KR20210065012A - Certificate management server based on blockchain and method thereof and computer program - Google Patents

Abstract

The present invention relates to a blockchain-based certificate management server, a method, and a computer program thereof. The blockchain-based certificate management server includes: a communication part collecting record proof information of a user from at least one server authenticating record information of the user based on identification information of the user; a blockchain management part transmitting blockchain connection information, which is generated by hashing the identification information and the record proof information, to a blockchain server as a transaction, and then, receiving a transaction ID from the blockchain server; a database part storing the blockchain connection information and the transaction ID in a database by connecting the same with the identification information; and a control part comparing the transaction data of the blockchain server to some data of the blockchain connection information stored in the database based on the transaction ID connected with the identification information when receiving a request for a record certificate based on the identification information from a user terminal, and then, if the data are matched, providing the record certificate about the record proof information to the user terminal. Therefore, the present invention is capable of improving the reliability of a certificate.

Description

Blockchain-based certificate management server and method and computer program {CERTIFICATE MANAGEMENT SERVER BASED ON BLOCKCHAIN AND METHOD THEREOF AND COMPUTER PROGRAM}

It relates to a blockchain-based certificate management server and method, and a computer program.

In general, you will submit supporting documents to prove your personal history or academic information. Such documentary evidence may indicate verification of the documentary evidence through a mark, number, code, etc. certified by each corresponding organization.

However, the evidence documents issued by each organization differ in security and reliability due to the technology possessed by the organization.

In addition, it is impossible to issue the relevant certificate at a non-regular educational institution where a system is not established to issue a certificate, and it requires a lot of money and time, such as having to visit the institution directly to issue one certificate.

On the other hand, a technology to prevent forgery of information has been developed and applied in various fields by blocking information called a block chain, connecting blocks one after another, and storing and managing them in multiple devices.

Therefore, a technology that strengthens security based on block chain and issues certificates in connection with non-regular educational institutions in addition to regular educational institutions is required.

The task to be solved is to provide a blockchain-based certificate management technology that integratedly manages the user's history based on the block chain and provides relevant certificates with high reliability.

The blockchain-based certificate management server according to an embodiment is generated by hashing the identification information and the history proof information, the communication unit collecting the user's history proof information from one or more servers that authenticate the user's history information based on the user's identification information A block chain management unit that transmits a block chain link information as a transaction to the block chain server, receives the transaction ID received from the block chain server, and stores some data of block chain link information and transaction ID in the database in connection with identification information. When a history certificate is requested based on the identification information from the database unit and the user terminal, some data of the blockchain connection information stored in the database and the transaction data received from the blockchain server are compared and matched based on the transaction ID linked to the identification information When the user terminal includes a control unit for providing a history certificate for the history authentication information.

If a connect module is included in the server, the communication unit collects the history proof information linked to the user's identification information through the connect module, and if the connect module is not included in the server, the user is identified using an open API It is possible to collect history proof information linked to the information.

The block chain linkage information may include an identification information hash value, original data of history proof information, an original data hash value of history proof information, and a version value for history proof information.

When receiving an online inquiry condition including at least one of the availability of online inquiry for the history certificate, the designation of the subject to be viewed, the inquiry or printable period, and the number of printable times, the control unit can provide the history certificate with the online inquiry condition set have.

When receiving a request to output a history certificate that can be inquired online from the user terminal, the controller may set a document reference number or URL for the history certificate, and output a history certificate in which the document reference number or URL is written.

The control unit enters a document inquiry number into a web page or application where the history certificate can be inquired or performs the authentication of the subject to be read of the terminal accessed through the URL, and after completing the authentication of the subject to be read, the online inquiry condition is not satisfied. Otherwise, inquiry or output of the history certificate is restricted, and if the online inquiry condition is satisfied, the history certificate can be provided to the terminal.

When the online inquiry condition is satisfied, the control unit compares the hash value of the original data of the history certification information generated from the original data of the history certification information stored in the database with the hash value of the original data hash value of the history certification information of the block chain server, and the forgery confirmation result for the history certificate may be provided to the terminal.

As an operating method of a certificate management server operated by at least one processor according to an embodiment, when a history certificate is requested from a user terminal based on the user's identification information, the history authentication information and transaction ID associated with the identification information in the database It includes the steps of searching for, accessing the blockchain server and collecting transaction data linked to the transaction ID, and providing a history certificate for the history proof information to the user terminal if the transaction data and the history proof information match. , the history certificate is output based on one or more inputted online inquiry conditions.

A step of collecting user history proof information using a connect module or an open API from one or more servers that authenticate user history information based on user identification information, and linking with a blockchain created by hashing identification information and history proof information Transmitting the information as a transaction to the blockchain server, receiving the transaction ID received from the blockchain server, and storing some data of the blockchain connection information and the transaction ID in a database in association with the identification information. .

A program executed by a computing device according to an embodiment and stored in a computer-readable storage medium, the step of receiving a request for a history certificate based on the user's identification information from a user terminal; ID search step, the step of accessing the block chain server to collect identification information and transaction data related to the transaction ID, and if the transaction data and the history proof information match, the history certificate for the history proof information is provided to the user terminal. It includes instructions for executing the step, and when one or more conditions are set among whether online inquiry is possible, whether a subject is allowed to be viewed, a period for which inquiry or printing is possible, and the number of printable times, the history certificate is output based on the condition.

According to the embodiment, it is possible to improve the reliability of the certificate by preventing forgery and falsification of the certificate for the history information based on the block chain technology.

According to the embodiment, it is possible to integrate the management including the certificate of the history information authenticated by the institution and provide the certificate more conveniently by being linked to the server of the institution that does not have a separate certificate issuance system through a simple API.

1 is a block diagram illustrating a communication network including a blockchain-based certificate management server according to an embodiment.
2 is an exemplary diagram illustrating a communication unit that communicates with a first server and a second server according to an embodiment.
3 is a flowchart illustrating a data storage method of a blockchain-based certificate management method according to an embodiment.
4 is an exemplary diagram illustrating a block chain storage information structure according to an embodiment.
5 is a flowchart illustrating a method for providing a certificate in a method for managing a certificate based on a block chain according to an embodiment.
6 is an exemplary diagram illustrating a web page providing an output certificate and an online inquiry according to an embodiment.
7 is a flowchart illustrating a method of providing a certificate through a first server according to an embodiment.

Hereinafter, with reference to the accompanying drawings, embodiments of the present invention will be described in detail so that those of ordinary skill in the art to which the present invention pertains can easily implement them. However, the present invention may be embodied in many different forms and is not limited to the embodiments described herein. And in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and similar reference numerals are attached to similar parts throughout the specification.

Throughout the specification, when a part "includes" a certain component, it means that other components may be further included, rather than excluding other components, unless otherwise stated.

In the specification, history information is information that includes history, such as academic, occupation, and experience that can be authenticated by the relevant organization or institution for the user, for example, school grades, school admission and graduation, career, qualification acquisition information, It includes details of volunteer activities, language training, and course completion.

And a resume certificate is a document written to prove history information in writing, and includes a degree certificate, a certificate of completion, a transcript, a certificate of qualification, a career certificate, and a confirmation of education completion.

In the specification, a user means a member whose identification information is created through membership registration in a certain form in order to request integrated history management through the certificate management server, and the institution server provides education, qualification, experience, and activity provided by each institution or organization. As a server of an institution or organization that provides details and certifies the relevant content, it refers to an institution server that has delegated the integrated certificate management service. Hereinafter, the institution server can be divided into a first server and a second server.

1 is a block diagram illustrating a communication network including a block chain-based certificate management server according to an embodiment, and FIG. 2 is an exemplary diagram showing a communication unit communicating with a first server and a second server according to an embodiment to be.

1, the certificate management server 100 is connected to each other through a communication network between one or more first servers 210 and the block chain server 300, and transmits and receives data to each other. The communication network may include any type of communication network that transmits data, such as a wired communication network, a short-range or long-distance wireless communication network, and a network in which they are mixed. In addition, the communication network may be implemented as a private network constructed using a dedicated line.

Alternatively, the certificate management server 100 may be connected to one or more second servers 220 to transmit/receive data to each other.

The certificate management server 100 includes a communication unit 110 , a block chain management unit 120 , a control unit 130 , and a database unit 140 . The components shown in FIG. 1 are not essential for implementing the certificate management server 100, so the certificate management server 100 described in the present disclosure has more or fewer components than those listed above. can have

The communication unit 110 may be connected to one or more institution servers to collect the user's history proof information. Here, the institution server includes one or more first servers 210 or one or more second servers 220 according to a communication method.

Here, the history proof information includes history information and a history certificate.

As shown in FIG. 2 , the communication unit 110 communicates with a connect module 111 for communicating with the first server 210 and an open API 112 for communicating with the second server 220 . include

The first server 210 refers to a server of an institution that interworks with the certificate management server 100 among servers of an institution that has a certificate issuance system in the institution alone, such as a kind of regular educational institution, a local government, a national institution, and the like.

In this case, a separate system for issuing an integrated certificate associated with the certificate management server 100 may be built in the first server 210 or the certificate management server 100 may be included therein.

In other words, the main function of the certificate management server 100 is implemented as a platform in the first server 210 to perform integrated certificate management through the first server 210 or to the inside of the first server 210 . Integrated certificate management can be performed through communication through a dedicated connect module between the implemented platform and the external certificate management server 100 .

In detail, the first server 210 may include a module that performs a similar function for the communication unit 110 , the block chain management unit 120 , the control unit 130 , and the database unit 140 of the certificate management server 100 . In addition, data on user personal information, identification information, history proof information, history certificate, etc. of the first server 210 may be blocked and shared with the block chain server.

As such, the first server 210 is interlocked with the certificate management server 100 through the connect module to share user personal information, identification information, history proof information, history certificate, etc. managed by the first server 210 itself. have.

In other words, when receiving a request for account linkage from a user using the first server 210 , the identification information of the first server 210 and the account information used in the certificate management server 100 may be matched and automatically linked.

On the other hand, the second server 220 refers to a server of an institution that does not have a certificate issuance system or has many restrictions in issuing certificates, such as non-regular educational institutions, corporations, and private organizations.

Accordingly, the communication unit 110 may communicate with the second server 220 through an open API (Open API) 112 to collect the user's history proof information.

In addition, the communication unit 110 may provide a communication interface for transmitting and receiving one or more pieces of information (or data) using the block chain server 20 and a predetermined communication protocol. In addition, the communication unit 110 may transmit and receive data through communication with the user terminal 400 or a third-party terminal (not shown) through a predetermined interface screen.

The block chain management unit 120 may generate block chain linkage information from the user's identification information and history proof information.

For example, the block chain management unit 120 calculates the identification information HASH value by adding a random number value to the user identification information and performing encryption. In addition, the block chain management unit 120 calculates a hash value of the original certificate data by performing encryption on the original data of the certificate. A hash algorithm or hash function such as SHA256 or SHA512 may be used for such encryption, and those of ordinary skill in the art to which the present disclosure pertains will be familiar with the specific technical details thereof, so a detailed description thereof is omitted for convenience.

As such, the block chain management unit 120 may create and manage each block chain linkage information for one or more history proof information.

Here, the block chain linkage information includes an identification information hash (HASH) value corresponding to user identification information, a history proof information original data hash value, history proof information original data, a version information value, and the like.

Meanwhile, the block chain management unit 120 compares the data stored in the database 140 with the data stored in the block chain server 300 .

For example, the block chain management unit 120 may read recently updated data among the data stored in the database 140 at a predetermined cycle. And the block chain management unit 120 transmits the transaction ID of the read data to the block chain server (300). And when the block chain link information corresponding to the transaction ID is received from the block chain server 300, the read data is compared with each other. Specifically, the block chain management unit 120 corresponds to the same transaction ID, and the hash value of the history proof information original data generated in real time for the history proof information original data stored in the database unit 140 and the block chain server 300 ) can be compared with the original data hash values of the historical proof information stored in the .

If the two data compared by the block chain management unit 120 are different from each other, the control unit 130 determines that the data stored in the database 140 of the certificate management server 100 is forged or forged in response to the transaction ID. can And, the control unit 130 transmits the information indicating the forged or forged data to the manager terminal (not shown), so that the manager can check the forged or forged data.

Meanwhile, when receiving a request related to membership registration authentication or history certificate inquiry or print service, online inquiry condition setting, etc. from the user terminal 400 , the control unit 130 may control the overall operation in response to the request.

The control unit 130 may create and manage an account based on personal information about the service user and a personal identification number. Here, for membership registration and authentication processing for an account, decentralized identification (DID) may be used.

Decentralized identity verification is a technology that allows individuals to have complete control over their information without being controlled by the central system. Specifically, it stores personal information in a personal blockchain wallet and stores the private key of the personal blockchain wallet. It is a technology to prove identity by entering

Next, the database unit 140 stores the user's personal information, identification information, some of block chain link information, transaction ID (TXID), history information, history proof information, etc. in connection with each other.

Here, the history proof information means information authenticated by an organization or institution for the user's history information, and it means a certificate for qualification acquisition information, a degree certificate for academic information, and a grade confirmation for the grade information of the course taken. .

And some of the block chain linkage information includes a hash value of identification information (identification information + Salt value), original data of history proof information, transaction ID (TXID), version information value, and the like.

The database unit 140 may store a part of original data of personal information and block chain linkage information in the form of a master-slave.

For example, the database unit 140 may manage a plurality of slave DBs through the master DB.

In addition, the certificate management server 100 may further include a memory (not shown) to store a plurality of application programs (application programs or applications), data for the operation of the certificate management server 100, and commands. have. At least some of these application programs may be downloaded from an external server through wireless communication. In addition, at least some of these application programs may exist on the certificate management server 100 from the time of shipment for a basic function (eg, BIOS) of the certificate management server 100 . Meanwhile, the application program may be stored in a memory, installed on the certificate management server 100 , and driven to perform an operation (or function) of the certificate management server by the controller 130 .

The block chain server 300 includes a plurality of nodes, and the plurality of nodes may perform a function of recording a transaction in a block when verification of the transaction is completed through a consensus algorithm of block chain technology.

At this time, the blockchain server 300 may generate a transaction ID and share it with the certificate management server 100 when recording a transaction.

In addition, the user terminal 400 may inquire about history information through a web page or a history management program provided by the certificate management server 100 and output it in a predetermined document form. In this case, in addition to the offline documents, it is possible to output in the form of an online file, and in the case of an online file, it may be provided in a form that cannot be modified or edited.

Next, a method for integrally managing and providing a user's history certificate in the certificate management server 100 will be described with reference to FIGS. 3 to 7 .

3 is a flowchart illustrating a data storage method of a blockchain-based certificate management method according to an embodiment, and FIG. 4 is an exemplary diagram illustrating a block chain storage information structure according to an embodiment.

As shown in FIG. 3 , the certificate management server 100 collects the user's history information from the institution server based on the user's identification information ( S110 ).

Here, the user is a member subscribed to the certificate management server 100 by a certain membership registration procedure and means a member who has requested an integrated certificate management service for history information, so a description of a separate membership registration procedure and authentication procedure will be omitted. .

In addition, the user identification information indicates information that can identify the user by the user's resident registration number, ID, student number, company number, phone number, and the like.

The certificate management server 100 may access the institution servers 210 and 220 to which the integrated certificate management service has been delegated to collect the user's history information and history proof information.

In this case, in the case of the first server 210 including the internal connect module of the institution server, the certificate management server 100 may collect history certification information linked to the user's identification information through the corresponding connect module. In addition, in the case of the second server 220 that does not include a connect module, the certificate management server 100 may use an open API to collect history certification information linked to the user's identification information.

Next, the certificate management server 100 generates hash data of identification information and history information (S120).

The certificate management server 100 may generate an identification information HASH value by adding a salt value to the user's identification information and performing hashing thereon. The reason for adding the salt value has the effect of lowering the decryption possibility of the HASH value. In addition, the certificate management server 100 may perform hashing on the original data of the history certification information to generate a hash value of the original data of the history certification information.

As shown in FIG. 4 , the certificate management server 100 may generate a hash value including main information required for issuing a certificate based on history proof information based on identification information.

Figure 4 (a) is a hash value generation structure, (b) shows a block chain storage information structure.

The certificate management server 100 creates a block to be connected to the block chain, and generates a hash value by selecting data directly related to the history proof information. For example, in the case of the user's history proof information related to university grades/graduation/enrollment, the student is selected as identification information and information related to each grade/graduation/enrollment is selected, and the student number (identification information) is included in the data header. ) and certificate type information, and in the data body, details of grades/graduation/enrollment certificate can be stored to generate a hash value.

The certificate management server 100 generates block chain linkage information and transmits it to the block chain server as transaction data (S130).

Here, the block chain linkage information includes an identification information hash value, the original data of the history proof information, the original data hash value of the history proof information, and a version value for the history proof information.

The certificate management server 100 receives the transaction ID of the transaction data from the block chain server (S140).

At this time, when the block chain server 300 receives the block chain link information as transaction data, it generates a transaction ID (TXID) for the corresponding transaction, and records the transaction data and the transaction ID (TXID).

The transaction data recorded here includes a transaction ID, an identification information hash value, original data of the history proof information, an original data hash value of the history proof information, and a version value for the history proof information.

Next, the certificate management server 100 stores a part of the transaction ID and block chain data in the database in connection with the user's identification information (S150).

The information stored in the database 140 of the certificate management server 100 includes an identification information HASH value, history proof information original data, a version value, and a transaction ID. In this case, the identification information HASH value, the original certificate data, and the version value may be stored in JSON format. For example, a course code and a grade value may be combined and stored in JSON format.

Meanwhile, the database may further include and store original data on the user's personal information.

In this way, the certificate management server 100 generates block chain linkage information based on the user's identification information and history proof information and shares it with the block chain server 300 .

At this time, when the history proof information is modified or new history proof information is added, the certificate management server 100 generates block chain linkage information for the corresponding identification information and the history proof information in the same way to the block chain server 300 . can share

5 is a flowchart illustrating a method for providing a certificate in a method for managing a certificate based on a block chain according to an embodiment.

The user terminal 400 inputs identification information and requests a history certificate of the user (S210).

The user terminal 400 may input identification information through login or may directly input individual identification information such as a student number, certification number, or phone number separately.

Next, when receiving a request for a history certificate together with identification information from the user terminal 400 (S220), the certificate management server 100 searches for history information and transaction ID (TXID) linked to the identification information (S225).

The certificate management server 100 searches the stored database and retrieves the stored data based on the identification information.

At this time, the certificate management server 100 hashes the original certificate data of the read career information to generate a hash value of the original certificate data ( S402 ).

The certificate management server 200 transmits the searched transaction ID to the block chain server 300 (S225). At this time, the certificate management server 200 may transmit user identification information to the block chain server 300 together.

Then, the block chain server 300 reads the transaction data corresponding to the transaction ID (S230) and transmits the transaction data to the certificate management server 200 (S235)

At this time, the block chain server 300 may transmit all the stored transaction data or select and transmit only the hash value of the historical proof information original data from among the transaction data.

Next, the certificate management server 200 checks whether data forgery or not (S240).

The certificate management server 200 generates a history proof information original data hash value for the history proof information original data stored in the database unit 140 . In addition, the certificate management server 200 may compare the hash value of the original data hash of the history authentication information generated in real time with the hash value of the original data hash of the history authentication information stored in the block chain server 300 .

At this time, if the hash values do not match as a result of the comparison, it is determined that forgery has occurred, and a forgery notification message may be transmitted to a designated server or an administrator terminal (not shown).

And the certificate management server 200 converts the original certificate data in the block chain link information received from the block chain server 300 into JSON format, and converts the original certificate data in the block chain link information stored in the database unit 140 You can compare them by converting them to JSON format.

In addition, the comparison result may be transmitted to a designated server or an administrator terminal.

In addition, the certificate management server 200 may restore the history proof information of the database 140 with the history proof information stored in the block chain server 300 .

Meanwhile, if the hash values match as a result of the comparison, the certificate management server 200 outputs the history certificate to the user terminal 400 ( S260 ).

At this time, the certificate management server 200 includes an online inquiry condition including at least one of whether online inquiry is possible for the history certificate from the user terminal 400, designation of a subject to be viewed, a period available for inquiry or printing, and the number of times that can be printed. Can receive output requests. Alternatively, an online inquiry condition may be input together with a request for a history certificate in step S210.

Accordingly, when the certificate management server 100 receives a request to output a history certificate that can be inquired online, it sets a document reference number or URL for the history certificate, and outputs a history certificate in which the document reference number or URL is written.

At this time, the document reference number and URL are temporarily assigned in response to the condition, and when the inquiry period for the corresponding history certificate is set, the certificate management server 100 provides a temporary document inquiry number and temporary URL that are valid only for the set inquiry period. can be set.

Next, the user terminal 400 transmits the history certificate to the personnel manager terminal 500 (S265).

In this case, when both the user terminal 400 and the personnel manager terminal 500 use the service of the certificate management server 100 , the user terminal 400 may deliver the corresponding history certificate through the certificate management server 100 .

For example, the user terminal 400 may deliver the history certificate to the personnel manager terminal 500 through a text message, e-mail, or an application or program provided by the certificate management server 100 .

Then, when the personnel manager terminal 500 inputs a document inquiry number to a web page or application capable of inquiring a history certificate or accesses it through a URL, the certificate management server 100 requests authentication of the subject to be viewed.

The personnel manager terminal 500 performs authentication of the subject to be read in response to the corresponding history certificate (S270).

The personnel manager terminal 500 may use one or more of a set phone number, e-mail, and real name to authenticate that the subject is allowed to read.

For example, in the case of specifying a subject to be read by limiting the e-mail to the e-mail in charge of a specific company in the online inquiry condition, the personnel in charge terminal 500 inputs the e-mail and returns the authentication number received through the e-mail to the corresponding web page or By entering it into the application, it is possible to authenticate that the subject is allowed to view.

The certificate management server 100 determines whether to inquire or output based on the online inquiry condition when the authentication of the subject to be viewed is completed.

For example, if it is possible to inquire or print the history certificate for 7 days from the issuance date, check the date at the current time and if it is within 7 days from the issuance date, it is determined whether to inquire or print the history certificate. Alternatively, if the number of times of inquiry or output is limited to 10, and is less than 10 times compared with the number counted every time it is searched or output, it is determined that inquiry or output is possible.

When the certificate management server 100 determines that inquiry or output is impossible, it may limit inquiry or output of the corresponding history certificate, and transmit a notification message to the personnel manager terminal 500 or the user terminal 400 .

On the other hand, if it is possible to inquire or output the corresponding history certificate, the personnel manager terminal 500 requests whether the data forgery or not (S275).

The certificate management server 100 may automatically check whether or not forgery or falsification of the corresponding history certificate when inquiry or output is possible without receiving a request from the personnel manager terminal 500 . These settings can be easily changed and set by an administrator later.

Next, the certificate management server 100 checks whether data forgery or not (S280).

The certificate management server 100 generates a hash value of the history proof information original data from the history proof information original data of the database stored in the same manner as in step S240. And, the certificate management server 200 compares the hash value of the original data hash value of the history authentication information generated in real time with the hash value of the original data hash value of the history authentication information stored in the block chain server 300, and checks whether the data is forged or falsified according to whether they match. do.

Next, the certificate management server 100 outputs the history certificate and the forgery result to the personnel manager terminal 500 (S285). Here, the history certificate and the forgery result can be printed as an offline printout or as an online file by an interlocked printer.

And when the corresponding history certificate is forged, the certificate management server 100 collects the history proof information original data stored in the block chain server 300 together with the forgery result, and transfers the collected history proof information original data to the personnel manager terminal ( 500) can be sent.

In this case, the certificate management server 100 may transmit the forgery result of the history certificate to the administrator of the certificate management server 100 or the institution servers 210 and 220 or the user terminal 400 that have collected the corresponding history certificate.

6 is an exemplary diagram illustrating a web page providing an output certificate and an online inquiry according to an embodiment.

Fig. 6 (a) shows a certificate shown as a printout, and (b) shows a web page providing an online inquiry.

When one or more online inquiry conditions are inputted from the user terminal 400, such as whether online inquiry is possible, the number of times of printing, online inquiry available period, and online inquiry authentication information (phone number, e-mail, etc.) The management server 100 sets the document unique number or URL in which the online inquiry condition is set in the history certificate.

Here, the document unique number and URL are temporarily set according to the output of each certificate, and the online document provision can be controlled based on the online inquiry condition.

When the online inquiry is set to be possible, as shown in FIG. 6 (a), a corresponding document inquiry number (A) for online inquiry is written at the top of the certificate printout, and a URL (B) that enables online inquiry is set at the bottom. Such certificate output is not necessarily limited to offline print output, but includes online file output such as PDF file output.

Accordingly, the user terminal 400 may simply re-print the certificate through the document inquiry number or online inquiry of the printout of the certificate or transmit the corresponding history certificate to a third party such as a personnel manager.

As shown in FIG. 6B , the document can be inquired by inputting the document inquiry number of the certificate to the online document inquiry webpage provided by the certificate management server 100 or the corresponding document can be inquired by directly entering the URL of the certificate. In this case, if the URL of the certificate is directly used, it is possible to directly proceed to the inquiry authentication step without inputting the document inquiry number.

If the certificate to be searched is specified through the input of the document search number or the corresponding URL, it is confirmed that the person is permitted to view based on the online search conditions of the corresponding certificate. For example, you can check your real name through a phone number or enter an e-mail and enter a corresponding authentication number to confirm that you are a subject to be viewed.

In this way, if it is authenticated as a subject to be viewed, it is possible to inquire and print the corresponding certificate.

In this case, when the searchable period and the number of times that can be printed from the user terminal 400 deviates from the conditions based on the set online inquiry condition, the inquiry and output of the corresponding certificate may be restricted.

For example, if the inquiry period is exceeded or the number of printing or inquiry exceeds the set number of times, inquiry or output of the corresponding certificate is restricted. In detail, you can set a period such as 3 days, 1 week, 10 days, etc. from the set date of the searchable period, or directly input the first searchable date and the last searchable date to set it.

On the other hand, a third party such as a person in charge of personnel management may check the corresponding certificate and separately request the validity check of the certificate so that it can be provided so that it can be checked whether the corresponding certificate is forged or forged. Validation means checking the data forgery or falsification according to whether the original information hash data stored in the database 140 performed in step S000 above and the block chain linkage information hash data are matched.

On the other hand, when the subject to be read is a member subscribed to the certificate management server 100, the step of confirming the subject to be read through member authentication may be substituted.

Hereinafter, a process in which the user terminal checks the integrated history certificate from the certificate management server through the first server will be described.

7 is a flowchart illustrating a method of providing a certificate through a first server according to an embodiment.

The first server 210 receives account authentication information from the user terminal 400 and receives an account linkage request (S310). And the first server 210 transmits the received account authentication information certificate management server 100 (S315).

The certificate management server 100 performs account authentication on the received user (S320) and transmits the account authentication result (S325).

Then, the first server 210 stores the stored identification information in association with the authenticated account (S330).

Next, the user terminal 400 requests the history certificate to the first server 210 (S335). Then, the first server 210 checks the account of the certificate management server 100 of the user terminal 400 (S340).

When the user terminal 400 accesses the first server 210 and checks the identification information, the first server 210 may check whether the account is linked to the identification information.

The first server 210 requests external history information from the certificate management server 100 when the linked account is verified.

The certification management server 100 inquires the external history information linked to the identification information (S345).

In this case, the authentication management server 100 receives the user's identification information from the first server 210 and searches for the user's history authentication information stored in the same manner as in steps S220 to S240 of FIG. 5 . And the proof management server 100 compares the history proof information hash value generated from the historical proof information original data generated in real time with the history proof information hash value collected from the block chain server 300 to check forgery of the history proof information. can

At this time, when the two compared hash values match, the certification management server 100 transmits a history certificate for the corresponding history certification information to the first server 210 .

On the other hand, the certificate management server 100 transmits the history certificate information stored in the block chain server 300 to the first server 210 as the history certificate when the forgery of the history certificate is confirmed.

In this way, the first server 210 receives the external history certificate from the authentication management server 100 through the connect module (S350).

Here, the external history certificate refers to a history certificate that is granted and not provided by the first server 210 .

And the first server 210 inquires the internal history certificate (S355).

For convenience of explanation, it is described as requesting a history certificate to the certification management server 100 and inquiring an internal history certificate, but each step may be performed first at the same time or by selecting according to circumstances.

Next, the first server 210 transmits the internal history certificate and the external history certificate to the user terminal 400 (S360).

Accordingly, the user terminal 400 checks the integrated history certificate (S365).

Here, the integrated history certificate may be provided by individually providing the history certificate according to the setting of the interface, or by simultaneously creating the internal history certificate and the external history certificate in a single document in a certain format.

On the other hand, when the first server 210 does not check the account of the certificate management server 100 of the user terminal 400, it inquires the internal history certificate (S370). And the first server 210 transmits the inquired internal history certificate to the user terminal 400 (S375).

In addition, when only the internal history certificate is requested or only the external history certificate is requested from the user terminal 400 , only the requested history certificate may be searched, collected, and provided.

As described above, according to the present embodiment, the user's overall history information can be managed in an integrated manner, and a certificate for the history information can be more conveniently provided.

In addition, based on block chain technology, it is possible to easily check whether history information has been forged or falsified, and it is possible to recover forged data using the HASH value of the user's identification information stored in the block chain server 300, the original certificate data, etc. It is possible to improve the reliability of the history certificate.

The embodiment of the present invention described above is not implemented only through the apparatus and method, but may be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium in which the program is recorded.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improved forms of the present invention are also provided by those skilled in the art using the basic concept of the present invention as defined in the following claims. is within the scope of the right.

Claims (18)

A communication unit that collects the user's history proof information from one or more servers that authenticate the user's history information based on the user's identification information;
A block chain management unit that transmits the block chain link information generated by hashing the identification information and the history proof information to the block chain server as a transaction, and receives the transaction ID received from the block chain server;
A database unit for storing some data of the block chain link information and a transaction ID in a database in connection with the identification information, and
When a history certificate is requested based on the identification information from the user terminal, some data of the block chain link information stored in the database is compared with the transaction data received from the block chain server based on the transaction ID linked to the identification information. A control unit that provides a history certificate for the history certification information to the user terminal
A blockchain-based certificate management server that includes
In claim 1,
The communication unit,
If a connect module is included in the server, the history proof information linked to the user's identification information is collected through the connect module,
If a connect module is not included in the server, a blockchain-based certificate management server that collects history proof information linked to the user's identification information using an open API.
In claim 1,
The blockchain connection information is
A blockchain-based certificate management server including an identification information hash value, original data of the history proof information, an original data hash value of the history proof information, and a version value for the history proof information.
In claim 3,
The control unit is
A block chain that provides a history certificate in which the online inquiry condition is set when an online inquiry condition including one or more of whether online inquiry is possible for the history certificate, designation of a subject to be viewed, inquiry or printable period, and printable number of times is input The underlying credential management server.
In claim 4,
The control unit is
When a request for output of a history certificate that can be viewed online is received from the user terminal, a block chain-based certificate management server that sets a document reference number or URL for the history certificate, and outputs a history certificate in which the document reference number or the URL is written.
In claim 5,
The control unit is
After entering the document inquiry number into a web page or application where the history certificate can be inquired or accessing the terminal through the URL, authentication is performed, and after completing the authentication of the subject to be viewed, the online inquiry condition is checked If it is not satisfied, it limits the inquiry or output of the history certificate, and if the online inquiry condition is satisfied, the blockchain-based certificate management server provides the history certificate to the terminal.
In claim 6,
The control unit is
If the online inquiry condition is satisfied, the history proof information original data hash value generated from the original data of the history proof information stored in the database is compared with the hash value of the history proof information original data of the block chain server to check forgery of the history certificate A blockchain-based certificate management server that provides results to the terminal.
A method of operating a certificate management server operated by at least one processor, the method comprising:
Upon receiving a request for a history certificate based on the user's identification information from the user terminal, retrieving the history authentication information and transaction ID associated with the identification information in a database;
Connecting to a blockchain server and collecting transaction data linked to the transaction ID; and
providing a history certificate for the history proof information to the user terminal when the transaction data and the history proof information match
including,
The method of operating a server in which the history certificate is output based on one or more received online inquiry conditions.
In claim 8,
Collecting the user's history proof information using a connect module or an open API from one or more servers that authenticate the user's history information based on the user's identification information;
Transmitting the block chain link information generated by hashing the identification information and the history proof information as a transaction to a block chain server, and receiving the transaction ID received from the block chain server; and
Storing some data and transaction ID of the block chain link information in a database in connection with the identification information;
How to operate the server further including.
In claim 8,
The online inquiry conditions are:
An operating method of a server comprising one or more of whether online inquiry is possible for the history certificate, designation of a subject to be viewed, an inquiry or printable period, and a printable number of times.
In claim 9,
When a request for output of a history certificate that can be viewed online is received from the user terminal, a document reference number or URL for the history certificate is set, and a history certificate with the document reference number or the URL is output.
In claim 11,
Entering the document inquiry number on a web page in which the history certificate can be inquired or performing authentication of a subject for viewing permission of a terminal accessed through the URL;
When the verification of the subject to be viewed is completed, determining whether to inquire or output based on the online inquiry condition; and
If the online inquiry condition is not satisfied, limiting inquiry or output of the history certificate, providing the history certificate to the terminal if the online inquiry condition is satisfied, and counting the number of times the output is possible how it works.
In claim 12,
The step of performing authentication of the subject to be read by the terminal is
Based on the online inquiry condition, the operating method of the server to perform the reading permission target authentication using one or more of a set phone number, e-mail, real name.
In claim 12,
generating a hash value of the history proof information original data from the original data of the history proof information stored in the database if the online inquiry condition is satisfied;
Comparing the generated history proof information original data hash value with the history proof information original data hash value of the block chain server to check forgery and falsification of the history certificate, and
The method of operating a server further comprising the step of providing a confirmation result to the terminal.
A program executed by a computing device and stored in a computer-readable storage medium, comprising:
receiving a request for a history certificate from the user terminal based on the user's identification information;
retrieving history proof information and transaction ID associated with the identification information;
Connecting to a blockchain server and collecting transaction data linked to the identification information and the transaction ID; and
and instructions for executing the step of providing a history certificate for the history certification information to the user terminal when the transaction data and the history certification information match,
A program for outputting the history certificate based on the condition when one or more conditions are set among whether online inquiry is possible, whether a person is allowed to view, a period for which inquiry or printing is possible, and the number of times to print.
In claim 15,
A program for setting a document reference number or URL of the history certificate, and outputting a history certificate in which the document reference number or URL is written, when the history certificate is set to be available for online inquiry.
17. In claim 16,
Recognizing a terminal accessing the URL or receiving the document inquiry number on a web page where the history certificate can be inquired;
performing authentication of the subject to be read through the terminal;
When the verification of the subject to be viewed is completed, determining whether to view or print based on the available period of inquiry or printing and the number of times available for printing;
If the inquiry or output is possible, for the history certificate, based on the transaction ID linked to the user's identification information, the transaction data of the block chain server is compared with the block chain link information stored in the database, and the forgery or forgery of the history certificate step to check, and
The program further comprising the step of providing the history certificate and a forgery confirmation result for the history certificate to the terminal, and counting the number of times the output is possible.
In claim 17,
The step of performing the reading allowed subject authentication,
A program that performs authentication of the subject to be viewed using one or more of the phone number, e-mail, and real name set as the above conditions.

Images