WO2019153857A1

WO2019153857A1 - Asset protection method and apparatus for digital wallet, electronic device, and storage medium

Info

Publication number: WO2019153857A1
Application number: PCT/CN2018/119075
Authority: WO
Inventors: 张康宗
Original assignee: 北京金山安全软件有限公司
Priority date: 2018-02-12
Filing date: 2018-12-04
Publication date: 2019-08-15
Also published as: CN108320154A

Abstract

An asset protection method and apparatus for a digital wallet, an electronic device, and a storage medium. The method comprises: executing at least one detection operation of user behavior detection, safety detection of an electronic device where a digital wallet is located, and asset safety detection of the digital wallet to obtain a detection result corresponding to the executed detection operation (S101); and on the basis of the obtained detection result, executing a preset asset protection operation (S102). By executing at least one safety detection operation, a detection result related to a digital wallet is obtained, and on the basis of the detection result, a preset asset protection operation is executed, thereby achieving the purpose of ensuring asset safety of the digital wallet of a user.

Description

Digital wallet asset protection method, device, electronic device and storage medium

This application claims priority to Chinese Patent Application No. 201810146797.4, entitled "Digital Wallet Asset Protection Method, Apparatus, Electronic Equipment and Storage Medium", filed on February 12, 2018, all of which are entitled The content is incorporated herein by reference.

Technical field

The present application relates to the field of digital wallet technology, and in particular, to a digital wallet asset protection method, apparatus, electronic device, and storage medium.

Background technique

With the development of technology, more and more users use digital wallets to manage digital currencies (such as Bitcoin and Litecoin). Among them, the digital wallet is a wallet based on blockchain technology.

At present, the solution for digital wallet is to consider the use of digital wallet, for example, how to use digital wallet to better manage digital currency, and there is no solution for digital wallet security protection, so that the assets of digital wallet are facing at any time. The risk of theft is poor.

Summary of the invention

The purpose of the embodiments of the present application is to provide a digital wallet asset protection method, device, electronic device, and storage medium to improve security. The specific technical solutions are as follows:

A digital wallet asset protection method, the method comprising:

Performing at least one detection operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtaining a detection result corresponding to the performed detection operation;

The preset asset protection operation is performed based on the obtained detection result.

Optionally, the detection result corresponding to the user behavior detection operation is user behavior information that affects the security of the digital wallet private key;

The detection result corresponding to the electronic device security detection of the digital wallet is the security detection information of the electronic device where the digital wallet is located;

The detection result corresponding to the asset security detection of the digital wallet is the asset security detection information of the digital wallet, and the asset security detection information is information indicating whether the target account asset of the digital wallet has a security risk.

Optionally, the method further includes:

Determining, by the first detection result, the detection result corresponding to the user behavior detection operation, determining the detection result corresponding to the electronic device security detection of the digital wallet as the second detection result, and corresponding to the asset security detection of the digital wallet The detection result is determined as the third detection result;

When the obtained detection result is: the first detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

Determining, according to the user behavior information, security setting guidance information, and outputting security setting guidance information for guiding a user to improve security of a private key of the digital wallet;

When the obtained detection result is: the second detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

Determining, according to the security detection information, a factor affecting the security of the private key of the digital wallet, and outputting prompt information for prompting the user to process factors affecting the security of the private key;

When the obtained detection result is: the third detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

When determining that the target account asset has a security risk according to the asset security detection information, outputting warning information for the target account of the target account for alerting the digital wallet to have a security risk;

When the obtained detection result is: the first detection result and the second detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

When the obtained detection result is: the first detection result and the third detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

When it is determined that the target account asset has a security risk according to the asset security detection information, outputting a warning message that the target account of the target account for alerting the digital wallet has a security risk;

When the obtained detection result is: the second detection result and the third detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

When the obtained detection result is: the first detection result, the second detection result, and the third detection result, the step of performing a preset asset protection operation based on the obtained detection result includes:

When it is determined that the target account asset has a security risk according to the asset security detection information, the user that is used to alert the target account of the digital wallet outputs the warning information of the security risk.

Optionally, the obtaining process of the user behavior information that affects the private key of the digital wallet includes:

Displaying a preset questionnaire; wherein the preset questionnaire records: preset user behavior information that affects the security of the digital wallet's private key, and a check box corresponding to each preset user behavior information; When the check box corresponding to the user behavior information is selected, it indicates that the preset user behavior information is selected;

Obtaining a questionnaire survey result of the preset questionnaire;

The selected preset user behavior information in the questionnaire result is determined as user behavior information that affects the security of the digital wallet's private key.

Optionally, the step of determining the security setting guiding information according to the user behavior information includes:

Using the preset security level evaluation criteria and the user behavior information to obtain a security level assessment result of the user behavior;

Based on the security level evaluation result, security setting guidance information is obtained.

Optionally, the preset user behavior information includes: behavior information of accessing a high-risk webpage, behavior information of an email that has opened a virus, behavior information of backing up a private key through a screen capture, and behavior of using only a digital password as an asset payment password. At least one of the information.

Optionally, the step of obtaining a security level assessment result of the user behavior by using the preset security level evaluation criteria and the user behavior information, including:

Determining the amount of the user behavior information;

Determining, in the predetermined security level evaluation standard, the quantity range in which the quantity is located in the preset security level evaluation standard; the preset security level evaluation standard includes: a correspondence between the quantity range and the security level;

The security level corresponding to the quantity range in which the quantity is located is determined as the security level evaluation result of the user behavior.

Optionally, the step of obtaining the security setting guiding information based on the security level evaluation result includes:

Determine whether the obtained safety level assessment result is low;

If yes, determining security setting guidance information corresponding to the obtained user behavior information;

Wherein, when the obtained user behavior information includes: behavior information of accessing a high-risk webpage, and/or opening behavior information of a virus-carrying email, the determined security setting guiding information includes: a virus killing reminding information; The user behavior information includes: when the action information of the private key is backed up by the screen capture, the determined security setting guidance information includes: decentralized storage private key reminder information; when the obtained user behavior information includes: using only the digital password as the asset payment password behavior When the information is used, the determined security setting guidance information includes: using the biometric password as the asset payment password reminding information.

Optionally, the obtaining process of the security detection information of the electronic device where the digital wallet is located includes:

Obtaining first security detection information of an operating environment of the digital wallet, where the first security detection information includes: virus detection information, vulnerability detection information, root root authority detection information, and network transmission security detection of the electronic device where the digital wallet is located At least one of the information;

Obtaining the second security detection information of the digital wallet itself, the second security detection information includes: read and write permission detection information of the memory corresponding to the digital wallet, and repacking detection information of the installation package of the digital wallet The private key of the digital wallet stores at least one of mode detection information.

Optionally, when the obtained virus detection information is: when the virus is found, the determined factors affecting the security of the digital wallet's private key include the presence of a virus;

When the obtained vulnerability detection information is: when there is a vulnerability, the determined factors affecting the security of the digital wallet's private key include a vulnerability;

When the root root permission detection information obtained is: when the root root permission is enabled, the determined factors affecting the security of the digital wallet's private key include that the root root authority is enabled;

When the obtained network transmission security detection information is: an unsecure network, the determined factors affecting the security of the digital wallet's private key include being in a non-secure transmission network;

When the read and write permission detection information obtained is: readable and writable, the determined factors affecting the security of the digital wallet's private key include: the memory is not read and written;

When the obtained repackaging detection information is: for the repackaged installation package, the determined factors affecting the security of the digital wallet private key include: the installation package of the digital wallet is a non-original installation package;

When the obtained private key storage mode detection information is: when the private key is completely stored, the determined factors affecting the security of the digital wallet's private key include: the private key is completely stored.

Optionally, the process of obtaining the asset security detection information of the digital wallet includes:

When detecting a transaction record for the target account of the digital wallet in the blockchain ledger, determining whether there is a detected transaction record in the transaction record corresponding to the target account stored by the electronic device where the digital wallet is located;

If yes, generate asset security detection information that determines that the target account does not have a security risk;

If not, generate asset security detection information that identifies a security risk in the target account.

A digital wallet asset protection device, the device comprising:

a detecting module, configured to perform at least one detecting operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtaining a detection result corresponding to the performed detection operation;

An execution module is configured to perform a preset asset protection operation based on the obtained detection result.

Optionally, the device further includes:

a processing module, configured to determine, as a first detection result, a detection result corresponding to the user behavior detection operation, and determine a detection result corresponding to the electronic device security detection of the digital wallet as a second detection result, where the digital wallet is The test result corresponding to the asset security test is determined as the third test result;

The execution module is specifically configured to:

When the obtained detection result is: the first detection result, determining security setting guidance information according to the user behavior information, and outputting security setting guidance information for guiding the user to improve security of the digital wallet private key;

When the obtained detection result is: the second detection result, determining a factor affecting the security of the private key of the digital wallet according to the security detection information, and outputting a prompt for prompting the user to affect the security of the private key Prompt information for processing factors;

When the obtained detection result is: the third detection result, when determining that the target account asset has a security risk according to the asset security detection information, outputting the target account for alerting the target account of the digital wallet Warning information for safety hazards;

When the obtained detection result is: the first detection result and the second detection result, determining security setting guidance information according to the user behavior information, and outputting a security for guiding the user to increase the private key of the digital wallet Sexual security settings guidance information;

When the obtained detection result is: the first detection result and the third detection result, determining security setting guidance information according to the user behavior information, and outputting a security for guiding the user to increase the private key of the digital wallet Sexual security settings guidance information;

When the obtained detection result is: the second detection result and the third detection result, determining a factor affecting the security of the private key of the digital wallet according to the security detection information, and outputting is used to prompt the user to Prompt information that affects the security of the private key;

When the obtained detection result is: the first detection result, the second detection result, and the third detection result, determining safety setting guidance information according to the user behavior information, and outputting for guiding the user to improve the Security setting security information for the security of the private key of the digital wallet;

Optionally, the device further includes a first obtaining module, where the first obtaining module includes:

a display unit, configured to display a preset questionnaire; wherein the preset questionnaire records: preset user behavior information that affects the security of the digital wallet private key, and a check box corresponding to each preset user behavior information When a check box corresponding to the preset user behavior information is selected, it indicates that the preset user behavior information is selected;

a questionnaire obtaining unit for obtaining a questionnaire result of the preset questionnaire;

The user behavior information determining unit is configured to determine the selected preset user behavior information in the questionnaire result as user behavior information that affects the private key security of the digital wallet.

Optionally, the execution module includes:

a security level evaluation result obtaining unit, configured to obtain a security level evaluation result of the user behavior by using a preset security level evaluation standard and the user behavior information;

The security setting guidance information obtaining unit is configured to obtain security setting guidance information based on the security level evaluation result.

Optionally, the security level assessment result obtaining unit includes:

a quantity determining subunit, configured to determine the quantity of the user behavior information;

a quantity range determining subunit, configured to determine a quantity range in which the quantity is located in a preset security level evaluation criterion; wherein the preset security level evaluation standard includes: a correspondence between a quantity range and a security level;

The security level evaluation result determining sub-unit is configured to determine a security level corresponding to the quantity range in which the quantity is located, as a security level evaluation result of the user behavior.

Optionally, the security setting guide information obtaining unit includes:

a determining subunit, configured to determine whether the obtained security level evaluation result is low, and if so, triggering the security setting guiding information determining subunit;

The security setting guiding information determining subunit is configured to determine security setting guiding information corresponding to the obtained user behavior information;

Optionally, the device further includes a second obtaining module, where the second obtaining module includes:

a first security detection information obtaining unit, configured to obtain first security detection information of an operating environment of the digital wallet, where the first security detection information includes: virus detection information, vulnerability detection information of the electronic device where the digital wallet is located, At least one of root root authority detection information and network transmission security detection information;

a second security detection information obtaining unit, configured to obtain second security detection information of the digital wallet itself, where the second security detection information includes: read and write permission detection information of the memory corresponding to the digital wallet, the number At least one of repackaging detection information of the installation package of the wallet and private key storage mode detection information of the digital wallet.

Optionally, when the virus detection information obtained by the first security detection information obtaining unit is: when a virus is found, the factor determined by the execution module to affect the security of the private key of the digital wallet includes the presence of a virus;

When the vulnerability detection information obtained by the first security detection information obtaining unit is: when there is a vulnerability, the factor determined by the execution module affecting the security of the private key of the digital wallet includes a vulnerability;

When the root root authority detection information obtained by the first security detection information obtaining unit is: when the root root authority is enabled, the security factor determined by the execution module affecting the private key of the digital wallet includes the root root authority being Open

When the network transmission security detection information obtained by the first security detection information obtaining unit is an non-secure network, factors determined by the execution module affecting the security of the private key of the digital wallet include: being in a non-secure transmission network. ;

When the read/write right detection information obtained by the second security detection information obtaining unit is: readable and writable, the factors determined by the execution module affecting the security of the private key of the digital wallet include: the memory is not performed. Read and write protection;

When the repackaging detection information obtained by the second security detection information obtaining unit is: a repackaged installation package, a factor determined by the execution module to affect security of the private key of the digital wallet includes: The installation package of the digital wallet is a non-original installation package;

When the private key storage mode detection information obtained by the second security detection information obtaining unit is: when the private key is completely stored, the factors determined by the execution module affecting the security of the private key of the digital wallet include: a private key It is stored completely.

Optionally, the device further includes a third obtaining module, where the third obtaining module includes:

a determining subunit, configured to determine whether a transaction record corresponding to the target account stored by the electronic device where the digital wallet is stored exists when a transaction record for the target account of the digital wallet is generated in the blockchain ledger The detected transaction record, if yes, triggering the first generation unit, and if not, triggering the second generation unit;

The first generating unit is configured to generate asset security detection information that determines that the target account does not have a security risk;

The second generating unit is configured to generate asset security detection information that determines that the target account has a security risk.

An electronic device includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete communication with each other through the communication bus;

a memory for storing a computer program;

The processor, when executed to execute a computer program stored on the memory, implements the method steps of any of the above.

A computer readable storage medium having stored therein a computer program, the computer program being executed by a processor to implement the method steps of any of the above.

An executable program code for being executed to perform the method steps of any of the above.

In the embodiment of the present application, performing at least one detection operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, obtaining a detection result corresponding to the performed detection operation, based on the obtained detection As a result, a preset asset protection operation is performed. In the present application, by performing at least one security detection operation, the detection result related to the digital wallet is obtained, and based on the detection result, the preset asset protection operation is performed, thereby improving security.

DRAWINGS

In order to more clearly illustrate the embodiments of the present application and the technical solutions of the prior art, the following description of the embodiments and the drawings used in the prior art will be briefly introduced. Obviously, the drawings in the following description are only Some embodiments of the application may also be used to obtain other figures from those of ordinary skill in the art without departing from the scope of the invention.

Other drawings can also be obtained from these drawings on the premise of creative labor.

1 is a schematic flowchart of a digital wallet asset protection method according to an embodiment of the present application;

2 is a schematic structural diagram of a digital wallet security defense system according to an embodiment of the present application;

FIG. 3 is a schematic flowchart of a process for obtaining user behavior information that affects private key security of a digital wallet according to an embodiment of the present disclosure;

4 is a schematic flowchart of a process for obtaining asset security detection information of a digital wallet according to an embodiment of the present application;

FIG. 5 is a schematic structural diagram of a digital wallet asset protection apparatus according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of an electronic device according to an embodiment of the present application.

Detailed ways

In order to make the objects, technical solutions, and advantages of the present application more comprehensible, the present application will be further described in detail below with reference to the accompanying drawings. It is apparent that the described embodiments are only a part of the embodiments of the present application, and not all of them. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

In order to solve the prior art problem, the embodiment of the present application provides a digital wallet asset protection method, apparatus, electronic device, and storage medium.

The following describes a digital wallet asset protection method provided by the embodiment of the present application.

It should be noted that the execution body of the digital wallet asset protection method provided by the embodiment of the present application may be a digital wallet client or an electronic device, and the digital wallet client may also be referred to as a digital wallet. The digital wallet client is installed in an electronic device, including but not limited to a mobile phone and a tablet.

As shown in FIG. 1 , a digital wallet asset protection method provided by an embodiment of the present application may include:

S101: Perform at least one detection operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtain a detection result corresponding to the performed detection operation.

Since digital wallets are installed on electronic devices, digital wallet assets are not only related to the digital wallet itself, but also to electronic devices. Whether it is user behavior for electronic devices or user behavior for digital wallets, it may affect digital wallet assets. Therefore, in order to protect the security of digital wallet assets, user behavior detection can be performed.

The user behavior for the electronic device may include, but is not limited to, accessing a webpage, opening a mail, or using a communication-type application; user behavior for the digital wallet includes, but is not limited to, a transfer or a digital wallet private key backup.

For example, if a user accesses a high-risk webpage using an electronic device, a virus may exist in the electronic device, and the virus may damage the data of the digital wallet installed in the electronic device, thereby causing the digital wallet asset to be insecure.

Exemplarily, the manner of detecting user behavior may be: digital wallet for user behavior detection, or digital wallet calling other applications for user behavior detection.

It can be seen from the above that the security of the electronic device where the digital wallet is located will have an impact on the digital wallet assets. Therefore, in order to protect the security of the digital wallet assets, the electronic device security detection of the digital wallet can be performed.

The electronic device security detection of the digital wallet may include, but is not limited to, the following aspects:

The first aspect is directed to security detection of the digital wallet operating environment.

Security detection for the digital wallet operating environment may include, but is not limited to, virus detection, vulnerability detection, root root authority detection, and network transmission security detection of the electronic device where the digital wallet is located.

The virus detection of the electronic device where the digital wallet is located is: detecting whether there is a virus in the electronic device where the digital wallet is located, for example, malware, malicious programs, and the like;

The vulnerability detection of the electronic device where the digital wallet is located is: detecting whether there is a vulnerability in the electronic device where the digital wallet is located, wherein the vulnerability is a defect in the hardware, software, protocol implementation or system security policy, so that the attacker can Access or destroy the system without authorization;

The root root permission of the electronic device where the digital wallet is located is detected as: detecting whether the electronic device where the digital wallet is located has root root authority, wherein obtaining root authority means that the highest authority of the system has been obtained, and any file in the system can be included (including System files) perform all operations of adding, deleting, changing, and checking;

The network transmission security detection of the electronic device where the digital wallet is located is: detecting whether the network used by the electronic device where the digital wallet is located is safe.

The second aspect is directed to the security detection of the digital wallet itself.

The security detection for the digital wallet itself may include, but is not limited to, read and write permission detection of the memory corresponding to the digital wallet, repacking detection of the installation package of the digital wallet, and detection of the private key storage mode of the digital wallet.

The read/write permission of the memory corresponding to the digital wallet is detected as: detecting the read/write status of the memory occupied by the digital wallet, for example, the read/write status is: readable and writable or read-only;

The repackaging of the installation package of the digital wallet is: detecting whether the installation package of the digital wallet is a repackaged installation package, that is, detecting whether the installation package of the digital wallet is a non-original installation package;

The private key storage mode of the digital wallet is detected as: detecting which storage mode the digital wallet's private key is stored in.

Whether it is to protect the security of digital wallet assets by conducting user behavior detection, or to protect the security of digital wallet assets by performing security detection of electronic devices where the digital wallet is located, it is not a security detection performed by the assets of the digital wallet itself, therefore, in order to protect The security of digital wallet assets enables asset security testing of digital wallets.

Among them, the asset security detection for the digital wallet is mainly the detection of whether the assets in the digital wallet are safe, and may include, but is not limited to, whether the assets are stolen and the assets are abnormally traded.

It can be seen from the above description that in order to ensure the security of the digital wallet asset, three aspects of security detection can be performed. Of course, the security detection of the three aspects does not necessarily need to be performed simultaneously. In the embodiment of the present application, the user behavior detection is performed. And performing at least one detecting operation of the electronic device security detection of the digital wallet and performing the asset security detection of the digital wallet, and after performing the at least one detecting operation, obtaining the detection result corresponding to the executed detecting operation.

Referring to FIG. 2, based on the security detection of the three aspects, the embodiment of the present application provides a digital wallet security defense system, which may include at least one of the following three modules:

a user behavior security module for performing security defenses related to user behavior, including but not limited to performing user behavior detection;

The electronic device security defense module is configured to perform security defense related to the electronic device where the digital wallet is located, including but not limited to performing security detection of the electronic device where the digital wallet is located;

An asset security management module for performing security defenses related to assets of the digital wallet, including but not limited to asset security testing of digital wallets.

Of course, with the development of science and technology, the digital wallet security defense system may include other modules related to digital wallet security, including any of the above three modules, and is not limited herein.

Digital wallet assets can be protected by the above digital wallet security defense system, that is, the protection of user assets.

S102: Perform a preset asset protection operation based on the obtained detection result.

After the test results are obtained, the preset asset protection operation can be performed.

As an implementation manner, S102 may include: outputting safety prompt information to the user based on the obtained detection result.

The security alert information may be the following: "security setting guidance information for guiding the user to improve the security of the private key of the digital wallet", and "prompting information for prompting the user to deal with factors affecting the security of the private key. And one or more of “a warning message for alerting a user of the target account of the digital wallet that the target account has a security risk”. By outputting security prompt information, guiding the user to perform security settings, or guiding the user to deal with factors affecting the security of the private key, or alerting the user to alert, etc., the security of the solution can be improved.

Since at least one detection operation is performed, the detection result obtained is also at least one.

For the convenience of description, the detection result corresponding to the user behavior detection operation is taken as the first detection result, and the detection result corresponding to the electronic device security detection of the digital wallet is used as the second detection result, and the asset security detection corresponding to the digital wallet is performed. The test result is used as the third test result.

The asset protection operation corresponding to the first detection result is performed when the first detection result is obtained, and the user behavior security module in the digital wallet security defense system is configured to perform the asset protection operation corresponding to the first detection result.

When the second detection result is obtained, the asset protection operation corresponding to the second detection result is performed, and the electronic device security defense module in the digital wallet security defense system is configured to perform the asset protection operation corresponding to the second detection result.

When the third detection result is obtained, the asset protection operation corresponding to the third detection result is performed, and the asset security management module in the digital wallet security defense system is configured to perform the asset protection operation corresponding to the third detection result.

Since each test result corresponds to an asset protection operation and at least one of the obtained detection results, at least one of the asset protection operations performed is performed.

Illustratively, asset protection operations may include, but are not limited to, outputting prompt information, outputting boot information, and outputting alert information.

In the embodiment of the present application, performing at least one detection operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, obtaining a detection result corresponding to the performed detection operation, based on the obtained detection As a result, a preset asset protection operation is performed. In the present application, by performing at least one security detection operation, the detection result related to the digital wallet is obtained, and based on the detection result, the preset asset protection operation is performed, thereby achieving the purpose of ensuring the asset security of the user digital wallet.

The detection result corresponding to the foregoing user behavior detection operation may be user behavior information that affects the security of the digital wallet's private key;

The detection result corresponding to the electronic device security detection of the digital wallet may be the security detection information of the electronic device where the digital wallet is located;

The detection result corresponding to the asset security detection of the digital wallet may be the asset security detection information of the digital wallet, and the asset security detection information is information indicating whether the target account asset of the digital wallet has a security risk.

In the first aspect, since the security of the digital wallet asset is mainly related to the private key of the digital wallet, if the private key of the digital wallet is not secure, the digital wallet asset is not secure. Therefore, in order to protect the security of the digital wallet asset, user behavior detection is performed. Obtaining user behavior information that affects the security of the digital wallet's private key, and the user behavior information that affects the private key of the digital wallet is the detection result corresponding to the user behavior detection operation.

There are several ways to perform user behavior detection to obtain user behavior information that affects the security of the digital wallet's private key:

In one implementation, the user behavior detection plug-in can be used to detect which operations the user performed, so that all user behavior information of the user operating the electronic device can be obtained. Then, each of the detected user behavior information is matched with the user behavior information stored in the preset behavior information table. The user behavior information stored in the preset behavior information table is: user behavior information that affects the security of the digital wallet private key.

When the detected user behavior information matches a user behavior information stored in the preset behavior information table, it indicates that the user behavior corresponding to the detected user behavior information threatens the security of the private key. At this time, the detected user behavior information may be determined as user behavior information that affects the security of the digital wallet's private key.

In another implementation manner, the user behavior information affecting the security of the private key may also be obtained by presetting the questionnaire. Referring to FIG. 3, the process of obtaining user behavior information that affects the private key security of the digital wallet may include:

S201: Display a preset questionnaire; wherein the preset questionnaire records: preset user behavior information that affects the security of the digital wallet's private key, and a check box corresponding to each preset user behavior information; When the check box corresponding to the user behavior information is selected, it indicates that the preset user behavior information is selected.

The digital wallet can present a preset survey to the user. The user can then fill out the preset questionnaire based on the user behavior that has been manipulated.

The preset user behavior information recorded in the questionnaire may include: behavior information of accessing a high-risk webpage, behavior information of an email that has opened a virus, behavior information of backing up a private key by screen capture, and using only a numeric password as an asset payment password. At least one of the behavioral information. Certainly, the preset user behavior information may further include: behavior information for backing up the private key by handwriting, and feedback behavior information of the account password being stolen, etc., of course, is not limited thereto. Moreover, those skilled in the art can set preset user behavior information according to actual conditions, and will not be described in detail herein.

When the private key is backed up by screen capture or handwriting, the private key is completely stored. The complete storage of the private key is more likely to cause the private key to be stolen by criminals. These two storage methods also affect the security of the private key. Sex.

S202: Obtain a questionnaire survey result of the preset questionnaire.

After the user fills in the preset questionnaire according to the user behavior of the operation, the digital wallet can obtain the questionnaire result of the preset questionnaire.

S203: Determine the preset user behavior information selected in the questionnaire result as the user behavior information that affects the security of the digital wallet's private key.

The digital wallet can determine the selected preset user behavior information in the questionnaire result as the user behavior information that affects the security of the digital wallet's private key.

In the second aspect, since the security detection of the electronic device where the digital wallet is located is the security detection of the electronic device where the digital wallet is located, the obtained detection result is the security detection information, that is, the security detection of the electronic device where the digital wallet is located, and the number is obtained. The security detection information of the electronic device where the wallet is located, and the security detection information of the electronic device where the digital wallet is located is the detection result corresponding to the security detection of the electronic device where the digital wallet is located.

The process of obtaining the security detection information of the electronic device where the digital wallet is located may include:

Obtaining the first security detection information of the operating environment of the digital wallet, where the first security detection information includes: at least one of virus detection information, vulnerability detection information, root root authority detection information, and network transmission security detection information of the electronic device where the digital wallet is located ;

Obtaining the second security detection information of the digital wallet itself, where the second security detection information includes: read and write permission detection information of the memory corresponding to the digital wallet, repacking detection information of the installation package of the digital wallet, and private key storage of the digital wallet At least one of the mode detection information.

The operating environment of the digital wallet refers to an environment in which the program code corresponding to the digital wallet is run.

The inventor found that the security of the digital wallet's operating environment will affect the security of the digital wallet's private key, thereby affecting the digital wallet assets. Among them, when the operating environment of the digital wallet has security risks, the criminals can easily find a breakthrough from these security risks to steal the private key, thereby making the security of the private key threatened, further threatening the digital wallet assets. Therefore, in the embodiment of the present application, in order to ensure the security of the private key, that is, to ensure the security of the digital wallet asset, the security detection information of the operating environment of the digital wallet can be obtained.

Specifically, in an implementation manner, the security detection information of the operating environment of the digital wallet may be detected by using security detection software installed in the electronic device where the digital wallet is located. Then, the digital wallet can request to obtain the security detection information detected by the security detection software, and use the obtained security detection information as the first security detection information.

In another implementation manner, the security detection information of the operating environment of the digital wallet can be directly detected by the security detection plug-in in the digital wallet, and the detected security detection information is used as the first security detection information. It is reasonable.

The obtained first security detection information may include at least one of virus detection information, vulnerability detection information, root root authority detection information, and network transmission security detection information of the electronic device where the digital wallet is located, and is not limited thereto. .

In addition, when the virus detection information is found to be a virus, the vulnerability detection information is a vulnerability, the root root authority detection information is the root root authority is turned on, and the network transmission security detection information is at least one of the non-secure transmission network, the number is indicated. There is a security risk in the running environment of the wallet.

Among them, the vulnerability includes but is not limited to operating system vulnerabilities and application vulnerabilities of the electronic device.

The inventors have also discovered that those skilled in the art often overlook that the digital wallet itself also has an impact on the security of the digital wallet's private key, thereby affecting digital wallet assets. For example, when the security package corresponding to the digital wallet is a repackaged installation package, that is, when the original installation package is not, the malicious code for stealing the private key may be written in the installation package. Therefore, in the embodiment of the present application, in order to ensure the security of the private key, that is, to ensure the security of the digital wallet asset, the security detection information of the digital wallet itself may be acquired, and the security detection information of the digital wallet itself is used as the second security detection information.

The obtained second security detection information may include: read and write permission detection information of the memory corresponding to the digital wallet, repackaging detection information of the installation package of the digital wallet, and private key storage mode detection information of the digital wallet. At least one of them is of course not limited to this.

The memory corresponding to the digital wallet refers to a storage space designated for storing digital wallet related data when the digital wallet is installed. Since the private key of the digital wallet may be stored by the user in the memory corresponding to the digital wallet, when the read/write permission detection information of the memory is readable and writable, it indicates that the private key is stolen and tampered. Danger.

In addition, when the private key storage mode detection information of the digital wallet is a complete storage private key, the completely stored private key is more easily stolen by criminals, that is, in the storage mode, the private key also exists. The danger of stealing.

In the third aspect, since the asset security detection for the digital wallet is mainly the detection of the security of the assets in the digital wallet, the obtained detection result is the asset security detection information, and therefore, the asset security detection of the digital wallet is performed, and the number is obtained. The asset security detection information of the wallet, the asset security detection information is information indicating whether the target account asset of the digital wallet has a security risk, and the asset security detection information of the digital wallet is the detection result corresponding to the asset security detection of the digital wallet.

Referring to FIG. 4, the process of obtaining the asset security detection information of the digital wallet may include:

S301: When detecting a transaction record for the target account of the digital wallet in the blockchain ledger, determining whether there is a detected transaction record in the transaction record corresponding to the target account stored by the electronic device where the digital wallet is located, and if so, executing Step S302, if no, step S303 is performed.

The electronic device can monitor the blockchain ledger in real time, detect whether a new transaction record is generated in the blockchain ledger, and when detecting the generation of a new transaction record, determine whether the new transaction record is a transaction record for the target account, when determining The new transaction record is a transaction record for the target account, that is, when the transaction record of the target account for the digital wallet is detected in the blockchain book, the generated transaction record for the target account is obtained as the current transaction record, that is, The detected transaction record is the current transaction record.

The target account is an account that is registered based on the digital wallet.

In one case, each account corresponds to a private key, which is a unique certificate having the right to allocate assets in the account, each private key corresponding to an account address, and the user who owns the private key can own the account. The right to assign assets in the address.

When the account generates an asset transaction, the blockchain account will generate an asset transaction record, that is, the transaction record. At the same time, when the account is logged in, the digital wallet device will also generate and store an asset transaction record in the transaction record. The record includes: the correspondence between the account address of the account and the account address of the destination party corresponding to the asset transaction, and the asset balance of the account.

For example, when Account A generates an asset transaction, that is, when transferring to Account B, the above blockchain account will generate a transaction record, which is the account address of Account A - the account address of Account B, and the account address of Account A. Balance a, wherein the account address of the above account A - the account address of the account B represents the correspondence of the account address of the account A - the account address of the account B. In one case, the blockchain book also stores the generation time corresponding to each transaction record, and may also store the transaction amount of each transaction record.

The above blockchain ledger stores transaction records for asset transactions for all accounts, and all transaction records stored in the blockchain book are disclosed to all accounts mentioned above. In the embodiment of the present application, the foregoing assets may be: digital currency, for example, bitcoin and Ethernet, and the like.

After the electronic device obtains the current transaction record, the current transaction record is compared with the transaction record corresponding to the target account stored in the electronic device where the digital wallet is stored, to determine the target account corresponding to the electronic device where the digital wallet is stored. In the transaction record, whether the current transaction record exists, and then the subsequent steps are performed based on the determination result.

In one case, in order to better save the comparison time, the latest transaction record corresponding to the target account stored in the electronic device where the digital wallet is stored may be firstly compared based on the chronological reverse order comparison. For comparison, when the determination is different, the comparison is continued until the comparison with each transaction record is completed. Alternatively, the comparison may be a non-first comparison. In this case, when the current transaction record is compared with the transaction record corresponding to the target account stored in the electronic device where the digital wallet is located, it may be based on the reverse order of time series, only Compare the current transaction record with the transaction record after the transaction record compared to the previous comparison of this comparison.

Therefore, by means of the comparison, it is determined whether there is a detected transaction record in the transaction record corresponding to the target account stored in the electronic device where the digital wallet is stored.

S302: Generate asset security detection information that determines that the target account does not have a security risk.

When the current transaction record exists in the transaction record corresponding to the target account stored by the electronic device where the digital wallet is located, the current transaction record may be determined to be initiated by the user logged in by the electronic device for the target account, and may indicate The target account is secure, and the private key corresponding to the target account is not stolen. At this time, asset security detection information that determines that the target account does not have a security risk is generated.

S303: Generate asset security detection information that determines that the target account has a security risk.

When the current transaction record does not exist in the transaction record corresponding to the target account stored in the electronic device where the digital wallet is located, it may be determined that the current transaction record is not initiated by the user logged in by the electronic device for the target account, It can be indicated that the target account is unsafe, and there is a security risk, for example, the private key corresponding to the target account is stolen.

Therefore, it can be determined whether the transaction record is a legitimate transaction by determining whether there is a detected transaction record in the transaction record corresponding to the target account stored in the electronic device where the digital wallet is located, thereby determining whether the target account has a security risk. When there is no detected transaction record in the transaction record corresponding to the target account stored in the electronic device where the digital wallet is located, it may be determined that the target account has a security risk, and the asset security detection information that determines that the target account has a security risk is generated.

The detection result corresponding to the user behavior detection operation is the user behavior information that affects the security of the digital wallet's private key; the detection result corresponding to the electronic device security detection of the digital wallet is the security detection information of the electronic device where the digital wallet is located; the digital wallet The detection result corresponding to the asset security detection is the asset security detection information of the digital wallet, and the asset security detection information is based on the information indicating whether the target account asset of the digital wallet has a security risk, and the detection result corresponding to the user behavior detection operation is determined as the first As a result of the detection, the detection result corresponding to the electronic device security detection of the digital wallet is determined as the second detection result, and the detection result corresponding to the asset security detection of the digital wallet is determined as the third detection result.

When the obtained detection result is: the first detection result, performing the preset asset protection operation based on the obtained detection result may include:

Determining security setting guidance information according to user behavior information, and outputting security setting guidance information for guiding the user to improve security of the digital wallet private key;

When the obtained detection result is: the second detection result, performing the preset asset protection operation based on the obtained detection result may include:

When the obtained detection result is: the third detection result, performing the preset asset protection operation based on the obtained detection result may include:

When it is determined that the target account asset has a security risk according to the asset security detection information, the warning information indicating that the user target account for alerting the target account of the digital wallet has a security risk exists;

When the obtained detection result is: the first detection result and the second detection result, performing the preset asset protection operation based on the obtained detection result may include:

When the obtained detection result is: the first detection result and the third detection result, performing the preset asset protection operation based on the obtained detection result may include:

When the obtained detection result is: the second detection result and the third detection result, performing the preset asset protection operation based on the obtained detection result may include:

When the obtained detection result is: the first detection result, the second detection result, and the third detection result, performing the preset asset protection operation based on the obtained detection result may include:

When it is determined that the target account asset has a security risk according to the asset security detection information, the user who outputs the target account for alerting the digital wallet has the warning information of the security risk.

In the first aspect, the foregoing determining the security setting guiding information according to the user behavior information may include:

Obtaining the security level assessment result of the user behavior by using the preset security level evaluation criteria and user behavior information;

The security setting guidance information is obtained based on the security level evaluation result.

After obtaining the user behavior information that affects the security of the private key of the digital wallet, in an implementation manner, using the preset security level evaluation criteria and the user behavior information to obtain the security level assessment result of the user behavior may include:

Determine the amount of user behavior information;

Determining the quantity range in which the quantity is in the preset safety level evaluation standard; wherein the preset safety level evaluation standard includes: a correspondence between the quantity range and the safety level;

Determine the amount of user behavior information obtained. Then, determine the quantity range in which the quantity is in the preset safety level evaluation criteria. The preset security level evaluation standard includes: a correspondence between the quantity range and the security level. After that, the security level corresponding to the quantity range in which the quantity is located can be determined as the security level evaluation result of the user behavior.

For example, the user behavior information that obtains the security of the private key of the digital wallet is: when the behavior information of the high-risk webpage is accessed, the behavior information of the email that has opened the virus, and the behavior information of the private key through the screen capture, the obtained information can be determined. The number of user behavior information is 3.

Wherein, it is assumed that in the preset security level evaluation standard, the quantity range quantity <1 has a corresponding relationship with the high security level; the quantity range 1 ≤ quantity ≤ 2 has a corresponding relationship with the medium security level; the quantity range quantity ≥ 3 and the low security level have Correspondence relationship.

In this way, the determined low security level corresponding to the quantity range number ≥ 3 in the determined quantity 3 can be determined as the security level evaluation result of the user behavior, that is, the security level of the user behavior of the user is determined to be low.

In another implementation, the total score of the obtained user behavior information may also be determined based on a preset score table. The preset score table records: a correspondence between the user behavior information and the score. Then, the range of scores in which the total score is located in the preset security level evaluation criteria can be determined. In this implementation manner, the preset security level evaluation standard includes: a correspondence between the score range and the security level. After that, it is reasonable to determine the security level corresponding to the quantity range in which the total score is located as the security level evaluation result of the user behavior.

The foregoing obtaining security setting guidance information based on the security level evaluation result may include:

Determine whether the obtained safety level assessment result is low;

After obtaining the security level evaluation result of the user behavior, it can be judged whether the obtained security level evaluation result is low. If it is determined to be low, in one implementation, preset security setting guidance information may be obtained. The preset security setting guiding information may include: a virus killing reminding information and a distributed storage private key reminding information.

In another implementation manner, the security setting guidance information corresponding to the obtained user behavior information may be determined according to the obtained user behavior information. Specifically, when the obtained user behavior information includes: behavior information of accessing a high-risk webpage, and/or opening behavior information of a virus-carrying email, the determined security setting guiding information may include: virus killing reminding information. When the obtained user behavior information includes: performing behavior information of backing up the private key through the screen capture, the determined security setting guidance information may include: decentralized storage private key reminding information. When the obtained user behavior information includes: using only the digital password as the behavior information of the asset payment password, the determined security setting guidance information may include: using the biometric password as the asset payment password reminding information. It can be understood that the security setting guiding information is: prompt information for guiding the user to eliminate the stolen threat of the private key caused by the obtained user behavior information.

In addition, the decentralized storage of the private key may refer to: dividing the private key into several parts by a preset threshold algorithm, and then performing distributed storage on each part. In this way, it is difficult for the illegal molecule to obtain the complete secret key, and the cost of obtaining the complete secret key by the illegal molecule is increased, so that the security of the secret key can be improved.

In addition, since the current method of storing the private key is mostly a complete storage method, when the security level evaluation result is high or medium, in order to further improve the security of the private key, the security setting guidance information can be obtained: the distributed storage private key reminder Information, or, can obtain security settings guidance information: it is reasonable to distribute the private key to the preset security chip reminder information.

After determining the security setting boot information, the security setting boot information for guiding the user to increase the security of the digital wallet's private key can be output. Since the security setting guidance information is obtained according to the user behavior information, it is realized from the user behavior level: the security defense operation for eliminating the private key theft threat, and can guide the user to perform the security defense operation to improve the digital wallet The security of the private key guarantees the security of the assets in the digital wallet.

Thus, the digital wallet on the electronic device can obtain user behavior information that affects the security of the private key of the digital wallet. Then, the preset security level evaluation standard and the user behavior information may be used to perform a security level assessment on the user behavior performed by the user of the electronic device, and obtain a security level evaluation result. Thereafter, based on the security level evaluation result, security setting guidance information for the electronic device can be obtained, and the security setting guidance information can be displayed. Wherein, the security setting guide information is information for guiding the user to improve the security of the digital wallet's private key. Therefore, through the security setting guiding information, the user can learn the security defense operation for eliminating the threat of the private key being stolen, and thereby the security of the digital wallet can be improved by the security defense operation, and the assets in the digital wallet are ensured. Safety.

In a second aspect, after obtaining the first security detection information and the second security detection information, a person skilled in the art may determine, according to the specific requirement, the digital security wallet according to the first security detection information and/or the second security detection information. The security factor of the private key.

It can be understood that, for the first security detection information, when the obtained virus detection information is: When the virus is found, the determined factors affecting the security of the digital wallet's private key include the presence of the virus. When the vulnerability detection information obtained is: when there is a vulnerability, the determined factors affecting the security of the digital wallet's private key include a vulnerability. When the root root permission detection information obtained is: when the root root permission is enabled, the determined factors affecting the security of the digital wallet's private key include that the root root authority is turned on. When the obtained network transmission security detection information is: an unsecure network, the determined factors affecting the security of the digital wallet's private key include being in a non-secure transmission network.

For the second security detection information, when the read and write permission detection information obtained is: readable and writable, the determined factors affecting the security of the digital wallet's private key include: the memory is not read and written. When the obtained repackaging detection information is: for the repackaged installation package, the determined factors affecting the security of the digital wallet's private key include: the digital wallet installation package is a non-original installation package. When the obtained private key storage mode detection information is: when the private key is completely stored, the determined factors affecting the security of the digital wallet's private key include: the private key is completely stored.

After determining the factors affecting the security of the private key, the determined factors may be utilized to generate the prompt information, and the generated prompt information is output to prompt the user to process the factors affecting the security of the private key. .

For example, when determining the security of the private key is: when the installation package of the virus and digital wallet is a non-original installation package, generate a prompt message: there is a virus threat, please check the virus; the digital wallet installation package is not the original version Installation package, it is recommended to use the original installation package to install digital wallet.

In addition, when determining the factors affecting the security of the private key, the vulnerability information, the root root permission is turned on, the non-secure transmission network, the memory is not read and written protection, and the private key is completely stored, the generated prompt information also includes: There is a vulnerability threat, please fix the vulnerability; it is recommended to turn off the root root privilege; currently it is a non-secure transport network, it is recommended to use a secure transport network; it is recommended to read and write the memory; it is recommended to enable the secure storage mode to decentralize the storage private key.

Therefore, the digital wallet can obtain the security detection information of the operating environment of the digital wallet as the first security detection information, and can also obtain its own security detection information as the second security detection information. Then, factors affecting the security of the private key of the digital wallet may be determined according to the obtained first security detection information and/or second security detection information. The prompt information can be generated by using the determined factors, and the prompt information is output. In this way, the user can know which factors in the electronic device affect the security of the digital wallet's private key through the prompt information, so that these factors can be processed in time to protect the private key and ensure the security of the assets in the digital wallet.

It can be understood that, in order to further ensure the security of the private key, that is, to ensure the security of the digital wallet asset, thereby providing the user with a more secure digital wallet, in the embodiment of the present application, it is also possible to detect whether the electronic device where the digital wallet is located is A security keyboard is installed. If not, the user is prompted to install a security keyboard. After the security keyboard is installed, the private key can be ensured that the private key is not stolen during the input process, thereby further ensuring the security of the private key.

The security keyboard is a virtual keyboard that is displayed on the screen of the electronic device and is input by a mouse click to change the position of the input key randomly.

In addition, in order to further ensure the security of the private key, that is, to ensure the security of the digital wallet asset, it is also possible to detect whether the digital wallet is provided with an address whitelist, and if not, prompt the user to set the address whitelist. Among them, the address white list includes a secure transaction address and a contract address. When the transaction address and contract address of the transaction do not match the address in the white list of the address, it indicates that the transaction address and the contract address of the transaction are addresses with security threats, and the user may be issued a danger warning to prompt the user to be cautious. Trading, thus ensuring the security of assets in the digital wallet.

Of course, it is also possible to detect whether a blacklist is set in the digital wallet. If not, the user is prompted to set an address blacklist, wherein the address blacklist includes a dangerous transaction address and a contract address, which is also reasonable.

In the third aspect, when the asset security detection information indicating that the target account has a security risk is generated, the target account is insecure, and the private key corresponding to the target account may be stolen, and the target account asset has a security risk, that is, according to the asset. The security monitoring information determines that the target account assets have security risks. At this time, in order to better ensure the security of the digital wallet asset, the warning information may be output, and the user of the target account is alerted to the security risk of the target account, so that the user performs the corresponding operation of protecting the target account.

In an implementation manner, the foregoing warning information may be outputted in the form of an audible prompt, may be outputted in the form of a screen brightness prompt, may be outputted in the form of a text information prompt, or may be outputted in the form of an interface jump prompt, etc. The embodiment of the present application does not limit the prompting form of the above warning information.

Thus, it is possible to determine whether the transaction record is a legitimate transaction by comparing the transaction record for the target account in the blockchain account with the transaction record stored by the electronic device where the digital wallet is located, and determining whether the target account is a legitimate transaction. There is a security risk. When there is no detected transaction record in the transaction record corresponding to the target account stored in the electronic device where the digital wallet is located, it may be determined that the target account has a security risk, and the warning information is output to alert the user account of the target account to exist. Security risks to achieve identification of account security.

When the asset security detection information that determines that the target account does not have a security risk is generated, it indicates that the target account is secure, and the private key corresponding to the target account is not stolen. At this time, in order to better improve the user experience, the current transaction record may continue to be output to remind the user that the target account has a transaction so as to be a voucher for the user's asset transaction.

In one case, when the current transaction record is output, the communication identifier of the user bound to the target account may be obtained first, and the current transaction record is output based on the obtained communication identifier. Specifically, the foregoing communication identifier may be a mailbox number. In this case, the electronic device may send the current transaction record to the email address corresponding to the email address in the form of an email; the communication identifier may be a mobile phone number, and at this time, the electronic device may The current transaction record is sent to the mobile phone corresponding to the mobile phone number in the form of a short message, or the current transaction record is sent to the mobile phone corresponding to the mobile phone number in the form of a phone, and the user can answer the call and learn the current transaction. recording.

In an implementation manner, in order to improve the user experience, the method may further include:

Periodically or aperiodically obtaining a transaction record corresponding to the target account from the blockchain ledger;

The transaction record corresponding to the obtained target account is outputted, so that the user can view the transaction record corresponding to the target account and perform the transaction.

It can be understood that the blockchain book can be monitored in real time, and the cycle can be preset. Whenever a cycle arrives, the transaction record corresponding to the target account is obtained from the blockchain ledger, and the transaction record corresponding to the target account is output. To display to the user, so that the user can view the transaction record corresponding to the target account and check the account. Alternatively, each time a bill obtaining instruction issued by the user is obtained, in response to the bill obtaining instruction, the transaction record corresponding to the target account is obtained from the blockchain ledger, and the transaction record corresponding to the target account is outputted to be displayed to the user. In order for the user to view the transaction record corresponding to the target account and the account.

In an implementation manner, after the step of outputting the alert information, the method may further include:

A prompt message is output to prompt the user to change the account.

Therefore, in order to better ensure the security of the digital wallet asset, when it is determined that the target account has a security risk, that is, the asset in the target account has a security risk, and after outputting the warning information, the user may continue to output prompt information to the user to prompt the user. Change your account. The foregoing prompt information may include preset operation information for guiding the user to replace the account, so that the user can create a new account based on the guidance of the electronic device, that is, the preset operation information, that is, create a private key corresponding to the new account. The account is replaced by enabling the user to log in to the new account based on the new private key and transfer the assets of the target account to the new account. To a certain extent, to protect the security of the user's assets.

In an implementation manner, the foregoing warning information may be outputted in the form of a text message prompt. At this time, the warning information may be output in the form of a pop-up window, and the pop-up pop-up window includes: the user who alerts the target account that the target account exists. The information about the security risk, or the above warning information is outputted in the form of GCM (Google Cloud Messaging) Push, which is a cloud push message service. Specifically, the foregoing output warning information may include:

The warning message is output in the form of a pop-up window.

In an implementation manner, the foregoing warning information may be output in various forms. In order to better attract the user's attention, before the step of outputting the warning information, the method may further include:

Obtaining a communication identifier of a user bound in advance with the target account;

The foregoing steps for outputting the warning information may include:

The warning information is output based on the obtained communication identifier of the user.

In the embodiment of the present application, the electronic device may obtain the communication identifier of the user that is bound to the target account in advance. In an implementation manner, the communication identifier may include a mobile phone number and/or a mailbox number, and the electronic device may be obtained based on the foregoing. The user's communication ID and output warning information. In one case, the communication identifier is a mailbox number. At this time, the electronic device may send the foregoing warning information to the mailbox corresponding to the mailbox number in the form of an email; the communication identifier is a mobile phone number, and at this time, the electronic device may The above warning information is sent to the mobile phone corresponding to the mobile phone number in the form of a short message, or the above warning information is sent to the mobile phone corresponding to the mobile phone number in the form of a telephone, and the user can answer the above-mentioned telephone to learn the warning information.

Corresponding to the above method embodiment, the embodiment of the present application further provides a digital wallet asset protection device. Referring to FIG. 5, the device may include:

The detecting module 501 is configured to perform at least one detecting operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtain a detection result corresponding to the performed detection operation;

The executing module 502 is configured to perform a preset asset protection operation based on the obtained detection result.

In the embodiment of the present application, when the computer program is executed by the processor, at least one detecting operation of performing user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet is performed, and the detection corresponding to the performed detection operation is obtained. As a result, a preset asset protection operation is performed based on the obtained detection result. In the present application, by performing at least one security detection operation, the detection result related to the digital wallet is obtained, and based on the detection result, the preset asset protection operation is performed, thereby achieving the purpose of ensuring the asset security of the user digital wallet.

In an implementation manner of the embodiment of the present application, the detection result corresponding to the user behavior detection operation is user behavior information that affects the security of the private key of the digital wallet;

In an implementation manner of the embodiment of the present application, the executing module 502 is specifically configured to: output security prompt information to the user based on the obtained detection result.

In an implementation manner of the embodiment of the present application, the device may further include:

The execution module 502 can be specifically configured to:

In an implementation manner of the embodiment of the present application, the device may further include a first obtaining module, where the first obtaining module may include:

In an implementation manner of the embodiment of the present application, the executing module 502 may include:

In an implementation manner of the embodiment of the present application, the preset user behavior information may include: behavior information of accessing a high-risk webpage, behavior information of an email that has opened a virus, behavior information of backing up a private key by screen capture, and only The digital password is used as at least one of the behavior information of the asset payment password.

In an implementation manner of the embodiment of the present application, the security level evaluation result obtaining unit may include:

In an implementation manner of the embodiment of the present application, the security setting guiding information obtaining unit may include:

In an implementation manner of the embodiment of the present application, the device may further include a second obtaining module, where the second obtaining module may include:

In an implementation manner of the embodiment of the present application, when the virus detection information obtained by the first security detection information obtaining unit is: when a virus is found, the security key determined by the execution module affecting the digital wallet is secure. Sexual factors include the presence of a virus;

In an implementation manner of the embodiment of the present application, the device may further include a third obtaining module, where the third obtaining module may include:

The embodiment of the present application further provides an electronic device, as shown in FIG. 6, including a processor 601, a communication interface 602, a memory 603, and a communication bus 604, wherein the processor 601, the communication interface 602, and the memory 603 pass through the communication bus 604. Complete communication with each other,

a memory 603, configured to store a computer program;

The processor 601 is configured to perform the following method steps when executing the computer program stored on the memory 603:

In the embodiment of the present application, the electronic device performs at least one detection operation of the user behavior detection, the electronic device security detection of the digital wallet, and the asset security detection of the digital wallet, and obtains the detection result corresponding to the performed detection operation, based on the obtained The detection result is performed by performing a preset asset protection operation. In the present application, by performing at least one security detection operation, the detection result related to the digital wallet is obtained, and based on the detection result, the preset asset protection operation is performed, thereby achieving the purpose of ensuring the asset security of the user digital wallet.

In an implementation manner of the embodiment of the present application, the method may further include:

In an implementation manner of the embodiment of the present application, the obtaining process of the user behavior information that affects the security of the private key of the digital wallet may include:

Obtaining a questionnaire survey result of the preset questionnaire;

In an implementation manner of the embodiment of the present application, the step of determining the security setting guide information according to the user behavior information may include:

In an implementation manner of the embodiment of the present application, the preset user behavior information includes: behavior information of accessing a high-risk webpage, behavior information of an email that has been opened with a virus, behavior information of backing up a private key by screen capture, and only utilizing The digital password is at least one of behavioral information of the asset payment password.

In an implementation manner of the embodiment of the present application, the step of obtaining a security level assessment result of the user behavior by using the preset security level evaluation criteria and the user behavior information may include:

Determining the amount of the user behavior information;

In an implementation manner of the embodiment of the present application, the step of obtaining the security setting guiding information based on the security level evaluation result may include:

Determine whether the obtained safety level assessment result is low;

In an implementation manner of the embodiment of the present application, the obtaining process of the security detection information of the electronic device where the digital wallet is located may include:

In an implementation manner of the embodiment of the present application, when the obtained virus detection information is: when the virus is found, the determined factors affecting the security of the private key of the digital wallet include the presence of a virus;

In an implementation manner of the embodiment of the present application, the process of obtaining the asset security detection information of the digital wallet may include:

The communication bus mentioned in the above electronic device may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the above electronic device and other devices.

The memory may include a random access memory (RAM), and may also include a non-volatile memory (NVM), such as at least one disk storage. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

The above processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; or may be a digital signal processing (DSP), dedicated integration. Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component.

The embodiment of the present application further provides a computer readable storage medium, where the computer readable storage medium stores a computer program, and when the computer program is executed by the processor, the following method steps are implemented:

Obtaining a questionnaire survey result of the preset questionnaire;

Determining the amount of the user behavior information;

Determine whether the obtained safety level assessment result is low;

The embodiment of the present application also provides an executable program code for being executed to execute any of the above digital wallet asset protection methods.

It should be noted that, in this context, relational terms such as first and second are used merely to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply such entities or operations. There is any such actual relationship or order between them. Furthermore, the term "comprises" or "comprises" or "comprises" or any other variations thereof is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device that comprises a plurality of elements includes not only those elements but also Other elements, or elements that are inherent to such a process, method, item, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The various embodiments in the present specification are described in a related manner, and the same or similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the device embodiment, the electronic device embodiment, the above computer readable storage medium embodiment, and the above executable program code embodiment, since it is substantially similar to the method embodiment, the description is relatively simple and relevant. See the partial description of the method embodiment.

The above description is only the preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application are included in the scope of the present application.

The above is only the preferred embodiment of the present application, and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc., which are made within the spirit and principles of the present application, should be included in the present application. Within the scope of protection.

Claims

A digital wallet asset protection method, characterized in that the method comprises:

Performing at least one detection operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtaining a detection result corresponding to the performed detection operation;

The preset asset protection operation is performed based on the obtained detection result.
The method according to claim 1, wherein the detection result corresponding to the user behavior detecting operation is user behavior information that affects the security of the private key of the digital wallet;

The detection result corresponding to the electronic device security detection of the digital wallet is the security detection information of the electronic device where the digital wallet is located;

The detection result corresponding to the asset security detection of the digital wallet is the asset security detection information of the digital wallet, and the asset security detection information is information indicating whether the target account asset of the digital wallet has a security risk.
The method of claim 2, wherein the method further comprises:

If the obtained detection result is the first detection result, the first detection result is the detection result corresponding to the user behavior detection operation; and the step of performing the preset asset protection operation based on the obtained detection result, including :

Determining, according to the user behavior information, security setting guidance information, and outputting security setting guidance information for guiding a user to improve security of a private key of the digital wallet;

If the obtained detection result is the second detection result, and the second detection result is the detection result corresponding to the electronic device security detection of the digital wallet, the performing the preset asset protection operation based on the obtained detection result Steps, including:

Determining, according to the security detection information, a factor affecting the security of the private key of the digital wallet, and outputting prompt information for prompting the user to process factors affecting the security of the private key;

If the obtained detection result is the third detection result, and the third detection result is the detection result corresponding to the asset security detection of the digital wallet, the step of performing the preset asset protection operation based on the obtained detection result ,include:

When it is determined that the target account asset has a security risk according to the asset security detection information, the user that is used to alert the target account of the digital wallet outputs the warning information of the security risk.
The method according to claim 2, wherein the obtaining process of the user behavior information that affects the private key of the digital wallet comprises:

Displaying a preset questionnaire; wherein the preset questionnaire records: preset user behavior information that affects the security of the digital wallet's private key, and a check box corresponding to each preset user behavior information; When the check box corresponding to the user behavior information is selected, it indicates that the preset user behavior information is selected;

Obtaining a questionnaire survey result of the preset questionnaire;

The selected preset user behavior information in the questionnaire result is determined as user behavior information that affects the security of the digital wallet's private key.
The method according to claim 3, wherein the step of determining security setting guide information according to the user behavior information comprises:

Using the preset security level evaluation criteria and the user behavior information to obtain a security level assessment result of the user behavior;

Based on the security level evaluation result, security setting guidance information is obtained.
The method according to claim 5, wherein the preset user behavior information comprises: behavior information of accessing a high-risk webpage, behavior information of an email that has opened a virus, behavior information of backing up a private key by screen capture, and only The digital password is used as at least one of the behavior information of the asset payment password.
The method according to claim 5, wherein the step of obtaining a security level evaluation result of the user behavior by using the preset security level evaluation criteria and the user behavior information comprises:

Determining the amount of the user behavior information;

Determining, in the predetermined security level evaluation standard, the quantity range in which the quantity is located in the preset security level evaluation standard; the preset security level evaluation standard includes: a correspondence between the quantity range and the security level;

The security level corresponding to the quantity range in which the quantity is located is determined as the security level evaluation result of the user behavior.
The method according to claim 6, wherein the step of obtaining security setting guidance information based on the security level evaluation result comprises:

Determine whether the obtained safety level assessment result is low;

If yes, determining security setting guidance information corresponding to the obtained user behavior information;

Wherein, when the obtained user behavior information includes: behavior information of accessing a high-risk webpage, and/or opening behavior information of a virus-carrying email, the determined security setting guiding information includes: a virus killing reminding information; The user behavior information includes: when the action information of the private key is backed up by the screen capture, the determined security setting guidance information includes: decentralized storage private key reminder information; when the obtained user behavior information includes: using only the digital password as the asset payment password behavior When the information is used, the determined security setting guidance information includes: using the biometric password as the asset payment password reminding information.
The method according to claim 3, wherein the obtaining process of the security detection information of the electronic device where the digital wallet is located comprises:

Obtaining first security detection information of an operating environment of the digital wallet, where the first security detection information includes: virus detection information, vulnerability detection information, root root authority detection information, and network transmission security detection of the electronic device where the digital wallet is located At least one of the information;

Obtaining the second security detection information of the digital wallet itself, the second security detection information includes: read and write permission detection information of the memory corresponding to the digital wallet, and repacking detection information of the installation package of the digital wallet The private key of the digital wallet stores at least one of mode detection information.
The method according to claim 9, wherein when the obtained virus detection information is: when the virus is found, the determined factors affecting the security of the private key of the digital wallet include the presence of a virus;

When the obtained vulnerability detection information is: when there is a vulnerability, the determined factors affecting the security of the digital wallet's private key include a vulnerability;

When the root root permission detection information obtained is: when the root root permission is enabled, the determined factors affecting the security of the digital wallet's private key include that the root root authority is enabled;

When the obtained network transmission security detection information is: an unsecure network, the determined factors affecting the security of the digital wallet's private key include being in a non-secure transmission network;

When the read and write permission detection information obtained is: readable and writable, the determined factors affecting the security of the digital wallet's private key include: the memory is not read and written;

When the obtained repackaging detection information is: for the repackaged installation package, the determined factors affecting the security of the digital wallet private key include: the installation package of the digital wallet is a non-original installation package;

When the obtained private key storage mode detection information is: when the private key is completely stored, the determined factors affecting the security of the digital wallet's private key include: the private key is completely stored.
The method according to claim 2, wherein the obtaining process of the asset security detection information of the digital wallet comprises:

When detecting a transaction record for the target account of the digital wallet in the blockchain ledger, determining whether there is a detected transaction record in the transaction record corresponding to the target account stored by the electronic device where the digital wallet is located;

If yes, generate asset security detection information that determines that the target account does not have a security risk;

If not, generate asset security detection information that identifies a security risk in the target account.
The method according to claim 2, wherein the performing the preset asset protection operation based on the obtained detection result comprises:

Based on the obtained detection result, the safety prompt information to the user is output.
A digital wallet asset protection device, characterized in that the device comprises:

a detecting module, configured to perform at least one detecting operation of user behavior detection, performing electronic device security detection of the digital wallet, and performing asset security detection of the digital wallet, and obtaining a detection result corresponding to the performed detection operation;

An execution module is configured to perform a preset asset protection operation based on the obtained detection result.
The device according to claim 13, wherein the detection result corresponding to the user behavior detecting operation is user behavior information that affects the security of the private key of the digital wallet;

The detection result corresponding to the electronic device security detection of the digital wallet is the security detection information of the electronic device where the digital wallet is located;

The detection result corresponding to the asset security detection of the digital wallet is the asset security detection information of the digital wallet, and the asset security detection information is information indicating whether the target account asset of the digital wallet has a security risk.
The device according to claim 14, wherein the execution module is specifically configured to:

If the obtained detection result is the first detection result, the first detection result is a detection result corresponding to the user behavior detection operation; determining safety setting guidance information according to the user behavior information, and outputting is used to guide the user to improve Security setting guidance information of the security of the private key of the digital wallet;

If the obtained detection result is the second detection result, the second detection result is the detection result corresponding to the electronic device security detection of the digital wallet, and determining the private key affecting the digital wallet according to the security detection information. Security factor, outputting prompt information for prompting the user to deal with factors affecting the security of the private key;

If the obtained detection result is the third detection result, and the third detection result is the detection result corresponding to the asset security detection of the digital wallet, when determining that the target account asset has a security risk according to the asset security detection information, And outputting, for alerting the user of the target account of the digital wallet, that the target account has a security risk warning information.
The device according to claim 14, wherein the device further comprises a first obtaining module, the first obtaining module comprising:

a display unit, configured to display a preset questionnaire; wherein the preset questionnaire records: preset user behavior information that affects the security of the digital wallet private key, and a check box corresponding to each preset user behavior information When a check box corresponding to the preset user behavior information is selected, it indicates that the preset user behavior information is selected;

a questionnaire obtaining unit for obtaining a questionnaire result of the preset questionnaire;

The user behavior information determining unit is configured to determine the selected preset user behavior information in the questionnaire result as user behavior information that affects the private key security of the digital wallet.
The apparatus according to claim 15, wherein the execution module comprises:

a security level evaluation result obtaining unit, configured to obtain a security level evaluation result of the user behavior by using a preset security level evaluation standard and the user behavior information;

The security setting guidance information obtaining unit is configured to obtain security setting guidance information based on the security level evaluation result.
The device according to claim 17, wherein the preset user behavior information comprises: behavior information of accessing a high-risk webpage, behavior information of an email that has opened a virus, behavior information of backing up a private key by screen capture, and only The digital password is used as at least one of the behavior information of the asset payment password.
The device according to claim 17, wherein the security level evaluation result obtaining unit comprises:

a quantity determining subunit, configured to determine the quantity of the user behavior information;

a quantity range determining subunit, configured to determine a quantity range in which the quantity is located in a preset security level evaluation criterion; wherein the preset security level evaluation standard includes: a correspondence between a quantity range and a security level;

The security level evaluation result determining sub-unit is configured to determine a security level corresponding to the quantity range in which the quantity is located, as a security level evaluation result of the user behavior.
The device according to claim 18, wherein the security setting guide information obtaining unit comprises:

a determining subunit, configured to determine whether the obtained security level evaluation result is low, and if so, triggering the security setting guiding information determining subunit;

The security setting guiding information determining subunit is configured to determine security setting guiding information corresponding to the obtained user behavior information;

Wherein, when the obtained user behavior information includes: behavior information of accessing a high-risk webpage, and/or opening behavior information of a virus-carrying email, the determined security setting guiding information includes: a virus killing reminding information; The user behavior information includes: when the action information of the private key is backed up by the screen capture, the determined security setting guidance information includes: decentralized storage private key reminder information; when the obtained user behavior information includes: using only the digital password as the asset payment password behavior When the information is used, the determined security setting guidance information includes: using the biometric password as the asset payment password reminding information.
The device according to claim 15, wherein the device further comprises a second obtaining module, the second obtaining module comprising:

a first security detection information obtaining unit, configured to obtain first security detection information of an operating environment of the digital wallet, where the first security detection information includes: virus detection information, vulnerability detection information of the electronic device where the digital wallet is located, At least one of root root authority detection information and network transmission security detection information;

a second security detection information obtaining unit, configured to obtain second security detection information of the digital wallet itself, where the second security detection information includes: read and write permission detection information of the memory corresponding to the digital wallet, the number At least one of repackaging detection information of the installation package of the wallet and private key storage mode detection information of the digital wallet.
The device according to claim 21, wherein the virus detection information obtained by the first security detection information obtaining unit is: when a virus is found, the private key determined by the execution module affecting the digital wallet Security factors include the presence of a virus;

When the vulnerability detection information obtained by the first security detection information obtaining unit is: when there is a vulnerability, the factor determined by the execution module affecting the security of the private key of the digital wallet includes a vulnerability;

When the root root authority detection information obtained by the first security detection information obtaining unit is: when the root root authority is enabled, the security factor determined by the execution module affecting the private key of the digital wallet includes the root root authority being Open

When the network transmission security detection information obtained by the first security detection information obtaining unit is an non-secure network, factors determined by the execution module affecting the security of the private key of the digital wallet include: being in a non-secure transmission network. ;

When the read/write right detection information obtained by the second security detection information obtaining unit is: readable and writable, the factors determined by the execution module affecting the security of the private key of the digital wallet include: the memory is not performed. Read and write protection;

When the repackaging detection information obtained by the second security detection information obtaining unit is: a repackaged installation package, a factor determined by the execution module to affect security of the private key of the digital wallet includes: The installation package of the digital wallet is a non-original installation package;

When the private key storage mode detection information obtained by the second security detection information obtaining unit is: when the private key is completely stored, the factors determined by the execution module affecting the security of the private key of the digital wallet include: a private key It is stored completely.
The device according to claim 14, wherein the device further comprises a third obtaining module, the third obtaining module comprising:

a determining subunit, configured to determine whether a transaction record corresponding to the target account stored by the electronic device where the digital wallet is stored exists when a transaction record for the target account of the digital wallet is generated in the blockchain ledger The detected transaction record, if yes, triggering the first generation unit, and if not, triggering the second generation unit;

The first generating unit is configured to generate asset security detection information that determines that the target account does not have a security risk;

The second generating unit is configured to generate asset security detection information that determines that the target account has a security risk.
The device according to claim 14, wherein the execution module is specifically configured to:

Based on the obtained detection result, the safety prompt information to the user is output.
An electronic device, comprising: a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory complete communication with each other through the communication bus;

a memory for storing a computer program;

The method of any one of claims 1-12, when the processor is configured to execute a computer program stored on the memory.
A computer readable storage medium, wherein the computer readable storage medium stores a computer program, the computer program being executed by a processor to implement the method steps of any of claims 1-12.
An executable program code, characterized in that the executable program code is operative to perform the method steps of any of claims 1-12.