Digital currency mobile devices
1. Security risk of running environment
the core file of encrypted digital currency Wallet - private key / mnemonics is stored on the terminal device, whether it is PC or mobile terminal, if the terminal device appears unsafe phenomenon, There is a very high security risk for the private key / mnemonic
at the beginning of design, a secure digital wallet can avoid the possibility of private key / mnemonics being stolen e to the running environment. The security problems of the running environment on the terminal mainly include virus software, operating system vulnerabilities and hardware vulnerabilities
2. The security risk of network transmission
the security of network transmission is more reflected in the ability to resist man in the middle attack. Man in the middle attack means that the attacker creates independent contact with both ends of the communication and exchanges the data they receive, so that both ends of the communication think that they are talking directly with each other through a private connection, but in fact the whole conversation is completely controlled by the attacker
although most digital wallet applications use the HTTPS protocol to communicate with the server, the man in the middle attack method is to get the content of the HTTPS protocol by installing a digital certificate in the user terminal
a secure digital wallet needs to be able to scan the legality of all the digital certificates in the terminal, check the proxy settings in the network transmission process, and ensure the security of the basic network communication environment
in the development of digital wallet, whether to use two-way verification for communication verification at the network transmission level is also an important criterion to measure the security of a digital wallet application
3. The security risk of file storage mode
for the private key / mnemonics of digital wallet, the storage mode of terminal device also needs to be paid attention to in the security design. The access right of private key / mnemonic file directory, the form of private key / mnemonic file storage and the design of encryption algorithm all need to be strictly designed
when we analyze the security of several mainstream digital wallets, we find that even the well-known digital wallets are random in the storage of private key / mnemonic words. There are both plaintext storage and encrypted storage, but the decryption key is fixed in the code, which can not play any role in security defense
4. The security risk of the application itself
the security risk of the application itself mainly focuses on the security defense of the application installation package itself
whether the application installation package has the ability of anti tampering is a very core technical ability. In addition, memory security, anti debugging ability, life cycle management of private key / mnemonics, security of debugging log and security of development process also need to be enhanced
5. Security risk of data backup
if the mobile application can be backed up, it can use the machine with more powerful computing performance to brutally crack the private key / mnemonics. For example, if android:allowBackup Property is set to allow backup, then the backup mechanism of the system can be used to back up the application data files, and the private key / mnemonics of the encrypted digital currency will be backed up to the external media, which breaks the security boundary design of the operating system from another direction
for the majority of users, the security of digital wallet also means the security of wealth, so we must be careful when choosing digital wallet
I have used several wallets such as coin letter socoin and coinplus
in terms of personal experience, socoin and coinplus are very simple and easy to use. They are not only decentralized multi-functional cross chain digital currency wallets with social functions, but also integrate Multi Chain multi currency wallets, payment and settlement platform, currency trading platform, social groups, information market and other functions, which can meet almost all your needs for digital currency in one stop.
E-cash, like paper money, has no value in itself. It only depends on the credit of the issuer to reflect its value. It is a kind of digital information composed of 0 and 1 signed by the bank through electronic means, so it is also called digital currency. It is different from the credit card used now, because the credit card itself is not money, it is just a means of transfer, and e-cash itself is a kind of money, it can be directly used to buy goods. Although it is the same as gold coin and paper money, it does not need physical entity like them. Instead, it can make electronic payment only through data exchange to realize the function of cash. E-cash has the following characteristics:
one is the rapidity of mobile. It can send cash to distant places instantaneously through the network, so it has extremely fast mobility. Because it is a kind of digital information, like the usual data, it can be put in the computer and transmitted by the network. Moreover, it can be sent directly to the store terminal by the consumer terminal, so there is no need to pay the service charge to the intermediate settlement institution. However, because it can transfer large amounts of money to distant places instantaneously, it also increases the monitoring difficulty of financial management institutions, and also causes tax, legal, exchange rate instability and other problems
The other is the anonymity of payment (i.e. it is impossible to know who originally owned the money). Using cash can also achieve anonymity, but it is difficult to achieve it when using electronic settlement services (such as credit card). With the electronization of various social systems, there is a tendency to automatically collect personal secret information. Payment behavior is often the source of all kinds of personal secret information. Therefore, the use of e-cash will be an effective means of self-defense in the future computer society. However, the anonymity of e-cash will also provide the convenience of money laundering for money of unknown origin, so we should try to prevent it The third is to improve the safety. Because the security measures it adopts are far more perfect than the current credit card, much safer than checking accounts and savings accounts, and will not be stolen or robbed like banknotes and coins Fourthly, it can save cost. Banknotes need to be printed, transported, preserved, counted, anti-counterfeited and secured, which requires a lot of expenses. It is reported that the annual cost of transporting tangible currency in the United States is as high as US $6 billion, and that in the United Kingdom is as high as 200 million pounds. The cost of money settlement and transportation between the world bank system accounts for 5% of its total management fee. All these expenses can be saved when using e-cashThe following is a wine coin player published, may be helpful to you
about the liquor coin launched on yuanbao.com, some questions and imaginations from Shenyang Jinxin, the issuer of liquor coin... Today, on behalf of friends and large liquor coin players who are concerned about liquor coin and Shenyang Jinxin Commodity Trading Center Co., Ltd., which is known as the world's first blockchain commodity trading center, the author sums up some questions we all want to know, I hope that relevant professionals can reply, and also sincerely ask the website of dealer's home to give us comments, the right to explore the truth and help
first of all, let's get to know the wine coin:
commodity name: Luzhou Laojiao three-year-old cellar
Listing Name: Luzhou No.1
commodity code: a0101
listing specification: 1 bottle, 500ml
Listing Price: 20 yuan / bottle
total amount of listing: 1 million bottles
circulation: subject to the information publicity of currency address blockchain, The remaining amount is the UN flowing flux
pick up: minimum 6 bottles (one box)
pick up fee: free of charge, logistics delivery to pay
storage fee: the first year is borne by the supplier, and 1 yuan / bottle will be charged one year after the end of the year
application date: May 5, 2016
and the retail price collected in various online shopping malls is 85 yuan / box, 6 bottles, about 14.1 yuan per bottle, and some businesses also mail
in the announcement of Jinxin's official abandoning the relationship with tuanjiang, the reply from the Office site, I understand that the registered place is in Shenyang and the business place is in Beijing, and the instrial and commercial registration information also shows that the legal person was changed from Dundi to Li Ming on July 12, 2016, The shareholders were changed from Shenyang tuanzhang Commodity Trading Center Co., Ltd. and Yuanbao Jinxin Investment Management (Beijing) Co., Ltd. to Li Ming and Yuanbao Jinxin Investment Management (Beijing) Co., Ltd.
as to whether the registered capital of 10 million yuan is paid, the information inquired by the Administration for Instry and commerce does not reflect the payment, while the trading place enterprises have corresponding regulatory departments, For example, the municipal financial offices did not see the relevant approval documents or records from the official website and instrial and commercial information of Jinxin. At present, what we care about is
1, whether the enterprise is legal and compliant, and whether there are approval documents or records from relevant management departments
2. Does the wine coin really have value-added space as expected
as an online currency enthusiast, I would like to thank the dealer's home platform. At the same time, I would also like to invite Jinxin, liquor currency issuers, and the vast number of online currency enthusiasts to explore together! Let us this kind of small player can know more information
With the continuous development of Internet and computer technology, whether it is the third-party payment or automatic settlement function, it has brought great convenience to people's life. Recently, another good news is that the era of digital currency is coming. Major banks have successively joined the digital currency pilot work of the central bank. The good news of digital currency appears frequently. The digital currency wallet launched by CCB app is currently being tested, which is one step closer to the official use of digital RMB
purchase from 1 point, redeem from 1 point, and the limit is 50000
7 * 24 hours transfer in and transfer out at any time, no charge
fast redemption and real-time receipt (system default)
you can log in to mobile banking, click my at the bottom → all → financial management → chaochaoying → transfer in, and operate according to the prompt.