KR102475530B1 - Security token management system with enhanced non-repudiation function - Google Patents

Abstract

A security-type token management system is disclosed. The present system includes: a plurality of network nodes disposed inside the blockchain-based network boundary, and managing the distributed ledger by mapping to at least one system disposed outside the network boundary; and a KSD system connected to a first network node among the plurality of network nodes and managing the total amount of issuance of an issuing entity which has issued at least one of electronic securities and security-type tokens. Accordingly, the issued amount of electronic securities and security-type tokens can be managed in an integrated manner.

Description

Security token management system with enhanced non-repudiation function {SECURITY TOKEN MANAGEMENT SYSTEM WITH ENHANCED NON-REPUDIATION FUNCTION}

The present invention relates to a security token management system with enhanced anti-repudiation function based on a block chain.

Recently, STO (Security Token Offering), which is a method of raising funds by issuing security tokens in compliance with existing securities-related laws or exemption regulations, has emerged as a new type of financing, mainly in the United States.

Security tokens play a role in connecting the traditional financial realm with the blockchain in terms of allocating assets that already exist in the existing market through tokens. Transactions must be made in

In the case of security tokens, there are advantages to pioneering the micro-investment market through asset division, lower cost of launch than IPO (Initial Public Offering), advantage of being able to be traded in a rapid trading environment, and exposure to the free market. It has advantages that can be secured.

However, the absence of technical standards and integrated platforms based on distributed ledgers for the issuance and distribution of domestic security tokens, as well as the lack of standards for linkage between the existing system and the distributed ledger network and the difficulty in verifying the total amount of token issuance, are a new market. It is an obstacle to raising corporate finance through creation.

Therefore, a method of integrating the total amount of electronic securities issued in the existing electronic securities market and the total amount of issuance in the STO market is required.

Furthermore, due to the problem that the anti-repudiation function for investors' investment-related actions is performed only outside the block chain, a method to improve this is needed.

The above description is merely for the purpose of providing background information related to an embodiment of the present invention, and the description does not necessarily constitute prior art.

Korean Patent Publication No. 10-2018-0074655 (published on July 3, 2018)

One object of the present invention to solve the above problems is to provide a security token management system that strengthens the non-repudiation function by recording investors' investment-related transactions on a block chain.

Another object of the present invention is to provide a security token management system that cancels registration of cryptocurrencies by deleting physical records of registered accounts linked to cryptocurrencies.

Another object of the present invention is to provide a system for integrally managing the total amount of issuance of electronic securities and security-type tokens.

Another object of the present invention is to provide a system that solves security vulnerabilities that are likely to occur due to centralized ledger management by using a blockchain-based distributed ledger.

The object of the present invention is not limited to the above-mentioned tasks, and other objects and advantages of the present invention not mentioned above can be understood by the following description and will be more clearly understood by the embodiments of the present invention. It will also be seen that the objects and advantages of the present invention may be realized by means of the instrumentalities and combinations indicated in the claims.

A security token management system according to an embodiment of the present invention is disposed inside a blockchain-based network boundary, and a plurality of network nodes that manage a distributed ledger by being mapped to at least one system disposed outside the network boundary, and the above It may include a KSD system that is connected to a first network node among a plurality of network nodes and manages the total amount of issuance of an issuing entity that has issued at least one of electronic securities and security-type tokens.

When receiving a request for issuance of a security token, the KSD system may be configured to transmit an issuance command to the first network node if the issuance request amount is within a preset total amount of issuance.

The distributed ledger includes a signature to prevent repudiation of an investor's investment, and the signature can be requested through a broker system outside the network boundary or the KSD system.

The means for solving the problems of the present invention are not limited to those mentioned above, and the means for solving other problems not mentioned above will be clearly understood by those skilled in the art from the description below.

According to various embodiments of the present invention, the total amount of electronic securities and security-type tokens issued by the issuing entity can be effectively managed.

The effects of the present invention are not limited to those mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below.

1 is a schematic diagram for explaining the configuration of a security token management system according to an embodiment of the present invention;
2 is a diagram for explaining a method of operating the security token management system shown in FIG. 1, and
3 is a sequence diagram illustrating the operation of a security token management system that provides an authentication and security process according to an embodiment of the present invention.

Hereinafter, the embodiments disclosed in this specification will be described in detail with reference to the accompanying drawings, but the same or similar elements are given the same reference numerals regardless of reference numerals, and redundant description thereof will be omitted. The suffixes "module" and/or "unit" for components used in the following description are given or used interchangeably in consideration of ease of writing the specification, and do not themselves have a meaning or role distinct from each other.

In addition, in describing the embodiments disclosed in this specification, if it is determined that a detailed description of a related known technology may obscure the gist of the embodiment disclosed in this specification, the detailed description thereof will be omitted. In addition, the accompanying drawings are only for easy understanding of the embodiments disclosed in this specification, the technical idea disclosed in this specification is not limited by the accompanying drawings, and all changes included in the spirit and technical scope of the present invention , it should be understood to include equivalents or substitutes.

Terms including ordinal numbers, such as first and second, may be used to describe various components, but the components are not limited by the terms. These terms are only used for the purpose of distinguishing one component from another.

It is understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, but other elements may exist in the middle. It should be. On the other hand, when an element is referred to as “directly connected” or “directly connected” to another element, it should be understood that no other element exists in the middle.

1 is a schematic diagram for explaining the configuration of a security token management system 1000 according to an embodiment of the present invention.

Security tokens are cryptographic tokens that represent tradable external assets. A security can be a fungible, negotiable financial instrument that holds any tangible monetary value. A security may represent an ownership position, a creditor relationship, or a right to ownership that appears as an option. Examples of securities include real estate, at least one commodity, personal property, at least one bond, at least one derivative, at least one futures, at least one fund, at least one currency fund, at least one exchange-traded fund, at least one mutual funds, at least one index fund, at least one bond fund, at least one commodity fund and/or at least one real estate fund. Each security token may represent a single stake in a company, and a security token may be implemented as a smart contract stored on a distributed ledger (eg, blockchain).

The security token management system 1000 includes KSD (Korea Securities Depository) system 100, broker system 200, securities company trading system 300, STO exchange system 400, cash token management system 500, financial supervision It may include the system 600, the KYC system 700, and the blockchain-based network (BCN). Since the above components are not essential components to configure the security token management system 1000, more components or fewer components may be included in the security token management system 1000.

The security token management system 1000 may manage security tokens based on a distributed ledger using a blockchain-based network (BCN). A distributed ledger refers to an electronic ledger that is distributed across a plurality of interconnected network nodes (such as NN1 to NN5), and the network nodes (NN1 to NN5) may store copies of the distributed ledger. As an optional or additional embodiment, network nodes may be applied more or less than the number shown.

Distributed ledgers may implement one or more blockchains to verify data stored in the distributed ledger. A blockchain may be a verifiable permanent ledger composed of one block at a time by attaching a proof-of-work seal (eg, hash) to each block that verifies the block, but the embodiment is not limited thereto. not. In a blockchain, the hash of the previous block is included in the current block, so the current hash goes back to the original genesis block through recursion and also verifies all previous blocks. When you insert a hash into the blockchain, you permanently record that hash, and that hash acts as a notary to verify the time-stamped proof-of-existence of the hashed data at the moment that block is added to the chain. can work

The systems (100 to 700) that want to use the blockchain-based network (BCN) outside of the blockchain-based network (BCN) use the door and channel provided by the integrated gateway (GW). However, the embodiment is not limited thereto. Each of the network nodes NN1 to NN5 of the blockchain-based network BCN may include one or more processors and memories. The meaning of external and internal of a blockchain-based network (BCN) may refer to a logical arrangement for distinction rather than a physical arrangement.

The KSD system 100 located outside of the blockchain-based network (BCN) is a system for maintaining integrity between the existing electronic stock market and the STO market, and can aggregate and manage the total amount of issuance of the existing stock market and security tokens. . As an alternative or additional embodiment, a part of the KSD system 100 may be deployed inside a blockchain-based network (BCN).

The KSD system 100 is an integrated gateway (GW ), it can be stored in a blockchain-based network (BCN).

The KSD system 100 checks the issuing entity's electronic securities and security token issuance limit and investor's limit, determines the issuance amount of the security token subject to the issuance request, and then, through the integrated gateway (GW), It can be stored on the network (BCN).

The KSD system 100 may provide recruitment information registration approval information to the broker system 200 and may receive securities issuance information from the financial supervisory system 600 . In addition, the KSD system 100 may provide investor account information to the securities company and may receive account validity information from the securities company. At this time, authentication and security processes including KYC (Know Your Customer), AML (Anti Money Laundray), and the like may be performed.

The KSD system 100 can fundamentally prevent market disruption such as double issuance or false issuance by performing a bridge role between the existing market and the virtual asset market and managing the total amount of issuance in an integrated manner.

The broker system 200 receives a recruitment request from the issuing entity, transmits various information to the KSD system 100, and receives subscription registration approval information from the investor, receives a subscription request from the KSD system 100, and can subscribe from the KSD system 100. By receiving information on whether or not, it is possible to transmit a notice on whether the subscription is available or not to the investor. The brokerage system 200 may notify the subscription margin management institution of the securities price. At this time, the broker system 200 may communicate with the blockchain-based network (BCN) using an API (Application Programming Interface) provided by the integrated gateway (GW).

At this time, the broker system 200 may request the investor to sign an anti-repudiation of investment that he will not deny in relation to the investment, and the broker system 200 receives the anti-repudiation signature from the investor (or the investor's terminal), and the KSD system (100) can be provided.

When the first node NN1 of the blockchain-based network (BCN) creates a block, the KSD system 100 may include an anti-repudiation signature in the corresponding block. The non-repudiation signature of the investment can be included in the transaction, and the block can be shared with nodes or blocks inside the blockchain-based network (BCN) and can be verified. Accordingly, processing errors or moral hazard of the agent system 200 can be prevented. As an optional embodiment, the broker system 200 may also generate a block within the blockchain-based network (BCN) through the integration gateway (GW) and the second node (NN2).

Accordingly, a signature can be recorded in the distributed ledger in the blockchain-based network (BCN) to prevent the denial of the investor's investment.

The securities company trading system 300 receives a request for sale (subscription) and a request for purchase (investment) of existing electronic securities and security tokens, and checks the consignment account and token issuance details in the blockchain-based network (BCN), Token transactions can be brokered.

The STO exchange system 400 is a system that monitors trading of security tokens similarly to a stock exchange system, and can provide transaction history information to a blockchain-based network (BCN) through an integrated gateway (GW).

The cash token management system 500 is a bank interlocking system and may include a virtual bank system having legal authority, and the virtual bank system may interwork with an existing financial network. When the cache token management system 500 receives a request for a cache token from the securities company trading system 300, the STO exchange system 400, etc., it exchanges the cache token, and through the integrated gateway (GW), the blockchain-based network ( BCN) can be stored within the distributed ledger.

The cache token management system 500 receives a request to delete the physical record when a physical record for a security token or cryptocurrency managed through a blockchain-based network (BCN) is stored in the cache token management system 500. can

When a deposit command is received through an existing financial network, the cash token management system 500 may deduct the corresponding amount from the requester's cash account and create a corresponding amount in the virtual request account.

The financial supervisory system 600 is a system that plays a role in regulating and monitoring securities, and can store necessary information in a blockchain-based network (BCN) through an integrated gateway (GW).

The KYC system 700 may be a system that is separate from or included in the integrated gateway (GW). The KYC system (700) can confirm “who is the subject of the action” and “if the funds are not used for money laundering”.

The KYC system 700 may transmit a security token and check whether a subject receiving the transfer matches a legal subject that actually exists. The KYC system 700 may perform an Anti Money Laundary (AML) process. The KYC system 700 can first verify the subject and then confirm whether the funds are donations to terrorist organizations or slush funds of politicians. This can be referred to as Combating Terrorism Financing (CTF).

All of the above-described systems 100 to 700 deployed outside the blockchain-based network (BCN) may include one or more processors and memories, but embodiments are not limited thereto.

The integrated gateway (GW) can provide identity verification and security processes for information disclosure or record requests from legacy institutions, record transactions, and use the resources of the blockchain-based network (BCN). A standard API can be provided for this, and an authentication process and non-repudiation process can be provided.

The integrated gateway (GW) provides an interface for moving information between Onledger (distributed ledger system) and Opledger (existing system), and provides a standardized interface so that external participants can easily use the distributed ledger service. can provide.

In addition, the integrated gateway (GW) may have a buffering function and a metabolism function. The buffering function is to perform not only essential security and pre-processing functions prior to distributed ledger recording, but also an intermediary function to prepare for an explosion in transactions. The metabolism function is to protect the transaction details between the details described in the distributed ledger and the transaction application details initially requested.

The security token management system 1000 may separately include a configuration for monitoring market disturbance behavior, and as an optional embodiment, the configuration may be located at the boundary of a blockchain-based network (BCN), and may be integrated as a gateway It can be performed through the framework of (GW).

The framework of the integrated gateway (GW) uses smart contracts that detect conditions for attempts to disrupt market order and manipulate stock prices, and when it detects the conditions, it takes market protection measures (e.g., sidecar in the stock market). can trigger

The security token management system 1000 may include a configuration for enabling the movement of assets by connecting gateways between distributed markets. As an optional embodiment, the configuration is provided through the framework of an integrated gateway (GW) It can be. Thus, exchange of securities and assets can be performed between markets where interoperability is not guaranteed.

The security token management system 1000 goes beyond simply storing transaction records, and since the transaction itself can be performed within the system, it can serve as an exchange.

In addition, the security token management system 1000 may set standard code issuance rules and issue standard codes according to the rules.

FIG. 2 is a diagram for explaining an operating method of the security token management system 1000 of FIG. 1 .

First of all, a plurality of network nodes (NN1 to NN5) may be placed inside the blockchain-based network (BCN) boundary. Here, the inside is intended to express that a plurality of network nodes NN1 to NN5 are arranged inside the boundary of the blockchain-based network (BCN) for conceptual explanation rather than the actual physical inside. Network boundaries can be managed by an integrated gateway (GW). An integrated gateway (GW) can be a door and a channel to enter a blockchain-based network (BCN). As an optional embodiment, the plurality of network nodes NN1 to NN5 may be implemented to include more nodes or fewer nodes.

A plurality of network nodes (NN1 to NN5) can be mapped to a system deployed outside the blockchain-based network (BCN) boundary to manage the distributed ledger.

For example, the first network node (NN1, KSD) may be mapped to the KSD system 100, the second network node (NN2, broker) may be mapped and / or connected to the broker system 200, and the third network Nodes NN3 and STO may be mapped and/or connected to the securities company trading system 300 and/or the STO exchange system 400. The fourth network node (NN4, Cash) may be mapped and/or connected to the cash token management system 500, and the fifth network node (NN5, financial supervision) may be mapped and/or connected to the financial supervision system 600. Alternatively, it may be connected, and the KYC system 700 may perform an authentication process and a security process in association with an integrated gateway (GW).

The KSD system 100 may be connected to the first network node NN1 and manage the total amount of issuance of an issuing entity that has issued at least one of electronic securities and security-type tokens. That is, the KSD system 100 can integrally manage security tokens as well as electronic securities. The KSD system 100 may determine the issuance amount of security tokens in consideration of an investor's limit.

The brokerage system 200 may request the issuance subscription process (S11) to the KSD system 100. As an optional embodiment, the broker system 200 may request the issuance subscription to the KSD system 100 through the integrated gateway (GW), and after determining whether the integrated gateway (GW) has requested a process within the authority, the KSD system ( 100) may request an issuance subscription (S11).

When the KSD system 100 receives the security token issuance request and the issuance request amount is within the total issuance amount, the issuance command may be transmitted to the first network node NN1 (S13).

The KSD system 100 may transmit a command for generating the first network node NN1 to the blockchain-based network (BCN) through the integrated gateway (GW) when the first network node NN1 is not created. have. Then, the blockchain-based network BCN may create a network node NN1.

The broker system 200 may communicate with the second network node NN2 inside the blockchain-based network (BCN) boundary. That is, the second network node NN2 may communicate with the broker system 200 outside the blockchain-based network BCN boundary. For example, the agency system 200 may request information disclosure to the second network node NN2 (S15). The second network node NN2 may connect or communicate with the first network node NN1, the third network node NN3, and the fifth network node NN5, and may manage a distributed ledger.

When the broker system 200 receives a request for registration of issuer information and a request for crowdfunding recruitment from an issuing subject, it can make a request to the KSD system 100 after confirming whether the process is within its authority through the integrated gateway (GW).

The broker system 200 may request an investor to sign an anti-repudiation of investment that he will not deny in relation to the investment, and the broker system 200 receives the anti-repudiation signature from the investor (or the investor's terminal) (S10), KSD system 100.

Accordingly, a block in the blockchain-based network (BCN) may include a signature for preventing denial of investment for each investment transaction, and the signature may be requested through a broker system outside the network boundary or the KSD system. .

Among the plurality of network nodes, the third network node NN3 may communicate with the security token exchange system 400 and the securities company trading system 300 outside the network boundary, and the transaction details from the security token exchange system 400 It can be configured to receive information. The security token exchange system 400 may be a Security Token Offering (STO) exchange system, but the embodiment is not limited thereto. The third network node NN3 may receive requests for various inquiry services from the securities company trading system 300 .

In addition, the securities company trading system 300 may place a trading order (S25) to the STO exchange system 400. The securities company trading system 300 may check the consignment account and token issuance details in the third network node NN3, and may mediate the token transaction.

The third network node NN3 is connected to each of the network nodes NN1, NN2, NN4, and NN5 of the block chain-based network BCN, and may manage the distributed ledger.

A fourth network node NN4 of the plurality of network nodes may communicate with the cache token management system 500 . The cash token management system 500 may include various financial systems including a banking system. When the cache token management system 500 receives a request for a cache token from the securities company trading system 300 or the STO exchange system 400 (S20), it may request token payment from the fourth network node NN4 (S21).

Among the plurality of network nodes, a fifth network node NN5 may communicate with the financial supervisory system 600 . The financial supervision system 600 may include various systems for managing and supervising finance and securities. The financial supervisory system 600 may receive or transmit various requests and information for regulation and monitoring (S23) to the fifth network node NN5.

The integrated gateway (GW) is located at the boundary of the blockchain-based network (BCN), and can process commands accessing the blockchain-based network (BCN) and transaction commands. The integrated gateway (GW) performs authentication and security processes and can provide a channel for accessing the blockchain-based network (BCN).

3 is a sequence diagram illustrating the operation of a security token management system that provides an authentication and security process according to an embodiment of the present invention.

Upon receiving the investor's account confirmation request, the brokerage system 200 may request the account confirmation to the brokerage trading system 300 through the KYC system 700 (S53).

The securities company trading system 300 may verify the corresponding account (S55), encrypt the personal information, and provide the encrypted personal information and account confirmation information to the brokerage system 200 through the KYC system 700. (S57).

At this time, the KYC system 700 may perform an authentication process (AML/CTF) before step S53 or after step S53 to identify the investor and certify the source of the investment (S51).

After confirming the investor account (S59), the brokerage system 200 may provide subscription information, encrypted personal information, and non-repudiation signatures for the investor's investment to the KSD system 100 (S61).

The KSD system 100 may provide subscription information, encrypted personal information, and hash information to the third network node NN3 and record them in the distributed ledger (S63).

Transactions in the distributed ledger may include investors' anti-repudiation signatures, and accordingly, the transaction broker's mistake or the execution of any transaction contract against the investor's will can be prevented.

The present disclosure described above can be implemented as computer readable codes in a medium on which a program is recorded. The computer-readable medium includes all types of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable media include Hard Disk Drive (HDD), Solid State Disk (SSD), Silicon Disk Drive (SDD), ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc. there is Also, the computer may include a processor of each device.

On the other hand, the program may be specially designed and configured for the present disclosure, or may be known and usable to those skilled in the art in the field of computer software. Examples of programs may include not only machine language codes generated by a compiler but also high-level language codes that can be executed by a computer using an interpreter or the like.

In the specification of the present disclosure (particularly in the claims), the use of the term "above" and similar indicating terms may correspond to both singular and plural. In addition, when a range is described in the present disclosure, as including the invention to which individual values belonging to the range are applied (unless otherwise stated), each individual value constituting the range is described in the detailed description of the invention Same as

Unless an order is explicitly stated or stated to the contrary for steps comprising a method according to the present disclosure, the steps may be performed in any suitable order. The present disclosure is not necessarily limited to the order of description of the steps. The use of all examples or exemplary terms (eg, etc.) in this disclosure is simply to explain the present disclosure in detail, and the scope of the present disclosure is limited due to the examples or exemplary terms unless limited by the claims. it is not going to be In addition, those skilled in the art can appreciate that various modifications, combinations and changes can be made according to design conditions and factors within the scope of the appended claims or equivalents thereof.

Therefore, the spirit of the present disclosure should not be limited to the above-described embodiments and should not be determined, and all ranges equivalent to or equivalently changed from the claims as well as the claims described below are within the scope of the spirit of the present disclosure. will be said to belong to

Claims (5)

As a security token management system,
A plurality of network nodes disposed inside a blockchain-based network boundary and mapped to at least one system disposed outside the network boundary to manage a distributed ledger; and
A KSD system connected to a first network node among the plurality of network nodes and integrally managing the total amount of issuance of an issuing entity that has issued at least one of electronic securities and security-type tokens;
A second network node among the plurality of network nodes communicates with a broker system outside the network boundary,
The KSD system,
When receiving a request for issuance of a security token, if the issuance request amount is within a preset total amount of issuance, configured to transmit an issuance command to the first network node;
The distributed ledger,
Include a signature to prevent the investor from repudiation of the investment;
The signature is requested through an agent system outside the network boundary or the KSD system,
The KSD system,
When the first network node is not created, a command for creating a first network node is transmitted to the blockchain-based network through an integration gateway;
The KSD system,
Determining the issuance amount of security tokens by checking the issuance limit of electronic securities and security tokens of the issuer and the limit of investors, and storing them in the blockchain-based network through an integrated gateway,
The KSD system,
providing solicitation information registration approval information to the brokerage system and receiving securities issuance information from the financial supervisory system;
The broker system,
A security token management system that notifies the subscription margin management institution of the securities price. delete According to claim 1,
At least some of the plurality of network nodes,
A security token management system configured to verify a signature to prevent repudiation of investments contained in the distributed ledger. According to claim 3,
A third network node of the plurality of networks communicates with a cache token management system;
If a physical record for a security token or cryptocurrency managed through the plurality of networks is stored in the cache token management system, the security token management system is requested to delete the physical record. According to claim 1,
The network boundary,
A security token management system configured to monitor market disruptive behavior through a gateway framework.

Images