TWI648679B - License management system and method using blockchain - Google Patents

Abstract

The invention proposes a certificate and issuance management system using a blockchain, which includes: a certificate server coupled to a client to manage the issuance of certificates; a data storage device coupled to the certificate server to store the basic input from the client Data; encryption and decryption module, coupled to the certificate server to encrypt or decrypt the input data; and the client and the encryption and decryption module, coupled to the blockchain network for verification of certificate issuance.

Description

Certificate management system and method for using blockchain

The present invention relates to a system and method for issuing certificates, in particular to verifying the issue of certificates through a blockchain technology to improve the security and convenience when issuing.

With the advancement of Internet technology, the convenience services currently applied to various types of e-commerce or government government have been deeply involved in daily life, such as ordering online shopping, various tax statements, certificate applications, and even online test photos. For various public administrative and commercial agencies, in the past when issuing certificates or licenses, they were usually in traditional paper and stamped with certificates on behalf of the agency to prevent counterfeiting, in order to achieve the purpose of certification or grant rights (power).

However, in the past, the disadvantages of applying for a certificate or certificate in the form of paper documents in addition to the large cost of operations (postal services, paper, ink, and labor). If the administrative process requires multiple administrative units to sign, it is often due to The lengthy administrative procedures and the coordination of rules between administrative units often result in a waste of time. If the administrative unit is busy, it often happens that important paper documents are pressed in the dark, and no one notices the whereabouts of the official documents, making their operations difficult. Tracking, therefore, the electronicization of the license or certificate business has become an inevitable trend of various public administrative and commercial agencies.

In view of the shortcomings of the above-mentioned certificate or certificate application process, in the past technology, there is also a system for electronicizing its application process in an attempt to achieve the goal of saving resources and making the application process easy to track.

In the previous known technology, the design of its system architecture, its core is not substantially separated from the structure of the license application and management server, identity verification module and storage module, but this system architecture The disadvantage is that its system security is not high, for example, it cannot be 100% sure whether the client is a legitimate user, because the client may be able to obtain the account number or password for the application through repeated attempts (Trial and Error), Or the real user accidentally loses the notepad with the recorded password, so that illegal users can pick up the notepad with the account password and have the opportunity to create a security loophole.

In addition, in the field of information security, a third-party attacker who wants to steal both ends of a private communication is called a Man-in-the-Middle Attack, which means that the attacker and the two ends of the communication are independent. Link and exchange the information they received, both sides of the correspondent mistakenly thought they were talking or exchanging data with each other through a private connection, but in fact the entire conversation was in the hands of the attacker. A typical example of the aforementioned man-in-the-middle attack in cryptography is: Alice wants to establish a communication link with Bob. At this time, Mallory wants to intercept the content and data of his communication and Send false communications to Alice and Bob when necessary. First, Alice asks Bob for the public key (Public-key). If Bob passes the public key to Alice at this time, Mallory can intercept it during the transmission process, and then a man-in-the-middle attack can be launched. Then, Mallory sent a fake communication to Alice, claiming to be Bob, and attaching Mallory's public key. By the same token, Mallory steals Bob's communication content in the same way as above. However, Alice and Bob did not realize the existence of the third party, Mallory, and both thought that they were still communicating with each other.

Therefore, in view of the shortcomings in the prior art, public administration and commercial agencies urgently need a method that can improve the efficiency of the application of certificates, certificates or documents, and improve the information security during the application process, in order to prevent the information of the applicant and even the agency itself. An invention that has been improperly stolen (such as the above-mentioned man-in-the-middle attack) and can ensure that the information in the application process is correct.

In order to solve the application efficiency and information security of certificates, certificates or certificates, the present invention proposes a certificate issuing management system using a blockchain, which includes: a certificate server coupled to a client to manage the issuance of certificates; a data storage device Is coupled to the license server to store the basic data input by the client; an encryption and decryption module is coupled to the license server to encrypt or decrypt the input data; and the client and the encryption and decryption module described above are coupled Connect to the blockchain network for verification of certificate issuance.

According to the present invention, a certificate issuance management system using a blockchain, the encryption and decryption module further includes an encryption and decryption algorithm to encrypt or decrypt the input data.

According to the present invention, a certificate issuance management system using a blockchain includes a first firewall on the client end to protect the information security of the client end.

According to the certificate issuing management system using the blockchain according to the present invention, the certificate server further includes a second firewall to protect the information security of the certificate server.

In order to solve the application efficiency and information security of certificates, certificates, or certificates, the present invention proposes a method for issuing and managing certificates using a blockchain, which includes: a client requesting a certificate to be issued; a certificate server to issue a certificate; The group converts the basic data and issued data of the client into encrypted data; uploads the encrypted data to the blockchain network; the blockchain network authenticates the encrypted data; and the certificate server generates a query code to the client.

In order to achieve the above purpose, the method for issuing and managing a certificate using a blockchain includes the following steps: The certificate server extracts basic data from the client from the data storage module.

In order to achieve the above purpose, the above method includes the following steps: the certificate server verifies the basic data, and if the verification fails, the request for issuing the certificate is rejected.

In order to achieve the above purpose, the method includes the following steps: the certificate server verifies the basic data, and if the verification passes, the certificate is issued.

To achieve the above purpose, the method includes the following steps: After the encrypted data is authenticated by the blockchain network, an authentication code is returned to the certificate server.

To achieve the above purpose, the method includes the following steps: the license server stores the encrypted data and the authentication code as the license data.

To achieve the above purpose, the method includes the following steps: the certificate server generates a query code corresponding to the certificate data to the client.

In order to solve the application efficiency and information security of certificates, certificates, or certificates, the present invention also proposes a query method for issuing certificates using a blockchain, which includes: the client sends a query code to the certificate server to query the certificate data; the certificate server The device sends an authentication code to the blockchain network; the blockchain network confirms the authentication code and sends a decryption certificate to the encryption and decryption module; the encryption and decryption module unlocks the basic data of the client contained in the encrypted data and Issuing information; and the license server sends basic and issued information to the client.

The above is used to explain the purpose, technical means, and effects that can be achieved of the present invention. Those skilled in the related art can make the scope of the present application clearer through the following examples and accompanying schematic descriptions and patent applications. invention.

100‧‧‧System Architecture

110‧‧‧blockchain network

120‧‧‧ encryption and decryption module

121‧‧‧ encryption and decryption algorithm

130‧‧‧license server

131‧‧‧Second firewall

140‧‧‧Data Storage Module

150‧‧‧Client

151‧‧‧First firewall

200‧‧‧Issue management method

S1-S10‧‧‧Method steps

300‧‧‧Issue inquiry method

S11-S17‧‧‧Method steps

Figure 1 shows the system architecture of the present invention.

FIG. 2 shows the flow of the method for applying for a license of the present invention.

Figure 3 shows the flow of the user's certificate query method.

The present invention will be described in detail with preferred embodiments and viewpoints. The following description provides specific implementation details of the present invention, to give the reader a thorough understanding of how these embodiments are implemented. However, those skilled in the art must understand that the present invention can also be practiced without these details. In addition, the present invention can also be applied and implemented by other specific embodiments. The details described in this specification can also be applied based on different needs, and various modifications or changes can be made without departing from the spirit of the present invention. . The present invention will be described in terms of preferred embodiments and viewpoints. Such descriptions are intended to explain the structure of the present invention, and are only used to illustrate rather than limit the scope of patent application of the present invention. The terms used in the following description will be interpreted in the broadest reasonable manner, even if they are used in conjunction with the detailed description of a particular embodiment of this creation.

The Block Chain network is an intelligent peer-to-peer network that uses a distributed database to identify, disseminate, and record information. Its most famous application is the "Bitcoin" published by Satoshi Nakamoto in 2008. White Paper, ”which founded the Bitcoin Social Network in 2009. The biggest feature of blockchain technology is that it is decentralized. There is no central manager. Instead, it is based on the consensus mechanism between various nodes on the network, combined with cryptographic principles and timing information to ensure Continuity of nodes in a decentralized database. The blockchain divides a complete data into multiple data blocks. Each data block contains transaction information to verify the authenticity of its transaction information. It is held by multiple nodes on the network. The consensus mechanism between nodes enables data to be instantly verified and traceable but difficult to be tampered with and obscured. The consensus mechanism in blockchain technology, such as the early Bitcoin used the Proof-of-Work (POW) mechanism, but the Proof-of-Work mechanism is a waste of computing resources, and is easily monopolized by nodes with faster computing speeds for consensus decision-making. Disadvantages, the recent improvements have gradually adopted the Proof-of-Stake (POS) or Delegate Proof of Stake (DPOS) mechanism, etc. By using the above consensus mechanism, by comparing the copies on each node, The public key information issued through the blockchain network can reduce the risk of man-in-the-middle attacks. The present invention utilizes the decentralization of the blockchain and is not easy to be attacked by middlemen, and is applied to the present invention to improve the speed and information security of licenses, certificates or certificates when applying.

Please refer to FIG. 1. In order to solve the application efficiency and information security of certificates, certificates or certificates, the present invention proposes a certificate issuing management system using a blockchain. The system architecture (100) includes a certificate server (130), coupled with Connect a client (150) to issue management licenses; a data storage device (140) coupled to the license server (130) to store basic data entered by the client (150); an encryption and decryption module (120) , Is coupled to the license server (130) to encrypt or decrypt the input data; and the client (150) and the encryption and decryption module (120) are coupled to the blockchain network (110) for certificate issuance verification. The above-mentioned certificate server (130) and client (150) usually include a processor, a memory, a temporary memory, a display device, a network communication module, an operating system, and an application program, etc., in a generally known manner. Connect to perform functions such as calculation, storage, temporary storage, display, and data transmission; based on the above are generally known architectures, so I will not repeat them here.

According to an aspect of the embodiment of the present invention, the user terminal (150) is used as the system. The user's terminal equipment for operation and input / output includes users: license issuing units, such as testing institutions or training institutions; individual license applicants; or units for certificate verification, such as personnel units in individual enterprises or inspections in public institutions Certificate unit.

The certificate, certificate or certificate referred to in the present invention may be a language certificate, a computer information network certificate or a construction civil certificate; the certificate may be a degree certificate, a training certificate, etc .; the certificate may be a passport, an identity card or a health insurance Card, the above-mentioned certificate, certificate or certificate is just an example but not limited to this.

According to the embodiment of the present invention, the system of the present invention can be applied to various electronic devices, such as smart portable devices, mobile phones, tablet computers, smart watches, etc., but is not limited thereto, and can also be applied to a processor having a processor. Other electronic devices.

According to the present invention, a certificate issuance management system using a blockchain, the encryption and decryption module (120) further includes an encryption and decryption algorithm (121) to encrypt or decrypt the input data.

According to an embodiment of the present invention, the encryption and decryption algorithm (121) may be a hash function or a quantum cryptography, and is not limited to it, so that the encrypted content thereof is subject to a middleman. It is also difficult for an attack to push back its state before encryption, and it is also difficult to modify the content of encrypted data.

The so-called hash function is a method of establishing a set of digital fingerprints from arbitrary data. The hash function first compresses the data into a digest, which reduces the amount of data and fixes the format of the data. Then the hash function scrambles and mixes the data, and re-creates a fingerprint called hash values (hash codes, hash sums) through a rule. A good hash function has a relatively large hash value for similar input. Differences, such as: {The black worf is howling under the moon}-> {PF103HQ44}, {The black w k rf is howling under the moon}-> {08003UXKY}, in the above sentence, although only wor is changed to wkrf, After the hash function is applied, the hash value is greatly different, which can prevent the hash function from being cracked. All hash functions need to meet a basic characteristic. If two hash values are not equal, their input data is also different. This feature enables the input of a hash function to produce an output with a deterministic result. If a hash function satisfies The above basic characteristics, then this hash function is called "one-way hash function". For communication security, given a hash value, there is no practical method to calculate its original input data, that is, it is difficult to forge, which can improve the level of communication security.

According to the present invention, a certificate issuance management system using a blockchain, wherein the client (150) further includes a first firewall (151) to protect the information security of the client (150).

According to the certificate issuing management system using the blockchain according to the present invention, the certificate server (130) further includes a second firewall (131) to protect the information security of the certificate server (130).

Please refer to FIG. 2. In order to solve the application efficiency and information security of a certificate, certificate or certificate, the present invention proposes a method for issuing and managing a certificate using a blockchain (200), which includes: in step (S1), the client (150 ) Submit a license issuance request; in step (S5), the license server (130) issues a license and converts the basic data and issued data of the client (150) into encrypted data through the encryption and decryption module (120); steps ( In step S6), the encrypted data is uploaded to the blockchain network (110); in step (S7), the blockchain network (110) authenticates the encrypted data; and, in step (S10), the license server (130) generates A query code is sent to the client (150).

To achieve the above purpose, the method further includes the following steps (S2): the license server (130) extracts the basic data of the client (150) from the data storage module (140).

The above basic information may include the user's birth year, month, date, schooling, employment, test scores, license number, date of issuance, scope of license rights (power), and other information related to the license applied for.

The above query code can be a set of numeric codes, English codes, numbers and English codes, two-dimensional barcodes, one-dimensional barcodes, voiceprint barcodes, any combination of the above, or codes that can represent the certificate data.

In order to achieve the above purpose, the method further includes the following steps (S3): the certificate server (130) verifies the basic data; if the verification fails, step (S4) is executed to reject the certificate issuance request.

In order to achieve the above purpose, the method further includes the following steps (S3): the certificate server (130) verifies the basic data, and if the verification is passed, step (S5) is performed to permit the issuance of a certificate.

To achieve the above purpose, the method further includes the following steps (S8): After the blockchain network (110) authenticates the encrypted data, it returns an authentication code to the certificate server (130).

To achieve the above purpose, the method further includes the following steps (S9): the certificate server (130) stores the encrypted data and the authentication code as the certificate data.

According to an aspect of the embodiment of the present invention, in step (S9), the certificate data may be stored in a database storage module (140).

According to another aspect of the embodiment of the present invention, in step (S9), the certificate data can be stored in the blockchain network (110) to save space in the database storage module (140) and avoid The license data was improperly altered or forged.

According to another aspect of the embodiment of the present invention, in step (S9), the certificate data can be stored in the blockchain network (110) and the database storage module (140).

According to an aspect of the embodiment of the present invention, in step (S9), the license data can be disassembled by the license server (130) into a plurality of divided license data for storage.

According to one aspect of the embodiment of the present invention, in step (S9), the license data can be stored as a complete license data without being disassembled by the license server (130).

According to one aspect of the embodiment of the present invention, the storage format of the certificate data or the plurality of divided certificate data may be JSON (JavaScript Object Notation), which is not limited to XML, MessagePack, YAML, or JSONP, and is well known in the field of information engineering. The skilled person knows that the above data format is only an example, and those skilled in the field of information engineering can modify it into the required data format as needed.

JSON is a type by Douglas. Douglas Crockford conceived and designed a lightweight data exchange language. Since the JSON data format is based on plain text to store and transmit simple structured data, it is relatively small and relatively large for many browsers. The device supports high compatibility, which makes it quite suitable for network data transmission.

To achieve the purpose of the present invention, the license issuance management method (200) further includes the following steps (S10): the license server (130) generates an inquiry code corresponding to the license data to the client (S150).

Please refer to FIG. 3, when the user terminal (150) needs to query the issued certificate, the present invention proposes a method for issuing and querying a certificate using a blockchain (300), which includes: step (S11), the user terminal (150) Send the query code to the certificate server (130) to query the certificate data; step (S14), the certificate server (130) sends the authentication code to the blockchain network (110); step (15), the blockchain network ( 110) Confirm the authentication code and send the decryption authentication to the encryption and decryption module (120); step (16), the encryption and decryption module (120) unlocks the basic information of the client (150) contained in the encrypted data according to the decryption authentication And issuing information; and, in step (S17), the license server (130) transmits basic information and issuing information to the client (150).

According to an embodiment of the present invention, the above-mentioned method (300) for issuing and querying a certificate using a blockchain, the method further includes the following step (S12): when the certificate server (130) receives the query code input by the user terminal (150) , Then verify the correctness of the query code.

According to an embodiment of the present invention, the above-mentioned query method (300) for issuing a certificate using a blockchain further includes the following steps (S13). When the query code of the client (150) is incorrectly entered, the client ( 150) The query fails, and step (S11) is performed again.

According to an embodiment of the present invention, the above-mentioned query method (300) for issuing a certificate using a block chain further includes the following steps. When the query code of the user terminal (150) is input correctly, step (S14) is performed. The license server (130) sends an authentication code to the blockchain network (110).

Claims (11)

A license issuance management system using a blockchain includes: a license server coupled to a client to manage the issuance of the license; a data storage device coupled to the license server to store the input from the client At least one basic data; an encryption and decryption module coupled to the license server to encrypt or decrypt the inputted at least one basic data and at least one issued data, wherein the at least one basic data and the at least one issued data are encrypted Upload at least one encrypted data; and the client and the encryption / decryption module are coupled to a blockchain network that receives a public key issued by a consensus mechanism to receive the at least one An encrypted data is used for verification of certificate issuance. Among them, the consensus mechanism may be a workload proof mechanism, an equity certification mechanism, an authorized equity certification mechanism, or a combination thereof. The certificate issuance management system using a blockchain as described in claim 1, wherein the encryption and decryption module further includes an encryption and decryption algorithm to encrypt or decrypt the input data. The certificate issuance management system using a blockchain as described in claim 1, wherein the client further includes a first firewall to protect the information security of the client. The certificate issuing management system using a blockchain as described in claim 1, wherein the certificate server further includes a second firewall to protect the information security of the certificate server. A license issue management method using a blockchain includes: a client submits a license issue request to a license issue management system, wherein the license issue management system includes a license server; the license server issues the license based on the license issue request Certificate and converts one of the client's basic data and one issued data into encrypted data through an encryption and decryption module; the certificate server uploads the encrypted data to a blockchain network to authenticate the encrypted data; And, the certificate server generates a query code and sends a public key to the client, wherein the public key is generated through a consensus mechanism on the blockchain network, which can be a workload proof mechanism, Proof-of-stake mechanism, authorized proof-of-stake mechanism or a combination of the above. As described in claim 5, the method for managing and issuing a certificate using a blockchain further includes the following steps. The certificate server extracts the basic data of the client from a data storage module. As described in the claims 5 and 6, the method for issuing and managing a certificate using a blockchain includes the following steps. The certificate server verifies the basic information. If the verification fails, the certificate issuance request is rejected. If the verification is passed, the permission is permitted. Issue a license. The method for issuing and managing a certificate using a blockchain as described in claim 5, further includes the following steps. After the blockchain network authenticates the encrypted data, it returns an authentication code to the certificate server. As described in the claims 5 and 8, the method for issuing and managing a license using a blockchain further includes the following steps. The license server stores the encrypted data and the authentication code as a license data. The license data can be selected at the same time It is stored in a database storage module or the blockchain network. A method for issuing and querying a certificate using a blockchain, comprising: a certificate server generating a query code and transmitting a public key to a client, wherein the public key is generated through a consensus mechanism on a blockchain network The consensus mechanism may be a proof-of-work mechanism, an equity certification mechanism, an authorized equity certification mechanism, or a combination thereof; the client sends the query code to the certificate server to query a certificate data; the certificate server sends an authentication code To a blockchain network; the blockchain network confirms the authentication code and sends a decryption authentication to an encryption and decryption module; the encryption and decryption module unlocks the user contained in an encrypted data according to the decryption authentication A basic information and an issue information of the client; and the license server transmits the basic information and the issue information to the client. The method for issuing and querying a certificate using a blockchain as described in claim 10 further includes the following steps. When the certificate server receives the query code input by the client, it verifies the correctness of the query code. When the query code is entered incorrectly, the verification fails. If the query code is entered correctly, the certificate server sends the authentication code to the blockchain network.