Hardware wallet and hardware wallet holder identity verification method

Patent metadata

Field	Value
Publication number	US-10963867-B2
Application number	US-201716344047-A
Country	US
Kind code	B2
Filing date	Dec 27, 2017
Priority date	Dec 28, 2016
Publication date	Mar 30, 2021
Grant date	Mar 30, 2021

Abstract

A hardware wallet and a hardware wallet holder identity verification method, relating to the field of digital currency. The hardware wallet comprises a virtual machine, a biological characteristic authentication module, and multiple wallet applications. Each wallet application stores a private key. The hardware wallet records, for each wallet application, a biological characteristic for verifying hardware wallet holder identity corresponding to each wallet application by using the virtual machine and the biological characteristic authentication module. Private key pair digital currency in the current wallet application can be used for trading only when verification of the hardware wallet holder identity corresponding to the current wallet application succeeds. The digital currency security protection mechanism is improved, and identity authentication management of multiple wallet applications is realized.

First claim

The invention claimed is:

1. A method for verifying an identity of a holder of a hardware wallet, wherein the hardware wallet comprises: a virtual machine, a biometrics verification module and a multiple of wallet applets; the method for verifying the identity of the holder of the hardware wallet comprises the following steps:
Step r1, sending, by a current wallet applet, a first verification request to the virtual machine if the current wallet applet receives a transaction request including the transaction data from the upper computer; the transaction data comprising a key derive path;
Step r2, sending, by the virtual machine, a second verification request to the biometrics verification module when the virtual machine receives the first verification request from the current wallet applet;
Step r3, prompting, by the current biometrics verification module, a current user to input a biological feature, and determining whether the current user is registered according to the biological feature when the biological feature input by the user is detected, if yes, making a biometric ID corresponding to the biological feature as a second verification result and sending the second verification result to the virtual machine, the virtual machine executing Step r4; otherwise, making that the verification is failure as the second verification result and sending the second verification result to the virtual machine, and the virtual machine executing Step r4;
Step r4, determining, by the virtual machine, whether the second verification result is that the verification is failure, if yes, making the verification is failure as the first verification result and sending the first verification result to the current wallet, and the current wallet executing Step r6; otherwise, executing Step r5;
Step r5, determining, by the virtual machine, whether the current user matches with the current wallet applet according to the biometric ID, if yes, making that the verification is successful as the first verification result and sending the first verification result to the current wallet applet, and the current wallet applet executing Step r6; otherwise, making the verification is failure as the first verification result and sending the first verification to the current wallet applet, and the current wallet applet executing Step r6; and
Step r6, determining, by the current wallet applet, whether the first verification result is that the verification is successful, if yes, signing on the transaction data and an account address corresponding to the key derive path by using a private key corresponding to the key derive path to generate a transaction voucher, and returning the transaction voucher to the upper computer, and ending the current operation; otherwise, reporting an error to the upper computer, and ending the current operation.

2. The method as claimed in claim 1 , wherein the second verification request comprises a biometrics register result list corresponding to the current wallet applet;
Step r3 specifically comprises: prompting, by the biometrics verification module, the user to input the biological feature, and determining whether the current user is registered and the current user matches with the current wallet applet according to the biological feature, a biometrics database of the biometrics verification module and the biometrics register result list in the case that the biological feature input by the user is detected, if yes, making a biometric ID, which corresponds to the biological feature, in the biometrics register result list as the second verification result and sending the second verification result to the virtual machine, and the virtual machine executing Step r4; if the biological feature input by the user is not found, making that the verification is failure as the second verification result and sending the second verification result to the virtual machine, and the virtual machine executing Step r4.

3. The method as claimed in claim 2 , wherein between Step r1 and Step r2, said method further comprises: obtaining, by the virtual machine, the biometrics register result list corresponding to the current wallet applet.

4. The method as claimed in claim 2 , wherein the first verification request comprises: the biometrics register result list corresponding to the current wallet applet;
before Step r1, the method further comprises:
Step c1, receiving, by the virtual machine, a querying biometrics register result list request from the current wallet applet; and
Step c2, returning, by the virtual machine, the biometrics register result list corresponding to the current wallet applet to the current wallet applet.

5. The method as claimed in claim 1 , wherein said method further comprises:
Step s1, sending, by the virtual machine, an inputting request to the biometrics verification module when the virtual machine receives a registering request from the current wallet applet;
Step s2, prompting, by the biometrics verification module, the user to input the biological feature, building a corresponding relation between the biological feature and the current biometric ID after the biological feature input by the user is detected, setting a biometrics input result identification, which corresponds to the current biometric ID, in a biometrics database of the biometrics verification module as a first preset identification, storing the current biometric ID and the biological feature corresponding to the current biometric ID into the biometrics database, setting the inputting result as that the inputting is successful, and sending the inputting result to the virtual machine; if no biological feature input by the user is detected, setting the inputting result as that the inputting is failure, and sending the inputting result to the virtual machine;
Step s3, determining, by the virtual machine, whether the biometrics verification module obtains the biological feature corresponding to the current biometric ID successfully according to the inputting result, if yes, executing Step s4; otherwise, reporting an error to the current wallet applet, and ending the current operation; and
Step s4, setting, by the virtual machine, the biometrics input result identification, which corresponds to the current biometric ID, in the biometrics register result list corresponding to the current wallet applet as the first preset identification, and returning that the registration is successful to the current wallet applet, and ending the current operation.

6. The method as claimed in claim 5 , wherein the registration request comprises the current biometric ID; the inputting request comprises the current biometric ID;
before Step s1, the method further comprises: the virtual machine receiving an obtaining current biometric ID request from the current wallet applet, and sending the obtaining current biometric ID request to the biometrics verification module; the biometrics verification module obtaining the current biometric ID from the biometrics database of the biometrics verification module, and returning the current biometric ID to the virtual machine; the virtual machine returning the current biometric ID to the current wallet applet.

7. The method as claimed in claim 5 , wherein the inputting request comprises the current biometric ID;
after the virtual machine receives the registration request from the current wallet applet, the method further comprises: the virtual machine obtaining the current biometric ID from the biometrics registration result list corresponding to the current wallet applet.

8. The method as claimed in claim 5 , wherein in the case that the inputting result is that the inputting is successful, the inputting result further comprises the current biometric ID;
building the corre

Assignees

• Feitian Technologies Co Ltd

Inventors

• Lu Zhou
• Yu Huazhang

Classifications

• G06Q20/3829

  involving key management · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/3674 Primary

  involving authentication · CPC title

• G06Q20/363 Primary

  with the personal data of a user · CPC title

• G06Q20/227

  characterised in that multiple accounts are available, e.g. to the payer · CPC title