KR102283953B1 - Apparatus and method for transmitting/receiving based on blockchain - Google Patents

Abstract

The present invention relates to a block chain-based data transmission and reception apparatus and method. According to an embodiment of the present invention, a block chain-based data transmission/reception apparatus and method can ensure data integrity and stability and reduce system load when transmitting and receiving data in a P2P network-based block chain system.

Description

Blockchain-based data transmission/reception device and method {APPARATUS AND METHOD FOR TRANSMITTING/RECEIVING BASED ON BLOCKCHAIN}

The present invention relates to a block-chain-based data transmission/reception apparatus and method, and more particularly, to a secure data transmission/reception apparatus and method for providing an encryption/decryption algorithm for protecting network packets in a P2P network method based on a block chain system.

The blockchain system is a P2P network-based system. In a P2P network, encryption/decryption algorithms and key distribution algorithms for network packet protection are installed and used by system builders or system service providers outside the scope of the blockchain system. However, as the blockchain system proceeds with cryptocurrency-based services, the secure data transmission/reception method has changed to an essential element in securing the stability of the entire blockchain system.

Accordingly, Bitcoin, the basis of the first-generation block chain cryptocurrency, applies Https for P2P communication, and at this time, a certificate for Https is not provided in the system. 2nd generation Ethereum provides the same method, and 3rd generation Hyperledger Fabric also applies Https, but provides a more advanced and secure method by providing certificate issuance in the system.

On the other hand, in the existing blockchain system, SSL/TLS method uses key sharing method for network packet security. In the SSL/TLS method, an encryption key is generated through a handshake process for secure message transmission, and the message is encrypted and decrypted using the generated session key. This is designed for a centralized system and generates excessive traffic in a blockchain system based on a P2P network. Excessive traffic creates a constraint on the expansion of the P2P network in the blockchain system by providing a decisive reason for delay in the decision (consensus) arrival time of the P2P network-based blockchain system. The method and procedure for reaching consensus starts by broadcasting a message from the representative server (node) to the remaining three participating servers (nodes). Each node verifies the received message and to change the state to the next step, adds the received message and its own information to compose a message and broadcasts it to the rest of the nodes. In this way, over the four-step rule, four nodes start broadcasting, and in the final step, if the number of final-step messages received from other nodes other than their own messages is 3 or more, it is considered as agreed and a block is created. and then quit At this time, since the data transmission method between each node is https, in order to send a single message, 11 (handshaking)+1 (message transmission) = 12 messages are exchanged effectively. Therefore, the SSL/TLS method is a high-security method designed for secure data transfer between a single server and multiple clients, and is suitable for a centralized network method, but is not suitable for a complete P2P network method aimed at by a block chain system. not.

Since the blockchain system provides block integrity and provides the Fault Tolerant Chaining method, the stability of data packets provided by the SSL/TLS method depends on the integrity of the block chain system and the security of the error-tolerant decision-making method. has no correlation In other words, there is no need to rely on the high stability of SSL/TLS method network packet transmission (based on P2P network) while putting a high load on the entire blockchain system. This can act as a hindrance to the performance of the P2P network-based blockchain system (consensus time, time to reach consensus within time, the maximum number of nodes to expand, etc.).

The background technology of the present invention is disclosed in Korean Patent Laid-Open No. 10-2018-0117124.

The present invention provides a block-chain-based data transmission/reception device and method that can ensure security and integrity by eliminating the possibility of data forgery and falsification by using block-chain information (sender address value) in a secure packet generation/verification method using data on a P2P network. to provide.

The present invention provides a block-chain-based data transmission/reception device and method that can reduce system load by protecting traffic generated in a P2P network in a simple and intuitive manner, thereby generating 1/12 lower traffic than before.

The present invention provides a block-chain-based data transmission/reception device and method capable of transferring data between homogeneous or heterogeneous block-chain systems.

According to one aspect of the present invention, there is provided a block chain-based data transmission and reception device.

According to an embodiment of the present invention, an input unit for generating a header unit with recipient information, an encryption module for generating an encrypted message by encrypting a transmission message with recipient information, a transceiver for transmitting and receiving an encrypted message, and a decryption for decrypting the encrypted message into recipient information according to an embodiment of the present invention It can contain modules.

According to another aspect of the present invention, there is provided a computer-readable recording medium in which a block chain-based data transmission/reception method and a computer program executing the same are recorded.

A block chain-based data transmission/reception method and recording medium according to an embodiment of the present invention includes the steps of configuring a header part with recipient information, generating a nonce that is an arbitrary value, extracting a nonce key using a key derivation algorithm from the nonce, and transmitting Encrypting the message to generate a cryptographic message, extracting the nonce key using a hash function and the hash value of the cryptographic message as a message authentication code, encrypting the nonce to generate a cryptographic nonce, encrypting the message authentication code It may include the step of generating an authentication code and transmitting the header part, the encryption nonce, the encryption message and the encryption authentication code.

A block chain-based data transmission/reception method and recording medium according to an embodiment of the present invention includes the steps of: receiving a header part, an encryption nonce, an encryption message and an encryption authentication code; decrypting the encryption authentication code to extract a message authentication code; extracting the nonce by decrypting the nonce, extracting the nonce key from the nonce using a key derivation algorithm, calculating a hash value of the nonce key and the encrypted message using a hash function; and comparing the hash value with the message authentication code.

According to an embodiment of the present invention, a block chain-based data transmission/reception apparatus and method protects traffic generated in a P2P network in a simple and intuitive manner when transmitting and receiving data in a P2P network-based block chain system, 1/12 compared to the existing method Low traffic can occur, reducing the system load.

According to an embodiment of the present invention, data integrity and stability are ensured by removing the possibility of data forgery and falsification of block chain information (sender address value) in a secure packet generation/verification method.

According to an embodiment of the present invention, the block chain-based data transmission and reception apparatus and method store the network name of the block chain system and the network address of the block chain system, so that data transfer between the same or heterogeneous block chain system is possible.

1 to 7 are diagrams for explaining an apparatus for transmitting and receiving data according to an embodiment of the present invention.
8 and 9 are diagrams for explaining a data transmission/reception method according to an embodiment of the present invention.
10 is an overall flowchart of a data transmission/reception method according to an embodiment of the present invention.

Since the present invention can have various changes and can have various embodiments, specific embodiments are illustrated in the drawings and will be described in detail through detailed description. However, this is not intended to limit the present invention to specific embodiments, and it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention. In describing the present invention, if it is determined that a detailed description of a related known technology may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Also, as used herein and in the claims, the terms "a" and "a" and "a" are to be construed to mean "one or more" in general, unless stated otherwise.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. do it with

1 to 7 are diagrams for explaining an apparatus for transmitting and receiving data according to an embodiment of the present invention.

Referring to FIG. 1 , the data transmission/reception device 10 reduces the load on the network while safely transmitting and receiving data based on a P2P network. The existing SSL/TLS method performs a key-sharing procedure to deliver an encrypted packet. The key sharing procedure is a method of transmitting an encryption packet at the end after generating 11 transactions between P2P for packet delivery. For example, when there are N peers, a total of (11+1) X N! As many data transfer issues occur. In particular, this transmission method unnecessarily generates excessive load in a blockchain system that has already secured stability. The data transmission/reception device 10 dynamically encrypts packets to ensure stability through one-time packet transmission and also reduces system load.

Referring to FIG. 2 , the data transmission/reception device 10 includes an input unit 100 , an encryption module 200 , a transmission/reception unit 300 , and a decryption module 400 .

The input unit 100 receives the recipient information 120 and the transmission message 150 . The input unit 100 generates the header unit 110 based on the recipient information 120 .

Referring to FIG. 3 , the header unit 110 manages information necessary for transmitting and receiving data. It includes receiver information 120 and sender information 130 , and further includes type information 140 .

The recipient information 120 includes a recipient address 121 and system information 123 to which the recipient address belongs. For example, in a blockchain system, the recipient address 121 may be the recipient's electronic wallet. The system information 123 is a network name of various blockchain systems. For example, the system information 123 may be Bitcoin, Ethereum, EOS, Hyper Ledger, or the like. In the existing heterogeneous blockchain system, it is impossible to transfer data between different types because the creation method of the electronic wallet is different. However, since the data transmission/reception device 10 stores the network name of the block chain system and the network address of the block chain system in the header unit 110 , data transfer between the same or heterogeneous block chain system is possible. In addition, in the blockchain system, not only P2P networks between nodes, but also data transfer and cryptocurrency transactions between nodes and electronic wallets are possible. In the current exchange, the inter-node propagation of electronic wallets, blocks, and transactions that are carried out through humans through a complex process can be propagated quickly without going through the exchange.

The sender information 130 includes a sender address 131 and system information 133 to which the sender address 131 belongs. The system information 133 is a network name of various blockchain systems. For example, the system may be Bitcoin, Ethereum, EOS, Hyper Ledger, etc.

The type information 140 is a type of data to be transmitted, such as an electronic wallet, a block, or a transaction.

Referring to FIG. 4 , as an example of data used when transmitting an actual network packet, the network name of the block chain system is included by including the address in the sender (From) and receiver (To) information.

Referring back to FIG. 2 , the input unit 100 transmits the recipient address 121 and the transmission message 150 to the encryption module 200 .

Referring to FIG. 5 , the encryption module 200 performs an encryption operation to secure the stability of data to be transmitted. The encryption module 200 includes a nonce generating unit 210 , a message encryption unit 220 , an encryption hash unit 230 , a nonce encryption unit 240 , and an authentication code encryption unit 250 .

The nonce generator 210 generates a nonce 211 upon receiving the transmission message 150 . The nonce 211 is an arbitrary value that is randomly generated whenever the sender transmits data. The nonce generator 210 extracts the nonce key 221 from the nonce 211 using a key derivation function (KDF). The generated nonce key 221 and the transmission message 150 are transmitted to the message encryption unit 220 .

The message encryption unit 220 generates an encrypted message 223 through the transmission message 150 using an encryption algorithm. In this case, the encryption key may be a nonsense key 221 and the encryption algorithm may be an AES128 algorithm. The message encryption unit 220 transmits the encryption message 223 and the nonce key 221 to the encryption hash unit 230 .

The cryptographic hash unit 230 applies the cryptographic message 223 and the nonce key 221 to the hash function to generate a message authentication code (MAC, 231). The encryption hash unit 230 transmits the message authentication code 231 to the nonce encryption unit 240 and the authentication code encryption unit 250 . The nonce encryption unit 240 encrypts the nonce 211 to generate an encryption nonce 241 . At this time, the encryption key is the message authentication code 231, and the encryption algorithm may use the AES 128 algorithm.

The authentication code encryption unit 250 encrypts the message authentication code 231 to generate an encryption authentication code 251 . In this case, the encryption key is the recipient address 121, and the encryption algorithm may use the AES 128 algorithm.

Referring to FIG. 6 , the transceiver 300 (refer to FIG. 2 ) transmits the header unit 110 generated by the input unit 100 and the secure packet unit 160 generated by the encryption module 200 to the recipient. The secure packet unit 160 includes an encryption nonce 241 , an encryption message 223 , and an encryption authentication code 251 . The transceiver 300 can transmit data to a heterogeneous block chain system without going through an exchange using the block chain system information of the header unit 110 .

Referring to FIG. 7 , the decryption module 400 includes an authentication code decryption unit 410 , a nonce decryption unit 420 , a decryption hash unit 430 , a verification unit 440 , and a message decryption unit 450 . The decryption module 400 decrypts the encrypted data transmitted from the transceiver 300 .

The authentication code decryption unit 410 extracts the message authentication code 231 by decrypting the encryption authentication code 251 received from the transceiver 300 . At this time, the decryption key is the recipient address 121 used as the encryption key. The authentication code decoding unit 410 transmits the decrypted message authentication code 231 to the non-number decoding unit 420 .

The nonce decryption unit 420 decrypts the encrypted nonce 241 to extract the nonce 211 . At this time, the decryption key is the message authentication code 231, for example, the nonce decryption unit 420 may decrypt it using the AES 128 algorithm.

The nonce decoding unit 420 extracts the nonce key 221 from the nonce 211 using the KDF algorithm. The nonce decryption unit 420 transmits the nonce key 221 to the decryption hash unit 430 .

The decryption hash unit 430 generates a hash value 431 using a hash function for the encryption message 223 and the nonce key 221 received from the transceiver 300 .

The verification unit 440 compares the hash value 431 with the message authentication code 231 and determines that the data is the same if the same. The verification unit 440 transmits the encrypted message 223 to the message decryption unit 450 when it is determined that the data is intact.

The message decryption unit 450 decrypts the encrypted message 223 with the nonce key 221 to extract the received message, that is, the transmission message 221 transmitted by the sender. For example, the message decoding unit 450 may decode the message using the AES 128 algorithm.

8 and 9 are diagrams for explaining a data transmission/reception method according to an embodiment of the present invention.

Referring to FIG. 8 , the data transmission/reception device 10 encrypts and transmits received data.

In step S810 , the data transmission/reception device 10 receives a transmission message 150 and recipient information 120 to be transmitted. Recipient information 120 includes information on the block chain system used by the recipient.

In step S820 , the data transmission/reception device 10 generates the header unit 110 including the receiver information 120 . The header unit 110 includes a recipient address 121 and system information 123 to which the recipient address belongs, a sender address 131 and system information 133 to which the sender address belongs, and further includes type information 140 .

In step S830, the data transceiver 10 generates a nonce 211, which is a random value.

In step S840, the data transmission/reception device 10 extracts the nonce key 221 from the nonce 211 using the KDF algorithm.

In step S850 , the data transmission/reception device 10 encrypts the transmission message 150 to generate an encryption message 223 . In this case, the data transceiver 10 may use the nonce key 221 as an encryption key and encrypt the transmission message 150 using the AES128 algorithm.

In step 860, the data transmission/reception device 10 extracts the message authentication code (MAC, 231) through the hash function of the nonce key 221 and the encrypted message 223.

In step S870, the data transceiver 10 encrypts the nonce 211 to generate the encrypted nonce 241. The encryption key used at this time may be the message authentication code 231, and the encryption algorithm may be the AES128 algorithm.

In step S880, the data transmission/reception device 10 encrypts the message authentication code 231 to generate the encryption authentication code 251. The encryption key used at this time may be the recipient address 121 and the encryption algorithm may be an AES128 algorithm.

In step S890 , the data transmission/reception device 10 transmits the generated header unit 110 , the encryption nonce 241 , the encryption message 223 and the encryption authentication code 251 together.

Referring to FIG. 9 , the data transmission/reception apparatus 10 decodes received data and extracts a received message.

When the recipient information of the header unit 110 matches the current user's information, the data transceiver 10 starts decoding the received data.

In step S910 , the data transmission/reception device 10 receives the encryption nonce 241 , the encryption message 223 , and the encryption authentication code 251 together with the header unit 110 .

In step S920, the data transmission/reception device 10 extracts the message authentication code 231 through the decryption operation of the encryption authentication code 251 using the current user's address information as a decryption key.

In step S930 , the data transmission/reception device 10 decrypts the encrypted nonce 241 to extract the nonce 211 . In this case, the decryption key may be the message authentication code 231 and the decryption algorithm may be an AES128 algorithm.

In step S940 , the data transceiver 10 extracts the nonce key 221 from the nonce 211 through the KDF algorithm.

In step S950 , the data transmission/reception device 10 extracts a hash value 451 from the nonce key 221 and the encrypted message 223 using a hash function.

In step S960, the data transmission/reception device 10 compares the hash value 451 with the message authentication code 231 to verify the integrity of the data. If the hash value and the message authentication code 231 are the same, the message is intact. In step S970, the data transmission/reception device 10 decrypts the encrypted message 223 to extract the received message. In this case, the data transceiver 10 may use the nonce key 221 as the decryption key and the AES128 algorithm as the decryption algorithm.

10 is a diagram schematically illustrating a data transmission/reception method according to an embodiment of the present invention.

In step S1011 , the data transceiver 10 generates a nonce 211 when recipient information and a message to be transmitted are input.

In step S1013 , the data transmission/reception device 10 generates a nonce key 221 using a key derivation function.

In step S1015 , the data transmission/reception device 10 encrypts the transmission message 150 with the nonce key 221 to generate an encryption message 223 . In this case, the encryption algorithm may be an AES128 algorithm.

In step S1017, the data transmission/reception device 10 extracts a hash value of the nonce key 221 and the encryption message 223 using a hash function. At this time, the extracted hash value is the message authentication code 231 .

In step S1019, when the data transmitting/receiving device 10 encrypts the nonce 211 and extracts the encrypted nonsense 241, the encryption key is the message authentication code 231 and the AES128 algorithm may be used.

In step S1021 , the data transmission/reception device 10 extracts the encryption authentication code 251 through encryption of the message authentication code 231 . At this time, the encryption key is the recipient address 121, and can be encrypted with the AES128 algorithm.

In step 1031 , the data transmission/reception device 10 includes a header unit 110 including recipient information 120 , a secure packet unit 160 including an encryption nonce 241 , an encryption message 223 , and an encryption authentication code 251 . ) in the form of sending and receiving.

In step S1051 , the data transmission/reception device 10 decrypts the received encryption authentication code 251 to extract the message authentication code 231 . In this case, the decryption key is the addressee address 121, and the decryption algorithm is an algorithm used for encryption and may be an AES128 algorithm.

In step S1053, the data transmission/reception device 10 decrypts the received encryption nonce 241 using the message authentication code 231 as a decryption key to extract the nonce 211. In this case, the decryption algorithm may be the AES128 algorithm used for encryption.

In step S1055, the data transceiver 10 generates a nonce key 221 using the nonce 211 as a key derivation algorithm.

In step S1057, the data transmission/reception device 10 obtains a hash value of the received encryption message 223 and the nonce key 221.

In step S1059, the data transmission/reception device 10 compares and verifies the hash value and the message authentication code 231 . If the hash value and the message authentication code 231 are the same in step S1059, data integrity is guaranteed.

In step S1061, if the hash value and the message authentication code 231 are the same, the received encrypted message 223 is decrypted using the nonce key 221 as the decryption key to extract the received message, that is, the sender's transmitted message 150. In this case, the decryption algorithm may be the AES128 algorithm used for encryption.

The data transmission/reception method may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer readable medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the computer software field. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floppy disks. - Includes magneto-optical media and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. In addition, the above-mentioned medium may be a transmission medium such as an optical or metal wire or waveguide including a carrier wave for transmitting a signal designating a program command, a data structure, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

So far, the present invention has been looked at focusing on the embodiments thereof. Those of ordinary skill in the art to which the present invention pertains will understand that the present invention can be implemented in a modified form without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the scope equivalent thereto should be construed as being included in the present invention.

10: data transceiver
100: input unit 110: header unit
120: recipient information 121: recipient address
123: system information of the recipient 130: information of the sender
121: sender address 123: sender's system information
140: type information 150: send message
160: secure packet unit 200: encryption module
210: nonce generator 211: nonce
220: message encryption unit 221: non-key
223: password message 230: password hash unit
231: message authentication code 240: nonce encryption unit
241: password nonce 250: authentication code encryption unit
251: password authentication code 300: transceiver
400: decryption module 410: authentication code decryption unit
420: nonce decoding unit 430: decoding hash unit
440: verification unit 450: message decoding unit

Claims (23)

A device for transmitting and receiving block chain-based data,
an input unit generating a header unit;
an encryption module for generating a secure packet part;
a transceiver unit for transmitting and receiving block chain-based data including the header unit and the safety packet unit; and
A decryption module for decrypting the received data,
The safety packet part
It contains a password nonce, a password message, and a password verification code.
The encryption module is
a nonce generator for randomly generating a random nonce and a nonce key whenever a transmission message is input;
a message encryption unit generating an encrypted message by encrypting the transmitted message;
a cryptographic hashing unit for generating a message authentication code using the cryptographic message and the nonce key;
a nonce encryption unit for generating an encryption nonce using the message authentication code; and
Comprising an authentication code encryption unit for generating a password authentication code by encrypting the message authentication code,
the header part
including recipient information and sender information;
The recipient information is
It contains the recipient address, which is the network address of the block chain system, and system information, which is the network name of the block chain system to which the recipient address belongs,
The sender information is
It contains the sender address, which is the network address of the block chain system, and system information, which is the network name of the block chain system to which the sender address belongs,
Transmitting and receiving data between heterogeneous blockchain systems with the system information
Blockchain-based data transceiver.
delete According to claim 1,
The nonce generating unit
A blockchain-based data transceiver that extracts a nonce key from a nonce using a key derivation function.
delete delete delete delete According to claim 1,
The decryption module
an authentication code decryption unit that decrypts the password authentication code and extracts the message authentication code;
a nonce decryption unit that decrypts the cryptographic nonce to extract the nonce and generates a nonce key;
a decryption hash unit for calculating a hash value of an encryption message and a nonce key using a hash function;
a verification unit comparing the hash value with the message authentication code; and
Comprising a message decryption unit for decrypting the encrypted message,
The nonce decoding unit
extracting the nonce key from the nonce using a key derivation function;
The verification unit
A block-chain-based data transmission/reception device that guarantees data integrity when the hash value and the message authentication code are the same.
delete delete delete delete In the block chain-based data transmission/reception method of a block-chain-based data transmission/reception device,
generating a header part;
generating a nonce that is a random value;
extracting a nonce key from the nonce;
generating an encrypted message by encrypting the transmitted message;
extracting a message authentication code from the nonce key and the encrypted message through a hash function;
generating an encryption authentication code by encrypting the message authentication code;
Comprising the step of transmitting the header part, the encryption nonce, the encryption message and the encryption authentication code,
the header part
including recipient information and sender information;
The recipient information is
It contains the recipient address, which is the network address of the block chain system, and system information, which is the network name of the block chain system to which the recipient address belongs,
The sender information is
It contains the sender address, which is the network address of the block chain system, and system information, which is the network name of the block chain system to which the sender address belongs,
A block-chain-based data transmission/reception method for transmitting and receiving data between heterogeneous block-chain systems using the system information.
delete delete delete A block-chain-based data transmission/reception device is a block-chain-based data transmission/reception method,
receiving the header part, the cryptographic nonce, the cryptographic message and the cryptographic authentication code;
extracting a message authentication code by decrypting the encryption authentication code;
extracting a nonce by decrypting the encrypted nonce;
extracting a nonce key from the nonce;
extracting a hash value of the nonce key and the encrypted message using a hash function; and
Comprising the step of verifying the integrity of the data by comparing the hash value and the message authentication code,
the header part
including recipient information and sender information;
The recipient information is
It contains the recipient address, which is the network address of the block chain system, and system information, which is the network name of the block chain system to which the recipient address belongs,
The sender information is
It contains the sender address, which is the network address of the blockchain system, and system information, which is the network name of the blockchain system to which the sender address belongs,
A block-chain-based data transmission/reception method for transmitting and receiving data between heterogeneous block-chain systems using the system information.
delete delete delete delete delete A computer program recorded in a computer-readable recording medium that executes the block chain-based data transmission/reception method of claim 13 or 17.

Images