KR100337907B1 - Method of counterfeit detection and production of digital signature in realtime transaction server - Google Patents

Abstract

The present invention relates to a real-time transaction server implementation method, and in particular, when storing important transactions (e.g., transaction transactions on an e-commerce system) on the operator's computer, information stored by applying new concepts such as a connected electronic signature and a cumulative electronic signature. To ensure the integrity of the system and to detect the forgery facts. That is, a first step of generating a connection digital signature and a cumulative digital signature for a transaction delivered in real time; A second step of detecting a forgery of each transaction by verifying a connection digital signature with respect to a transaction stored when the server is restarted; Secure and reliable transaction management by implementing a transaction server that prevents forgery of information and detects forgery by including a third step of detecting forgery of the entire transaction through verification of the cumulative digital signature. The purpose is to make it possible.

Description

How to generate digital signature value and detect tamper prevention in real-time transaction server {METHOD OF COUNTERFEIT DETECTION AND PRODUCTION OF DIGITAL SIGNATURE IN REALTIME TRANSACTION SERVER}

The present invention relates to a real-time transaction server implementation method, and in particular, when storing important transactions (e.g., transaction transactions on an e-commerce system) on the operator's computer, information stored by applying new concepts such as a connected electronic signature and a cumulative electronic signature. To ensure the integrity of the system and to detect the forgery facts.

In a computer program, the general meaning of a transaction is a series of sequences of related tasks, such as exchanging information or updating a database, that is, to ensure that the integrity of the database is guaranteed. It is considered a basic unit. An example of a typical transaction would be to take a customer's telephone order and enter the order into the computer. This order transaction involves several tasks, from examining the inventory of a product to verifying that the order has been placed. Consists of steps.

When we look at these work steps as one transaction, each work step must be completed for the transaction to complete successfully, and then the new order is actually reflected in the database. If not, that is, if an error occurs at any one job step, no modifications are made to the database and are kept before the transaction begins. Updates to the database that are made when a transaction completes successfully are called 'commit'. When the transaction fails, the modifications to the database are undone. It is called 'roll back'. A program that oversees each event in a transaction is called a transaction monitor. Transactions are provided by SQL, a standardized language for getting or updating information in a database.

In the general environment, the original transaction is stored in a file system or a database. This is simply a backup of a critical transaction, and thus the stored transaction information is exposed to the risk of illegal forgery.

With the advent of digital signature technology, many technologies have been developed to verify the integrity of specific information. However, these technologies have been mainly used to verify the integrity of information exchanged through a communication network. Therefore, this technology can verify the integrity of the received information in real time, but if the information is stored in the file system or database, there is a disadvantage that the forgery of the stored information cannot be detected after a certain time. do. For example, if specific information is changed from the stored information, if the digital signature is regenerated using the changed information, it is impossible to detect whether the information has been tampered with.

In order to solve this problem, a separate process is necessary to prevent forgery and alteration from storing the information.

In order to solve the above problems, the present invention provides a method of implementing a real-time transaction server that can ensure the integrity of stored information and detect forged information at all times by applying a new method of a connected digital signature and a cumulative digital signature. The purpose is.

1 is an overall block diagram of a system when a real-time transaction server according to the present invention is installed in a virtual system.

2 is a structural diagram of a data file and an index file in which a transaction is stored

3 is a block diagram illustrating a process of generating a data file / index file for a new date transaction and generating an initial connection digital signature value;

4 is a block diagram illustrating a process of generating a connection digital signature value and updating a cumulative digital signature value for a new transaction.

5 is a block diagram showing a flow of generating a connection digital signature value and a cumulative digital signature value, which are core technologies of the present invention.

6 is a block diagram illustrating a process of detecting a forgery fact with respect to a previously stored transaction upon restarting a transaction server

<Description of the symbols for the main parts of the drawings>

1: transaction server 2: data file

3: Index File 4: Linked Digital Signature

5: cumulative electronic signature 6: electronic signature to prevent forgery and alteration

An implementation method of a real-time transaction server for achieving the above object is to generate a data file DF and an index file IF for storing a new date on a hard disk on a server computer on which a transaction server is installed and operated. Generating an initial signed digital signature value LS (0) and an initial cumulative digital signature AS (0) which are the beginning of the associated digital signature value of the date by generating a value A on the storage device and performing an electronic signature;

Enc (A) is generated by encrypting the value A generated in the above step with the public key included in the encryption certificate of the transaction server, and for preventing forgery for checking whether the value is forged against LS (0) and AS (0). Generating the digital signature value PS (0) and storing it in the index file IF;

For a transaction T (i) delivered in real time, a time stamp value TS (i) representing the contents of T (i) and the time at which the transaction was delivered in 14-digit string of YYYYMMDDHHMISS, and transaction T previously delivered and stored. generating a new connection digital signature value LS (i) by applying the connection digital signature value LS (i-1) of (i-1) and maintaining it on the storage device, and storing it in the data file DF;

Reflects LS (i) on the cumulative digital signature value AS (i-1) of the connected electronic signature values of the transaction stored so far, which is maintained on the storage device, and is updated with the new cumulative digital signature value AS (i). Retaining on the storage device and generating an electronic signature value PS (i) for preventing forgery of the AS (i) and restoring the index file IF with the AS (i);

Anti-forgery digital signature value stored with the last connection digital signature value LS (N), final cumulative digital signature value AS (N), and encrypted random value Enc (A) stored in the index file IF upon transaction server restart Detecting forgery of index information by loading PS (N) into a storage device and performing digital signature verification;

The time stamp value TS (i) used to generate the contents of T (i) and LS (i) for the i th transaction T (i) (i is greater than or equal to 1 and less than or equal to N) in the stored N transactions. Then, the connection electronic signature value LS (i-1) of the transaction T (i-1), which was previously stored, is loaded from the data file DF into the storage device and the connection electronic signature value LS (i) of T (i) is loaded. Detecting a forgery fact of T (i) by verifying;

In the process, the cumulative digital signature value nAS (i) for LS (i) is regenerated on the storage device, and the final cumulative digital signature value nAS (N) and the regenerated digital signature after the final transaction T (N) verification is completed. Detects the forgery of the entire transaction through comparison verification of AS (N) read from the index file IF.

The above and other objects and features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings.

Hereinafter, with reference to the accompanying drawings will be described an embodiment of the present invention;

1 shows the system structure when the transaction server 1 is installed in a virtual system. Since the transaction server 1 must perform the function of generating and verifying the digital signature, the transaction server 1 owns the digital signature private key and the digital signature certificate issued by a legitimate certificate authority, and the transaction server 1 is installed. Suppose it is stored on your computer's hard disk. In addition, when generating a new data file (2) and an index file (3), encrypting and storing an arbitrary value necessary to generate an initial connection digital signature value LS (0) and an initial cumulative digital signature value AS (0). To do so, you need an encryption private key and a public key. It is assumed that the encryption certificate for this purpose is issued by the transaction server 1 and stored in the hard disk on the server computer together with the digital signature private key / certificate and the encryption private key.

The transaction server 1 generates a connection digital signature value 4 for transactions delivered in real time and stores them in the data file 2 together with the transferred transactions. In addition, a new cumulative digital signature value (5) is generated using the connection digital signature value, and a digital signature value (6) for preventing forgery and alteration is generated using the cumulative digital signature value (5) and the current state information. Store in the index file (3).

2 shows the structure of a data file 2 and an index file 3 in which transactions are stored. FIG. 3 illustrates that the transaction server automatically generates a data file 2 and an index file 3 of the date when a new date transaction is delivered, and generates an arbitrary value on a storage device to perform an electronic signature. It shows the process of generating the first connection digital signature value LS (0) that is the start of the date connection digital signature value. At this time, the initial cumulative digital signature value AS (0) has the same value as the initial connection digital signature value LS (0).

Since the random value A generated and used in the above process is information that is the basis of the subsequent generated digital signature value and the cumulative digital signature value, the random value A is encrypted and stored in the index file 3 by the encryption public key of the transaction server.

4 illustrates a process of generating a connection digital signature LS (i) and a new cumulative digital signature AS (i) when a new transaction T (i) is delivered and storing them in the data file 2 and the index file 3. It is shown. The detailed process of this process is as follows. First, when a new transaction T (i) is delivered to the transaction server, the time stamp value TS (i) representing the contents of the transaction and the date and time when T (i) was delivered as a 14-digit string in YYYYMMDDHHMISS format, and the previously saved transaction. A connection digital signature value LS (i) for T (i) is generated using the connection digital signature value LS (i-1) of T (i-1).

Next, the new cumulative digital signature value AS (i) is obtained by reflecting the connection digital signature value LS (i) generated in the above process to the cumulative digital signature value AS (i-1). Next, the forgery prevention digital signature value PS (i) is generated for the connection digital signature value LS (i) and the cumulative digital signature value AS (i). Next, the transaction T (i) and the connection digital signature value LS (i) are stored in the data file 1. Next, the connection digital signature value LS (i) and the cumulative digital signature value AS (i) are stored in the index file 2 together with the forgery prevention digital signature value PS (i). The transaction server 1 keeps the newly created connection digital signature value LS (i) and the cumulative digital signature value AS (i) on the storage device for the next transaction processing.

5 illustrates a process of generating a series of connected digital signature values, cumulative digital signature values, and digital signature values for preventing forgery and alteration. As shown in Fig. 5, the connection electronic signature value LS (i) for one transaction T (i) includes the connection electrons of all transactions T (j) (j is greater than or equal to 1 and less than i) stored before the transaction. Signature values LS (j) are reflected, and this connection digital signature value LS (i) is the connection digital signature values of all transactions T (k) (k is greater than i and less than or equal to N) that is stored thereafter. Since it affects LS (k), it is impossible to modify the connection digital signature value of a specific transaction even if it modifies the contents of a specific stored transaction. In addition, this structure has the advantage that the processing speed can be minimized by using the electronic signature values generated by the contents, rather than using the entire transaction contents.

However, the connection electronic signature value alone cannot detect whether the transaction T (N) is finally stored. Therefore, it is possible to detect whether the forgery and deletion for the final transaction T (N) by maintaining the cumulative digital signature value AS (N) of the final state. The cumulative digital signature value is different from the concatenated digital signature value, which is generated on a transaction basis, and is continuously stored in storage from the concatenated digital signature value LS (0) for the first transaction of the date to the concatenated digital signature value LS (N) of the last transaction. As the value is obtained through the updating process, when the final transaction is forged or deleted, the cumulative digital signature value nAS (N) which is regenerated in the verification process and the final cumulative electronic signature value AS (N) present in the index file 3 are different. do.

FIG. 6 illustrates a process of detecting forgery of a transaction by verifying a connection electronic signature value in a stored order for previously stored transactions when the transaction server 1 is restarted. The detailed process of this process is as follows. First, the data file 2 and index file 3 of the date are opened. Next, the encrypted value Enc (A) of any value A for generating the initial connection electronic signature value LS (0) from the index file 3, the connection electronic signature value LS (N) for the final transaction, and the final cumulative electron. The signature value AS (N) and the electronic signature value PS (N) for preventing forgery and alteration are loaded into the storage device. Next, the electronic signature verification for PS (N) is performed using Enc (A), LS (N), and AS (N) obtained in the above process. If the digital signature verification fails, the index file information is forged and processed.

Next, Enc (A) is decrypted and extracted with the encryption private key of the transaction server. Next, the first connection digital signature value LS (0) and the first cumulative digital signature value nAS (0) are generated using the value obtained in the above process. Next, the transaction T (i) is loaded from the data file 2 into the storage device to extract LS (i) and TS (i), and the contents of LS (i-1), TS (i) and T (i). Verifies LS (i) using. If the verification of LS (i) fails, the contents of T (i) are forged and thus processed.

If the LS (i) is successfully verified, the new cumulative digital signature value nAS (i) is obtained by reflecting LS (i) on the cumulative digital signature value nAS (i-1) up to the previous transaction held in the storage device. do. Repeat this process until the final transaction. Next, nAS (N) obtained through the above process is compared with AS (N) previously extracted from the index file 3. At this time, if nAS (N) and AS (N) are wrong, the last transaction is forged or deleted and an error is processed.

Although the present invention has been described with reference to the above-described embodiments and the accompanying drawings, it can be understood that other modifications can be made by those skilled in the art.

As described above, the present invention devises a new method of connection digital signature and cumulative digital signature, so that the forgery risk occurring during storage of important transactions can be prevented in advance and detected later, so that more secure and reliable transaction management can be performed. It is effective.

Claims (3)

In generating connection digital signature value and cumulative digital signature value for real-time transaction server implementation supporting forgery prevention and detection function, When a new date transaction occurs, the data file and index file of the date are automatically generated, and a random value A is created on the storage device and the digital signature is executed. A first step of generating a cumulative digital signature value AS (0); Enc (A) is generated by encrypting A generated in the above process with the encryption public key of the transaction server, and a digital signature value PS (0) for preventing forgery is generated for this value and LS (0) and AS (0). Storing the index file in an index file; When a new transaction T (i) is delivered to the transaction server, it uses the contents of the transaction, the time stamp value TS (i), and the connection electronic signature value LS (i-1) of the previously stored transaction T (i-1). A third step of generating a concatenated digital signature value LS (i) for T (i); A fourth step of generating a new cumulative digital signature value AS (i) by reflecting the connection digital signature value LS (i) generated in the above process to the cumulative digital signature value AS (i-1) to date; A fifth step of generating a forgery-proof digital signature value PS (i) for the connection digital signature value LS (i) and the cumulative digital signature value AS (i) generated in the above process; And a sixth step of storing the connection digital signature value LS (i) and the cumulative digital signature value AS (i) generated in the above process together with the forgery prevention digital signature value PS (i) in an index file. How to generate a digital signature value for real-time transaction server In the method for detecting the forgery fact of the stored transaction for real-time transaction server implementation that supports the forgery prevention and detection function, An encrypted value Enc (A) of any value A to generate the first connection digital signature value LS (0) from the index file, the connection digital signature value LS (N) for the final transaction, and the final cumulative digital signature value AS (N And a first step of loading the forgery preventing digital signature value PS (N) into the storage device; A second step of detecting the fact that the information of the index file is forged by verifying the digital signature of the PS (N) using Enc (A), LS (N), and AS (N) obtained in the above process; A third step of acquiring A by decrypting Enc (A) obtained in the above process with an encryption private key of a transaction server; Generating a first connected digital signature value LS (0) and an initial cumulative digital signature value nAS (0) using A obtained in the above process; Load the transaction T (i) (i is greater than or equal to 1 and less than or equal to N) stored from the data file to the storage device to extract the connection digital signature LS (i) and the time stamp value TS (i). Detects the forgery of T (i) by verifying LS (i) using the contents of T (i), the extracted TS (i), and the connection electronic signature LS (i-1) of the previous transaction. Step 5; Generating a new cumulative digital signature value nAS (i) by reflecting LS (i) in the cumulative digital signature value nAS (i-1) up to the previous transaction T (i-1) held on the storage device after the above process. Sixth step; Detects the forgery and deletion of the final transaction by comparing the new cumulative digital signature value nAS (N) obtained by performing the above process for all transactions stored in the data file and the AS (N) extracted from the index file. A forgery prevention detection method of a real-time transaction server, characterized in that comprises a seventh step 3. The method of claim 1 or 2, wherein the structure of the data file is composed of transaction text information, a connection digital signature value of the transaction, and a Time Stamp value indicating the date and time the transaction was delivered; The structure of the index file may include a location of a transaction stored in a data file, an initial connection digital signature value, and an arbitrary value generated to generate a cumulative digital signature value by using an encryption certificate of a transaction server, and a cumulative digital signature value. Electronic signature value generation method and forgery prevention detection method of a real-time transaction server, characterized in that consisting of