【摘要】 当前,虚拟货币系统中多数用户的钱包均采用运行于本地的热钱包,这类钱包极易受到恶意软件的攻击,恶意软件通过篡改钱包程序、窃取用户口令和私钥,给用户的虚拟货币资产造成巨大的损失。然而,已有的大多数研究工作都是围绕如何提高私钥的安全性展开,缺少对运行于本地热钱包程序的防篡改保护。基于可信计算技术,提出一种虚拟货币热钱包的可信保护方案,通过静态和动态度量对钱包程序进行完整性保护,对用户的私钥文件进行封印加密存储,防止恶意窃取用户私钥后进行异构环境的交易。通过实验验证了该方案的可行性。更多还原

【Abstract】 At present,most users in the virtual currency system use hot wallets running locally.This kind of wallets is vulnerable to malicious software attacks,and malicious programs change the wallet program,steal user passwords and private keys,which cause huge losses to the user’s virtual currency assets.However,most of the existing research works focus on that how to improve the security of private keys,but lack of tamper protection for running on local hot wallet programs.Based on the trusted computing technology,a trusted protection scheme for the virtual currency hot wallet was presented.The integrity of the wallet program was protected through the static measurement and dynamic measurement to prevent malicious program tampering and virus infection.To seal,encrypt and store the user’s private keys so as to prevent the malicious user from stealing the private key and performing transactions in a heterogeneous environment.The feasibility of the scheme was verified by experiments.更多还原