System and method for information protection

Patent metadata

Field	Value
Publication number	US-10909795-B2
Application number	US-202016863060-A
Country	US
Kind code	B2
Filing date	Apr 30, 2020
Priority date	Nov 27, 2018
Publication date	Feb 2, 2021
Grant date	Feb 2, 2021

Abstract

A computer-implemented method comprises: committing a transaction amount t of a transaction with a commitment scheme to obtain a transaction commitment value T, the commitment scheme comprising at least a transaction blinding factor r_t; encrypting a combination of the transaction blinding factor r_t and the transaction amount t with a public key PK_B of a recipient of the transaction; and transmitting the transaction commitment value T and the encrypted combination to a recipient node associated with the recipient for the recipient node to verify the transaction.

First claim

The invention claimed is:

1. A non-transitory computer-readable storage medium of a recipient node associated with a recipient of a transaction, the storage medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:
obtaining a transaction amount t of the transaction from a sender node associated with a sender of the transaction, a transaction blinding factor r_t, and a transaction commitment value T;
verifying the transaction by verifying the obtained transaction commitment value T based on the obtained transaction amount t and the obtained transaction blinding factor r_t;
in response to successfully verifying the transaction, generating an encrypted combination by encrypting the transaction blinding factor r_t and the transaction amount t with a public key PK_B of the recipient; and
transmitting the encrypted combination to the sender node.

2. The storage medium of claim 1 , wherein encrypting the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient comprises:
encrypting a concatenation of the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient.

3. The storage medium of claim 1 , wherein:
the transaction commitment value T is generated by the sender node according to a commitment scheme; and
the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t and with the transaction amount t being a committed value.

4. The storage medium of claim 3 , wherein verifying the transaction comprises:
in response to determining that the obtained transaction commitment value T does not match a result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, rejecting the transaction; or
in response to determining that the obtained transaction commitment value T matches the result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, approving the transaction.

5. The storage medium of claim 4 , wherein approving the transaction comprises:
generating a recipient signature SIGB by signing the transaction with a private key SK_B of the recipient.

6. The storage medium of claim 5 , wherein the operations further comprise:
transmitting the recipient signature SIGB to the sender node.

7. The storage medium of claim 5 , wherein:
the recipient signature SIGB is added to an updated version of the transaction before the updated version of the transaction is added to a blockchain.

8. A computer-implemented method for information protection, performed by a recipient node associated with a recipient of a transaction, comprising:
obtaining a transaction amount t of the transaction from a sender node associated with a sender of the transaction, a transaction blinding factor r_t, and a transaction commitment value T;
verifying the transaction by verifying the obtained transaction commitment value T based on the obtained transaction amount t and the obtained transaction blinding factor r_t;
in response to successfully verifying the transaction, generating an encrypted combination by encrypting the transaction blinding factor r_t and the transaction amount t with a public key PK_B of the recipient; and
transmitting the encrypted combination to the sender node.

9. The method of claim 8 , wherein encrypting the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient comprises:
encrypting a concatenation of the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient.

10. The method of claim 8 , wherein:
the transaction commitment value T is generated by the sender node according to a commitment scheme; and
the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t and with the transaction amount t being a committed value.

11. The method of claim 10 , wherein verifying the transaction comprises:
in response to determining that the obtained transaction commitment value T does not match a result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, rejecting the transaction; or
in response to determining that the obtained transaction commitment value T matches the result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, approving the transaction.

12. The method of claim 11 , wherein approving the transaction comprises:
generating a recipient signature SIGB by signing the transaction with a private key SK_B of the recipient.

13. The method of claim 12 , further comprising:
transmitting the recipient signature SIGB to the sender node.

14. The method of claim 12 , wherein:
the recipient signature SIGB is added to an updated version of the transaction before the updated version of the transaction is added to a blockchain.

15. A system comprising a processor and a non-transitory computer-readable storage medium of a recipient node associated with a recipient of a transaction, the storage medium storing instructions that, when executed by the processor, cause the processor to perform operations comprising:
obtaining a transaction amount t of the transaction from a sender node associated with a sender of the transaction, a transaction blinding factor r_t, and a transaction commitment value T;
verifying the transaction by verifying the obtained transaction commitment value T based on the obtained transaction amount t and the obtained transaction blinding factor r_t;
in response to successfully verifying the transaction, generating an encrypted combination by encrypting the transaction blinding factor r_t and the transaction amount t with a public key PK_B of the recipient; and
transmitting the encrypted combination to the sender node.

16. The system of claim 15 , wherein encrypting the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient comprises:
encrypting a concatenation of the transaction blinding factor r_t and the transaction amount t with the public key PK_B of the recipient.

17. The system of claim 15 , wherein:
the transaction commitment value T is generated by the sender node according to a commitment scheme; and
the commitment scheme comprises a Pedersen commitment based at least on the transaction blinding factor r_t and with the transaction amount t being a committed value.

18. The system of claim 17 , wherein verifying the transaction comprises:
in response to determining that the obtained transaction commitment value T does not match a result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, rejecting the transaction; or
in response to determining that the obtained transaction commitment value T matches the result of committing the transaction amount t based on the transaction blinding factor r_t according to the commitment scheme, approving the transaction.

19. The system of claim 18 , wherein approving the transaction comprises:
generating a recipient signature SIGB by signing the transaction with a private key SK_B of the recipient.

20. The system of claim 19 , wherein the operations further comprise:
transmitting the recipient signature SIGB to the sender node.

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Cui Jiahui
• Ma Baoli
• Liu Zheng
• Zhang Wenbin
• Ma Huanyu

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L2209/04

  Masking or blinding · CPC title