KR102148130B1 - Access control system and method for media blockchain - Google Patents

Abstract

The blockchain access control system of the present invention can connect to a blockchain network only through an agent server including an access control management server, an agent server, and a blockchain network. The blockchain network creates a block that stores content purchase history information, content copyright information, or content information, and stores it by adding it to the blockchain, and the access control management server manages the access rights of the blockchain for each blockchain user, and It issues tokens according to access rights to users, and the agent server connects to the access control management server to request issuance of tokens for blockchain users, verifies the tokens of blockchain users accessing the blockchain, and connects to the blockchain network. It connects and processes information registration or information inquiry in the blockchain according to the request of the blockchain user.

Description

Access control system and method for media blockchain {ACCESS CONTROL SYSTEM AND METHOD FOR MEDIA BLOCKCHAIN}

The present invention relates to a DRM system based on a block chain, and more particularly, the invention of a system for controlling access to a server that is accessed for recording in a block chain or inquiring in a block chain in a block chain-based DRM system is disclosed. do.

Digital Rights Management (DRM) is a technology that prevents illegal and unlimited copying of contents that are digitalized and can be easily distributed through information and communication networks, and manages that only legal users can use digital contents.

DRM is a technology that collectively manages content creation, distribution, and management, and provides a comprehensive digital rights management system that includes content packaging, content distribution, content usage billing, content monitoring, and content personalization. It is a constructive technique.

In a DRM system, content information and license information for content management are generally stored only in a central server, so when various user terminals access DRM content, a problem arises that a large communication load between the user terminal and the server occurs.

Blockchain refers to a technology that distributes and processes various data to nodes participating in the network without storing it in one central server. It is widely adopted and used from virtual currency to public systems such as real estate, land, and resident registration. Transaction records are organized into blocks and are connected by time, and each block contains connection information that connects the previous block and the next block, making it difficult to manipulate the contents of the past block.

However, since it is impossible to change or delete the contents already recorded in the blockchain, it is impossible to delete or change the contents created due to illegal access by unauthorized vendors or users, so it is not possible to block illegal access by unauthorized vendors or users. There is an increasing need for a way to do it.

The present invention is a method for blocking access to the blockchain by vendors or users who do not have access to the blockchain even if the media blockchain uses a public blockchain, and only registered vendors or users can access the blockchain. It aims to provide.

A block chain access control system according to an embodiment of the present invention includes an access control management server, an agent server, and a block chain network.

The blockchain access control system can connect to the blockchain network only through the agent server.

The blockchain network consists of a block chain node that creates a block that stores content purchase history information, content copyright information, or content information and adds it to the block chain through a P2P network.

The access control management server manages the access rights of the block chain for each block chain user, and issues tokens according to the access rights to the block chain users.

The agent server connects to the access control management server and requests the issuance of a token for the blockchain user, verifies the token of the blockchain user accessing the blockchain, and connects to the blockchain network to block the blockchain according to the request of the blockchain user. Processes information registration or information inquiry.

In addition, according to an additional aspect of the present invention, it may further include a content provider server for registering content information in the blockchain.

In addition, according to an additional aspect of the present invention, a service provider server and a license management server may be further included to store content purchase history or content copyright information in the blockchain.

According to the present invention, an agent server capable of storing information or inquiring information on the blockchain accesses the blockchain after confirming the access rights, so that it is possible to block access to the blockchain by vendors or users who do not have access rights to the blockchain. Occurs.

1 schematically illustrates a block chain access control system according to an embodiment of the present invention.
2 schematically illustrates a block chain access control system according to an additional aspect of the present invention.
3 is a block diagram of servers of a block chain access control system according to an additional aspect of the present invention.
4 is a block diagram of each server of a block chain access control system according to another aspect of the present invention.
5 illustrates a content information registration procedure according to another embodiment of the present invention.
6 is a diagram illustrating a content copyright information registration procedure according to another embodiment of the present invention.
7 is a diagram illustrating a procedure for storing a content purchase history and issuing a license according to another embodiment of the present invention.

The foregoing and additional aspects are embodied through embodiments described with reference to the accompanying drawings. It is understood that the constituent elements of each embodiment can be variously combined within the embodiment unless otherwise stated or contradictory to each other. Each block in the block diagram may represent a physical part in some cases, but may be a part of a function of one physical part or a logical representation of a function across a plurality of physical parts in another case. Sometimes the entity of a block or part of it can be a set of program instructions. All or part of these blocks may be implemented by hardware, software, or a combination thereof.

1 schematically illustrates a block chain access control system according to an embodiment of the present invention. According to an embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, and an agent server 100.

The blockchain network 300 stores content purchase history information or content copyright information or content information. In other words, when there is a request for registration of content purchase history information, content copyright information, or content information, a transaction is generated and a block containing them is created and added to the blockchain. The blockchain network 300 may be classified into a public type, a consortium type, and a private type according to the aspect of the invention.

In a public blockchain, there is no trust relationship between the operating entity and participants. The blockchain is open to anyone to access, and there are no restrictions on the authority to generate and transmit transactions. Since there are no restrictions on participants in the blockchain network 300, everyone has the right to create and check blocks, that is, the right to participate in the consensus algorithm. In general, the consensus algorithm is Proof of Work (PoW) or Proof of Stake (PoS). As anonymity is guaranteed, ID management for blockchain nodes is not performed.

Consortium-type blockchain is operated by consortium members composed of content providers and copyright holders, and there is a trust relationship between consortium members who are participants. Blockchain access is granted only to consortium members, and only consortium members have the authority to create and transmit transactions, and only consortium members have the authority to create and verify blocks, that is, to participate in the consensus algorithm. Delegated PoS (DPoS) and Practical Byzantine Fault Tolerance (PBFT) can be used as consensus algorithms. Identity management is performed on the blockchain node for authentication and access control.

In a private blockchain, there is a content provider, that is, a specific operating entity, and the authority to access the blockchain is determined by the operator. The authority to create and transmit transactions can be owned by the operating entity or a specific member, and only the operating entity has the right to participate in the consensus algorithm. DPoS, PBFT and PoA (Proof of Authority) can be used as consensus algorithms. For authentication and access control, ID management can be performed on blockchain nodes, and it is possible to record which nodes requested data from which blockchain and when.

The access control management server 200 includes an access right management unit 210 and a token issuing unit 220. The access right management unit 210 and the token issuing unit 220 are program instruction sets loaded into a memory and executed by a processor. The access right management unit 210 and the token issuing unit 220 may be located on one physical server, or may exist on separate physical servers, respectively.

The access right management unit 210 manages the access rights of the block chain users registered in the system for each user or vendor. In the blockchain access control system 10, a blockchain user may be a service user or a content provider server or a service provider that purchases and uses content.

The token issuing unit 220 issues a token according to an access right to a blockchain user in response to a token issuance request from the blockchain user through the agent server 100. Accordingly, the token issuing unit 220 issues tokens having different rights according to the managed access rights. The issued token is also delivered to the blockchain user who requested issuance through the agent server 100 in the same manner as the request.

The agent server 100 includes a token issuing processing unit 110, a token verification unit 120 of the agent server 100, and a block chain interface unit 130. The token issuance processing unit 110, the token verification unit 120 of the agent server 100, and the block chain interface unit 130 are program instruction sets that are loaded into a memory and executed in a processor. The token issuance processing unit 110, the token verification unit 120 of the agent server 100, and the blockchain interface unit 130 may be located on one physical server, or exist on separate physical servers, respectively. I can.

When receiving a token issuance request from a blockchain user, the token issuance processing unit 110 connects to the access control management server 200 to request a token issuance for the blockchain user, and receives the issued token to request a token issuance. Deliver it to the user.

The token verification unit 120 of the agent server 100 matches and stores the token delivered through the token issuance processing unit 110 with the blockchain user, and compares the token with the blockchain user's token included in the request to access the blockchain. To verify. It also verifies that the token included in the request has the necessary access rights to perform the request.

The block chain interface unit 130 connects to the block chain network 300 and processes information registration or information inquiry in the block chain according to the request of the block chain user. Nodes of the blockchain network 300 can be accessed only through the blockchain interface unit 130. In general, when the blockchain is not changed, a transaction does not occur (processed by calling the Call function), and when the blockchain is changed, a transaction occurs.

Even if the block chain access control system 10 uses a public block chain, access control can be performed like a private block chain because the block chain can be accessed only through the agent server 100.

FIG. 2 schematically illustrates a block chain access control system according to an additional aspect of the present invention, and FIG. 3 is a block diagram of each server of the block chain access control system 10 according to an additional aspect of the present invention. The block chain access control system 10 shown in FIGS. 2 and 3 is a content provider server 400, a service provider server 500 and a license management server compared to the block chain access control system 10 shown in FIG. 1. (600) has been added.

According to another embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, and an agent server 100, and additionally, a content provider server 400 It may further include. As shown in FIG. 2, the content provider server 400 may access the blockchain through the agent server 100.

The content provider server 400 may include a token management unit 410 and a content information registration unit 420. The token management unit 410 and the content information registration unit 420 of the content provider server 400 are program instruction sets loaded into a memory and executed by a processor. The token management unit 410 and the content information registration unit 420 of the content provider server 400 may be located on one physical server, or may exist on separate physical servers, respectively.

The token management unit 410 of the content provider server 400 may request the agent server 100 to issue a token, and store and manage the issued token. The token issuance request requested by the token management unit 410 of the content provider server 400 includes a content provider ID (CP ID) for identifying the content provider. At this time, the content provider server 400 is previously registered in the system.

The content information registration unit 420 may request registration of content information including a token issued to the agent server 100, a content provider ID (CP ID), and content information in order to store content information in a block chain.

The token verification unit 120 of the agent server 100 receiving the content information registration request from the content provider server 400 verifies the token included in the content information registration request from the content provider server 400. At this time, the token verification unit 120 of the agent server 100 matches and stores the token delivered through the token issuing processing unit 110 with the CP ID of the content provider server 400, and then stores the token included in the content information registration request. Compare and verify. It also verifies that the token included in the request has the necessary access rights to perform the request.

After token verification, the block chain interface unit 130 of the agent server 100 connects to the block chain network 300 to request block chain storage of content information. At this time, since the blockchain needs to be changed, transactions occur in the blockchain.

According to another embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, and an agent server 100, and additionally, a service provider server 500 Wow, it may further include a license management server 600. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token management unit 510 and a content packaging request unit 520. The token management unit 510 and the content packaging request unit 520 of the service provider server 500 are program instruction sets that are loaded into a memory and executed in a processor. The token management unit 510 and the content packaging request unit 520 of the service provider server 500 may be located on one physical server, or may exist on separate physical servers, respectively.

The token management unit 510 of the service provider server 500 may request the agent server 100 to issue a token, and store and manage the issued token. The token issuance request requested by the token management unit 510 of the service provider server 500 includes a service provider ID (SP ID) for identifying the service provider. At this time, the service provider server 500 is registered in advance in the system.

The content packaging request unit 520 may transmit a content packaging request including an issued token, a content ID, and an SP ID to the license management server 600. In this case, the content packaging request may further include a content download path, a content packaging path, and a content name. In the content packaging request, instead of the content ID, DRM Contents File (DRM Contents File) information including a content download path, a content packaging path, and a content name may be delivered to the content ID and the content packaging request.

The license management server 600 may include a token verification request unit 610, a content information request unit 620, a packaging unit 630, and a copyright information registration unit 640. The token verification request unit 610, the content information request unit 620, the packaging unit 630, and the copyright information registration unit 640 are program instruction sets that are loaded into a memory and executed in a processor. The token verification request unit 610, the content information request unit 620, the packaging unit 630, and the copyright information registration unit 640 may be located on one physical server, or on a separate physical server. Each can exist.

The token verification request unit 610 verifies the token included in the content packaging request of the service provider server 500 through the agent server 100. That is, when the content packaging request is transmitted to the agent server 100, the token verification unit 120 of the agent server 100 matches the SP ID of the service provider server 500 and stores the token and included in the content packaging request. Tokens are compared and verified. It also verifies that the token included in the request has the necessary access rights to perform the request.

The content information request unit 620 acquires a UCI (Universal Content Identifier) with the content ID included in the content packaging request, and transmits the request for content information corresponding to this UCI to the blockchain through the agent server 100. The blockchain inquires the content information stored in the blockchain with the corresponding UCI, and transmits the searched content information to the content information request unit 620 of the license management server 600 through the agent server 100. UCI is a known technology, and a detailed description of UCI is omitted.

The packaging unit 630 packages the content based on the content information received by the content information request unit 620 from the blockchain. Packaging is the process of processing with DRM to protect content.

The copyright information registration unit 640 may generate content copyright information based on the received content information and request registration in the block chain through the agent server 100. At this time, the contents of the blockchain are changed, so a transaction occurs in the blockchain.

According to another embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, and an agent server 100, and additionally, a service provider server 500 It may further include. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token management unit 510 and a purchase history information registration unit 530. The token management unit 510 and the purchase history information registration unit 530 of the service provider server 500 are program instruction sets loaded into a memory and executed in a processor. The token management unit 510 and the purchase history information registration unit 530 of the service provider server 500 may be located on one physical server, or may exist on separate physical servers, respectively.

The token management unit 510 of the service provider server 500 may request the agent server 100 to issue a token of the service user according to the content purchase of the service user, and store and manage the issued token. At this time, the token issuance request requested by the token management unit 510 of the service provider server 500 includes a service user ID (User ID) capable of identifying a service user. At this time, the service user is registered in the system in advance.

The purchase history information registration unit 530 transmits a request for a service user's encryption code including the issued token, content ID, and service user ID to the agent server 100 to request registration of the service user's content purchase history information.

The agent server 100 may further include a token issuing processing unit 110, a token verification unit 120 of the agent server 100, and a cryptographic code generation unit 140 in addition to the block chain interface unit 130.

Upon receiving the encryption code request, the encryption code generation unit 140 may generate encryption code information used for encryption/decryption of license information and transmit it to a service user through the service provider server 500.

In addition, when the token verification unit 120 of the agent server 100 receives the encryption code request from the service provider server 500, it verifies the token included in the request. The block chain interface unit 130 may connect to the block chain network 300 to request block chain storage of content purchase history information. At this time, since the contents of the blockchain are changed, a transaction occurs.

According to another embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, an agent server 100, and a service provider server 500. It may further include a license management server 600. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token management unit 510 and a purchase history information registration unit 530, and may further include a license request unit 540. The token management unit 510 of the service provider server 500, the purchase history information registration unit 530, and the license request unit 540 are program instruction sets that are loaded into a memory and executed in a processor. The token management unit 510 of the service provider server 500, the purchase history information registration unit 530 and the license request unit 540 may be located on one physical server, or may exist on separate physical servers, respectively. have.

The license request unit 540 may transmit a license issuance request of a service user including the received encryption code, a service user ID and a content ID to the license management server 600 to request a license issuance.

The license management server 600 may include a license issuing unit 650. The license issuing unit 650 is a set of program instructions loaded into a memory and executed by a processor.

The license issuing unit 650 receives the service user's license issuance request including the encryption code information, the service user's identification ID and the content identifier from the service provider server 500, and transmits it to the agent server 100, Through 100), content information and content copyright information may be received from the blockchain, and an encrypted license may be issued, and transmitted to a service user who has requested issuance of a license through the service provider server 500.

According to another embodiment of the invention, the block chain access control system 10 includes a block chain network 300, an access control management server 200, and an agent server 100, and includes a service provider server 500. It may contain more.

The service provider server 500 includes a content information list request unit 550 and a content information list providing unit 560. The content information list request unit 550 and the content information list providing unit 560 are program instruction sets loaded into a memory and executed in a processor. The content information list request unit 550 and the content information list providing unit 560 may be located on one physical server, or may exist on separate physical servers, respectively.

A service user who wants to check the list of contents provided by the service provider may request the list from the service provider server 500. The content information list request unit 550, which has been requested to provide a content list list of service users, is an agent server to query the content information list registered in the blockchain with the service provider's ID (SP ID). 100) can be sent to the request.

The content information list providing unit 560 may receive a content information list registered in the blockchain through the agent server 100 and provide it to a service user.

At this time, the token verification unit 120 of the agent server 100 verifies the token included in the request when receiving a request to view the content information list from the service provider server 500, and the block chain interface unit of the agent server 100 ( 130) may be connected to the blockchain network 300 to inquire and transmit a list of registered content information. At this time, since the contents of the blockchain are not changed, no transaction occurs.

4 is a block diagram of each server of a block chain access control system according to another aspect of the present invention. As shown in FIG. 4, the access control management server 200 may further include a token verification unit 230.

According to this aspect, the token verification unit 120 of the agent server 100 only requests verification of the received token from the access control management server 200, and the token verification unit 230 of the access control management server 200 The validity of the token is verified by comparing the received token with the self-issued token. At this time, it is also checked whether the corresponding token is authorized to perform the request received by the agent server 100. Accordingly, the agent server 100 must transmit information capable of verifying the token including the content of the request and the blockchain user who transmitted the token together.

A block chain access control method according to an aspect of the invention includes a token issuance request step, a token issuance reception step, a token transmission step, an access request reception step, a token verification step, and a request processing step.

The token issuance step is a step in which the agent server 100 receives a token issuance request from a blockchain user. In this aspect of the blockchain access control method, a blockchain user may be a service user or a content provider server or service provider that purchases and uses content.

The token issuance reception step is a step in which the agent server 100 requests the access control management server 200 to issue a token, and the access control management server 200 receives a token issued according to the access rights of the corresponding blockchain user.

The token transmission step is a step in which the agent server 100 transmits the issued token to the blockchain user who has requested the token issuance.

The access request receiving step is a step in which the agent server 100 receives an access request to the blockchain including a request for querying information stored in a blockchain including a token or a request for registering information in the blockchain.

The token verification step is a token verification step in which the agent server 100 verifies the validity of the token included in the request for access to the blockchain. In this step, the agent server 100 matches and stores the issued token with the blockchain user, and then verifies it by comparing it with the token of the blockchain user included in the request to access the blockchain. It also verifies that the token included in the request has the necessary access rights to perform the request.

The request processing step is a step in which the agent server 100 processes an access request by connecting to the blockchain, and transmits the processing result to the blockchain user.

5 illustrates a content information registration procedure according to another embodiment of the present invention. Blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance receiving step, a token transmission step, an access request receiving step, a token verification step, and a request processing step.

The blockchain user in this aspect is the content provider server 400.

In this aspect, the access request receiving step is a step of receiving, by the agent server 100, a request for registering content information from the content provider server 400 including the issued token, the content provider ID (CP ID), and the content information.

In this aspect, the request processing step is a step in which the agent server 100 connects to the blockchain network 300 to request block chain storage of content information and transmits the request result to the content provider server 400.

That is, this aspect is an access control method for a procedure in which the content provider server 400 registers content information in the blockchain through the agent server 100.

Referring to FIG. 5, the content provider server 400 first requests a token from the agent server 100 in order to register content information in the blockchain (S1000). This request includes the content provider ID (CP ID). The agent server 100 transmits a token issuance request from the content provider server 400 to the access control management server 200 (S1020), and the access control management server generates a token corresponding to the access authority of the corresponding content provider ID. (S1040). The generated token is transmitted to the content provider server 400 through the agent server 100 (S1060 and S1080). The content provider server 400 transmits a content information registration request including the issued token, its own content provider ID and content information to the agent server 100 to request registration in the block chain (S1100). Upon receiving the content information registration request, the agent server 100 verifies the token included in the request (S1120), and if the verification result token is valid, connects to the blockchain to request content information registration (S1140). The blockchain generates a transaction for this request and adds it to the block (S1160). The agent server 100 delivers the request result to the content provider server 400.

6 is a diagram illustrating a content copyright information registration procedure according to another embodiment of the present invention. Blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance receiving step, a token transmission step, an access request receiving step, a token verification step, a request processing step, and copyright information It may further include receiving a registration request of and requesting registration in the blockchain.

The blockchain user in this aspect is the service provider server 500.

In this aspect, the step of receiving an access request is a content packaging request including a token issued from the service provider server 500 through the license management server 600 by the agent server 100, a service provider ID (SP ID), and a content ID. This is the step of receiving.

In this aspect, the request processing step is a step in which the agent server 100 connects to the blockchain network 300 to inquire content information and transmits the retrieved content information to the license management server 600.

In the block chain access control method of this aspect, the step of receiving a registration request for additional copyright information is a step in which the agent server 100 receives a block chain registration request of the content copyright information generated by the license server, and registers it in the block chain. The requesting step is a step in which the agent server 100 connects to the blockchain network 300 to request the blockchain storage of content copyright information and transmits the request result to the license server.

Referring to FIG. 6, the service provider server 500 first requests a token from the agent server 100 in order to register content copyright information in the blockchain (S2000). This request contains the service provider ID (SP ID). The agent server 100 transmits a token issuance request from the service provider server 500 to the access control management server 200 (S2020), and the access control management server generates a token corresponding to the access authority of the corresponding service provider ID. (S2040). The generated token is transmitted to the service provider server 500 through the agent server 100 (S2060 and S2080). The service provider server 500 transmits a content packaging request including the issued token, its service provider ID, and DCF information (including the content ID) to the license management server 600 (S2100). The license management server 600 transmits a content packaging request to which the license server ID is added to the agent server 100 to verify whether the request is valid (S2120). Upon receiving the content packaging request, the agent server 100 verifies the token included in the request (S2140), and transmits the verification result to the license management server 600 again (S2160). The license management server 600 acquires UCI from the content ID included in the DCF information (S2180) and transmits a request for content information including the UCI to the agent server 100 (S2200). The agent server 100 requests content information inquiry by connecting to the blockchain (S2220). The blockchain inquires content based on UCI (S2240) and transmits the inquired content information to the license management server 600 through the agent server 100 (S2260, S2280). The license management server 600 generates copyright information based on the received content information and performs packaging (S2300). The generated content copyright information is included in the content copyright information registration request and transmitted to the agent server 100 to request registration in the blockchain (S2320). The agent server 100 registers content copyright information by connecting to the block chain (S2340). At this time, the blockchain generates a transaction and adds it to the block (S2360). The agent server 100 transmits the request result to the service provider server 500 through the license management server (S2380 and S2400).

7 is a diagram illustrating a procedure for storing a content purchase history and issuing a license according to another embodiment of the present invention. Blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance reception step, a token transmission step, an access request reception step, a token verification step, a request processing step, and a license issuance It may further include receiving a request, verifying a license issuance request, inquiring content information and content copyright information, and delivering a license.

Blockchain users in this aspect are service users.

In this aspect, the access request receiving step is a step in which the agent server 100 receives a request for an encryption code from a service user who has purchased content through the service provider server 500.

In the request processing step in this aspect, the agent server 100 connects to the blockchain network 300 to request the block chain storage of the content purchase history information of the service user, and generates an encryption code to provide the service provider server 500. This is the step of delivering it to service users through.

In the block chain access control method of this aspect, the additional license issuance request receiving step is a step in which the agent server 100 receives a license issuance request from the service user transmitted by the service provider server 500 from the license management server 600, In verifying the license issuance request, the agent server 100 verifies the license issuance request, and in the step of inquiring content information and content copyright information, the agent server 100 connects to the blockchain network 300 It is a step of inquiring information and content copyright information and transmitting the inquiry result to the license management server 600, and in the license delivery step, the license management server 600 generates license information based on the received content information and content copyright information. , This is the step of encrypting the license information using the encryption code and delivering it to the service user through the service providing server.

Referring to FIG. 7, a service user who purchases content from a service provider transmits a token request including his/her service user ID (User ID) to the service provider in order to obtain a license (S3000). The service provider server 500 requests a token from the agent server 100 by adding its own service provider ID to the received token request (S3020). The agent server 100 transmits the service user's token issuance request transmitted from the service provider server 500 to the access control management server 200 (S3040), and the access control management server conforms to the access authority of the corresponding service user ID. To generate a token (S3060). The generated token is transmitted to the service provider server 500 through the agent server 100 (S3080 and S3100). The service provider server 500 finally delivers the issued token to the service user (S3120). The service user receiving the token transmits a request for an encryption code used to encrypt and decrypt the license to the service provider server 500 (S3140). This encryption code request includes the issued token, service user ID and content ID. The service provider server 500 adds its own service provider ID (SP ID) to the received encryption code request and transmits it to the agent server 100 (S3160). The agent server 100 verifies the token of the received request (S3180) and generates a random encryption code (S3200). By combining this encryption code and User ID, a key to encrypt and decrypt license metadata can be generated. After generating the encryption code, the agent server 100 connects to the block chain and requests registration of content purchase history information including a service user ID and content ID included in the encryption code generation request (S3220). At this time, the blockchain generates a transaction to store the information in the block (S3240). The agent server 100 transmits the generated encryption code to the service user through the service provider server 500 (S3260 and S3280). The service user receiving the encryption code transmits a license request for the purchased content to the service provider server 500 (S3300). This license request includes an encryption code, service user ID, and content ID. The service provider server 500 adds its own service provider ID (SP ID) to the license request and transmits it to the license management server 600 (S3320). The license management server 600 adds its own license server ID to the license request received to verify whether the request is valid and transmits it to the agent server 100 (S3340). The agent server 100 verifies the encryption code included in the received request, the service provider ID, and the license server ID (S3360), and requests copyright information and content information from the blockchain (S3380). The blockchain inquires the blockchain for the request (S3400) and delivers the copyright information and content information to the agent server 100 (S3420), and the agent server 100 transmits the copyright information and content information to the license management server 600 ) To pass (S3440). The license management server 600 generates license information based on the received content information and content copyright information (S3460), encrypts it with an encryption key generated using an encryption code, and then sends it to the service user through the service provider server 500. It transmits (S3480, S3500). The service user decrypts the received encrypted license information with the encryption key generated using the encryption code, and then plays the content by acquiring the content decryption key from the license information (S3520).

Blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance receiving step, a token transmission step, an access request receiving step, a token verification step, and a request processing step.

Blockchain users in this aspect are service users.

In this aspect, the access request receiving step is a step in which the agent server 100 receives a request for a registered content information list from a service user through the service provider server 500.

In this aspect, the request processing step is a step in which the agent server 100 connects to the blockchain network 300 to retrieve and transmit the registered content information list.

That is, this aspect is an access control method for a procedure in which a service user requests and obtains a list of content information stored in a block chain through the agent server 100.

In the token verification step of the block chain access control method according to another aspect of the invention, the agent server 100 passes the token included in the access request to the block chain to the access control management server 200 to verify the validity of the token. Step. That is, the agent server 100 does not directly verify the validity of the token, but is a blockchain access control method for a method of verifying the validity through the access control management server 200. At this time, it is also checked whether the corresponding token is authorized to perform the request received by the agent server 100. Therefore, the agent server 100 must transmit information for verifying the token including the content of the request and the blockchain user who transmitted the token to the access control management server 200 together.

In the above, the present invention has been described through embodiments with reference to the accompanying drawings, but the present invention is not limited thereto, and it should be interpreted to cover various modified examples that can be apparently derived from those skilled in the art. The claims are intended to cover these variations.

10: Blockchain access control system
100: agent server
110: token issuance processing unit 120: token verification unit
130: block chain interface unit 140: encryption code generation unit
200: access control management server
210: access right management unit 220: token issuing unit
230: token verification unit
300: Blockchain network
400: content provider server
410: token management unit 420: content information register
500: service provider server
510: token management unit 520: content packaging request unit
530: purchase history information register 540: license request unit
550: content information list request unit 560: content information list providing unit
600: license management server
610: token verification request unit 620: content information request unit
630: packaging unit 640: copyright information register
650: license issuer

Claims (13)

Blockchain network that creates a block storing content purchase history information or content copyright information or content information and adds it to the block chain;
An access control management server including an access right management unit for managing access rights of the block chain for each block chain user, and a token issuing unit for issuing tokens according to access rights to block chain users; And
A token issuance processing unit that connects to the access control management server and requests the issuance of a token for a blockchain user, a token verification unit that verifies the token of a blockchain user accessing the blockchain, and the blockchain network Agent server including a block chain interface unit for processing information registration or information inquiry in the block chain according to the request;
Including,
A service provider server including a token management unit for requesting token issuance to the agent server, and a content packaging request unit for transmitting a content packaging request including a content ID to the license management server;
The license management server includes a token verification request unit that verifies the token included in the content packaging request of the service provider server through an agent server, a content information request unit that requests and receives content information stored in the blockchain through the agent server, and receives. It further includes a license management server including a packaging unit for packaging content based on one content information, and a copyright information registration unit for requesting registration in the blockchain through the agent server by generating content copyright information based on the received content information. Blockchain access control system.
The method of claim 1, wherein the system
A content provider server including a token management unit for requesting token issuance from the agent server, and a content information registration unit for requesting content information registration with the agent server;
Including more,
The token verification unit of the agent server verifies the token included in the content information registration request from the content provider server, and the block chain interface unit of the agent server connects to the block chain network to request blockchain storage of content information.
delete The method of claim 1, wherein the system
A token management unit that requests the service user's token issuance to the agent server according to the content purchase of the service user, and a purchase history information registration unit that requests the registration of content purchase history information by transmitting the service user's encryption code generation request to the agent server Service provider server;
Including more,
The agent server further includes an encryption code generation unit that generates encryption code information used for encryption/decryption of license information and delivers it to the service user through the service provider server,
The token verification unit of the agent server verifies the token included in the request when receiving a request to generate an encryption code from the service provider server, and the block chain interface unit of the agent server connects to the blockchain network to request blockchain storage of content purchase history information. Blockchain access control system.
The method of claim 4,
The service provider server further includes a license request unit for transmitting a license issuance request of the service user to the license management server,
The system receives the service user's license request including the encryption code information, the service user's identification ID and the content identifier from the service provider server, transmits it to the agent server, and transmits content information and content copyright information from the blockchain through the agent server. Blockchain access control system further comprising a license management server including a license issuing unit that receives and issues an encrypted license.
The method of claim 1, wherein the system
A service provider server including a content information list request unit for requesting a content information list inquiry registered in the block chain to an agent server, and a content information list providing unit for receiving and providing a content information list registered in the block chain through the agent server;
Including more,
When the token verification unit of the agent server receives a request to view the content information list from the service provider server, it verifies the token included in the request,
Blockchain access control system that connects to the blockchain network and retrieves and delivers the list of registered content information.
The method according to any one of claims 1, 2, 4 to 6,
The token verification unit of the agent server requests verification of the received token from the access control management server,
Blockchain access control system further comprising a token verification unit for the access control management server to verify the validity of the received token.
A token issuance request step of the agent server receiving a token issuance request from a blockchain user;
A token issuance receiving step of receiving a token by requesting a token issuance from an access control management server by the agent server;
A token transmission step of transmitting, by the agent server, the issued token to a blockchain user requesting token issuance;
An access request receiving step of the agent server receiving an access request to the blockchain including a request for querying information stored in the blockchain including the token or a request for registering information in the blockchain;
A token verification step of verifying the validity of the token included in the request for access to the blockchain by the agent server; And
A request processing step of connecting the agent server to the blockchain to process an access request and transmitting the processing result to the blockchain user;
Including,
If the blockchain user is a service provider server,
Receiving, by the agent server, a block chain registration request for content copyright information generated by the license server; And
The agent server further comprises the step of connecting to the blockchain network to request blockchain storage of content copyright information and transmitting the request result to the license server,
The access request receiving step is a step in which the agent server receives a content packaging request from the service provider server through the license management server, and in the request processing step, the agent server connects to the blockchain network to inquire content information and licenses the retrieved content information. Blockchain access control method, which is the step of delivering to the management server
The method of claim 8,
If the blockchain user is a content provider server,
The access request receiving step is a step in which the agent server receives a content information registration request from the content provider server,
The request processing step is a block chain access control method in which the agent server connects to the blockchain network, requests the blockchain storage of content information, and transmits the request result to the content provider server.
delete The method of claim 8,
If the blockchain user is a service user,
The access request receiving step is a step in which the agent server receives an encryption code request from a service user through the service provider server,
The request processing step is a step in which the agent server connects to the blockchain network and requests the block chain storage of the service user's content purchase history information, generates a cryptographic code, and delivers it to the service user through the service provider server.
Blockchain access control method
Receiving, by the agent server, a license issuance request from the service user transmitted from the service provider server from the license management server;
Verifying a license issuance request by the agent server;
An agent server connecting to a blockchain network to inquire content information and content copyright information and transmit the inquiry result to a license management server; And
Generating license information based on the content information and content copyright information received by the license management server, encrypting the license information using an encryption code, and transmitting it to a service user through the service providing server;
Blockchain access control method further comprising a.
The method of claim 8,
If the blockchain user is a service user,
The access request receiving step is a step in which the agent server receives a request for a registered content information list from a service user through a service provider server,
The request processing step is a block chain access control method in which the agent server connects to the blockchain network to retrieve and transmit the list of registered content information.
The method according to any one of claims 8, 9, 11 to 12,
The token verification step is a blockchain access control method in which the agent server passes the token included in the access request to the blockchain to the access control management server to verify the validity of the token.

Images