KR20210053567A - Method for verifying certification improper use in block environment and system therefor - Google Patents

Abstract

The present invention relates to a method for verifying whether a user institution uses a certificate stored in a blockchain for an accurate purpose, and to a system therefor. According to an embodiment of the present invention, the method for verifying an unfair use of a certificate in a blockchain system, comprises the steps of: analyzing authentication information transmitted from a user terminal to authenticate a user; checking an execution function in a first block including a smart contract when a user authentication is successful, and driving the execution function to execute a service; checking usage information related to the smart contract, and generating a second block including the usage information and a service execution result to store the same in a blockchain; transmitting transaction identification information on a second block to the user terminal as access data for inquiring the usage of a certificate used in the service; and providing the user terminal with the usage information included in the second block when an inquiry request message including the transaction identification information on the second block is received from the user terminal. Accordingly, transparency and reliability on the usage of the certificate are improved.

Description

Method for verifying certification improper use in block environment and system therefor}

The present invention relates to a technology for verifying unauthorized use of a certificate, and more particularly, to a method and a system for verifying whether or not a certificate stored in a blockchain is used for an exact purpose by a user institution.

Today, due to the development of communication networks and security technologies, account transfers and stock transactions are being made using the Internet.

For such an online account transfer, stock transaction, etc., a user is authenticated using a certificate. The above certificate is a kind of online seal certificate used for electronic signature. After the user signs electronically using the certificate, the user requests online account transfer, stock transaction, etc. to the service server, and the service server verifies the electronic signature and the certificate. If verification is successful later, the online service is provided to the user.

On the other hand, in recent years, blockchain technology has emerged to improve reliability and prevent non-repudiation. In addition, using a blockchain, a technology for generating and issuing a certificate in the blockchain, as well as verifying a certificate-based electronic signature and certificate has also emerged. In other words, blockchain technology is sometimes used to increase transparency for verification of certificates and electronic signatures using blockchain.

However, in the technology for managing certificates using a blockchain, a certification authority that issues/verifies a certificate and a service organization that provides services (eg, account transfer, stock transaction) through certificate-based authentication are dualized. In this case, the service agency requests verification of the electronic signature and user certificate received from the user terminal through the blockchain, receives the verification result from the blockchain, and selectively provides services according to the verification result.

However, in this system structure, there is a problem in that the service server can use the user's certificate for other purposes. For example, the service organization falsely informs the user terminal that the certificate will be used for other purposes, and after receiving the verification success result from the blockchain using the electronic signature received from the user terminal, the verification success result is used. User certificates can also be used for illegal purposes.

The present invention has been proposed to solve this problem, and an object thereof is to provide a method for verifying unauthorized use of a certificate and a system for the same, which improves transparency and reliability of certificate use in a blockchain environment.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by examples of the present invention. In addition, it will be easily understood that the objects and advantages of the present invention can be realized by the means shown in the claims and combinations thereof.

According to a first aspect of the present invention for achieving the above object, a method for verifying the illegal use of a certificate in a blockchain system includes: authenticating a user by analyzing authentication information sent from a user terminal; If the user authentication is successful, checking an execution function in a first block containing a smart contract, and running the execution function to execute a service; Checking usage information related to the smart contract, generating a second block including the usage destination information and the service execution result, and storing it in a blockchain; Transmitting the transaction identification information of the second block to the user terminal as access data for inquiring where the certificate used in the service is used; And when the inquiry request message including the transaction identification information of the second block is received from the user terminal, providing the user terminal with the usage information included in the second block.

The method includes, before executing the service, transmitting the transaction identification information of the first block to the user terminal, as access data for inquiring a destination of a certificate to be used for the service; And when a message including the transaction identification information of the first block is received from the user terminal, extracting the usage information included in the first block and providing it to the user terminal before the service is executed. I can.

The method may further include generating a nonce and transmitting it to the user terminal before the authentication step. In this case, in the authenticating step, after decrypting the electronic signature included in the authentication information with the user's public key, it may be verified whether the decrypted nonce matches the generated nonce.

The method includes the steps of: generating a third block including the usage information and the authentication result and storing the third block in the block chain; Transmitting the transaction identification information of the third block to the user terminal as access data for inquiring the usage destination of the certificate used for the authentication; And when the inquiry request message including the transaction identification information of the third block is received from the user terminal, providing the use destination information included in the third block to the user terminal.

The method includes: receiving a request for registration of the smart contract from a service server before the authenticating step; And generating the first block including the usage information of the smart contract and the smart contract and storing it in the block chain.

Executing the service may include checking input information sent from a user terminal, inputting the input information into the execution function, and executing the service.

The above-described method can be recorded as a computer program on a computer-readable recording medium.

A blockchain system for verifying the illegal use of a certificate according to the second aspect of the present invention to achieve the above object, when the authentication succeeds by analyzing the authentication information sent from the user terminal and authenticating the user, a smart contract is included. An authentication module that checks the execution function in the first block and executes the service by driving the execution function; A block management module for checking usage information related to the smart contract, generating a second block including the usage destination information and a result of executing the service, and storing it in a block chain; And an information providing module that transmits the transaction identification information of the second block to the user terminal as access data for inquiring the usage destination of the certificate used in the service.

When an inquiry request message including transaction identification information of the second block is received from the user terminal, the information providing module may provide usage information included in the second block to the user terminal.

The present invention stores a block containing the certificate usage information in the blockchain, and provides a transaction ID to access the usage information whenever the certificate is used, thereby improving transparency and reliability in the use of certificates. It has the advantage of letting you do it.

In addition, the present invention has the advantage of preventing illegal use of the certificate in advance by providing the user with information on the destination where the certificate is intended to be used before the electronic signature is performed.

The following drawings attached to the present specification illustrate preferred embodiments of the present invention, and serve to further understand the technical idea of the present invention together with specific details for carrying out the invention, so the present invention is described in such drawings. It is limited to matters and should not be interpreted.
1 is a diagram illustrating a system for verifying unauthorized use of a certificate according to an embodiment of the present invention.
2 is a flowchart illustrating a method of storing a block related to a smart contract in a block chain system according to an embodiment of the present invention.
3 is a flowchart illustrating a method of providing information about a certificate usage destination to a user before a certificate is used in a blockchain system according to an embodiment of the present invention.
4 is a flowchart illustrating a method of providing information about a certificate usage to a user after a certificate is used in a blockchain system according to an embodiment of the present invention.
5 is a diagram illustrating a block chain system according to an embodiment of the present invention.

The above-described objects, features, and advantages will become more apparent through the following detailed description in connection with the accompanying drawings, whereby those of ordinary skill in the technical field to which the present invention pertains can easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that a detailed description of a known technology related to the present invention may unnecessarily obscure the subject matter of the present invention, a detailed description thereof will be omitted. Hereinafter, a preferred embodiment according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a system for verifying unauthorized use of a certificate according to an embodiment of the present invention.

As shown in FIG. 1, the authentication system for verifying unauthorized use of a certificate according to an embodiment of the present invention includes a user terminal 100, a service server 300, and a blockchain system 200, and these components are network Communicate with each other through 400. The network 400 includes a wired communication network and a mobile communication network, and a detailed description thereof will be omitted since it corresponds to a known common technology in the present invention.

The user terminal 100 is a personal computer, mobile communication terminal, etc. possessed by the user, and can communicate with the network 400. In addition, the user terminal 100 stores the certificate issued by the blockchain system 200, and generates and stores a private key and a public key by itself. The user terminal 100 may distribute the public key to the blockchain system 200, the service server 300, and the like. The user terminal 100 may request an online service from the service server 300 by performing an electronic signature using a certificate and a private key and transmitting authentication information including the electronic signature value to the service server 300. The user terminal 100 may receive the transaction identification information (TxID) from the service server 300 and access the blockchain system 200 using the transaction identification information to check the certificate usage location.

The service server 300 is a server that provides services that require a user's electronic signature, such as stock transaction, account transfer, real estate transaction, and identity authentication. Register in advance at (210). The smart contract includes an execution function that can execute a service. An input value is defined in the execution function, and a logic capable of processing a process according to the input value is included. The logic can be written to the execution function as a programming language. For example, when the service server 300 is a financial server, an execution function related to an account transfer may be included in a smart contract, and in this case, as an input value of the execution function, a withdrawal account, a transfer amount, a deposit account, a deposit bank, etc. It is defined, and logic capable of performing an account transfer according to this input value may be recorded in the execution function.

When a service request is received from the user terminal 100, the service server 300 provides the nonce generated by the blockchain system 200 to the user terminal 100, and then receives authentication information from the user terminal 100. Upon receipt, a service execution request including this authentication information is transmitted to the blockchain system 200. The nonce is a randomly generated one-time string, one-time number string, or a combination of letters and numbers. According to the authentication result of the authentication information, the service is selectively executed in the blockchain system 200. The service server 300 may receive a service execution result from the blockchain system 200.

The blockchain system 200 is a set of networks formed by connecting a plurality of nodes, and includes a blockchain 210 that is shared distributed data. Nodes participating in the blockchain system 200 build the same blockchain 210. The user terminal 100 and the service server 300 may also be included in the block chain system 200 to share the block chain 210. The blockchain system 200 may be implemented in a cloud computer system.

Blocks constituting the blockchain 210 are composed of a block header and a transaction. The block header contains the previous block hash value, Merkle Root, and timestamp. The previous block hash represents a hash reference value for the previous block (i.e., the parent block) in the blockchain structure. Merkleot is the hash of the Merkle tree root. In the time stamp, the creation time of the block is recorded.

The transaction includes destination information and a destination identification code. The usage information indicates information on which the certificate has been used in text that the user can recognize, and is descriptive information that can be recognized by the user, such as "stock transaction", "account transfer", and "real estate transaction". In addition, the usage destination identification code is unique information on the usage destination information that is mapped with the usage destination information and is internally managed, and may be combined with English characters and numbers of a certain length.

According to an embodiment of the present invention, blocks may be divided into smart contract blocks (hereinafter referred to as'SC blocks'), authentication blocks, and service execution blocks. The transaction of the SC block includes an execution function related to the smart contract, usage destination information, and usage destination identification code. In addition, the transaction of the authentication block includes the user authentication result, the destination information, and the destination identification code. The transaction of the service execution block includes the service execution result, usage destination information, and usage destination identification code.

In addition to the function of managing blocks, the blockchain system 200 generates and distributes certificates, and also performs user authentication and service execution. The certificate distributed to the user is stored in the blockchain 210 together with the certificate identification code. Specifically, when receiving a request to generate a certificate from the user terminal 100, the blockchain system 200 generates a certificate including a validity period in a pre-set certificate generation algorithm, and transmits the certificate to the user terminal 100. . At this time, the blockchain system 200 generates the identification code of the certificate, generates the identification code of the certificate and a new block that the certificate contains, and connects the new block with the previous block of the new block. It is stored in the blockchain 210. In addition, the blockchain system 200 may also transmit the identification code of the certificate to the user terminal 100.

In addition, when the blockchain system 200 receives a smart contract from the service server 300, it generates an identification code of a usage destination in which the execution function included in the smart contract is used, and provides it to the service server 300. A new SC block including the smart contract and the usage identification code is created, and the new SC block is connected with the existing block to be stored in the blockchain 210.

Meanwhile, when the user terminal 100 requests a service to the service server 300, the blockchain system 200 may generate a nonce for user authentication and provide it to the user terminal 100. At this time, the blockchain system 200 may receive an identification code of a destination where the certificate is used from the service server 300 and provide transaction identification information related to the identification code to the user terminal 100. Accordingly, before performing the electronic signature, the user terminal 100 may obtain usage information corresponding to the transaction identification information from the blockchain system 200 and check the usage destination where the certificate is used in advance.

In addition, when the blockchain system 200 receives authentication information from the user terminal 100, if authentication is successful after analyzing the authentication information and authenticating the user, it may run an execution function related to the service. The block chain system 200 receives the transaction identification information and input information of the SC block from the service server 300, extracts the SC block including the transaction identification information of the SC block from the block chain 210, and The required service can be executed by driving the execution function by substituting the input information into the execution function included in the SC block.

As user authentication, the blockchain system 200 may perform one or more of electronic signature verification, hash value verification, nonce verification, and certificate verification. A detailed method for user authentication will be described in detail with reference to FIG. 4.

The blockchain system 200 generates a new authentication block including an authentication result, information on a certificate use place, and a certificate use place identification code, and stores the new authentication block in the block chain 210. In addition, the blockchain system 200 generates a service execution block including a result of execution of the execution function, information on a certificate use destination, and an identification code for a certificate use, and stores it in the blockchain 210.

Hereinafter, a method for verifying unauthorized use of a certificate according to an embodiment of the present invention will be described in more detail through the description with reference to FIGS. 2 to 4.

2 is a flowchart illustrating a method of storing a block related to a smart contract in a block chain system according to an embodiment of the present invention.

Referring to FIG. 2, the service server 300 creates a smart contract including an execution function related to a service (S201). An input value is defined in the execution function, and a logic capable of processing a process according to the input value is included. The logic can be written to the execution function as a programming language. Subsequently, the service server 300 transmits a registration request message including the generated smart contract and the usage information of the smart contract to the blockchain system 200 (S203).

Subsequently, the blockchain system 200 checks the usage destination information in the registration request message, and generates a unique identification code (ie, usage destination identification code) for the usage destination information (S205). Next, the blockchain system 200 creates a new SC block including the smart contract, the usage identification code, and usage information, and stores the new SC block in the blockchain 210 by linking the new SC block with the existing block ( S207). On the other hand, the blockchain system 200 can authenticate the service server 300 using an authentication means such as an electronic signature, and when the authentication of the service server 300 is successful, the SC block is transferred to the blockchain 210 Can be saved on.

When the SC block is normally stored, the blockchain system 200 transmits a registration notification message including the use destination identification code to the service server 300 (S209).

Then, the service server 300 checks the usage location identification code in the registration notification message, and separately stores and manages the usage location identification code in association with the smart contract.

3 is a flowchart illustrating a method of providing information about a certificate usage destination to a user before a certificate is used in a blockchain system according to an embodiment of the present invention.

Referring to FIG. 3, the user terminal 100 requests a specific service, such as an account transfer or stock trading, to the service server 300 (S301).

Then, the service server 300 confirms that the service requested from the user terminal 100 is a service requiring the use of a certificate, and also confirms a smart contract capable of executing the service. In addition, the service server 300 checks a destination identification code corresponding to the smart contract (S303). The usage identification code is received from the blockchain system 200 when a smart contract is registered, as in the description with reference to FIG. 2. Subsequently, the blockchain system 200 transmits a nonce request message including the identified use destination identification code to the blockchain system 200 (S305).

The blockchain system 200 checks the use destination identification code included in the nonce request message, extracts the SC block including the use destination identification code from the blockchain 210, and then checks the transaction identification information of the SC block ( S307). Subsequently, the blockchain system 200 generates a random value nonce based on a previously set nonce generation algorithm (S309). In this case, the blockchain system 200 may generate a nonce using the transaction identification information, the current time, and a certificate identification code of the user terminal 100.

Next, the blockchain system 200 transmits the generated nonce and the transaction identification information (SC TxID) of the confirmed SC block to the service server 300 (S311), and the service server 300 transmits the generated nonce and the SC block to the service server 300 (S311). The transaction identification information of the block is transmitted to the user terminal 100 (S313). As another embodiment, the blockchain system 200 may directly transmit the transaction identification information of the nonce and the SC block to the user terminal 100 without going through the service server 300.

After receiving the nonce, the user terminal 100 may perform an electronic signature using the nonce and the stored certificate, but in order to know the purpose for which the certificate is used, the usage including the transaction identification information of the received SC block The information request message may be transmitted to the blockchain system 200 (S315).

Then, the block chain system 200 extracts the SC block having the transaction identification information from the block chain 210 and checks the usage destination information in the transaction of the SC block. In addition, the blockchain system 200 transmits the usage destination information to the user terminal 100 so that the user recognizes the usage destination information of the certificate before the certificate is used (S317).

According to the processor as shown in FIG. 3, the user can check in advance whether the intended use of the service executed in the service server 300 and the purpose of which the certificate is to be used match before using the certificate.

When the usage information received from the blockchain system 200 is different from what he or she thinks, the user can withdraw a service request without performing an electronic signature. On the other hand, if the usage information received from the blockchain system 200 matches what he or she thinks, the user may request a substantial service processing by performing an electronic signature.

4 is a flowchart illustrating a method of providing information about a certificate usage to a user after a certificate is used in a blockchain system according to an embodiment of the present invention.

The description with reference to FIG. 4 proceeds after the procedure according to FIG. 3.

Referring to FIG. 4, the user terminal 100 receives input information for service execution (eg, account transfer input information, stock transaction input information) from the user, and then generates an electronic signature value (S401). In this case, the user terminal 100 may generate an electronic signature value by encrypting the nonce and the certificate with the user's private key.

Next, the user terminal 100 selects one or more of the electronic signature value, the nonce, identification information of the service server 300, a certificate identification code, transaction identification information of the SC block, input information for executing the service, etc. Generates a hash value after hashing. Subsequently, the user terminal 100 transmits the hash value, the identification code of the certificate, the authentication information including the electronic signature value, the input information, and the transaction identification information of the SC block to the service server 300 (S405). Then, the service server 300 transmits the authentication information, the input information, and transaction identification information of the SC blockchain to the blockchain system 200, and requests execution of the corresponding service (S407).

Then, the blockchain system 200 analyzes the authentication information and performs user authentication (S409). The blockchain system 200 verifies the user's public key, decrypts the electronic signature value using this public key, and then verifies the decrypted result of the nonce and the certificate, and the nonce and the certificate are converted to the user terminal ( First authentication is made whether it matches the nonce and certificate provided by 100). The blockchain system 200 may extract a certificate from the blockchain 210 based on the identification code of the certificate, and verify whether the certificate matches. In addition, the blockchain system 200 checks the identification code of the certificate distributed to the user terminal 100, and identifies the nonce provided to the user terminal 100, the electronic signature value, and the service server 300 After generating a hash value obtained by hashing at least one of the information, the identification code of the certificate, the transaction identification information of the SC block, the input information, etc., is this hash value and the hash value received from the user terminal 100 match? Whether it is secondarily authenticated. In addition, the blockchain system 200 may verify the certificate and additionally verify whether the certificate has expired.

If any authentication fails, the blockchain system 200 notifies the service server 300 that user authentication has failed.

On the other hand, if all user authentication is successful, the blockchain system 200 checks the transaction identification information of the SC block received from the service server 300, and extracts the SC block having the transaction identification information from the blockchain 210. do. In addition, the blockchain system 200 checks the execution function of the smart contract included in the extracted SC block, and executes the execution function by substituting the input information into the execution function to execute the required service (S411, S413. ).

Next, the blockchain system 200 checks the usage destination information and the usage destination identification code from the extracted SC block, and generates a new authentication block including the user authentication result, the certificate usage destination information, and the certificate usage identification code, This new authentication block is stored in the blockchain 210 (S415). In addition, the blockchain system 200 generates a service execution block including the execution result of the execution function, the certificate use destination information, and the certificate use destination identification code, and stores it in the blockchain 210.

Next, the blockchain system 200 transmits the stored transaction identification information of the authentication block, the transaction identification information of the service execution block, and the service execution result to the service server 300 (S417).

Then, the service server 300 reflects the service execution result in a database (not shown in the drawing) managed by itself, and transmits a message indicating that the service has been normally processed to the user terminal 100 (S419). At this time, the service server 300 transmits the transaction identification information of the authentication block and the transaction identification information of the service execution block received from the block chain system 200 to the user terminal 100.

After receiving the notification message, the user terminal 100 uses the two transaction identification information included in the notification message, and the service result executed in the service server 300 and the blockchain system 200 and the use of the certificate. You can check. The user terminal 100 blocks a service result inquiry message including the two confirmed transaction identification information (i.e., transaction identification information of the authentication block and transaction identification information of the service execution block) in order to confirm the service result and the use of the certificate. It is transmitted to the chain system 200 (S421).

Then, the blockchain system 200 checks the transaction identification information of the authentication block and the transaction identification information of the service execution block in the service result inquiry message, and converts the transaction having the transaction identification information of the authentication block into the blockchain 210 In addition, a transaction having the transaction identification information of the service execution block is extracted from the block chain 210. Subsequently, the blockchain system 200 transmits the extracted transactions to the user terminal 100 (S423).

The user terminal 100 may display the data included in the transactions received from the blockchain system 200 on the screen, thereby recognizing the user authentication result, the certificate usage information, the execution result of the execution function, and the certificate usage information to the user. (S425).

According to the processor as shown in FIG. 4, when a certificate is used in the service server 300, the user can obtain information on the use of the certificate from the blockchain system 200.

5 is a diagram illustrating a block chain system according to an embodiment of the present invention.

As shown in FIG. 5, the blockchain system 200 according to an embodiment of the present invention includes a smart contract registration module 220, a block management module 230, an authentication module 240, and an information providing module 250. Including, these components may be implemented as hardware or software, or may be implemented through a combination of hardware and software.

In addition, the blockchain system 200 may include one or more processors, memory, and communication circuits, and a smart contract registration module 220, a block management module 230, an authentication module 240, and an information providing module 250 ) May be mounted in a memory in the form of a program executed by the processor. In addition, the blockchain system 200 may communicate with the network 400 through the communication circuit.

The smart contract registration module 220 generates an SC block related to the smart contract and stores it in the block chain 210. Specifically, when the smart contract registration module 220 receives the registration request message including the usage location information and the smart contract from the service server 300, after checking the usage location information in the registration request message, the unique Generate an identification code (ie, a destination identification code). In addition, the smart contract registration module 220 creates a new SC block including the smart contract, the usage identification code, and usage information, and stores the new SC block in the blockchain 210 by linking the new SC block with the existing block. When the storage of the SC block is completed, the smart contract registration module 220 transmits a registration notification message including the use destination identification code to the service server 300.

The block management module 230 performs a function of managing blocks, etc. stored in the block chain 210. That is, the block management module 230 generates an authentication block and a service execution block and stores it in the block chain 210, and the authentication module 240 generates an authentication block and a service execution block related to a service that has been successfully authenticated to Save to 210. Specifically, when the authentication module 240 successfully authenticates the user and executes the service, the block management module 230 checks the SC block including the function performed in the service execution in the block chain 210, and this SC block Check the usage identification code and usage information at. In addition, the block management module 230 generates a new authentication block including the user authentication result performed by the authentication module 240, the certificate usage information and the certificate usage identification code, and converts the new authentication block to the block chain 210 ). In addition, the block management module 230 generates a service execution block including the result of the service executed based on the execution function, the certificate use destination information, and the certificate use destination identification code, and stores it in the block chain 210.

The authentication module 240 generates a nonce, provides it to the user terminal 100, and authenticates the user. Upon receiving a request for a nonce, the authentication module 240 may generate a nonce and provide it to the user terminal 100. At this time, the authentication module 240 checks the identification code of the use place where the certificate is used, extracts the SC block including the use place identification code from the blockchain 210, and then confirms the transaction identification information of the SC block. , It is possible to generate a nonce using transaction identification information of the SC block, a current time, a certificate identification code, and the like.

In addition, when receiving the authentication information of the user, the authentication module 240 analyzes the authentication information to perform user authentication. The authentication information may include a user's electronic signature value, a hash value, and an identification code of a certificate. In this case, the authentication module 240 verifies the user's electronic signature value, verifies the hash value, and verifies the validity of the certificate. By verifying, user authentication is performed. The authentication module 240 verifies the user's public key, decrypts the electronic signature value using the public key, and then verifies the nonce and the certificate from the decrypted result, and the nonce and the certificate are converted to the user terminal 100 First authentication is made whether or not it matches the nonce and certificate provided by ). The authentication module 240 may extract a certificate from the blockchain 210 based on the identification code of the certificate, and verify whether the certificate matches. In addition, the authentication module 240 checks the identification code of the certificate, and the nonce provided to the user terminal 100, the electronic signature value, the identification information of the service server 300, the identification code of the certificate, SC After generating a hash value obtained by hashing at least one of the transaction identification information of the block, the input information, and the like, it is possible to secondarily authenticate whether the hash value and the hash value received from the user terminal 100 match. In addition, the authentication module 240 may check the user's certificate and additionally authenticate whether the certificate has expired.

When user authentication is successful, the authentication module 240 checks the transaction identification information of the SC block related to the service, extracts the SC block having the transaction identification information from the block chain 210, and is included in the extracted SC block. By executing the smart contract's execution function, the requested service is processed. At this time, the authentication module 240 executes the required service by substituting input information input by the user into the execution function and driving the execution function.

The information providing module 250 provides data for accessing the usage destination information to a user, and serves to provide the usage destination information of the certificate to the user terminal. Specifically, when the nonce is generated and provided by the authentication module 240, the information providing module 250 checks the identification information of the transaction included in the SC block related to the service to be executed, and checks the transaction identification information of the SC block. As access data for confirming usage information, it may be provided to the user terminal 100. When the information providing module 250 receives the transaction identification information of the SC block from the user's terminal 100 in the state before the service is executed, the SC block having the transaction identification information is extracted from the blockchain 210, Check the usage information in the transaction of the extracted SC block. In addition, the information providing module 250 transmits the verified usage destination information to the user terminal 100 so that the user recognizes the usage destination information of the certificate before the certificate is used (ie, before the service is executed).

In addition, when the information providing module 250 generates one or more of an authentication block and a service execution block in the block management module 230 and stores it in the block chain 210, the transaction identification information of the stored authentication block and the service execution Check the transaction identification information of the block and provide it to the user terminal. Thereafter, when one or more of the transaction identification information of the authentication block and the transaction identification information of the service execution block are received from the user's terminal 100, the information providing module 250 blocks one or more transactions having the corresponding transaction identification information. By extracting from the chain 210 and transmitting it to the user terminal 100, the user can recognize the usage information of the certificate after the certificate is used (ie, after authentication is completed or after the service is executed).

While this specification includes many features, such features should not be construed as limiting the scope or claims of the invention. In addition, features described in separate embodiments herein may be combined and implemented in a single embodiment. Conversely, various features described in a single embodiment in the present specification may be individually implemented in various embodiments, or may be properly combined and implemented.

Although the operations have been described in a specific order in the drawings, it should not be understood that such operations are performed in a specific order as shown, or as a series of consecutive sequences, or that all described operations are performed to obtain a desired result. . Multitasking and parallel processing can be advantageous in certain environments. In addition, it should be understood that classification of various system components in the above-described embodiments does not require such classification in all embodiments. The above-described program components and systems may generally be implemented as a package in a single software product or multiple software products.

The method of the present invention as described above may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a form that can be read by a computer. This process can be easily performed by a person of ordinary skill in the art to which the present invention pertains, and thus will not be described in detail.

The present invention described above, for those of ordinary skill in the art to which the present invention pertains, various substitutions, modifications and changes are possible within the scope of the technical spirit of the present invention. It is not limited by the drawings.

100: user terminal 200: blockchain system
210: Blockchain 220: Smart contract registration module
230: block management module 240: authentication module
250: information providing module 300: service server
400: network

Claims (12)

As a method to verify the illegal use of certificates in the blockchain system,
Analyzing the authentication information sent from the user terminal to authenticate the user;
If the user authentication is successful, checking an execution function in a first block containing a smart contract, and running the execution function to execute a service;
Checking usage information related to the smart contract, generating a second block including the usage destination information and the service execution result, and storing it in a blockchain;
Transmitting the transaction identification information of the second block to the user terminal as access data for inquiring where the certificate used in the service is used; And
And, when an inquiry request message including the transaction identification information of the second block is received from the user terminal, providing information about the usage destination included in the second block to the user terminal. The method of claim 1,
Before the step of executing the service,
Transmitting the transaction identification information of the first block to the user terminal as access data for inquiring a destination of a certificate to be used for the service; And
Upon receiving a message including the transaction identification information of the first block from the user terminal, the certificate further comprising the step of extracting the usage information included in the first block and providing it to the user terminal before the service is executed. How to verify misuse. The method of claim 1,
Before the step of authenticating,
Further comprising the step of generating a nonce and transmitting it to the user terminal,
The step of authenticating,
After decrypting the electronic signature included in the authentication information with the user's public key, it is verified whether the decrypted nonce matches the generated nonce. The method of claim 1,
Generating a third block including the usage information and the authentication result and storing it in the block chain;
Transmitting the transaction identification information of the third block to the user terminal as access data for inquiring the usage destination of the certificate used for the authentication; And
When the inquiry request message including the transaction identification information of the third block is received from the user terminal, the method of verifying unauthorized use of a certificate further comprising the step of providing the usage information included in the third block to the user terminal. The method of claim 1,
Before the step of authenticating,
Receiving a request for registration of the smart contract from a service server; And
Generating the first block including the usage information of the smart contract and the smart contract, and storing the first block in the blockchain. The method of claim 1,
The step of executing the service,
Checking the input information sent from a user terminal, inputting the input information into the execution function, and executing the service. A computer program that executes the method according to any one of claims 1 to 6 and is recorded on a computer-readable recording medium. In a blockchain system to verify the illegal use of certificates,
An authentication module that analyzes the authentication information sent from the user terminal to authenticate the user and, if the authentication is successful, checks the execution function in the first block containing the smart contract and executes the execution function to execute the service;
A block management module for checking usage information related to the smart contract, generating a second block including the usage destination information and a result of executing the service, and storing it in a block chain; And
As access data capable of inquiring a usage destination of a certificate used in the service, comprising an information providing module for transmitting transaction identification information of the second block to the user terminal,
The information providing module, when an inquiry request message including transaction identification information of the second block is received from the user terminal, the block characterized in that it provides the usage information included in the second block to the user terminal Chain system. The method of claim 8,
The information providing module,
Before the service is executed, as access data for inquiring the destination of the certificate to be used for the service, the transaction identification information of the first block is transmitted to the user terminal, and the transaction identification information of the first block When a message including a message is received from the user terminal, before the service is executed, the usage information included in the first block is extracted and provided to the user terminal. The method of claim 8,
The authentication module generates and transmits the nonce to the user terminal, decrypts the electronic signature included in the authentication information with the user's public key, and then authenticates whether the decrypted nonce matches the generated nonce. Blockchain system, characterized in that. The method of claim 8,
The block management module,
A third block including the usage information and the authentication result is created and stored in the blockchain,
The information providing module,
As access data for inquiring the use of the certificate used for the authentication, the transaction identification information of the third block is transmitted to the user terminal, and an inquiry request message including the transaction identification information of the third block is sent to the user. When received from a terminal, a block chain system, characterized in that providing the usage information included in the third block to the user terminal. The method of claim 8,
Block chain system further comprising a smart contract registration module for receiving the registration of the smart contract from a service server, generating the first block including the usage information of the smart contract and the smart contract, and storing it in the block chain.

Images