# US 2021/0279736 A1 · Blockchain secure transaction method and device based on biomarker authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0279736 A1
- Document ID: US20210279736A1
- Status: Published application
- Kind: A1
- Application number: 17/253,061
- Filed: 2018-07-06
- Published: 2021-09-09
- Earliest claimed: 2018-06-04
- Applicants: Tsinghua University
- Inventors: Weitao Sun
- Web page: https://patentgrep.com/patent/US20210279736A1

## CPC

- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/065: {using e-cash}
- G06Q 20/3827: {Use of message hashing}
- G06Q 20/3829: {involving key management}
- G06Q 20/389: {Keeping log of transactions for guaranteeing non-repudiation of a transaction}
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/40975: {using encryption therefor}
- H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06Q 2220/00: Business processing using cryptography
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The embodiments of the present application disclose blockchain secure transaction methods and devices based on biomarker authentication. When a digital transaction voucher for the transaction between the payer and the payee is generated, the legality of the transaction is verified, instead of only using nonce, using the transaction key generated according to the biometric encrypted information of the payee user as the digital transaction voucher of the transaction. It can be guaranteed that the transaction will only occur between the payer and the payee designated by the payer due to the uniqueness of the biometric encrypted information. By the methods above, the legal identity information of the payer and payee to the transaction is authenticated from the perspective of the underlying blockchain information encryption, thereby ensuring that a digital transaction voucher can only be used once in a transaction and avoiding the problem of double spending. In addition, the user's digital assets can be recovered by using the uniqueness of the biometric encrypted information for identity authentication when the user's key is lost or the account is embezzled.

## Claims

### Claim 1

A blockchain secure transaction method based on biomarker authentication, the method comprising:
acquiring first biometric encrypted information corresponding to a target payee after first request information sent by a target payer for a target transaction with the target payee user is received, and generating a transaction key by encrypting according to the first biometric encrypted information;
determining whether prompt information indicating successful verification of the transaction key is received, and when the prompt information is received, acquiring transaction information of the target transaction upon successful completion of the target transaction; and
releasing the transaction information of the target transaction to each network node of the blockchain, so as to record the transaction information of the target transaction at each network node;
wherein the first biometric encrypted information refers to encoded information obtained by performing an encryption operation on the biometric information of the target payee user; and the biometric information includes fingerprints, iris, palm prints or facial features.

### Claim 2 (depends on 1)

The method of claim 1, wherein the acquiring first biometric encrypted information corresponding to a target payee after first request information sent by a target payer for a target transaction with the target payee user is received, and generating a transaction key by encrypting according to the first biometric encrypted information comprises:
authenticating the target payer by second biometric encrypted information corresponding to the target payer, and when the authenticating the target payer passes, acquiring the first biometric encrypted information corresponding to the target payee after the first request information sent by the target payer for the target transaction with the target payee user is received; and
performing encryption calculation on a generated nonce and the first biometric encrypted information to obtain the transaction key;
wherein the second biometric encrypted information refers to encoded information obtained by performing an encryption operation on the biometric information of the target payee user.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
acquiring third biometric encrypted information of a target user after second request information for restoring digital assets of the target user sent by any terminal is received, determining digital assets currently belonging to the target user according to transaction information recorded by any node of the blockchain corresponding to the target user, and restoring the digital assets corresponding to the target user.

### Claim 4 (depends on 1)

The method of claim 1, wherein the determining whether prompt information indicating successful verification of the transaction key is received comprises:
sending prompt information indicating that a user currently verifying the transaction key is not the target payee and the transaction is illegal when the prompt information indicating failed verification of the transaction key is received.

### Claim 5

(canceled)

### Claim 6

(canceled)

### Claim 7

A server, comprising:
a first acquirer configured to acquire first biometric encrypted information corresponding to a target payee user, and generate a transaction key by encrypting according to the first biometric encrypted information after first request information sent by a target payer for a target transaction with the target payee user is received;
a determiner configured to determine whether prompt information indicating successful verification of the transaction key is received, and when the prompt information is received, acquire the transaction information of the target transaction upon successful completion of the target transaction; and
a recorder configured to release the transaction information of the target transaction to each network node of the blockchain, so as to record the transaction information of the target transaction at each network node;
wherein the first biometric encrypted information refers to encoded information obtained by performing an encryption operation on the biometric information of the target payee user; and the biometric information includes fingerprints, iris, palm prints or facial features.

### Claim 8

A terminal, comprising:
a second acquirer configured to acquire a transaction key generated according to first biometric encryption information of a payee and an identity code of a user corresponding to a current terminal after first request information sent by a target payer for a target transaction is received; wherein the identity code includes fourth biometric encrypted information of the user corresponding to the current terminal; and
a verifier configured to verify the transaction key according to the fourth biometric encrypted information; and send prompt information indicating successful verification of the transaction key when the transaction key is successfully verified, and receive transaction information in which the target transaction has been recorded and information on the successful completion of the target transaction sent from the server;
wherein the fourth biometric encrypted information refers to encoded information obtained by performing an encryption operation on the biometric information of the user corresponding to the current terminal; and the biometric information includes fingerprints, iris, palm prints or facial features.

### Claim 9 (depends on 1)

An electronic apparatus, comprising:
at least one processor, at least one memory, a communication interface and a bus; wherein:
the processor, the memory, and the communication interface communicate with each other through the bus;
the communication interface is configured to perform information transmission between the electronic apparatus and a communication device of a terminal device; and
the memory stores program instructions executable by the processor, and the processor calls the program instructions to perform the method according to claim 1.

### Claim 10 (depends on 1)

A non-transitory computer readable storage medium, storing computer instructions that cause a computer to perform the method according to claim 1.

### Claim 11 (depends on 8)

The terminal of claim 8, wherein the second acquirer is further configured to acquire a nonce generated when the server generates the transaction key; and the verifier is further configured to perform an encryption operation on the nonce and the fourth biometric encrypted information to obtain a code to be verified, wherein it indicates successful verification of the transaction key when the code to be verified is the same as the transaction key; the verification of the transaction key fails when the code to be verified is not the same as the transaction key, and send prompt information indicating failed verification of the transaction key.