KR102337836B1 - External information recognizing and information providing method using blockchain - Google Patents

Abstract

An embodiment of the present invention provides a data acquisition step of acquiring data from an information source existing outside of an Oracle blockchain network, a reliability determination step of determining the reliability of the data by verifying whether the information source is trusted, the data A block chain application comprising a parsing step of parsing the data, a data protection step of granting protection according to the type of data, and a storage step of storing the data storage details in an Oracle blockchain while storing the data in a distributed data storage By providing a method for recognizing external information and providing information, it is a two-way data exchange that brings data that exists outside of the Oracle blockchain into the inside of the Oracle blockchain and provides data stored inside the Oracle blockchain to the outside of the Oracle blockchain. In providing data, confidentiality, integrity, and privacy of information users can be guaranteed when exchanging data.

Description

External information recognizing and information providing method using blockchain}

The present invention relates to a method for recognizing and providing information external to a blockchain application.

Blockchain technology is a distributed ledger technology that stores and manages the ledger that records transaction details in a number of nodes. A block chain has a structure in which multiple transaction records are recorded in one block, and the previous block and the next block are connected as a chain. Blockchain technology is being applied in various fields based on the characteristic that it is difficult to forge or falsify records stored in the block chain. Difficult to forge or falsify information recorded on the blockchain means that it is difficult to modify information that has already been recorded, and problems may arise if incorrect information is initially recorded on the blockchain.

Blockchain technology can provide smart contract functions. Smart contract is a technology that creates an electronic contract document by programming the contents agreed upon by the contracting parties in advance, and automatically executes the contract when all the contract conditions are satisfied. If the contract terms of a smart contract are information that cannot be obtained from the blockchain network, it is necessary to obtain information from outside the blockchain. Since information outside the blockchain is difficult to modify once recorded in the blockchain, it is necessary to determine whether information outside the blockchain is reliable.

KR 10-2018-0102269 A

An object according to an embodiment of the present invention is to ensure the confidentiality and integrity of data when the Oracle blockchain exchanges information with an external system.

In addition, an object according to an embodiment of the present invention is to enable the Oracle block chain to exchange information with external systems, to secure information access paths, to verify external information providers, to ensure the privacy of users of acquired data and information, This is to provide a smart contract-type oracle framework that can provide data storage functions.

The method for recognizing and providing information external to a blockchain application according to an embodiment of the present invention includes a data acquisition step of acquiring data from an information source existing outside of an Oracle blockchain network, verifying whether the information source is trusted, A reliability determination step of determining the reliability of data, a parsing step of parsing the data, a data protection step of providing protection according to the type of data, and storing the data in a distributed data storage while storing the data in the Oracle blockchain It may include a storage step of storing it in the .

In addition, the method for recognizing and providing information external to a blockchain application according to an embodiment of the present invention includes a loading step of acquiring data requested from inside or outside the Oracle blockchain network from the distributed data storage, A protection change step of removing or changing the protection granted to data, a reconfiguration step of organizing the requested data into a required format based on the data supply request, and providing the requested data and setting the data provision details to the oracle block It may further include a providing step of storing in the chain.

In addition, in the method for recognizing and providing information external to a block chain application according to an embodiment of the present invention, it is determined whether the requested data exists in the distributed data storage by searching the data storage details, and The method may further include a request determination step of performing the loading step when data exists in the distributed data storage, and performing the data obtaining step when the requested data does not exist in the distributed data storage.

In addition, the reliability determination step includes a first determination step of determining whether the information source is trustworthy using the SSL certificate provided by the information source, and the information source obtained through the Whois service based on the domain of the information source. A second determination step of judging whether the information source is trusted by using domain registration information, and a delegated proof-of-stake method Oracle node voting with respect to whether the information source is trusted, and based on the Oracle node vote, the information source At least one of the third determination step of determining whether to trust the

In addition, in the method for recognizing and providing information and recognizing external information in a block chain application according to an embodiment of the present invention, when it is determined as an unreliable information source as a result of performing the reliability determination step, the unreliable information source is added to the source-blacklist. It may further include a source-blacklist adding step of adding .

In addition, in the method for recognizing and providing information external to a block chain application according to an embodiment of the present invention, in order to determine the reliability of a new node requesting to join the Oracle block chain network, the amount of increase per unit time of the new node is a reference value. If it exceeds, the new node joins for a set period of time and if there is an oracle block created in the new node, it is judged as an untrusted node, blocks the joining, and is added to the node-blacklist, and the new node The node-blocking when included in the blacklist may further include an Oracle node reliability determination step.

In addition, the oracle blockchain network is composed of a plurality of oracle nodes, and the oracle node includes an enclave that operates at least a part of the oracle blockchain program code, and the oracle node reliability determination step in the enclave; An oracle block generation consensus process can be performed.

In addition, the data protection step may be to anonymize or delete information corresponding to personal information from the data, or perform de-identification of categorizing or total processing only necessary data, and encrypting the de-identified data if necessary. .

The features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings.

Prior to this, the terms or words used in the present specification and claims should not be construed in a conventional and dictionary meaning, and the inventor may properly define the concept of a term to describe his invention in the best way. Based on the principle that there is, it should be interpreted as meaning and concept consistent with the technical idea of the present invention.

According to one embodiment of the present invention, it is possible to provide a two-way data exchange that brings data existing outside of the Oracle blockchain into the inside of the Oracle blockchain and provides data stored inside the Oracle blockchain to the outside of the Oracle blockchain. can

In addition, according to an embodiment of the present invention, data confidentiality, integrity, and privacy of information users can be guaranteed during data exchange.

In addition, according to an embodiment of the present invention, it is possible to provide a smart contract oracle that can perform data acquisition, storage, processing, and scheduling for access to various external data in the Oracle blockchain network.

In addition, according to an embodiment of the present invention, various mainnet connectors and dApps can be serviced, and a service that gives reliability to data can be provided.

1 is a diagram illustrating an Oracle blockchain network performing a method for recognizing and providing information outside a blockchain application according to an embodiment of the present invention.
2 is a diagram showing each step of a method for recognizing and providing information in a block chain application external information according to an embodiment of the present invention.
3 is a diagram illustrating a framework structure of a program code for performing a method for recognizing and providing information outside a block chain application according to an embodiment of the present invention.
4 is a diagram illustrating a step of determining reliability of an information source according to an embodiment of the present invention.
5 is a diagram illustrating a node reliability verification step of a new node according to an embodiment of the present invention.

The objects, specific advantages and novel features of one embodiment of the present invention will become more apparent from the following detailed description and preferred embodiments taken in conjunction with the accompanying drawings. In the present specification, in adding reference numbers to the components of each drawing, it should be noted that only the same components are given the same number as possible even though they are indicated on different drawings. In addition, terms such as "one side", "the other side", "first", "second" etc. are used to distinguish one component from another component, and the component is limited by the terms no. Hereinafter, in describing an embodiment of the present invention, detailed descriptions of related known technologies that may unnecessarily obscure the gist of an embodiment of the present invention will be omitted.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an Oracle blockchain network 1020 that performs a method for recognizing and providing information outside a blockchain application according to an embodiment of the present invention.

The method for recognizing and providing information external to a block chain application according to an embodiment of the present invention may be performed in a plurality of oracle nodes 1030 constituting the oracle block chain network 1020 . The Oracle blockchain network 1020 performs a method of recognizing and providing information external to a blockchain application, and acquires data from an information source 1010 existing outside the Oracle blockchain network 1020 to provide a distributed data storage (1040). ), and upon receiving a data request, the data stored in the distributed data storage 1040 may be provided to the information user 1050 .

The Oracle blockchain network 1020 is a network in which a plurality of Oracle nodes 1030 are connected in a peer-to-peer (P2P, Peer to Peer) manner. The oracle blockchain network 1020 recognizes and provides information outside the blockchain application according to an embodiment of the present invention based on information processing between a plurality of oracle nodes 1030 and information processing of each oracle node 1030 method can be performed.

The Oracle node 1030 may include a communication unit 1031 , a control unit 1032 , and a storage unit 1033 . The Oracle node 1030 includes an information processing device such as a server computer, a PC, a notebook PC, a tablet PC, and a smart phone. The communication unit 1031 may transmit and receive data between the oracle node 1030 and another oracle node 1030 to connect the oracle block chain network 1020 . The storage unit 1033 may store all or part of the Oracle blockchain 1060 . The storage unit 1033 may store a program code for performing a method for recognizing and providing information external to a block chain application according to an embodiment of the present invention. The control unit 1032 may include a processor capable of executing a program code for performing a method for recognizing and providing information outside a block chain application according to an embodiment of the present invention.

The oracle block chain 1060 may be composed of a continuous connection of the oracle blocks 1060a including the hash value of the previous oracle block 1060a as a configuration of the own oracle block 1060a. The Oracle block 1060a includes a storage space for storing the hash value and data of the previous Oracle block 1060a. The Oracle blockchain 1060 is stored in a plurality of oracle nodes 1030 constituting the Oracle blockchain network 1020, respectively, and the Oracle blockchains 1060 stored in the plurality of oracle nodes 1030 have the same data. . A storage history 1061 and a provision history 1062 may be stored in the storage space of the Oracle block 1060a. The storage history 1061 may include the result of the storage process ( S1030 ) in which the Oracle blockchain network 1020 acquires, verifies, and stores data from the information source 1010 . The provision details 1062 may include the results of the provision process ( S1040 ) in which the Oracle blockchain network 1020 receives a data request to the information user 1050 and provides data.

The information source 1010 (Information source) is external to the Oracle blockchain network 1020 and refers to a device capable of providing data. The information source 1010 may include a web server, cloud storage, database, an external blockchain network other than the Oracle blockchain network 1020 according to an embodiment of the present invention (Ethereum, EOS, etc.), IoT devices, etc. have. The IoT device may be a composite IoT device that is connected to a shared resource and includes a lock function to allow or block a user's access, and a gateway module that can detect the presence of a person using the shared resource. The information source 1010 may be a payment institution that brokers financial services or may be various types of data providers. The Oracle node 1030 constituting the Oracle blockchain network 1020 may collect data by accessing the information source 1010 .

The information user 1050 refers to a subject who requests data required for the Oracle node 1030 constituting the Oracle blockchain network 1020 and receives and uses the requested data. The information user 1050 has various smart contract accounts (Accounts) operating inside the Oracle blockchain network 1020, and other blockchain networks (Ethereum, EOS, etc.) that exist outside the Oracle blockchain network 1020. , may include terminal devices of personal information users 1050 requesting data by accessing any Oracle node 1030 of the Oracle blockchain network 1020 .

The Oracle blockchain network 1020 may receive data from the information source 1010 . In addition, when receiving a data request from the information user 1050 , the Oracle blockchain network 1020 may provide the requested data to the information user 1050 . In this case, the information source 1010 and the information user 1050 may be the same object outside the Oracle blockchain network 1020 . That is, the information source 1010 may provide data to the Oracle blockchain network 1020, and the information source 1010 is an information user 1050 who requests data from the Oracle blockchain network 1020 when data is needed. may be For example, the Ethereum blockchain network may be an information source 1010 that provides data to the Oracle blockchain network 1020, and the Ethereum blockchain network requests the necessary information to the Oracle blockchain network 1020 and It may be an information user 1050 who receives necessary information from the Oracle blockchain network 1020 .

The distributed data storage 1040 is a data distributed storage system based on the Oracle blockchain 1060 . The distributed data storage 1040 divides the data into a plurality of pieces and stores them distributedly in the storage space of the nodes constituting the distributed data storage 1040, and the storage details 1061 and use of the data are stored in the Oracle blockchain 1060 ), a distributed storage method such as IPFS (Interplanetary File Storage), Corda, etc. may be used. The distributed data storage 1040 stores data received from the Oracle blockchain network 1020 and transmits data requested from the Oracle blockchain network 1020 .

2 is a view showing each step of a method for recognizing and providing information on a block chain application external information according to an embodiment of the present invention, Figure 3 is a block chain application external information recognition and information provision method according to an embodiment of the present invention It is a diagram showing the framework structure 1100 of the program code for performing the

As shown in FIG. 2 , the method for recognizing and providing information external to a block chain application according to an embodiment of the present invention obtains data from an information source 1010 existing outside of the Oracle block chain network 1020 . Data acquisition step (S1031), reliability determination step (S1032) of determining the reliability of data by verifying whether the information source 1010 is trustworthy, parsing step of parsing data (S1033), granting protection according to the type of data It may include a data protection step ( S1034 ) and a storage step ( S1035 ) of storing the data storage details 1061 in the Oracle blockchain 1060 while storing the data in the distributed data storage 1040 .

And, in the method for recognizing and providing information external to a block chain application according to an embodiment of the present invention, the data requested from inside or outside the Oracle block chain network 1020 is loaded from the distributed data storage 1040 Step S1041, a protection change step S1042 of removing or changing the protection granted to the requested data, a reconfiguration step of organizing the requested data into a required format based on the data supply request (S1043), and the requested data It may further include a providing step (S1044) of providing and storing the data provision details 1062 in the Oracle block chain 1060.

As shown in FIG. 3 , the access module 1110 includes an API 1111 , a Parser 1112 , an Malicious Oracle Node Prevention Algorithm 1113 , and a BFT Consensus Algorithm 1114 . The information source verification module 1120 includes an SSL certificate-based trust decision model 1121 , a Whois-based trust decision model 1122 , and a vote-based trust decision model 1123 . The data management module 1130 includes a scheduler 1131 , a de-identification algorithm 1132 , and an encryption unit 1133 . The Oracle smart contract module 1140 includes a data storage usage record smart contract 1141 and an Oracle blockchain network operation unit 1142 .

With reference to FIGS. 2 and 3, a method for recognizing external information and providing information in a blockchain application according to an embodiment of the present invention will be described.

First, in the data request receiving step (S1010), any Oracle node 1030 of the Oracle blockchain network 1020 receives a data request from the information user 1050 . The data request includes information on data required by the information user 1050, and may include whether data that only a predetermined information user 1050 should access. The data request may be received through the API 1111 of the access module 1110 . The API 1111 may utilize a Restful API or an SDK API. The API 1111 may be connected to the information source 1010 to receive data, and may be connected to the information user 1050 to provide a channel for requesting and receiving data.

Upon receiving the data request, the Oracle node 1030 performs a request determination step (S1020) of determining whether the requested data exists in the distributed data storage 1040. In the request determination step (S1020), it is determined whether the requested data exists in the distributed data storage 1040 by searching the data storage history 1061, and when the requested data exists in the distributed data storage 1040 A loading step S1041 is performed to start the providing process S1040, and a data acquisition step S1031 is performed to perform a storage process S1030 when the requested data does not exist in the distributed data storage 1040. carry out The storage process (S1030) is a process of acquiring data that does not exist in the distributed data storage 1040 and the Oracle blockchain network 1020 from the information source 1010 existing outside the Oracle blockchain network 1020. The providing process ( S1040 ) is a process of providing data existing in the distributed data storage 1040 to the information user 1050 .

In the request determination step (S1020), the Oracle node 1030 searches the storage history 1061 stored in the Oracle blockchain 1060 and determines whether the requested data matches the already stored data to determine whether the requested data exists can do. The storage history 1061 includes data type, name, name of the acquired information source 1010, protection granted content, acquisition time, reliability determination information of the information source 1010, and storage location information of the distributed data storage 1040 and the like. Since the storage history 1061 is stored in the Oracle blockchain 1060 stored in the storage unit 1033 of the Oracle node 1030, the request determination step (S1020) does not go through the consensus or verification process of the Oracle blockchain network 1020. can work without

If the requested data does not exist in the distributed data storage 1040, a storage process (S1030) is performed to bring the requested data into the Oracle blockchain network 1020. The data acquisition step (S1031) is to acquire data from the information source 1010 existing outside the Oracle blockchain network 1020. An applied data collection method may vary depending on the type of the information source 1010 . A data collection method may be different when the information source 1010 is an external blockchain network and an external device other than the blockchain network. For example, if the information source 1010 is an EOS blockchain network, the EOS blockchain network stores data in a table manner, so data is collected by reading the table, and the information source 1010 is an Ethereum block. In the case of a chain network, data can be collected using the View function provided by the Ethereum blockchain network. In this case, when the Oracle blockchain network 1020 acquires data from the information source 1010 , only data according to the request of the information user 1050 may be selectively collected.

The data acquisition step ( S1031 ) may be performed in such a way that the Oracle node 1030 receiving the data request accesses the data of the information source 1010 through the API 1111 . The oracle node 1030 searches whether the requested data exists in the information source 1010, and if the data exists, retrieves the data. The scheduler 1131 of the data management module 1130 may manage a schedule for collecting data to be regularly collected. The scheduler 1131 may operate a storage process ( S1130 ) to collect data when a predetermined time comes.

When data is retrieved from the information source 1010, a reliability determination step (S1032) is performed to determine the reliability of the data. In the reliability determination step (S1032), the Oracle blockchain network 1020 determines the reliability of the data provided by the information source 1010 by determining the reliability of the information source 1010 itself. The information source 1010 generates or receives the results performed, generated, or determined in the real world that exists outside the Oracle blockchain network 1020 in a data format that a computer device can recognize, and provides them, and the World Wide Web (WWW) ), etc., provides result data performed, generated, or determined in the network. Since the information source 1010 exists based on a physical computer device, the reliability of the information source 1010 can be determined by verifying information on a real subject providing information using the physical computer device. The reliability determination step (S1032) is a process of verifying information about the information source 1010 itself provided by the information source 1010 to the Oracle blockchain network 1020. That is, the reliability determination step (S1032) determines who the subject operating the information source 1010 is, whether the subject operating the information source 1010 exists, and whether the subject operating the information source 1010 can be trusted in the real world. It is judged whether the verification has been passed or not. The reliability determination step (S1032) may be omitted when it is determined that the information source 1010 is already reliable. The reliability determination step ( S1032 ) may be performed to determine the reliability of the information source 1010 again when a predetermined period has elapsed after it is determined that the information source 1010 is reliable.

If it is determined that the information source 1010 is reliable, a parsing step S1033 is performed. The parsing step (S1033) is to parse the data obtained from the information source (1010). The parsing step ( S1033 ) may be performed by the parser 1112 of the access module 1110 . The parser 1112 may analyze the data obtained from the information source 1010 and classify the data by detailed type. The parser 1112 may classify detailed data by applying various syntax analysis algorithms according to the type of data obtained from the information source 1010 . For example, when data "A to B 1000 EOS" is obtained from the information source 1010 of the EOS oracle block chain 1060, the parser 1112 reads "Serial number = XXX1", "Sender = A", " Recipient = B", "Amount = 1000", "Unit = EOS" can classify detailed data and determine the type of detailed data.

After parsing the data, a data protection step (S1034) is performed. The data protection step S1034 is to provide protection according to the data type. Since data contains personal information, it is necessary to protect privacy or to protect so that only the information user 1050 who requested the data can access it. Protections that can be granted to data include anonymization, categorization, aggregation, encryption, and the like.

Anonymization, categorization, and total processing may be performed through the de-identification algorithm 1132 of the data management module 1130 . Anonymization is the transformation or removal of some or all of the names of persons contained in data so that they cannot be recognized. For example, the name "Hong Gil-dong" can be partially changed to "Hong*dong", or all can be changed to "Customer 1". Total processing is to calculate the total amount when there are multiple values of a specific item. For example, if the number of transactions of “Hong*Dong” is “20/40/10”, the total number of transactions may be counted as “70”. Categorization is aggregation according to the range in which a particular value is included. For example, if the number of transactions of "Hong*Dong" is "13", it can be counted as "10 to 20", which is a predetermined range.

Encryption is to encrypt data so that only a predetermined information user 1050 can read the data. Encryption may be performed by the encryption unit 1133 of the data management module 1130 . Encryption may be performed by receiving the public key of the information user 1050 and encrypting data using the public key of the information user 1050 . Encryption may be performed by encrypting a symmetric key using the public key of the information user 1050, encrypting data using the symmetric key, and then storing or providing the encrypted symmetric key and data together. If personal information protection is unnecessary or data that can be disclosed, protection may not be granted in the data protection step ( S1034 ).

The data that has undergone the protection step is shared with the Oracle nodes 1030 constituting the Oracle blockchain network 1020 and agreed upon.

After performing the data protection step (S1034), the storage step (S1035) may be performed. The storage step ( S1035 ) is to store the data storage details 1061 in the Oracle blockchain 1060 while storing the data in the distributed data storage 1040 . In the data storage step (S1035), the operation of storing the data storage details 1061 in the Oracle blockchain 1060 may be performed according to the data storage usage record smart contract 1141 of the Oracle smart contract module 1140. The data storage usage record smart contract 1141 may perform an operation to store data in the distributed data storage 1040 and an operation to store the storage history 1061 in the Oracle blockchain 1060 . When the Oracle smart contract module 1140 performs an operation of providing data to the distributed data storage 1040 , the distributed data storage 1040 may store the received data.

The Oracle smart contract module 1140 may record and manage the storage history 1061 and the provision history 1062 . Oracle smart contract module 1140 defines a table therein for data management, records and manages all storage details 1061 and provision details 1062, and can update data storage and provision details. The storage history 1061 and the provision history 1062 are shared and verified by at least some Oracle nodes 1030 participating in the Oracle blockchain network 1020 according to a consensus algorithm such as BFT, and according to the agreement, the Oracle block 1060a can be stored in the storage space of

Data can have various sizes. Since it is difficult to store all data in the storage space of the Oracle block 1060a , the data may be stored in the distributed data storage 1040 . The distributed data storage 1040 may secure the integrity of the file by managing the storage of the file based on the block chain. The distributed data storage 1040 receives a data storage request from the Oracle blockchain network 1020 through the API 1111, selects a category suitable for the data, and then indexes the data, and stores the data in the distributed data storage 1040. After sharing with some of the nodes constituting its own blockchain network, it is recorded in the storage medium of the shared node.

When the requested data exists in the distributed data storage 1040 or when the storage step S1035 is performed, performing the providing process S1040 of providing the data corresponding to the requested data to the information user 1050 To perform a loading step (S1041). The loading step (S1041) is to acquire data requested from the inside or outside of the Oracle blockchain network 1020 from the distributed data storage 1040. Since the storage history 1061 includes information related to a location where data is stored in the distributed data storage 1040 , requested data can be obtained based on the storage history 1061 .

When the requested data is obtained in the loading step (S1041), a protection change step (S1042) is performed. The protection change step S1042 removes or changes the protection granted to the requested data. The protection change step S1042 may be performed using the de-identification algorithm 1132 or the encryption unit 1133 of the data management module 1130 . If de-identification or encryption protection is granted to data, the protection may be removed or changed according to a data request, and the data may be provided so that the information user 1050 can use the data. For example, if the data is encrypted using the public key of the information user 1050 , the data may be decrypted by receiving the private key of the information user 1050 . The protection change step S1042 may determine whether to remove or change protection according to data characteristics and data request contents.

If protection is removed or changed in the protection change step S1042, a reconfiguration step S1043 is performed. The reconstruction step is a process of reconstructing data parsed and stored in the distributed data storage 1040 into a data format based on a data request. The reconfiguration step may be performed in the parser 1112 of the access module. When the information user 1050 is another Oracle blockchain network 1020 , the transaction details stored in the distributed data storage 1040 can be processed into a data format that can be used in other Oracle blockchain networks 1020 . For example, when the transaction history stored in the distributed data storage 1040 is "Sender = A, Receiver = B, Amount = 1000, Unit = EOS", according to the data request, "A->B/1000/EOS" It can be reconstructed as one continuous data such as ".

When the reconfiguration step is performed, a provision step (S1044) of providing the reconstructed data to the information user 1050 is performed. The provision step (S1044) is to provide the requested data and to store the data provision details 1062 in the Oracle blockchain 1060. The provision step ( S1044 ) may be performed according to the data storage usage record smart contract 1141 of the Oracle smart contract module 1140 . As a result of performing the provision process (S1040) of finding and reading data from the distributed data storage 1040 and providing the data to the information user 1050, important data is provided in the storage space of the Oracle block 1060a as the provision history 1062. is saved The provision details 1062 may include the contents of the data request, the type, name, and format of the requested data, information of the information user 1050, protection removal or change contents, and the like.

As described above, by receiving the data request, determining whether the requested data exists in the distributed data storage 1040, and performing the storage process (S1030) and the provision process (S1040), Existing data can be recognized and provided to other oracle blockchain networks 1020. By performing this process, an embodiment of the present invention can service various mainnet connectors and dApps that can connect the block chain and block chain with each other, and provide reliability in data exchanged between block chains. We can provide services that grant

In performing the storage process ( S1030 ) and the providing process ( S1040 ), there is a difference in detailed execution steps according to the access authority of data. In the case of data that is open to the public, de-identification of the data is performed and encryption is not performed in the data protection step ( S1034 ) of the storage process ( S1030 ). That is, data is not encrypted so that it can be used, but de-identification is performed to protect personal information, etc. existing in the data. In the case of data that is not disclosed to the public and that only a specific information user 1050 should access, encryption is performed after de-identification in the data protection step (S1034) of the storage process (S1030). Data may be encrypted with the public key of the specific information user 1050 by using a public key/private key encryption method. Alternatively, encryption may be encrypted with the public key of a specific Oracle node 1030 and stored in the distributed data storage 1040 .

In the case of publicly available data, since it is not encrypted, the protection change step ( S1042 ) of the provision process ( S1040 ) may be omitted. In the case of data that is not disclosed to the public and only needs to be accessed by a specific information user 1050, the data can be decrypted by decrypting it with the private key of the specific Oracle node 1030 in the protection change step (S1042) of the storage process (S1030). have. Alternatively, when data is encrypted with the public key of a specific information user 1050 in the data protection step S1034 of the storage process S1030, the information user 1050 can recognize the data by decrypting it with his or her private key, so the protection is changed Decryption may not be performed in step S1042.

4 is a diagram showing the reliability determination step (S1032) of the information source 1010 according to an embodiment of the present invention.

As shown in FIG. 4 , the reliability determination step ( S1032 ) is a first determination step of determining whether the information source 1010 is trustworthy by using the SSL certificate provided by the information source 1010 , the information source 1010 . A second determination step of determining whether to trust the information source 1010 using domain registration information of the information source 1010 obtained through the Whois service based on the domain, and delegation of whether the information source 1010 is trustworthy It is a process of performing at least one of the third determination steps of determining whether the information source 1010 is trustworthy based on the Oracle node 1030 voting of the proof-of-stake method and the Oracle node 1030 voting. In the reliability determination step S1032, all of the first to third determination steps may be performed.

In the first determination step, it may be determined whether the information source 1010 is operated by a trusted subject using an SSL certificate provided in an HTTPS environment. Based on the SSL certificate, information such as the address, domain, and the like at which the information source 1010 operates can be recognized, and since the SSL certificate is authenticated by a CA (Certificate Authority), the operating subject of the information source 1010 is Reality can be acknowledged, and the information source 1010 can be trusted by trusting the certification authority.

In the second determination step, reliability is determined using domain registration information of the information source 1010 . The domain registration information includes information such as a domain name, a registrant address, a registrant email address, and an IP address, and may be obtained using a Whois search service that provides domain registration information. In the second determination step, it is checked whether the SSL certificate and the domain registration information are the same or related, whether the IP of the access IP and the domain registration information is the same or similar, and whether the domain nationality and the IP nationality are the same, and the trust of the information source 1010 can determine whether

In the third determination step, the Oracle nodes 1030 participating in the Oracle blockchain network 1020 may vote to determine the reliability of the information source 1010 . Voting can be done in a Delegated Proof of Stake (DPoS) method. When the third determination step is performed, the oracle nodes 1030 elect a member of the Oracle node 1030 to vote to determine the reliability of the information source 1010 . The member oracle node 1030 may be selected as an odd number such as 11, 21, or 99. When the SSL certificate information of the information source 1010, domain registration information, and information related to the requested data are shared with the elected member Oracle nodes 1030, the member Oracle nodes 1030 can trust the information source 1010. If a vote on whether or not there is more than the standard value in approval is received, the information source 1010 is trusted.

The reliability determination step (S1032) of the block chain application external information recognition and information provision method according to an embodiment of the present invention is determined as an unreliable information source (1010) as a result of performing the reliability determination step (S1032). - A source of adding the untrusted information source 1010 to the blacklist - may further include a blacklist addition step. If any one of the first to third determination steps is not passed, the corresponding information source 1010 is not trusted, and the unreliable information source 1010 is added to the source-blacklist. Since data obtained from the information source 1010 added to the source-blacklist is unreliable, data is collected from another information source 1010 . The information source 1010 registered in the source-blacklist may be deleted when a predetermined period elapses. If it has already passed the reliability determination step (S1032) and recognized as the reliable information source 1010, the data obtained from the information source 1010 can be trusted without performing the reliability determination step (S1032) for a predetermined period.

5 is a diagram illustrating a node reliability verification step of a new node according to an embodiment of the present invention.

Oracle nodes 1030 constituting the Oracle blockchain network 1020 may be added or removed. When a new node wants to join the Oracle blockchain network 1020, it is necessary to determine whether the node can be trusted. Oracle node reliability determination steps ( S1101 to S1106 ) may be performed when a new node requests to join the Oracle blockchain network 1020 . Oracle node reliability determination step (S1101 ~ S1106) is a process of permitting or blocking joining by determining the reliability of a new node requesting joining.

In the Oracle node reliability determination step (S1101 ~ S1106), in order to determine the reliability of the new node that has requested to join the Oracle blockchain network 1020, if the increase per unit time of the new node exceeds the reference value (Y in S1101), a predetermined period In the meantime, the new node stops joining (S1105), and if there is an oracle block 1060a already created in the new node (Y in S1102), it is judged as an untrusted node and blocks the joining (S1105) Node-blacklist In addition to (S1106), when the new node is included in the node-blacklist (Y of S1103), the joining can be blocked (S1105).

When a malicious oracle node 1030 attempts a so-called majority attack that distorts or forges data by making it occupy more than half or more than 66% of the total network servers, the number of new nodes increases rapidly. If the number of Oracle nodes 1030 or more is occupied by a majority, an attacker can obtain a benefit by swapping the Oracle blockchain 1060. In order to perform such an attack, a chain longer than the current main oracle blockchain 1060 must be created in advance before the new node joins the oracle blockchain network 1020. Therefore, if there is an oracle block chain 1060 created in advance at the time a new node wants to join, it should be regarded as a hacking attempt and the connection should be blocked (S1102). In order to prevent such a majority attack, the oracle blockchain network 1020 can control the new node increase rate (S1101), and a new node in which the pre-created oracle blockchain 1060 exists is determined as a malicious oracle node 1030 (S1102) to block the joining.

Organizations that have a history of attacking a sharp increase in the number of oracle nodes 1030 or a pre-storage oracle blockchain 1060 exist, or have a history of attacking in the past, such as Antminer, can be added to the node-blacklist. In addition, an authority added to the node-blacklist can block related IPs or domains.

A sudden increase in the number of new nodes is not a common phenomenon, and the sharp increase in the number of new nodes compared to the number of oracle nodes 1030 constituting the existing Oracle blockchain network 1020 is a malicious oracle node 1030. Since the possibility of joining increases, the joining of new nodes may be stopped for a predetermined period (S1105). Check whether the Oracle block 1060a exists in the storage unit 1033 of the new node (S1102), and if there is an Oracle block 1060a that has already been created and stored in the storage unit 1033, the Oracle block chain 1060 Since there is a possibility of compromising the health of the Oracle node 1030, it is determined that it is a malicious oracle node 1030 and can block joining. If it is determined as the malicious oracle node 1030, it can be added to the node-blacklist (S1106) to block the same new node from continuously making a join request. When a new node already included in the node-blacklist requests to join, the malicious node can be immediately blocked from joining.

The oracle blockchain network 1020 may consist of a plurality of oracle nodes 1030 . The Oracle node 1030 includes an enclave 1032a that operates at least a portion of the Oracle block chain program code, and the Oracle node reliability determination step (S1101 ~ S1106) and the Oracle block generation consensus process within the enclave 1032a can be performed. The control unit 1032 of the Oracle node 1030 may include an enclave 1032a. The enclave 1032a is an information processing space that is physically/softly separated from the control unit 1032 and cannot be accessed from the outside. In the enclave 1032a, all or part of the program code for performing the method for recognizing and providing information external to a block chain application according to an embodiment of the present invention may be performed. The program code operated in the enclave 1032a is reliable as it has not been forged or tampered with, and agreement between the oracle nodes 1030, verification of a transaction, etc. may be performed in the enclave 1032a.

Among the steps according to an embodiment of the present invention, the reliability determination step (S1032) of determining the reliability of the information source 1010, the Oracle node reliability determination step (S1101 ~ S1106) of determining whether to join a new node, data The storage step (S1035) of storing the distributed data storage 1040 and the providing step (S1044) of providing the data to the information user 1050 are performed between the Oracle nodes 1030 constituting the Oracle blockchain network 1020. This can be done through verification and consensus. Verification and agreement between the Oracle nodes 1030 constituting the Oracle blockchain network 1020 may be performed based on the program code included in the Oracle blockchain network 1020 operating unit 1142 .

The Oracle blockchain network 1020 can perform consensus or voting based on the Byzantine Fault Tolerance (BFT) algorithm. The Oracle blockchain network 1020 can perform consensus or voting in a distributed proof-of-stake (DPoS) method. When the reliability determination step (S1032) starts, the oracle nodes 1030 select the Oracle node 1030 of the member to vote (S1201). When information (such as an IP address) that can access the information source 1010 that has obtained data is shared between the member Oracle nodes 1030 (S1202), the member Oracle node 1030 is individually connected to the information source 1010 to perform the first or second judgment step, and share the result. If the information that can access the information source 1010 is not all shared with the member oracle node 1030, it can wait until it is shared (S1205). When the number of Oracle nodes 1030 determined to be reliable as a result of performing the first or second determination step is greater than the reference value (S1203), it may be determined that the information source 1010 is reliable (S1204). Alternatively, if the number of Oracle nodes 1030 determined to be reliable is less than the reference value (S1203), consensus or voting has failed, and it is determined that the information source 1010 is not reliable and may be recorded in the source-blacklist (S1206). . If the agreement fails, the shared data may be discarded (S1206).

In the same way, the Oracle node reliability determination steps (S1101 to S1106) may be performed. When the Oracle node reliability determination step (S1101 ~ S1106) starts, the Oracle nodes 1030 select the member Oracle node 1030 (S1201), and the member Oracle node 1030 determines the number of Oracle node 1030 joining requests per hour, It is determined whether there is a pre-created oracle block 1060a in the new node or whether it is a malicious node registered in the node-blacklist, and the result is shared (S1202), and the number of oracle nodes 1030 determined that the new node is reliable In more cases (S1203), a new node can be joined (S1204). If the number of oracle nodes 1030 determined that the new node is reliable is less than the reference value, it is determined that consensus or voting has failed (S1206), and the new node may be blocked from joining and the new node may be registered in the node-blacklist. The source-blacklist and node-blacklist can be shared.

The result of performing the storage process ( S1030 ) and the provision process ( S1040 ) is shared with the Oracle nodes 1030 and verified to be stored in the Oracle block 1060a as the storage history 1061 and the provision history 1062 . The oracle nodes 1030 may perform verification and agreement for generating the oracle block 1060a including the storage details 1061 or the provision details 1062 every predetermined time in a delegated proof-of-stake (DPoS) method.

As described above, according to an embodiment of the present invention, data existing outside the Oracle block chain 1060 is brought into the Oracle block chain 1060, and data stored inside the Oracle block chain 1060 is transferred to the oracle. It is possible to provide a two-way data exchange provided to the outside of the block chain 1060 .

In addition, according to an embodiment of the present invention, data confidentiality, integrity, and privacy of the information user 1050 can be guaranteed during data exchange.

In addition, according to an embodiment of the present invention, it is possible to provide a smart contract oracle that can perform data acquisition, storage, processing, and scheduling for access to various external data in the Oracle blockchain network 1020 .

Although the present invention has been described in detail through specific examples, it is intended to describe the present invention in detail, and the present invention is not limited thereto, and by those of ordinary skill in the art within the technical spirit of the present invention It will be clear that the transformation or improvement is possible.

All simple modifications or changes of the present invention fall within the scope of the present invention, and the specific scope of protection of the present invention will be made clear by the appended claims.

1010: information source
1020: Oracle Blockchain Network
1030: Oracle node
1031: communication department
1032: control unit
1032a: enclave
1033: storage
1040: Decentralized Data Storage
1050: information user
1060: Oracle Blockchain
1060a: Oracle Block
1061: save history
1062: Provided
1100: framework structure
1110: access module
1111: API
1112: parser
1113: Malicious Oracle Node Prevention Algorithm
1114: BFT consensus algorithm
1120: information source verification module
1121: SSL certificate-based trust judgment model
1122: Whois-based trust judgment model
1123: Voting-based trust judgment model
1130: data management module
1131: Scheduler
1132: De-identification algorithm
1133: encryption unit
1140: Oracle Smart Contract Module
1141: data storage usage history smart contract
1142: Oracle Blockchain Network Operations Department

Claims (8)

It involves the storage process of obtaining data from outside the Oracle blockchain network,
The storage process is
A data acquisition step of acquiring data from an information source existing outside the Oracle blockchain network;
a reliability determination step of determining reliability of the data by verifying whether the information source is trustworthy;
a parsing step of parsing the data;
a data protection step of granting protection according to the data type; and
A storage step of storing the data storage details in the Oracle blockchain while storing the data in distributed data storage,
The reliability determination step is
A first determination step of determining whether the information source is trusted by using the SSL certificate provided by the information source;
a second determination step of judging whether the information source is trusted by using the domain registration information of the information source acquired through the Whois service based on the domain of the information source; and
Outside the blockchain application, which performs at least one of the third judgment step of determining whether the information source is trusted or not, by conducting a delegated proof-of-stake method oracle node vote on whether the information source is trustworthy and determining whether the information source is trusted based on the Oracle node vote How to recognize and provide information. The method according to claim 1,
A providing process for providing data residing in the distributed data storage,
the providing process is performed after the storing process is performed;
The provision process is
a loading step of acquiring data requested by a data supply request received from inside or outside the Oracle blockchain network from the distributed data storage;
a protection change step of removing or changing protection granted to the requested data;
a reconfiguration step of organizing the requested data into a required format based on the data supply request; and
A method for recognizing and providing information outside of a blockchain application, comprising a providing step of providing the requested data and storing the data provision details in the Oracle blockchain. 3. The method according to claim 2,
Searching the data storage details to determine whether the requested data exists in the distributed data storage, performing the providing process if the requested data exists in the distributed data storage, and performing the requested data A method for recognizing and providing information external to a blockchain application, further comprising a request determination step of performing the storage process when it does not exist in the distributed data storage. delete The method according to claim 1,
When it is determined as an unreliable information source as a result of performing the reliability determination step, the source-blacklist addition step of adding the unreliable information source to the source-blacklist further comprises, external information recognition and information of a block chain application How to provide. The method according to claim 1,
In order to determine the reliability of the new node that has requested to join the Oracle blockchain network, if the increase per unit time of the new node exceeds the reference value, the new node stops joining for a predetermined period, and the oracle block created in the new node If the node exists, it is determined that it is an untrusted node, blocks the joining, and adds it to the node-blacklist, and further comprising an Oracle node reliability determination step of blocking the joining when the new node is included in the node-blacklist. , a method of recognizing and providing information outside of blockchain applications. The method according to claim 1,
The Oracle blockchain network consists of a plurality of oracle nodes,
The Oracle node is
A method for recognizing and providing information outside of a blockchain application, comprising an enclave that operates at least a part of the Oracle blockchain program code, wherein the Oracle node reliability determination step and the Oracle block generation consensus process are performed within the enclave. The method according to claim 1,
The data protection step is
In the above data, de-identification of anonymizing or deleting information corresponding to personal information or categorizing or totaling only necessary data, and encrypting the de-identified data if necessary, recognition of external information and HOW TO PROVIDE INFORMATION.

Images