KR20200143197A - Data management device that enables distributed encryption management of data based on blockchain and operating method thereof - Google Patents

Abstract

Disclosed are a data management device enabling distributed encryption management of data based on a block chain and an operation method thereof. According to the present invention, in the data management device and the operation method thereof, after encrypting plain text data, the data is divided into multiple types of divided data and distributed and stored in different data storage along with a hash value corresponding to each divided data, and the hash value corresponding to each divided data is registered in the block chain network and managed, so that the plain text data can be prevented from being easily exposed by a third party.

Description

A data management device that enables distributed encryption management of data based on a blockchain and its operation method {DATA MANAGEMENT DEVICE THAT ENABLES DISTRIBUTED ENCRYPTION MANAGEMENT OF DATA BASED ON BLOCKCHAIN AND OPERATING METHOD THEREOF}

The present invention relates to a data management device and a method of operating the same that enables distributed encryption management of data based on a block chain.

Recently, blockchain technology that can guarantee the integrity of the data is widely used by configuring predetermined data into chained blocks and storing them distributedly in nodes other than a central server.

In the blockchain technology, when predetermined data, called a transaction, is generated, any one node device among a plurality of node devices participating in the block chain network can access the previous block included in the blockchain data in which several blocks are connected in a chain. A new block containing the transaction is created as a basis, the block is chained to the blockchain data, and then the block is distributed to other node devices through the blockchain network, so that predetermined data is transmitted to a plurality of nodes. It refers to a technology that enables distributed storage in devices.

In addition, in recent years, as data hacking technology is highly developed, accidents in which sensitive data such as personal information is exposed by hackers are increasing, and interest in data encryption technology for preventing data exposure is increasing.

In the past, since data was simply encrypted with a predetermined encryption key, stored and managed, when the pattern of the encryption key is exposed, the original data is easily exposed. Therefore, there is a need for research on a more advanced encryption technology beyond simply encrypting data with an encryption key. In particular, as interest in blockchain technology is amplified, research on technology that enables data to be encrypted and stored and managed using such blockchain technology is needed.

The data management device and its operation method according to the present invention are to encrypt plain text data and then divide it into a plurality of divided data and store it distributedly in different data storage together with a hash value corresponding to each divided data, and correspond to each divided data. By registering and managing the generated hash value in the blockchain network, it is possible to prevent the plain text data from being easily exposed by a third party.

A data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention encrypts plain text data to be encrypted using a predetermined encryption key, thereby generating encrypted data. A generation unit, a data division unit that divides the encrypted data into n (n is a natural number of 2 or more) pieces of divided data, and applies the n pieces of divided data as input to n different predetermined hash functions to each of the n pieces of divided data A hash value generation unit that generates n hash values corresponding to, and a data distribution storage unit that distributes and stores the n pieces of divided data and the hash values corresponding to each of the n pieces of divided data in n data distribution stores, the When n pieces of divided data and hash values are distributed and stored in the n pieces of data distributed storage, a transaction generating unit generating a transaction including the n number of hash values and one of a plurality of node devices constituting a blockchain network A block chain registration request unit for transmitting the transaction to the first node device, and transmitting a request for registration of the transaction to the block chain network, wherein the first node device receives the transaction from the data management device, A block containing the transaction is created based on the block chain data stored in the memory of the first node device, the block is connected to the block chain data in a chain, and the block is connected through the block chain network. It propagates to other node devices other than the first node device among a plurality of node devices.

In addition, the method of operating a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention is to encrypt plain text data to be encrypted using a predetermined encryption key, Generating, dividing the encrypted data into n (n is a natural number of 2 or more) pieces of divided data, applying the n pieces of divided data as inputs to n different predetermined hash functions to each of the n pieces of divided data Generating n hash values corresponding to, and distributing and storing the n pieces of divided data and the hash values corresponding to each of the n pieces of divided data in n data distribution stores, one by one, and the n pieces of divided data and hashes When the values are distributed and stored in the n data distribution storage, generating a transaction including the n hash values and performing the transaction to a first node device which is one of a plurality of node devices constituting a blockchain network. And transmitting a request for registration of the transaction to the blockchain network while transmitting, wherein the first node device is stored in the memory of the first node device when the transaction is received from the data management device. The first node device among the plurality of node devices through the block chain network after creating a block containing the transaction based on block chain data, connecting the block to the block chain data in a chain Propagates to the rest of the node devices except for.

The data management device and its operation method according to the present invention are to encrypt plain text data and then divide it into a plurality of divided data and store it distributedly in different data storage together with a hash value corresponding to each divided data, and correspond to each divided data. By registering and managing the generated hash value in the blockchain network, it is possible to prevent the plain text data from being easily exposed by a third party.

1 is a diagram showing the structure of a data management apparatus that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention.
2 is a flow chart illustrating a method of operating a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. This description is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. While describing each drawing, similar reference numerals have been used for similar components, and unless otherwise defined, all terms used in the present specification including technical or scientific terms refer to common knowledge in the technical field to which the present invention belongs. It has the same meaning as commonly understood by someone who has it.

In this document, when a part "includes" a certain component, it means that other components may be further included rather than excluding other components unless otherwise stated. In addition, in various embodiments of the present invention, each component, functional blocks or means may be composed of one or more sub-components, and the electrical, electronic, and mechanical functions performed by each component are electronic. A circuit, an integrated circuit, and an application specific integrated circuit (ASIC) may be implemented with various known devices or mechanical elements, and may be implemented separately or two or more may be integrated into one.

On the other hand, the blocks of the attached block diagram and the steps in the flowchart are computer program instructions that are mounted on a processor or memory of equipment capable of processing data such as a general-purpose computer, a special-purpose computer, a portable notebook computer, and a network computer to perform specified functions. It can be interpreted as meaning. Since these computer program instructions can be stored in a memory provided in a computer device or in a memory readable by a computer, the functions described in the blocks in the block diagram or in the steps in the flowchart are produced as a product containing the instruction means to perform this. It could be. In addition, each block or each step may represent a module, segment, or part of code including one or more executable instructions for executing the specified logical function(s). In addition, it should be noted that in some alternative embodiments, functions mentioned in blocks or steps may be executed in a different order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or may be performed in reverse order, and in some cases, some blocks or steps may be omitted.

1 is a diagram showing the structure of a data management apparatus that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention.

Referring to FIG. 1, the data management apparatus 110 according to the present invention includes an encrypted data generation unit 111, a data division unit 112, a hash value generation unit (!13), a data distribution storage unit 114, and a transaction. It includes a generation unit 115 and a block chain registration request unit 116.

First, in the present invention, a plurality of node devices 101, 102, 103, and 104 constitute a blockchain network in order to distribute and store encryption-related data in the memory of each node device. Here, the plurality of node devices 101, 102, 103, 104 means a microprocessor-based computing device having a network function, and a transaction including a hash value for predetermined encrypted data is stored in the memory of each node device. Blockchain data in which the blocks created based on the chain are connected is stored.

The encrypted data generation unit 111 generates encrypted data by encrypting plain text data to be encrypted using a predetermined encryption key.

The data division unit 112 divides the encrypted data into n (n is a natural number of 2 or more) pieces of divided data.

For example, when n is 10, the data division unit 112 may divide the encrypted data into 10 pieces of divided data. In this case, the method of dividing the encrypted data by the data dividing unit 112 may be a method of dividing the code constituting the encrypted data into 10 equal parts and dividing it into 10 pieces of equal sized data.

The hash value generator 113 generates n hash values corresponding to each of the n pieces of divided data by applying the n pieces of divided data as inputs to n different predetermined hash functions.

The data distribution storage unit 114 distributes and stores the n pieces of divided data and a hash value corresponding to each of the n pieces of divided data in a pair of n data distribution stores.

In connection, when it is assumed that there are 10 pieces of divided data and 10 hash values corresponding to each of the 10 pieces of divided data, the data distribution storage unit 114 performs 10 pieces of divided data and hash values corresponding to each of the divided data. As shown in Table 1, 10 data distribution stores can be distributed and stored in pairs.

Data distributed storage Split data Hash value Data Distributed Storage 1 Split data 1 Hash value 1 Data Distributed Storage 2 Split data 2 Hash value 2 Data Distributed Storage 3 Split data 3 Hash value 3 Data Distributed Storage 4 Split data 4 Hash value 4 Data Distributed Storage 5 Split data 5 Hash value 5 Data Distributed Storage 6 Split data 6 Hash value 6 Data Distributed Storage 7 Split data 7 Hash value 7 Data Distributed Storage 8 Split data 8 Hash value 8 Data Distributed Storage 9 Split data 9 Hash value 9 Data Distributed Storage 10 Split data 10 Hash value 10

When the n pieces of divided data and hash values are distributed and stored in the n pieces of data distribution storage, the transaction generating unit 115 generates a transaction including the n pieces of hash values.

The block chain registration request unit 116 transmits the transaction to a first node device, which is one of a plurality of node devices 101, 102, 103, 104 constituting a block chain network, and transmits the transaction to the block chain of the transaction. Send a request for registration to the network.

In this case, according to an embodiment of the present invention, the block chain registration request unit 116 may randomly select the first node device for transmitting the request for registration of the transaction to the block chain network. In connection with this, the description will be made on the assumption that the first node device is a node device indicated by reference numeral 101 in the present embodiment.

At this time, when the transaction is received from the data management device 110, the first node device 101 generates a block containing the transaction based on the block chain data stored in the memory of the first node device 101. And, after connecting the block to the block chain data in a chain, the block is connected to the remaining nodes except for the first node device 101 among a plurality of node devices 101, 102, 103, 104 through the block chain network. It can propagate to devices 102, 103, 104.

At this time, when the block is received through the block chain network, the remaining node devices 102, 103, and 104 are stored in the block chain data stored in the memory of each of the remaining node devices 102, 103, and 104. The blocks can be linked and stored in a chain.

Through this, the transaction including the n number of hash values is connected in a chain to the blockchain data stored in the memory of each of the plurality of node devices 101, 102, 103, 104, and the plurality of node devices ( 101, 102, 103, 104) can be stored respectively.

At this time, according to an embodiment of the present invention, the block chain registration request unit 116 transmits the request for registration of the transaction to the block chain network to the first node device 101. ), and may include an authentication matrix storage unit 117, a random matrix generation unit 118, a feedback request unit 119, an authentication execution unit 120, and a request transmission unit 121. .

The authentication matrix storage unit 117 stores a predetermined authentication matrix having a size of k x k (k is a natural number of 2 or more) for use in authentication of a node device.

When the transaction is generated, the random matrix generator 118 generates a random matrix composed of random component values having a size of (k+t) x k (t is a natural number less than k).

For example, if the authentication matrix stored in the authentication matrix storage unit 117 is a matrix having a size of 5 x 5, and t is 3, the random matrix generator 118 sets the size of 8 x 5 You can create a random matrix with

The feedback request unit 119 randomly selects the first node device 101 from among the plurality of node devices 101, 102, 103, and 104, and then transmits the random matrix to the first node device 101. 1 Requests the node device 101 to transmit a feedback matrix corresponding to the random matrix.

In this case, according to an embodiment of the present invention, the plurality of node devices 101, 102, 103 and 104 may store the authentication matrix in a memory.

At this time, when the random matrix is received from the data management device 110, the first node device 101 generates a transformation matrix by removing components of t rows existing at a preset position from the random matrix, After generating a first feedback matrix by calculating a Hadamard product between the authentication matrix and the transformation matrix stored in the memory of the node device 101, the first feedback matrix is converted into the data management device 110 ).

For example, if the random matrix is said to be a matrix having a size of 8 x 5, and t rows present at the preset positions are 1, 2, and 4 rows, the first node device 101 is the random matrix In the first row, the second row, and the fourth row are removed to generate a transformation matrix having a size of 5 x 5, and the Hadamard product between the authentication matrix and the transformation matrix stored in advance is calculated. You can create a feedback matrix.

Here, the Hadamard product means an operation that multiplies each component in a matrix of the same size.

The authentication performing unit 120 uses a feedback matrix corresponding to the random matrix from the first node device 101 to a first feedback matrix (the first feedback matrix is a component of t rows present at a preset position in the random matrix). Is a matrix generated by calculating the Hadamard product between the authentication matrix and the transformation matrix previously stored in the first node device 101 after a transformation matrix having a kxk size is generated) is received, the random matrix The transformation matrix is generated by removing components of the t rows existing at the preset positions in, and then the Hadamard product between the authentication matrix and the transformation matrix is calculated to generate a first calculation matrix, and the first calculation matrix By checking whether this is the same as the first feedback matrix, authentication for the first node device 101 is performed.

That is, when it is determined that the first feedback matrix received from the first node device 101 and the first calculation matrix match each other, the authentication performing unit 120 performs the first node device 101 for the authentication. Since it can be regarded as a device that normally shares information about the matrix and t rows existing at the preset position, the authentication for the first node device 101 can be completed.

When the authentication for the first node device 101 is completed, the request transmission unit 121 transmits a request for registration of the transaction to the blockchain network while transmitting the transaction to the first node device 101.

In this case, according to an embodiment of the present invention, the data management apparatus 110 may further include a matrix update unit 122 and an update command transmission unit 123.

When the transaction and the request for registration of the transaction to the blockchain network are transmitted to the first node device 101, the matrix update unit 122 is a correction matrix having a correction value of more than 0 and less than 1 as a component. After randomly generating an update matrix for updating the authentication matrix by multiplying the authentication matrix and the correction matrix, the authentication matrix stored in the authentication matrix storage unit 117 is updated. Replace with matrix.

The update command transmission unit 123 transmits the update matrix to a plurality of node devices 101, 102, 103, 104, and provides a plurality of node devices for a plurality of node devices 101, 102, 103, 104. An update command instructing to replace the authentication matrix stored in the memory of the s 101, 102, 103 and 104 with the update matrix is transmitted.

At this time, when the update command is received from the data management device 110 along with the update matrix, the plurality of node devices 101, 102, 103, and 104 receive the authentication stored in the memory based on the update command. The dragon matrix can be replaced with the update matrix.

For example, if the authentication matrix is a matrix of size 5 x 5, the matrix update unit 122 randomly generates a 5 x 5 size correction matrix having correction values greater than 0 and less than 1 as components, and then the authentication An update matrix having a size of 5 x 5 may be generated by multiplying the dragon matrix and the correction matrix. Then, the matrix update unit 122 replaces the authentication matrix stored in the authentication matrix storage unit 117 with the update matrix, and the update command transmission unit 123 replaces the update matrix with a plurality of node devices. By providing the data to the nodes 101, 102, 103, and 104, the authentication matrix used for authentication of the node device can be configured to be changed every time data is encrypted and stored. In this way, if the authentication matrix is changed each time, there is an advantage in that security is strengthened.

According to an embodiment of the present invention, the data management device 110 may further include a hash value request unit 124, a divided data extractor 125, a data combination unit 126, and a decoding unit 127. .

After the block has been propagated to the remaining node devices 102, 103, and 104, the hash value requesting unit 124, when a decryption command is applied to the encrypted data, is applied to a plurality of node devices 101, 102, 103. , 104) randomly selects a second node device, and then requests the second node device to transmit the n number of hash values included in the blockchain data.

In the present embodiment, the description will be made on the assumption that the second node device is a node device indicated by reference numeral 102.

At this time, when a request for transmission of the n number of hash values is received from the data management device 110, the second node device 102 transmits the block chain data stored in the memory of the second node device 102 to the chain. The n number of hash values may be extracted from a transaction included in the connected block, and the n number of hash values may be transmitted to the data management device 110.

When the n number of hash values are received from the second node device 102, the divided data extracting unit 125 stores the n number of hash values from each of the n data distribution stores based on the n number of hash values. The n pieces of divided data are extracted.

For example, as shown in Table 1 above, when it is assumed that hash values corresponding to 10 pieces of divided data are distributed and stored in 10 data stores, the divided data extracting unit 125 receives 10 hash values from the second node device 102. When received, the received 10 hash values may be used as indexing information for data search, and divided data corresponding to each hash value may be extracted from each of the 10 data stores.

When the n pieces of divided data are extracted, the data combiner 126 combines the n pieces of divided data to generate the encrypted data.

When the encrypted data is generated, the decryption unit 127 restores the plain text data by decrypting the encrypted data using the encryption key.

In relation to the above, when it is assumed that 10 pieces of divided data are extracted from 10 data stores, the data combination unit 126 divides the 10 pieces of data into the data division unit 112, which is opposite to the method of dividing the data. By combining in a manner, it is possible to generate encrypted data. Then, the decryption unit 127 may restore the original plaintext data by decrypting the encrypted data using the encryption key used to generate the encrypted data.

Eventually, the data management device 110 according to the present invention encrypts plain text data and then divides it into a plurality of divided data, and distributes and stores it in different data storage together with a hash value corresponding to each divided data. By registering and managing the corresponding hash value in the blockchain network, it is possible to prevent the plain text data from being easily exposed by a third party.

2 is a flow chart illustrating a method of operating a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention.

In step S210, encrypted data is generated by encrypting plain text data to be encrypted using a predetermined encryption key.

In step S220, the encrypted data is divided into n (n is a natural number of 2 or more) divided data.

In step S230, the n pieces of divided data are applied as inputs to n different predetermined hash functions to generate n pieces of hash values corresponding to each of the n pieces of divided data.

In step S240, the n pieces of divided data and the hash values corresponding to each of the n pieces of divided data are distributedly stored in n data distribution stores by pair.

In step S250, when the n pieces of divided data and hash values are distributed and stored in the n pieces of data distribution storage, a transaction including the n pieces of hash values is generated.

In step S260, while transmitting the transaction to a first node device, which is one of a plurality of node devices constituting the block chain network, a request for registration of the transaction to the block chain network is transmitted.

At this time, when the transaction is received from the data management device, the first node device generates a block containing the transaction based on the block chain data stored in the memory of the first node device, and generates the block. After connecting the block chain data in a chain, the block may be propagated to the rest of the node devices except for the first node device among the plurality of node devices through the block chain network.

At this time, according to an embodiment of the present invention, in step S260, an authentication matrix storage unit in which a predetermined authentication matrix having a size of kxk (k is a natural number of 2 or more) for use in authentication of a node device is stored is maintained. When the transaction is generated, generating a random matrix consisting of random component values having a size of (k+t) xk (t is a natural number less than k), the first node device among the plurality of node devices Randomly selecting and transmitting the random matrix to the first node device, requesting transmission of a feedback matrix corresponding to the random matrix to the first node device, and corresponding to the random matrix from the first node device A first feedback matrix as a feedback matrix (the first feedback matrix is pre-stored in the first node device after components of t rows present at preset positions in the random matrix are removed to generate a transformation matrix having a size of kxk. When a matrix generated by calculating the Hadamard product between the authentication matrix and the transformation matrix) is received, the transformation matrix is generated by removing components of t rows present at the preset positions from the random matrix. Thereafter, the Hadamard product between the authentication matrix and the transformation matrix is calculated to generate a first calculation matrix, and authentication for the first node device is performed by checking whether the first calculation matrix is the same as the first feedback matrix. And when authentication for the first node device is completed, transmitting the transaction to the first node device, and transmitting a request for registration of the transaction to the blockchain network.

At this time, according to an embodiment of the present invention, the plurality of node devices store the authentication matrix in a memory, and the first node device receives the random matrix from the data management device, the random matrix The transformation matrix is generated by removing the components of the t rows existing at the preset positions, and the Hadamard product between the authentication matrix and the transformation matrix stored in the memory of the first node device is calculated. After generating the first feedback matrix, the first feedback matrix may be transmitted to the data management device.

At this time, according to an embodiment of the present invention, the operation method of the data management device is, when the transaction and the request for registration of the transaction to the blockchain network are transmitted to the first node device, correction of more than 0 and less than 1 After randomly generating a kxk-sized correction matrix having values as components, the authentication matrix and the correction matrix are multiplied with each other to generate an update matrix for updating the authentication matrix, and then stored in the authentication matrix storage unit. Replacing the existing authentication matrix with the update matrix, and transmitting the update matrix to the plurality of node devices, and the authentication stored in the memory of the plurality of node devices for the plurality of node devices. It may further include transmitting an update command instructing to replace the dragon matrix with the update matrix.

In addition, according to an embodiment of the present invention, the operation method of the data management device is, after the block has been propagated to the remaining node devices, when a decryption command for the encrypted data is applied, the plurality of node devices After randomly selecting any one of the second node devices, requesting transmission of the n number of hash values included in the block chain data to the second node device, the n number of hash values from the second node device When received, extracting the n pieces of divided data stored in correspondence with the n pieces of hash values from each of the n pieces of data distribution storage based on the n pieces of hash values, when the n pieces of divided data are extracted, The step of generating the encrypted data by combining the n pieces of divided data, and when the encrypted data is generated, decrypting the encrypted data using the encryption key, thereby restoring the plaintext data.

In the above, a method of operating a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention has been described with reference to FIG. 2. Here, the operation method of the data management device enabling distributed encryption management of data based on a block chain according to an embodiment of the present invention enables distributed encryption management of data based on the block chain described with reference to FIG. Since it may correspond to the configuration of the operation of the data management device 110, a more detailed description thereof will be omitted.

An operating method of a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention may be implemented as a computer program stored in a storage medium for execution through a combination with a computer.

In addition, a method of operating a data management device that enables distributed encryption management of data based on a block chain according to an embodiment of the present invention is implemented in the form of program instructions that can be executed through various computer means, and is a computer-readable medium. Can be written on. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded in the medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, in the present invention, specific matters such as specific components, etc., and limited embodiments and drawings have been described, but this is provided only to help a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , If a person of ordinary skill in the field to which the present invention belongs, various modifications and variations are possible from these descriptions.

Therefore, the spirit of the present invention is limited to the described embodiments and should not be defined, and all things that are equivalent or equivalent to the claims as well as the claims to be described later fall within the scope of the spirit of the present invention. .

110: A data management device that enables distributed encryption management of data based on a blockchain
111: encrypted data generation unit 112: data division unit
113: hash value generation unit 114: data distribution storage unit
115: transaction generation unit 116: block chain registration request unit
117: authentication matrix storage unit 118: random matrix generation unit
119: feedback request unit 120: authentication execution unit
121: request transmission unit 122: matrix update unit
123: update command transmission unit 124: hash value request unit
125: divided data extracting unit 126: data combining unit
127: decoding unit

Claims (12)

In a data management device that enables distributed encryption management of data based on a block chain,
An encrypted data generator configured to generate encrypted data by encrypting plain text data to be encrypted using a predetermined encryption key;
A data dividing unit for dividing the encrypted data into n (n is a natural number of 2 or more) pieces of divided data;
A hash value generator configured to generate n hash values corresponding to each of the n pieces of divided data by applying the n pieces of divided data as inputs to n different predetermined hash functions;
A data distribution storage unit for distributing and storing the n pieces of divided data and a hash value corresponding to each of the n pieces of divided data in n data distribution stores;
A transaction generator for generating a transaction including the n number of hash values when the n pieces of divided data and hash values are distributed and stored in the n pieces of data distribution storage; And
Blockchain registration request unit that transmits the request for registration of the transaction to the blockchain network while transmitting the transaction to a first node device, which is one of a plurality of node devices constituting a blockchain network
Including,
The first node device
When the transaction is received from the data management device, a block containing the transaction is created based on the block chain data stored in the memory of the first node device, and the block is chained to the block chain data. A data management device that enables distributed encryption management of data based on a block chain that then propagates the block to other node devices other than the first node device among the plurality of node devices through the block chain network. The method of claim 1,
The block chain registration request unit
An authentication matrix storage unit storing a predetermined authentication matrix having a size of kxk (k is a natural number of 2 or more) for use in authentication of a node device;
A random matrix generator for generating a random matrix composed of random component values having a size of (k+t) xk (t is a natural number less than k) when the transaction is generated;
Feedback for requesting transmission of a feedback matrix corresponding to the random matrix to the first node device while transmitting the random matrix to the first node device after randomly selecting the first node device among the plurality of node devices Request part;
A first feedback matrix from the first node device to a feedback matrix corresponding to the random matrix-In the first feedback matrix, components of t rows existing at preset positions in the random matrix are removed, resulting in a transformation matrix having a size of kxk. It is a matrix generated by calculating a Hadamard product between the authentication matrix and the transformation matrix previously stored in the first node device after being generated-When is received, at the preset position in the random matrix After the transformation matrix is generated by removing components of the t rows, a first calculation matrix is calculated by calculating the Hadamard product between the authentication matrix and the transformation matrix, and the first calculation matrix is the first feedback matrix An authentication performing unit that performs authentication on the first node device by checking whether it is the same as And
When authentication for the first node device is completed, a request transmission unit that transmits the transaction to the first node device and transmits a request for registration of the transaction to the blockchain network
A data management device that enables distributed encryption management of data based on a block chain that includes. The method of claim 2,
The plurality of node devices store the authentication matrix in a memory,
The first node device
When the random matrix is received from the data management device, the transformation matrix is generated by removing components of t rows present at the preset positions from the random matrix, and stored in the memory of the first node device. To enable distributed encryption management of data based on a blockchain that generates the first feedback matrix by calculating the Hadamard product between the authentication matrix and the transformation matrix and then transmits the first feedback matrix to the data management device. Data management device. The method of claim 3,
The data management device
When the transaction and the request for registration of the transaction to the blockchain network are transmitted to the first node device, a kxk-sized correction matrix having correction values greater than 0 and less than 1 is randomly generated, and then used for the authentication. A matrix update unit for generating an update matrix for updating the authentication matrix by multiplying the matrix and the correction matrix, and then replacing the authentication matrix stored in the authentication matrix storage unit with the update matrix; And
An update command instructing the plurality of node devices to replace the authentication matrix stored in the memory of the plurality of node devices with the update matrix while transmitting the update matrix to the plurality of node devices Update command transmission unit that transmits
A data management device that enables distributed encryption management of data based on a blockchain further comprising a. The method of claim 1,
The data management device
After the block has been propagated to the remaining node devices, when a decryption command for the encrypted data is applied, a second node device, which is one of the plurality of node devices, is randomly selected and then transferred to the second node device. A hash value request unit for requesting transmission of the n number of hash values included in the block chain data;
When the n number of hash values are received from the second node device, extracting the n pieces of divided data stored in correspondence with the n number of hash values from each of the n data distribution stores based on the n number of hash values Segmented data extraction unit;
A data combiner configured to generate the encrypted data by combining the n pieces of divided data when the n pieces of divided data are extracted; And
When the encrypted data is generated, a decryption unit for restoring the plain text data by decrypting the encrypted data using the encryption key
A data management device that enables distributed encryption management of data based on a blockchain further comprising a. In the operation method of a data management device that enables distributed encryption management of data based on a block chain,
Generating encrypted data by encrypting plain text data to be encrypted using a predetermined encryption key;
Dividing the encrypted data into n (n is a natural number of 2 or more) divided data;
Generating n hash values corresponding to each of the n pieces of divided data by applying the n pieces of divided data as inputs to n different predetermined hash functions;
Distributing and storing each pair of hash values corresponding to the n pieces of divided data and each of the n pieces of divided data in n data distribution stores;
Generating a transaction including the n number of hash values when the n pieces of divided data and hash values are distributed and stored in the n pieces of data distribution storage; And
Sending a request for registration of the transaction to the blockchain network while transmitting the transaction to a first node device, which is one of a plurality of node devices constituting a blockchain network.
Including,
The first node device
When the transaction is received from the data management device, a block containing the transaction is created based on the block chain data stored in the memory of the first node device, and the block is chained to the block chain data. Afterwards, operation of a data management device enabling distributed encryption management of data based on a block chain that propagates the block to other node devices other than the first node device among the plurality of node devices through the block chain network. Way. The method of claim 6,
Transmitting the registration request to the blockchain network
Maintaining an authentication matrix storage unit storing a predetermined authentication matrix having a size of kxk (k is a natural number greater than or equal to 2) for use in authentication of a node device;
Generating a random matrix composed of random component values having a size of (k+t) xk (t is a natural number less than k) when the transaction is generated;
Requesting the first node device to transmit a feedback matrix corresponding to the random matrix while transmitting the random matrix to the first node device after randomly selecting the first node device among the plurality of node devices ;
A first feedback matrix from the first node device to a feedback matrix corresponding to the random matrix-In the first feedback matrix, components of t rows existing at preset positions in the random matrix are removed, resulting in a transformation matrix having a size of kxk. It is a matrix generated by calculating a Hadamard product between the authentication matrix and the transformation matrix previously stored in the first node device after being generated-When is received, at the preset position in the random matrix After the transformation matrix is generated by removing components of the t rows, a first calculation matrix is calculated by calculating the Hadamard product between the authentication matrix and the transformation matrix, and the first calculation matrix is the first feedback matrix Performing authentication for the first node device by checking whether it is the same as And
Upon completion of the authentication for the first node device, transmitting the transaction to the first node device, transmitting a request for registration of the transaction to the blockchain network
A method of operating a data management device that enables distributed encryption management of data based on a block chain comprising a. The method of claim 7,
The plurality of node devices store the authentication matrix in a memory,
The first node device
When the random matrix is received from the data management device, the transformation matrix is generated by removing components of t rows present at the preset positions from the random matrix, and stored in the memory of the first node device. To enable distributed encryption management of data based on a blockchain that generates the first feedback matrix by calculating the Hadamard product between the authentication matrix and the transformation matrix and then transmits the first feedback matrix to the data management device. How the data management device works. The method of claim 8,
The operating method of the data management device
When the transaction and the request for registration of the transaction to the blockchain network are transmitted to the first node device, a kxk-sized correction matrix having correction values greater than 0 and less than 1 is randomly generated, and then used for the authentication. Generating an update matrix for updating the authentication matrix by multiplying the matrix and the correction matrix, and then replacing the authentication matrix stored in the authentication matrix storage unit with the update matrix; And
An update command instructing the plurality of node devices to replace the authentication matrix stored in the memory of the plurality of node devices with the update matrix while transmitting the update matrix to the plurality of node devices Steps to transfer
A method of operating a data management device that enables distributed encryption management of data based on a blockchain further comprising a. The method of claim 6,
The operating method of the data management device
After the block has been propagated to the remaining node devices, when a decryption command for the encrypted data is applied, a second node device, which is one of the plurality of node devices, is randomly selected and then transferred to the second node device. Requesting transmission of the n number of hash values included in the blockchain data;
When the n number of hash values are received from the second node device, extracting the n pieces of divided data stored in correspondence with the n number of hash values from each of the n data distribution stores based on the n number of hash values step;
When the n pieces of divided data are extracted, combining the n pieces of divided data to generate the encrypted data; And
When the encrypted data is generated, restoring the plaintext data by decrypting the encrypted data using the encryption key
A method of operating a data management device that enables distributed encryption management of data based on a blockchain further comprising a. A computer-readable recording medium recording a computer program for executing the method of any one of claims 6 to 10 through combination with a computer. A computer program stored in a storage medium for executing the method of any one of claims 6 to 10 through combination with a computer.

Images