally when it is confirmed to be true, and concatenates the random number _rm and the random number _{rs_2} Perform M hash iteration operations, use the hash value h _j obtained by each hash operation as a pointer to index the corresponding bit in the bit array, and extract the public key of the bit index, and the bit array is stored in the bit index database. The public keys to which different merchant nodes belong to;

The extracted M public keys are formed into a merchant public key set.

Further preferably, the generation process of the second master key is:

将公开参数y_m和随机数r_m一起发送给安全管理中心；The merchant node sets the secret value x _m and calculates the public parameters

Send the public parameter y _m together with the random number r _m to the security management center;

然后结合公开参数y_m和随机数r_{s_2}进一步生成第二主控密钥：The security management center sets the secret value x _{s_2} and calculates the public parameters

Then combine the public parameter y _m and the random number _{rs_2} to further generate the second master key:

The security management center sends the public parameter y _{s_2} and the random number r _{s_2} to the merchant node together;

The merchant node further generates the second master key according to the public parameter y _{s_2} , the secret value x _m and the random number _rm :

Among them, k _sm =k _ms , q represents a large prime number, and g represents a generator on the finite field GF(q).

Further preferably, the security management center sets the customer security parameter mapping table and the merchant security parameter mapping table for the customer node and the merchant node respectively;

The entries in the client security parameter mapping table include: the first entry identifier, the client public key set, the client identity identifier, and the first master key. By concatenating the client public key set and performing a hash operation, the calculation is obtained. The hash value is used as the first entry identifier to index the corresponding entry;

The entries in the merchant security parameter mapping table include: the second entry identifier, the merchant public key set, the merchant identity identifier, and the second master key. By concatenating the merchant public key sets and performing a hash operation, the calculation is obtained. The hash value is used as the second entry identifier to index the corresponding entry.

The invention also provides an anonymous payment system for a transaction account, which specifically includes: a client, a merchant server, a security management center, a customer authentication center, a merchant authentication center, a payment gateway, a payment bank terminal, and a collection bank terminal;

Client: Set in the user terminal equipment, the client node obtains the commodity purchase service provided by the e-commerce platform through the client, uses the client public key set to generate the first ring signature data for the commodity order, and sends it to the merchant server through encryption. The commodity purchase request message containing the first ring signature data and the commodity order, verify the authenticity of the payment confirmation request message, and send the payment confirmation message containing the payment password to the payment bank terminal in an encrypted manner after it is determined to be true;

Merchant server: a remote terminal set at the merchant node, which provides the client with commodity purchase services in the network through the designed e-commerce platform, and uses the customer public key query port provided by the customer authentication center to verify the first item in the commodity purchase request message. The authenticity of the ring signature data is verified by using the merchant public key set to verify that the first ring signature data is true. The customer public key set, the commodity order, and the merchant settlement form are signed, and the second ring signature data is generated, and sent to the payment gateway by encryption. The second ring signature data, customer public key set, commodity order, payment request message of the merchant's settlement statement, receive and provide the client with the specified commodity according to the payment success message;

Security Management Center: Responsible for providing the client and merchant server with the public key data set used for ring signature, the master key parameters used for encryption of payment account information, and providing real-time updated customers for the customer authentication center and the merchant authentication center The public key and the merchant public key are used to verify the authenticity of the customer public key set and the merchant public key set provided by the payment bank terminal. control key, merchant identification, and second master control key, and send them to the payment bank terminal through encryption;

Payment gateway: use the merchant public key query port provided by the merchant authentication center to verify the authenticity of the second ring signature data in the payment request message, and verify the second ring signature data as the true customer public key set and merchant public key set by encryption , commodity orders, and merchant settlement slips are sent to the payment bank terminal;

Paying bank terminal: verify the authenticity of the customer public key set and the merchant public key set through the security management center, and use the first master key and the second master key provided by the security management center to decrypt to obtain payment account information and collection account information , send a payment confirmation request message to the client through encryption, verify the authenticity of the payment confirmation message fed back by the client, and transfer the payment to the payment account designated by the merchant according to the payment account designated by the customer after it is confirmed to be true, and send the payment success message at the same time. to the client;

Receiving bank terminal: Receive the payment from the paying bank terminal, and at the same time send the payment success message to the merchant server;

Customer Authentication Center: Receive the customer public key provided by the security management center, complete the update of the local customer public key set, and provide the merchant server with a port for customer public key query;

Merchant Authentication Center: Receive the merchant public key provided by the security management center, complete the update of the local merchant public key set, and provide the payment gateway with a port for merchant public key query.

The advantages of the anonymous payment method and system for a transaction account provided by the present invention are:

Under the supervision of the security management center, the circular authentication chain between transaction participants is executed. In the process of completing the payment of a commodity order, the merchant node is responsible for the identity authentication of the customer node, the payment gateway is responsible for the identity authentication of the merchant node, the customer node and the The authentication of the final payment procedure between the payment bank nodes, the payment gateway has the full authority to undertake the identity authentication of both parties to the transaction and is distributed among the participants, which reduces the workload of the payment gateway and avoids the appearance of the payment gateway. catastrophic consequences of defecting or being attacked;

The public key set allocated by the security management center is distributed to the customer node and the merchant node, and the two parties of the transaction generate the ring signature data that can verify the legal identity of the customer and the merchant. At the same time, according to the anonymous nature of the ring signature, the public key of the node is prevented from being directly exposed to the network. , providing an opportunity for criminals to forge signatures; and for a highly credible security management center, the true identity of the signer of the ring signature data can be reversely calculated based on the public key combination information, so that any legal signature can be traced;

The payment account information is hidden in the commodity order and merchant settlement, and the actual transaction accounts of the customer and the merchant are invisible to the payment gateway. Only after the ring signature data is verified by the security management center, the payment bank node can be used. Obtain the real customer payment account information and merchant collection account information, and finally complete the payment confirmation operation between the customer's card issuing bank and the client. During the entire transaction process, the bank accounts of both parties are transparent to the payment gateway; in addition, for As far as the security management center is concerned, it only provides security parameters or authentication services for each object participating in the payment process based on high trust, and does not directly participate in specific payment activities, that is, it cannot obtain specific commodity orders and merchant information. The subject matter of the order is verified to ensure the independent operation of the transaction entity business and the security certification work.

Description of drawings

1 is a flowchart of an anonymous payment method for a transaction account provided by the present invention;

Fig. 2 is the customer/merchant public key set generation process in the security management center;

FIG. 3 is a structural diagram of an anonymous payment system for a transaction account provided by the present invention.

Detailed ways

Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While certain embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be construed as limited to the embodiments set forth herein, but rather are provided for the purpose of A more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are only for exemplary purposes, and are not intended to limit the protection scope of the present disclosure.

The invention provides a transaction account anonymous payment method based on the application of the e-commerce platform. The security management center is used as a security guide to perform anonymous signature verification and anonymous transaction account verification of the legitimacy of user and merchant identities, and implement transactions on a third-party payment platform. The business data is isolated from the transaction account information to avoid the problem of easy theft and theft of funds in the online banking account caused by the association, so that the user's personal information can be protected.

As shown in Figure 1, the transaction account anonymous payment method provided by the present invention specifically includes the following contents:

First, customers can log in to the e-commerce platform website through browser mode or client program mode. On the product display page of the e-commerce platform, users can search and select the type of goods or services they need. The payment page of the product order is generated. Commodity orders mainly include order number, customer ID, payment bank ID, product details, payment amount, and payment account information. The customer node represents the login identity of the customer on the e-commerce platform, including the user name, user password, bound mobile phone or email information prepared by the user during the registration stage, and the unique user identity identifier (or ID identifier) generated by the system, etc. information.

After the commodity order is generated, the customer node needs to send the commodity purchase request message to the merchant node, and the merchant node completes the order confirmation operation. The merchant node is used to indicate the login identity of the merchant on the e-commerce platform. The present invention adopts a ring signature mechanism for the public key used for customer identity verification in the process of executing commodity order confirmation. The realization of ring signature is to use the public key set, including the signer's public key and the signer's own private key to sign the message. The verifier cannot determine who the actual signer in the public key set is. The difference of the present invention lies in that: all public keys of clients are distributed and managed by the security management center, the client node saves its own public-private key pair locally, and the public key set used in the ring signature of the client node is provided by the security management center, All the public keys in the set belong to the legal public keys of different customers. Although the ring signature data is anonymous to any third party, the security management center can form the true identity of the signer through different sets of public keys, and use this The function is for the payment bank node to feed back the result of whether the transaction is really safe, and complete the payment authentication confirmation.

The security management center is provided by institutions with high reputation, such as government banks and other financial regulators or network security management institutions. Because these departments have national reputation as a guarantee, compared to traditional third-party payment platforms (such as Alipay) Has higher security and system reliability. The identities of customer nodes and merchant nodes correspond one-to-one with public keys, which are used to determine the real identities of customers and merchants.

The specific generation process of the client public key set is as follows:

After the commodity order is generated, the client node _c generates _{a random number rc locally, uses its own private key to sign the random number rc and the client identity ID c to obtain the client signature data SIG c , and} uses the public key of the security management center The customer signature data SIG _c , random number rc , and customer identity ID _c are encrypted and sent to the security management center _.

After decrypting with the private key, the security management center s extracts the public key corresponding to the customer's identity ID _c to verify the signature of the customer's signature data SIG _c , generates a random number _{rs_1} locally when the confirmation is true, and compares the random number _rc with the random number After r _{s_1} is cascaded, perform N hash iteration operations, take the hash value h _i (1≤i≤N) obtained by each hash operation as the corresponding bit in the pointer index bit array, and extract the public key of the bit index , the extracted N public keys are formed into a client public key set, and then encrypted again with the client's public key and sent back to the client node, and the client node decrypts with its own private key to obtain the client public key set.

The bit array structure is shown in Figure 2. The bit array is the public key of different customer nodes or merchant nodes stored in the bit-by-bit index database. Taking Figure 2 as an example, the length of the bit array is set to 2 ^t bits, each of which points to a customer public key or merchant public key in the database. Therefore, the length of the bit array needs to be no less than all registered customer public keys or The number of merchant public keys, and the bits in the bit array cannot be left blank to avoid extraction of null values. Multiple bits can point to the same customer public key or merchant public key. The guidelines for public keys can be automatically generated by random algorithms. Assignments can be manually selected. After rounding the hash value h _i obtained by the ith hash iteration operation, point the converted decimal hash number to the corresponding bit in the bit array, and then continue to extract the public key data stored in this bit from the database. When the number of registered customer public keys and merchant public keys continue to increase, the expansion of the bit array can make it meet the needs of signature users.

The security management center physically isolates the customer public key set and the merchant public key set. The customer public key set and the merchant public key set are managed by the customer authentication center and the merchant authentication center respectively, and provide different usages for each participant in the transaction. permissions. The security management center provides the customer node and the merchant node with the public key set required for signature, and the customer authentication center and the merchant authentication center respectively provide the merchant node and the payment gateway with designated query ports to complete the ring signature verification work.

C_k，v(y₁，y₂，...，y_N)对于任意一组输入(y₁，y₂，...，y_N)均可解，但是对于攻击者而言，如果不能求出陷门函数g₁，g₂，...，g_N的逆函数，则给定C_k，v(g₁(x₁)，g₂(x₂)，...，g_N(x_N))无法求出x₁，x₂，...，x_N。此过程具体需要执行以下3个算法keyGen()、Sign()和Verify()。The client node uses the client public key set to generate first ring signature data for the commodity order. Assuming that the signer arbitrarily selects N users when creating a ring signature, and each user A _i has a public key PK _i and a private key SK _i , we can define a mixing function, such as

C _{k, v} (y ₁ , y ₂ , ..., y _N ) can be solved for any set of inputs (y ₁ , y ₂ , ..., y _N ), but for the attacker, if not Find the inverse function of the trapdoor functions g ₁ , g ₂ , ..., g _N , then given C _{k, v} (g ₁ (x ₁ ), g ₂ (x ₂ ), ..., g _N ( x _N )) cannot find x ₁ , x ₂ , ..., x _N . This process specifically needs to execute the following three algorithms keyGen(), Sign() and Verify().

Key generation algorithm: keyGen()

Assuming that keyGen() is a probability polynomial function, the input is the set security parameter λ, and the output is the public key PKi and the private key SKi. This key pair is generated by the security management center and assigned to the specified customer or merchant node. Classic public key encryption algorithms such as RSA and ElGamal are used.

Signature algorithm: Sign()

The client node uses its own private key SK _c and the client public key set to sign the information M, where M is the commodity order data, and a ring signature σ is generated.

1. The security management center provides the signer with a ring public key set L={PK ₁ , PK ₂ , ... PK _N }, where each PK _i is related to a transformed y _i ;

2. Calculate k=H(M), where H represents the hash operation, and k is the key of the symmetric encryption algorithm E _k ;

3. Select a random number v, the initial value v∈{0, 1} ^b ;

4. Generate a random number _xi (i=1, 2,...N, i≠c), that is, the signer assigns a random number _xi to all customer public keys except itself, and calculates the corresponding y according to _{xi i} =g(x _i );

5. Solve the equation C _{k, v} (y ₁ , y ₂ , ..., y _N )=v, and obtain the corresponding value y _c of the signer;

6. According to the trapdoor knowledge, the signer solves the corresponding

7. Generate a ring signature σ=(PK ₁ , PK ₂ , . . . PK _N , v, x ₁ , x ₂ , . . . , x _N ) of a (2N+1) tuple.

Signature verification algorithm: Verify()

1. Calculate y _i =g(x _i ) according to x _i to obtain (y ₁ , y ₂ ,...,y _N );

2. Calculate k=H(M);

3. Substitute the above parameters into the ring equation C _{k, v} (y ₁ , y ₂ , ..., y _N )=v, and verify whether this equation holds. If it holds, it indicates that the verification is successful, and outputs "True", otherwise it indicates that Validation fails with "False" output.

For an attacker, even if he obtains the private keys of all ring members, the probability that he can correctly determine the true signer does not exceed 1/N.

After the client node executes the first ring signature, it needs to hide the payment account information selected for this transaction and send it to the merchant node together with the commodity order. Specifically, the payment account information is paired with the first master key negotiated with the security management center. Perform cryptographic operations.

The present invention adopts the Diffie-Hellman key exchange algorithm, and the realized key exchange process is:

q表示大素数，g表示有限域GF(q)上的一个生成元，将公开参数y_c和随机数r_c一起发送给安全管理中心；The client node sets the secret value x _c , calculates the public parameter

q represents a large prime number, g represents a generator on the finite field GF(q), and the public parameter _{y c} and the random number rc are sent to the security management center together;

然后结合公开参数y_c和随机数r_{s_1}进一步生成第一主控密钥：The security management center sets the secret value x _{s_1} and calculates the public parameters

Then combine the public parameter y _c and the random number _{rs_1} to further generate the first master key:

The security management center sends the public parameter y _{s_1} together with the random number r _{s_1} to the client node;

The client node further generates the first master key according to the secret value x _c , the public parameter _{y s_1} and the random number rc:

That is, k _sc = k _cs , which is used as a shared key exchanged by both parties. The random number is added as a key parameter variable in the above DH algorithm, so that the generated active key has a higher randomness and is more difficult to be cracked.

After completing the encryption operation of the payment account information, the client node encrypts the first ring signature data and the commodity order using the public key of the merchant node, and sends the ciphertext to the merchant node together with the commodity purchase request message.

After decryption, the merchant node obtains the first-ring signature data and the commodity order, and checks whether all the public keys in the customer public key set exist from the customer certification center. If it is maliciously tampered with, feedback the client authentication failure message to the client node. Otherwise, continue to perform the signature verification operation on the first ring signature. If the signature verification result is incorrect, it also returns the client authentication failure message to the client node. If the signature verification result is correct, it indicates that the client The node identity is legal and the data of the commodity order is complete.

Further, the merchant node needs to send a payment request message to the payment gateway (or the third payment platform), and the payment gateway verifies the merchant node. The payment request message includes the merchant settlement slip, the customer public key set, the commodity order and the signature data. The merchant node uses the merchant public key set to sign the customer public key set, the commodity order, and the merchant settlement slip, and generates the second ring signature data. The merchant settlement form includes the merchant identification, the receiving bank identification, and the collection account information encrypted by the second master key, that is, the collection account information set by the merchant node is hidden, and the public key of the payment gateway is used to pair the payment gateway. The second ring signature data, customer public key set, commodity order, and merchant settlement are encrypted again, and the ciphertext is sent to the payment gateway together with the payment request message.

The specific generation process of the merchant public key set is as follows:

After generating the merchant settlement slip, the merchant node _m generates a random number rm locally, uses its own private key to sign the random number rm and the merchant identity _IDm to obtain the merchant signature data SIG _m , and uses the public key of the security management center The merchant signature data SIG _m , the random number rm , and the merchant identity ID _{m are} encrypted and sent to the security management center.

After decrypting with the private key, the security management center s extracts the public key corresponding to the merchant's identity ID _m to verify the signature of the merchant's signature data SIG _m , generates a random number _{rs_2} locally when it is confirmed to be true, and combines the random number r _m with the random number After r _{s_2} is cascaded, perform M hash iteration operations, use the hash value h _j (1≤j≤M) obtained by each hash operation as the corresponding bit in the pointer index bit array, and extract the public key of the bit index , and the extracted M public keys form a merchant public key set. Then use the merchant's public key to encrypt again and send it back to the merchant node, and the merchant node decrypts it with its own private key to obtain the merchant public key set. The bit array bit-by-bit indexes the public keys of different merchant nodes stored in the database.

The second master key is consistent with the aforementioned key exchange algorithm, and the specific key exchange process is:

将公开参数y_m和随机数r_m一起发送给安全管理中心；The merchant node sets the secret value x _m and calculates the public parameters

Send the public parameter y _m together with the random number r _m to the security management center;

然后结合公开参数y_m和随机数r_{s_2}进一步生成第二主控密钥：The security management center sets the secret value x _{s_2} and calculates the public parameters

Then combine the public parameter y _m and the random number _{rs_2} to further generate the second master key:

The security management center sends the public parameter y _{s_2} and the random number r _{s_2} to the merchant node together;

The merchant node further generates the second master key according to the public parameter y _{s_2} , the secret value x _m and the random number _rm :

Wherein, k _sm =k _ms , which is used as the shared key exchanged between the security management center and the merchant.

After completing the encryption operation of the receiving account information, the merchant node uses the public key of the payment gateway to encrypt the second ring signature data, the customer public key set, the commodity order, and the merchant settlement again, and sends the ciphertext payment request message to the payment gateway. gateway.

After the payment gateway decrypts with its own private key, it obtains the second ring signature data, customer public key set, commodity order, and merchant settlement statement, and checks whether all public keys in the merchant public key set exist from the merchant authentication center. If there is an illegal merchant If the public key is used, the merchant's authentication failure message will be fed back to the merchant node. Otherwise, the second ring signature will continue to be verified. If the signature verification result is incorrect, the merchant's authentication failure message will be fed back to the merchant node. If the signature verification result is correct, use the payment bank. The public key of the node encrypts the customer public key set, the merchant public key set, the commodity order, and the merchant settlement slip and sends it to the paying bank node.

The payment gateway is only responsible for the verification of the legitimacy of the merchant's identity and the verification of the data integrity of the commodity order and the merchant's settlement statement, and does not participate in the identity authentication of the customer node. Although the payment gateway can obtain the customer's identity information through the order, It cannot be associated with the corresponding public key, which protects the privacy of customers, and the bank accounts of both parties to the transaction are invisible to the payment gateway. Even if the attacker invades the payment gateway or third-party payment platform, the specific transaction account information cannot be obtained.

After decrypting the ciphertext, the paying bank node obtains the customer public key set, the merchant public key set, the commodity order, the merchant settlement slip, and extracts the customer ID in the commodity order, the merchant identification in the merchant settlement, the customer public key set and Merchant public key set and sent to the security management center. It is encrypted by the shared key of the two and sent to the paying bank node. The shared key can be negotiated and completed by both parties during the initial signing of the service, or it can be transmitted through a physical memory in a more secure offline manner.

The security management center sets the customer security parameter mapping table and the merchant security parameter mapping table for the customer node and the merchant node respectively.

The entries in the client security parameter mapping table include: the first entry identifier, the client public key set, the client identity identifier, and the first master key. By concatenating the client public key set and performing a hash operation, the calculation is obtained. The hash value h _c :

h _e =Hash(PK _i ||PK ₂ ||...PK _N-1 ||PK _N )

Take h _c as the first entry identifier, which is used to index the corresponding entry, so that the client public key set, the client identity identifier, and the first master key form a first mapping relationship in the security management center, and the above public key is a bitwise The order of the bits in the array is concatenated. Taking the customer security parameter mapping table as an example, each table entry can be expressed as:

first entry identifier client public key set Customer ID first master key h_c L ID_c k_sc

The entries in the merchant security parameter mapping table include: the second entry identifier, the merchant public key set, the merchant identity identifier, and the second master key. In the same way as above, the hash is executed by concatenating the merchant public key set. The hash value obtained by the calculation is used as the second entry identifier, which is used to index the corresponding entry, so that the merchant public key set, the merchant identity identifier, and the second master key form a second mapping relationship in the security management center .

When the security management center simultaneously queries the entries corresponding to the first entry identifier and the second entry identifier, it extracts the customer identity identifier, the first master control key, the merchant identity identifier, and the second master control key. When it is confirmed that the received customer ID and merchant ID are consistent with the records in the mapping table, the first and second master keys are sent to the paying bank node in a secret way.

After decryption, the paying bank node extracts the first master key and the second master key, uses the first master key to decrypt the commodity order to obtain payment account information, and uses the second master key to decrypt the merchant's settlement slip Obtain the payment account information, and then send a payment confirmation request message to the client node. At this time, the payment confirmation request message is encrypted by the first master key.

After decryption, the client node returns the payment confirmation message containing the payment password to the paying bank node after verifying that the payment confirmation request message is correct, and the payment confirmation message is also encrypted by the first master key. The payment password password may contain facial recognition data with the user's biometric features or a verification message such as a text message provided by the mobile network.

After the payment bank node decrypts the ciphertext again, and after verifying that the payment confirmation message is correct, it transfers money to the payment account designated by the merchant according to the payment account designated by the customer, and the order number and other summary messages of the transaction are recorded in the transfer certificate or deposit certificate. After the payment is successful, the paying bank node sends a payment success message to the customer node, and the receiving bank node sends a payment success message to the merchant node with the order number message of this transaction, and the merchant node provides the specified customer with the goods according to the order. or service.

In order to realize the above electronic payment method, the present invention also provides a transaction account anonymous payment system, as shown in Figure 3, the system specifically includes: a client, a merchant server, a security management center, a customer authentication center, a merchant authentication center, Payment gateway, payment bank terminal, receiving bank terminal.

Client: Set in the user terminal equipment, such as mobile phone terminal or personal computer terminal, the client node obtains the commodity purchase service provided by the e-commerce platform through the client, and uses the customer public key set to generate the first ring signature data for the commodity order, and Send the commodity purchase request message containing the first ring signature data and commodity order to the merchant server through encryption, verify the authenticity of the payment confirmation request message, and send the payment confirmation message containing the payment password to the merchant server by encryption. Payment bank terminal.

Merchant server: a remote terminal set at the merchant node, which provides the client with commodity purchase services in the network through the designed e-commerce platform, and uses the customer public key query port provided by the customer authentication center to verify the first item in the commodity purchase request message. The authenticity of the ring signature data is verified by using the merchant public key set to verify that the first ring signature data is true. The customer public key set, the commodity order, and the merchant settlement form are signed, and the second ring signature data is generated, and sent to the payment gateway by encryption. The second ring signature data, the customer public key set, the commodity order, the payment request message of the merchant's settlement statement, receive and provide the client with the specified commodity according to the payment success message.

Security Management Center: Responsible for providing the client and merchant server with the public key data set used for ring signature, the master key parameters used for encryption of payment account information, and providing real-time updated customers for the customer authentication center and the merchant authentication center The public key and the merchant public key are used to verify the authenticity of the customer public key set and the merchant public key set provided by the payment bank terminal. control key, merchant identification, and second master control key, and send them to the payment bank terminal in an encrypted manner.

Payment gateway: use the merchant public key query port provided by the merchant authentication center to verify the authenticity of the second ring signature data in the payment request message, and verify the second ring signature data as the true customer public key set and merchant public key set by encryption , commodity orders, and merchant settlement slips are sent to the payment bank terminal.

Paying bank terminal: verify the authenticity of the customer public key set and the merchant public key set through the security management center, and use the first master key and the second master key provided by the security management center to decrypt to obtain payment account information and collection account information , send a payment confirmation request message to the client through encryption, verify the authenticity of the payment confirmation message fed back by the client, and transfer the payment to the payment account designated by the merchant according to the payment account designated by the customer after it is confirmed to be true, and send the payment success message at the same time. to the client.

Receiving bank terminal: Receive the payment from the paying bank terminal, and send the payment success message to the merchant server at the same time.

Customer Authentication Center: Receive the customer public key provided by the security management center, complete the update of the local customer public key set, and provide the merchant server with a port for customer public key query.

Merchant Authentication Center: Receive the merchant public key provided by the security management center, complete the update of the local merchant public key set, and provide the payment gateway with a port for merchant public key query.

Although the subject matter has been described in language specific to structural features and/or logical acts of method, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are merely example forms of implementing the claims.

Claims (7)

1. A method for anonymous payment of a transaction account, comprising:

after the customer nodes generate commodity orders from payment pages of the e-commerce platform, a safety management center provides a customer public key set of a plurality of customer nodes for the customer nodes;

the method comprises the steps that a customer node generates first ring signature data for a commodity order by utilizing a customer public key set, the commodity order comprises an order number, a customer identity, a payment bank identity, commodity details, payment amount and payment account information encrypted by a first master control key, the customer public key set, the customer identity and the first master control key form a first mapping relation in a security management center, the first ring signature data and the commodity order are encrypted by utilizing a public key of a merchant node, and a ciphertext is sent to the merchant node along with a commodity purchasing request message;

the merchant node obtains first ring signature data and a commodity order after decryption, whether all public keys in a customer public key set exist is inquired from a customer authentication center, if not, the signature verification fails, a customer authentication failure message is fed back to the customer node, otherwise, the signature verification is executed on the first ring signature, if the signature verification result is incorrect, the customer authentication failure message is fed back to the customer node, otherwise, the security management center provides the merchant public key set of a plurality of merchant nodes for the merchant node;

the merchant node utilizes the merchant public key set to sign a customer public key set, a commodity order and a merchant settlement list to generate second ring signature data, the merchant settlement list comprises a merchant identity, a payment bank identity and payment account information encrypted by a second master control key, and the merchant public key set, the merchant identity and the second master control key form a second mapping relation in the security management center; encrypting the second ring signature data, the client public key set, the commodity order and the merchant settlement list again by using the public key of the payment gateway, and sending the ciphertext to the payment gateway along with the payment request message;

the payment gateway obtains second ring signature data, a customer public key set, a commodity order and a merchant settlement list after decryption, whether all public keys in the merchant public key set exist is inquired from a merchant authentication center, if not, the signature verification fails, a merchant authentication failure message is fed back to a merchant node, otherwise, the signature verification is executed on the second ring signature, if the signature verification result is incorrect, the merchant authentication failure message is fed back to the merchant node, otherwise, the public key of the payment bank node is used for encrypting the customer public key set, the merchant public key set, the commodity order and the merchant settlement list and then sending the encrypted second ring signature data, the customer public key set, the merchant public key set, the commodity order and the merchant settlement list to the payment bank node;

the payment bank node obtains a customer public key set, a merchant public key set, a commodity order and a merchant settlement list after decryption, extracts the customer public key set and the merchant public key set and sends the customer public key set and the merchant public key set to the security management center, and the security management center indexes a corresponding customer identity, a first master key, a merchant identity and a second master key according to the customer public key set and the merchant public key set and sends the customer identity, the first master key, the merchant identity and the second master key to the payment bank node after encryption by a shared key of the customer public key set and the merchant public key set;

after the payment bank node decrypts the commodity order, a first main control key and a second main control key are extracted, the first main control key is used for decrypting the commodity order to obtain payment account information, the second main control key is used for decrypting the merchant settlement order to obtain collection account information, a payment confirmation request message is sent to the client node, and the payment confirmation request message is encrypted by the first main control key;

after the client node decrypts the payment confirmation request message and verifies that the payment confirmation request message is correct, the payment confirmation message containing the payment password is fed back to the payment bank node, and the payment confirmation message is encrypted by the first master key;

and after the payment confirmation message is verified to be correct after the payment bank node is decrypted, transferring the account to a collection account appointed by the merchant according to the payment account appointed by the customer, and after the payment is successful, respectively sending a payment success message and a collection success message to the customer node and the merchant node by the payment bank node and the collection bank node.

2. The method for anonymous payment on a transaction account according to claim 1, wherein the generation process of the client public key set comprises:

the client node locally generates a random number r_cUsing its own private key to match the random number r_cCustomer ID_cSigning to obtain client signature data SIG_cAnd signing the client signature data SIG by using a public key of a security management center_cA random number r_cCustomer identification ID_cEncrypting and sending the encrypted data to a security management center;

the security management center extracts the customer identification ID after decryption_cCorresponding public key-to-client signature data SIG_cChecking the label, and locally generating a random number r when the confirmation is true_{s_1}A random number r_cAnd a random number r_{s_1}After cascading, executing N times of Hash iterative operations to obtain Hash value h by each time of Hash operation_iThe public key of the index of the position is extracted as the corresponding position in the pointer index position array, and the position array is used for indexing the public keys of different client nodes stored in the database according to the position;

and composing the extracted N public keys into a client public key set.

3. The method for anonymously paying for a transaction account according to claim 2, wherein the first master key is generated by:

client node sets secret value x_cCalculating public parameters

Will disclose the parameter y_cAnd a random number r_cSending the data to a safety management center;

security management center sets secret value x_{s_1}Calculating public parameters

Then combining the public parameter y_cAnd a random number r_{s_1}Further generating a first master key:

the security management center will disclose the parameter y_{s_1}And a random number r_{s_1}Sent to the customer node together;

the client node depends on the secret value x_cPublic parameter y_{s_1}And a random number r_cFurther generating a first master key:

wherein k is_sc＝k_csQ denotes the large prime number and g denotes a generator over the finite field gf (q).

4. The anonymous payment method for transaction account as set forth in claim 1, wherein the generation process of the merchant public key set comprises:

commercial tenant node locally generates random number r_mUsing its own private key to match the random number r_mMerchant identity ID_mSigning to obtain merchant signature data SIG_mAnd signing the merchant signature data SIG by using the public key of the security management center_mA random number r_mMerchant identity ID_mEncrypting and sending the encrypted data to a security management center;

extracting the identity ID of the merchant after decryption by the security management center_mCorresponding public key pair merchant signature data SIG_mChecking the label, and locally generating a random number r when the confirmation is true_{s_2}A random number r_mAnd a random number r_{s_2}Executing M times of Hash iterative operation after cascade connection, and obtaining Hash value h by Hash operation each time_jThe public key of the index bit array is extracted as the corresponding bit in the pointer index bit array, and the bit array is used for storing the public keys of different merchant nodes in a bit index database;

and forming a merchant public key set by the extracted M public keys.

5. The method for anonymous payment from a transaction account as claimed in claim 4, wherein the second key is generated by:

merchant node setting secret value x_mCalculating public parameters

Will disclose the parameter y_mAnd a random number r_mSending the data to a safety management center;

security management center sets secret value x_{s_2}Calculating public parameters

Then combining the public parameter y_mAnd a random number r_{s_2}Further generating a second master key:

the security management center will disclose the parameter y_{s_2}And a random number r_{s_2}Sending the data to the merchant node together;

the merchant node is according to the public parameter y_{s_2}Secret value x_mAnd a random number r_mFurther generating a second master key:

wherein k is_sm＝k_msQ denotes the large prime number and g denotes a generator over the finite field gf (q).

6. The anonymous payment method for transaction account as set forth in claim 1, wherein the security management center sets a customer security parameter mapping table and a merchant security parameter mapping table for the customer node and the merchant node, respectively;

the entries in the client security parameter mapping table include: the method comprises the steps that a first table item identifier, a client public key set, a client identity identifier and a first master key are used for performing hash operation after the client public key set is cascaded, and a hash value obtained through calculation is used as the first table item identifier and used for indexing a corresponding table item;

the entries in the merchant security parameter mapping table include: and the second table item identifier, the merchant public key set, the merchant identity identifier and the second master key are used for performing hash operation after the merchant public key set is cascaded, and taking a hash value obtained by calculation as the second table item identifier for indexing the corresponding table item.

7. A transaction account anonymous payment system, the system comprising: the system comprises a client, a merchant server, a safety management center, a client authentication center, a merchant authentication center, a payment gateway, a payment bank terminal and a collection bank terminal;

a client: the system comprises a client node, a payment bank terminal and a payment password server, wherein the client node is arranged in the user terminal equipment, acquires a commodity purchasing service provided by a merchant platform through a client, generates first ring signature data for a commodity order by using a client public key set, sends a commodity purchasing request message containing the first ring signature data and the commodity order to the merchant server in an encryption mode, verifies the authenticity of the payment confirmation request message, and sends the payment confirmation message containing the payment password to the payment bank terminal in the encryption mode after the payment confirmation message is determined to be authentic;

the merchant server side: the system comprises a remote terminal arranged at a merchant node, a client side is provided with commodity purchasing service in a network through a designed e-commerce platform, a client public key inquiry port provided by a client authentication center is used for verifying the authenticity of first ring signature data in a commodity purchasing request message, a merchant public key set is used for verifying a client public key set, a commodity order and a merchant settlement order signature which are true for the first ring signature data, second ring signature data is generated, a payment request message containing the second ring signature data, the client public key set, the commodity order and the merchant settlement order is sent to a payment gateway in an encryption mode, and specified commodities are received and provided for the client side according to a successful payment message;

the safety management center: the system comprises a client side, a merchant server side, a client public key data set, a master key data set, a client public key set, a merchant public key set, a client identity identification, a merchant identity identification and a second master key, wherein the client side and the merchant server side are responsible for providing a public key data set for ring signature and master key parameters for encrypting payment account information, providing a client public key and a merchant public key which are updated in real time for a client authentication center and a merchant authentication center, verifying whether a client public key set and a merchant public key set provided by a payment bank terminal are true or false, indexing a corresponding client identity identification, a first master key, a merchant identity identification and a second master key according to the client public key set and the merchant public key set after the client public key set and the merchant public key set are determined to be true, and sending the client identity identification, the first master key, the merchant identity identification and the second master key to the payment bank terminal in an encryption mode;

the payment gateway: verifying the authenticity of the second ring signature data in the payment request message by utilizing a merchant public key query port provided by a merchant authentication center, and verifying the second ring signature data as a true customer public key set, a merchant public key set, a commodity order and a merchant settlement order in an encryption mode to send to a payment bank terminal;

payment bank terminal: verifying the authenticity of the client public key set and the merchant public key set through a security management center, decrypting by using a first master key and a second master key provided by the security management center to obtain payment account information and collection account information, sending a payment confirmation request message to a client in an encryption mode, verifying the authenticity of the payment confirmation message fed back by the client, transferring the payment to a collection account appointed by the merchant according to a payment account appointed by the client after the payment confirmation is true, and sending a payment success message to the client;

the collection bank terminal: receiving payment of a payment bank terminal, and sending a successful payment message to a merchant server;

the client authentication center: receiving a customer public key provided by a security management center, completing the update of a local customer public key set, and providing a port for customer public key inquiry for a merchant server;

the merchant authentication center: and receiving a merchant public key provided by the security management center, completing the update of the local merchant public key set, and providing a port for merchant public key query for the payment gateway.

Images