KR101948721B1 - Method and apparatus for examining forgery of file by using file hash value - Google Patents

Abstract

A method for inspecting a file forgery-alteration by a user terminal, comprising the steps of: connecting to an external device via a network to download a file; Calculating a first hash value of the downloaded file; And checking whether the downloaded file is forged or falsified based on a result of comparison between the second hash value and the first hash value of the file stored in the block chain. An inspection method is disclosed.

Description

TECHNICAL FIELD [0001] The present invention relates to a file forgery inspection method and a terminal apparatus using a file hash value,

The present invention relates to a method and an apparatus for checking forgery and falsification of a file. More particularly, the present invention relates to a method and apparatus for checking forgery and falsification of a file using a file hash value.

As the network evolves, users can access the Internet and obtain various files they need. However, as network technology develops and hacking technology evolves, it is very important to verify the integrity of downloaded files.

Hackers can acquire personal information unauthorizedly from the terminal that downloads the file by inserting malicious code into a file existing on the Internet or by inserting a hacking program, or disable the terminal.

As a method for verifying the integrity of a file, it is possible to verify forgery of a file using a file hash value, but there is a limit in that the file hash value itself can be forged by a hacker. Alternatively, it is possible to check the integrity of a file using a certificate method rather than a file hash value, but this approach is somewhat complicated to use because it requires the trust of a trusted third party.

A file forgery check method and a terminal device using a file hash value according to an embodiment of the present invention are intended to examine forgery and falsification of a file by a simple method.

In addition, a file forgery check method and a terminal device using a file hash value according to an embodiment of the present invention aim to block the forgery and falsification of a file hash value as well as a file itself.

In addition, a file forgery check method and a terminal device using a file hash value according to an embodiment of the present invention are intended to prevent problems such as theft of personal information by a downloaded file.

According to another aspect of the present invention, there is provided a file forgery check method comprising:

A method for inspecting a file forgery-alteration by a user terminal, comprising the steps of: connecting to an external device via a network to download a file; Calculating a first hash value of the downloaded file; And checking whether the downloaded file is forged or not based on a result of comparison between a second hash value of the file stored in the block chain and the first hash value.

The checking for forgery or corruption may include: obtaining the block-chain address; Querying the second hash value based on the block-chain address; And comparing the first hash value with the second hash value.

Wherein the checking for forgery is performed by: transmitting the calculated first hash value to the block chain based on a block chain address; And receiving a result of the comparison between the first hash value and the second hash value from the block chain.

The file forgery check method may include obtaining the block chain address recorded in the downloaded file.

The file forgery check method includes: obtaining identification information of the external device; And authenticating the external device by comparing the identification information stored in the block chain with the obtained identification information.

According to another aspect of the present invention, there is provided a method of registering a file hash value,

A method of registering a file hash value by a user terminal, the method comprising: calculating a hash value of the file; Generating a block chain address based on a public key stored in a user terminal; And registering the calculated hash value of the file in the block chain based on the generated block chain address.

The step of registering in the block chain may further include registering, in the block chain, the identification information of the device to which the file is uploaded.

According to an embodiment of the present invention,

A communication unit for connecting to an external device via a network to download a file; A hash value calculator for calculating a first hash value of the downloaded file; And a controller for checking whether the downloaded file is forged or falsified based on a comparison result between the second hash value of the file stored in the block chain and the first hash value.

According to another embodiment of the present invention,

A hash value calculation unit for calculating a hash value of the file; And a controller for generating a block chain address based on the public key stored in the user terminal and registering the calculated hash value of the file in the block chain based on the generated block chain address.

The file forgery check method using the file hash value according to an embodiment of the present invention and some effects that the terminal device can achieve are as follows.

i) It is possible to check the forgery of a file by a simple method.

ii) Block the forgery of the hash value of the file as well as the file itself.

iii) Problems such as theft of personal information by downloaded files can be prevented.

However, the file forgery check method and the terminal device using the file hash value according to an embodiment of the present invention can achieve the advantages that are not limited to those mentioned above, And will be apparent to those skilled in the art to which the present invention pertains.

1 is a schematic diagram illustrating a first user terminal, a block chain, and a second user terminal in accordance with an embodiment of the present invention.
2 is a flowchart illustrating a method of registering a file hash value according to an embodiment of the present invention.
3 is a diagram illustrating a protocol that a first user terminal uses to register a file hash value in a block chain.
4 is a flowchart illustrating a file forgery test method according to an exemplary embodiment of the present invention.
5 is a block diagram illustrating a configuration of a first user terminal according to an embodiment of the present invention.
6 is a block diagram illustrating a configuration of a second user terminal according to an embodiment of the present invention.

While the present invention has been described with reference to exemplary embodiments, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It is to be understood, however, that the intention is not to limit the invention to the specific embodiments, but on the contrary, the intention is to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. In addition, numerals (e.g., first, second, etc.) used in the description of the present invention are merely an identifier for distinguishing one component from another.

Also, in this specification, when an element is referred to as being "connected" or "connected" with another element, the element may be directly connected or directly connected to the other element, It should be understood that, unless an opposite description is present, it may be connected or connected via another element in the middle.

In the present specification, a component represented by 'unit', 'module', or the like refers to a case where two or more components are combined into one component, or one component is divided into two or more ≪ / RTI > In addition, each of the components to be described below may additionally perform some or all of the functions of the other components in addition to the main functions of the component itself, and some of the main functions And may be performed entirely by components.

Hereinafter, exemplary embodiments according to the technical idea of the present invention will be described with reference to the drawings.

1 is a schematic diagram illustrating a first user terminal 100, a block chain 200, and a second user terminal 300 in accordance with an embodiment of the present invention.

The first user terminal 100 shown in FIG. 1 is a terminal used by the owner of a file. The user of the first user terminal 100 is connected to the first user terminal 100 or the first user terminal 100 Uploads a file owned by the user to the server, and allows a user of another user, for example, the second user terminal 300, to download the file.

Although FIG. 1 illustrates a first user terminal 100 as a desktop PC, this is only one embodiment and the first user terminal 100 may be a network such as a smart phone, PDA, notebook, tablet PC, wearable device, (E. G., The Internet). ≪ / RTI >

The first user terminal 100 calculates a hash value of the uploaded file and registers it in the block chain 200. The block chain 200 is a type of distributed database, and it is designed such that it can not be arbitrarily operated by the operator of the distributed node as a continuously growing data record list. An example of a well-known block chain 200 is a decentralized electronic book that records the transaction of a cryptographic currency. The first user terminal 100 can inherently block forgery and falsification by a hacker or the like by storing the hash value of the file in the block chain 200. [

The second user terminal 300 accesses the first user terminal 100 or an external server to download the uploaded file. The second user terminal 300 calculates a hash value of the downloaded file and checks whether the file is forged or not according to a result of comparison between the hash value of the file stored in the block chain 200 and the hash value of the downloaded file .

For example, if the hash value of the downloaded file is the same as the hash value of the file stored in the block chain 200, the second user terminal 300 determines that the corresponding file is not forgiven, Value and the hash value of the file stored in the block chain 200 are different from each other, it is determined that the file is forged. Figure 1 illustrates a second user terminal 300 as a smartphone but this is only one embodiment and the second user terminal 300 may be a network such as a desktop PC, a PDA, a laptop, a tablet PC, a wearable device, (E. G., The Internet). ≪ / RTI >

The first user terminal 100 and the second user terminal 300 may apply a hash algorithm such as SHA 256 to the data in the file to calculate the hash value of the file, Can be calculated.

According to one embodiment of the present invention, by using the secure storage means called the block chain 200 for checking forgery of a file, it is possible to prevent the file hash value itself from being forged and, thus, The possibility of hacking the user terminal 300 can be essentially blocked.

Hereinafter, specific operations of the first user terminal 100 and the second user terminal 300 will be described with reference to FIGS.

2 is a flowchart illustrating a method of registering a file hash value according to an embodiment of the present invention.

In step S210, the first user terminal 100 calculates a hash value of the file. As described above, the first user terminal 100 may apply the hash algorithm to the data in the file to calculate the hash value of the file.

In step S220, the first user terminal 100 generates a block-chain address for registering a hash value. The first user terminal 100 may generate a block chain address based on the stored public key. Specifically, the first user terminal 100 may generate a block chain address A hash algorithm and a RACE Integrity Primitives Evaluation Message Digest (RIPEMD) may be applied to the key. This can be expressed by the following equation.

[Mathematical Expression]

A = RIPEMD160 (SHA256 (K))

(Where K is the public key and A is the block chain address resulting from the calculation)

By applying the calculated A value to the Base58Check encoding algorithm, it converts it into human readable characters using 58 characters and checksums, avoids confusion by not writing similar characters, So that no error occurs in the item.

The first user terminal 100 may include the address of the generated block chain 200 as metadata in the internal data of the file to be uploaded or uploaded.

In operation S230, the first user terminal 100 transmits a file hash value to the block chain 200 based on the block chain address, so that the file hash value is stored in the block chain 200. The first user terminal 100 may transmit the identification information of the file (e.g., file name, size, etc.) to the block chain 200 so that the corresponding information is further stored in the block chain 200.

The file hash value may be stored in each of the plurality of servers constituting the block chain 200. The file hash value is stored in each of the plurality of servers constituting the block chain 200 instead of the centralized server so that the integrity can be guaranteed and even if an error occurs in one of the servers, It is possible to improve the reliability of the forgery-alteration inspection process.

The first user terminal 100 may store identification information (e.g., IP address) of the first user terminal 100 in which the file is stored or identification information (e.g., IP address, etc.) may be further stored in the block chain 200. Such identification information can be used to determine whether the device distributing the file is a reliable device.

3 is a diagram showing a protocol used by the first user terminal 100 to register a file hash value in the block chain 200. The first user terminal 100 has a protocol Identification information of the device storing the file to be distributed and the like can be recorded in the MultiSig address 310 that can be utilized and the file hash value can be recorded in the OP_RETURN 320. [

4 is a flowchart illustrating a file forgery test method according to an exemplary embodiment of the present invention.

In step S410, the second user terminal 300 accesses the external device to download the file. The second user terminal 300 can access the external device through the network and download the file.

In step S420, the second user terminal 300 calculates a hash value of the downloaded file. The second user terminal 300 may apply the hash algorithm to the data in the file to calculate the hash value of the file.

In step S430, the second user terminal 300 checks whether the file is forged or not based on a result of comparison between the hash value of the file stored in the block chain 200 and the hash value of the downloaded file.

As an example, the second user terminal 300 obtains a block hash value from the metadata in the downloaded file, and retrieves the hash value of the file with the obtained block chain address to obtain the file hash value stored in the block chain 200 Can be obtained. Then, the obtained hash value is compared with the hash value calculated in step S420 to check whether the file is forged or not. The second user terminal 300 may transmit the block chain address and the identification information of the file to the block chain 200 to inquire the hash value registered in the block chain 200. [

As another example, the second user terminal 300 may obtain the block chain address from the metadata in the downloaded file, and transmit the hash value (and the identification information of the file) calculated in step S420 to the obtained block chain address The block chain 200 may compare the hash value of the pre-stored file with the hash value of the file received from the second user terminal 300, and may transmit the comparison result to the second user terminal 300.

If it is determined that the downloaded file is not forged, the second user terminal 300 may output a message to the user that the downloaded file is unreadable. On the other hand, if it is determined that the downloaded file is forged, The terminal 300 may output a message indicating that the file is forged or corrupted and may automatically delete the file.

According to the embodiment, the second user terminal 300 determines whether the external device distributing the file is a reliable device according to the comparison result between the identification information of the external device that downloaded the file and the identification information stored in the block chain 200 You can also authenticate.

As an example, the second user terminal 300 may inquire the identification information of the predetermined device from the block chain 200 based on the block chain address of the metadata in the downloaded file, It is possible to verify that the external device distributing the file is a legitimate device.

As another example, the second user terminal 300 may transmit the identification information of an external device that has distributed the file to the block chain address obtained from the metadata in the downloaded file, and the block chain 200 may identify the previously stored device And may compare the identification information received from the second user terminal 300 and transmit the comparison result to the second user terminal 300. [

If it is determined that the external device distributing the file is not valid, the second user terminal 300 displays a message on the screen indicating that the external device can not be trusted, and inquires whether the user is willing to download the file and use the file can do. The user of the second user terminal 300 can download the file even if the user can not trust the external device. Therefore, when the user selects to download the file and is willing to use the file, the second user terminal 300 downloads A hash value of a file and a hash value of a file registered in the block chain 200 may be compared to determine whether the file is forged or not. If the file is not forged, a message indicating that the file is available may be displayed on the screen. If the hash value of the downloaded file and the hash value of the file registered in the block chain 200 are different from each other even if the user selects to download the file and intends to use the file, It can be determined that the file is forged and the corresponding file can be deleted.

5 is a block diagram showing the configuration of a first user terminal 100 according to an embodiment of the present invention.

Referring to FIG. 5, a first user terminal 100 according to an embodiment of the present invention may include a memory 510, a hash value calculation unit 530, and a control unit 550. The memory 510, the hash value calculation unit 530, and the control unit 550 may be implemented with at least one processor and may operate according to a program stored in the memory 510.

The memory 510 may store a file that a user of the first user terminal 100 wants to distribute. In addition, the memory 510 may further store a program for calculating a hash value of the file.

The hash value calculation unit 530 calculates a hash value of a file to be distributed by the user.

The controller 550 generates a block chain address and registers the hash value of the file in the block chain 200 based on the generated block chain address. The control unit 550 may further register the identification information of the device to which the file is uploaded and the identification information of the file in the block chain 200. [

6 is a block diagram illustrating a configuration of a second user terminal 300 according to an embodiment of the present invention.

Referring to FIG. 6, a second user terminal 300 according to an exemplary embodiment of the present invention includes a memory 610, a communication unit 630, a hash value calculation unit 650, and a control unit 670. The memory 610, the communication unit 630, the hash value calculation unit 650, and the control unit 670 may be implemented by at least one processor and may operate according to a program stored in the memory 610.

The memory 610 stores a file downloaded from an external device via the communication unit 630. [ The memory 610 may further store a program for calculating the hash value of the file.

The hash value calculation unit 650 calculates the hash value of the downloaded file.

The control unit 670 checks whether the file is forged or not based on a result of comparison between the calculated hash value of the file and the file hash value stored in the block chain 200. The control unit 670 may display the forgery test result of the file on the display (not shown) of the second user terminal 300. [

In addition, the control unit 670 can authenticate the external device based on the comparison result between the identification information of the external device that downloaded the file and the identification information of the predetermined device stored in the block chain 200, Or may be displayed on the display of the terminal 300. [

Meanwhile, the embodiments of the present invention described above can be written in a program that can be executed in a computer, and the created program can be stored in a medium.

The medium may include, but is not limited to, storage media such as magnetic storage media (e.g., ROM, floppy disks, hard disks, etc.), optical reading media (e.g., CD ROMs,

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present invention as defined by the following claims. You will understand. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

100: first user terminal
510: memory
530: Hash value calculation unit
550:
200: Block Chain
300: second user terminal
610: Memory
630:
650: hash value calculation unit
670:

Claims (9)

A method for inspecting a file forgery with a user terminal,
Connecting to an external device via a network to download a file;
Calculating a first hash value of the downloaded file; And
Acquiring a block chain address using the downloaded file, inquiring a second hash value stored in a block chain based on the block chain address, and comparing the second hash value with the first hash value And checking whether the downloaded file is falsified or not.
delete The method according to claim 1,
The step of checking whether the forgery /
Transmitting the calculated first hash value to the block chain based on the block chain address; And
And receiving a result of the comparison between the first hash value and the second hash value from the block chain.
The method of claim 3,
The file forgery test method comprises:
And obtaining the block chain address recorded in the downloaded file.
The method according to claim 1,
The file forgery test method comprises:
Obtaining identification information of the external device; And
And comparing the identification information stored in the block chain with the obtained identification information to authenticate the external device.
A method for registering a file hash value by a user terminal,
Calculating a hash value of the file;
Generating a block chain address for registering the hash value based on a public key stored in the user terminal;
Storing the generated block chain address as metadata of the file; And
And storing the hash value of the calculated file and the identification information of the user terminal in a block chain based on the generated block chain address.
delete A communication unit for connecting to an external device via a network to download a file;
A hash value calculator for calculating a first hash value of the downloaded file; And
Acquiring a block chain address using the downloaded file, inquiring a second hash value stored in a block chain based on the block chain address, and comparing the second hash value with the first hash value And checking whether the downloaded file is falsified or not.
A hash value calculation unit for calculating a hash value of the file; And
The method comprising: generating a block chain address for registering the hash value based on a public key stored in a user terminal, storing the generated block chain address as meta data of the file, And a controller for storing the hash value of the file and the identification information of the user terminal in a block chain.

Images