KR102497076B1 - Computer device, method and computer program for providing fido biometric authentication security key based blockchain wallet service - Google Patents

Abstract

The present invention relates to a biometric authentication security system which uses a FIDO biometric authentication security key to provide a file management service, a blockchain electronic wallet service, etc. A technical objective of the present invention is to provide a biometric authentication security system which uses a FIDO user authentication method to strengthen security in the area of file management or virtual payment and alleviate the inconvenience of a conventional password-based user authentication method. According to the present invention, a computer device, a method, and a computer program can provide a file management service, a blockchain electronic wallet service, etc. based on a USB-type FIDO biometric authentication security key to use bioinformation of a user such as fingerprint information for user authentication of the user in corresponding services to allow user authentication with high security and convenience while resolving conventional inconvenience of having to individually remember IDs and passwords for user authentication.

Description

Computer device, method and computer program that provide blockchain electronic wallet service based on FIDO biometric authentication security key

The present invention relates to a biometric authentication security system utilizing a FIDO biometric authentication security key to provide a file management service, a blockchain electronic wallet service, and the like.

The FIDO (Fast IDentity Online) Alliance is a consultative body established to set FIDO technical standards, a user authentication method that replaces passwords in the online environment. are distributing Recently, a method for enhancing security through biometric authentication in the field of file management or virtual payment using the FIDO user authentication method has been studied.

Publication No. 10-2020-0067657 Registered Patent Publication No. 10-2044748

The technical problem to be solved by the present invention is to improve the inconvenience of the conventional password-based user authentication method and to enhance security in the field of file management or virtual payment. A biometric authentication security system that utilizes the FIDO user authentication method is to provide

As a means for solving the above-described technical problem, in a computer device providing a FIDO biometric authentication security key-based blockchain electronic wallet service according to some embodiments of the present invention, a memory configured to store instructions; And by executing the commands: registering the user's biometric authentication information provided through the FIDO biometric authentication security key, and generating the user's blockchain electronic wallet according to the user's identity authentication based on the biometric authentication information , The private key of the blockchain electronic wallet is stored in at least one additional storage, and the requestor's biometric authentication information is measured through the FIDO biometric authentication security key in response to the requester's transaction request for the blockchain electronic wallet, , A processor configured to transmit the private key stored in the at least one additional storage to a blockchain network together with the transaction request when the measured biometric authentication information of the requestor and the registered user biometric authentication information match. ; There is provided a computer device that provides a blockchain electronic wallet service based on a FIDO biometric authentication security key, including a.

As a means for solving the above-described technical problem, a FIDO biometric authentication security key-based blockchain electronic wallet service performed by a processor executing instructions stored in memory in a computer device according to some embodiments of the present invention is provided. In the method, registering the user's biometric authentication information provided through the FIDO biometric authentication security key; generating a blockchain electronic wallet of the user according to the authentication of the user based on the biometric authentication information; storing the private key of the blockchain electronic wallet in at least one additional storage; Measuring the biometric authentication information of the requestor through the FIDO biometric authentication security key in response to the requestor's transaction request for the blockchain electronic wallet; and transmitting the private key stored in the at least one additional storage to the blockchain network together with the transaction request when the measured biometric authentication information of the requestor and the registered user biometric authentication information match. A method for providing a blockchain electronic wallet service based on a FIDO biometric authentication security key is provided.

As a means for solving the above-described technical problem, a computer program stored in a computer-readable storage medium to implement a method of providing a FIDO biometric authentication security key-based blockchain electronic wallet service according to some embodiments of the present invention The computer program instructions, when executed, cause a processor to: register biometric authentication information of a user provided through the FIDO biometric authentication security key; generate a blockchain electronic wallet of the user according to the user's identity authentication based on the biometric authentication information; store the private key of the blockchain electronic wallet in at least one additional storage; Measure biometric authentication information of the requestor through the FIDO biometric authentication security key in response to the requestor's transaction request for the blockchain electronic wallet; and when the measured biometric authentication information of the requestor and the registered user's biometric authentication information match, the private key stored in the at least one additional storage is transmitted to the blockchain network along with the transaction request. program is provided.

According to the computer device, method and computer program according to the present invention, a file management service and a blockchain electronic wallet service based on a USB type FIDO biometric authentication security key can be provided, so that the user's identity authentication in the corresponding services For this, user's biometric information such as fingerprint information is utilized, and user authentication with high convenience and security can be achieved while eliminating the inconvenience of having to individually remember ID and password for user authentication in the prior art.

1 is a diagram for explaining elements constituting a user authentication system based on a FIDO biometric authentication security key according to the present invention.
2 is a diagram for explaining elements constituting a computer device according to the present invention.
3 is a diagram for explaining the structure of a USB type FIDO biometric authentication security key according to the present invention.
4 is a diagram for explaining a process of registering user's biometric information using a FIDO biometric authentication security key according to the present invention.
5 is a diagram for explaining a file management service based on a FIDO biometric authentication security key according to the present invention.
6 is a diagram for explaining a blockchain electronic wallet service based on a FIDO biometric authentication security key according to the present invention.
7 is a diagram for explaining steps constituting a method for providing a file management service based on a FIDO biometric authentication security key according to the present invention.
8 is a diagram for explaining steps constituting a method for providing a blockchain electronic wallet service based on a FIDO biometric authentication security key according to the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The following description is only for specifying the embodiments, and is not intended to limit or limit the scope of rights according to the present invention. What a person skilled in the art can easily infer from the detailed description and examples of the present invention should be construed as belonging to the scope of the present invention.

The terms used in the present invention have been described as general terms widely used in the technical field related to the present invention, but the meanings of the terms used in the present invention are the intentions of technicians working in the field, the emergence of new technologies, examination standards or precedents. etc. may vary. Some terms may be arbitrarily selected by the applicant, and in this case, the meanings of the arbitrarily selected terms will be described in detail. Terms used in the present invention should be interpreted as meanings reflecting the overall context of the specification, not just dictionary meanings.

Terms such as 'consisting' or 'comprising' used in the present invention should not be construed as necessarily including all of the components or steps described in the specification, and if some components or steps are not included, and when additional components or steps are further included, it should also be construed as intended from the term.

Terms including ordinal numbers such as 'first' or 'second' used in the present invention may be used to describe various components or steps, but the components or steps should not be limited by ordinal numbers. . Terms containing ordinal numbers should only be construed to distinguish one component or step from other components or steps.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. A detailed description of matters widely known to those skilled in the art will be omitted.

1 is a diagram for explaining elements constituting a user authentication system based on a FIDO biometric authentication security key according to the present invention.

Referring to Figure 1, the user authentication system 10 based on the FIDO biometric authentication security key 100 is a FIDO biometric authentication security key 100, a computer device 200, a blockchain network 300, a FIDO online server ( 400) and a mobile device 500.

The user authentication system 10 means a system for providing a file management service 11 and a blockchain electronic wallet service 12 by performing user authentication based on the FIDO biometric authentication security key 100 can Elements constituting the user identification system 10 may exchange data with each other by wire or wirelessly.

For example, the FIDO biometric authentication security key 100 of the USB type can be connected to the computer device 200 to perform data transmission and reception, and the computer device 200 can use wireless devices such as LTE, 5G, WLAN, WiFi, Bluetooth, etc. It can communicate with the blockchain network 300, the FIDO online server 400 and the mobile device 500 in a data communication method.

The user authentication system 10 may be a FIDO file management system that provides a file management service 11 based on the FIDO biometric authentication security key 100, or a block chain based on the FIDO biometric authentication security key 100 It may be a FIDO electronic wallet system that provides an electronic wallet service (12).

In the case of the FIDO file management system, file management including file locking settings and file hiding settings may be performed in the computer device 200 based on biometric authentication through the FIDO biometric authentication security key 100. In the case of the FIDO electronic wallet system, based on biometric authentication through the FIDO biometric authentication security key 100 and additional authentication through the FIDO online server 400 and mobile device 500, in the blockchain network 300 E-wallet transactions can be performed.

For example, the FIDO biometric authentication security key 100 may refer to a USB type fingerprint authentication security key as shown in FIG. 3 to be described later. However, it is not limited thereto, and other types of portable storage other than the USB type and biometric authentication methods other than fingerprint authentication methods may be applied to the FIDO biometric authentication security key 100. Computer device 200 may be an electronic device that includes a general-purpose memory and processor.

The blockchain network 300 may refer to a virtual currency/cryptocurrency network for registering the user's blockchain electronic wallet address and recording electronic wallet transactions in the FIDO electronic wallet system. The FIDO online server 400 may refer to a cloud server or server device to which the FIDO user authentication framework is applied, and may be utilized for synchronization of data required for FIDO user authentication. The mobile device 500 may refer to a smartphone or tablet PC carried by the user, and may be used for synchronization of data required for FIDO user authentication in the sense of data backup.

2 is a diagram for explaining elements constituting a computer device according to the present invention.

Referring to FIG. 2 , a computer device 200 may include a memory 210 and a processor 220 . However, it is not limited thereto, and components such as other general-purpose elements, for example, input devices such as keyboards or mice, output devices such as monitors or display panels, and communication modules for wired/wireless data communication, are included in the computer device 200. More may be included.

The computer device 200 may be an electronic device for providing a file management service 11 based on the FIDO biometric authentication security key 100 or a blockchain electronic wallet service 12 based on the FIDO biometric authentication security key 100 there is. The computer device 200 is a desktop PC, workstation, server device, etc. for executing a computer program or mobile application that implements the system 10 providing the file management service 11 or the blockchain electronic wallet service 12. It can be a computing device.

The memory 210 may have a structure for storing various commands or data processed by the computer device 200 . For example, the memory 210 is a non-volatile memory such as ROM, PROM, EPROM, EEPROM, flash memory, PRAM, MRAM, RRAM, FRAM, or the like, or a volatile memory such as DRAM, SRAM, SDRAM, PRAM, RRAM, or FeRAM. It may be implemented, and may be implemented in the form of HDD, SSD, SD, Micro-SD, etc., or a combination thereof.

The processor 220 may have a structure for performing processing processes required for the operation of the computer device 200 . The processor 220 may be implemented as an array of multiple logic gates or a general-purpose microprocessor for processing various operations inside the computer device 200, and may be composed of a single processor or a plurality of processors. For example, the processor 220 may be implemented in the form of at least one of a microprocessor, CPU, GPU, and AP.

In relation to the file management service 11, the processor 220 will be configured to register the user's biometric authentication information provided through the FIDO biometric authentication security key 100 by executing instructions stored in the memory 210. can

For example, the user of the file management service 11 may provide his/her fingerprint information through a USB type FIDO biometric authentication security key 100, and the fingerprint information is the user's biometric authentication information, and the computer device 200 may be stored in the memory 210 of or other storage device. The stored fingerprint information may be registered as user's biometric authentication information.

In relation to the file management service 11, the processor 220 executes instructions stored in the memory 210 to set the scope of file access authority for management target files according to whether the user authenticates himself or not. It can be configured to perform permission restriction settings.

For example, if the user's identity authentication is performed, all files to be managed are set to be accessible, and if the user's identity authentication is not performed, the files to be managed are provided in a locked state, making them inaccessible, or set to be provided in a hidden state. It can be. Permission restriction settings for such managed files may be performed for individual files or specific folders.

In relation to the file management service 11, the processor 220, by executing the instructions stored in the memory 210, the FIDO biometric authentication security key 100 in response to the requestor's request for access to the management target files It may be configured to measure the biometric authentication information of the requestor through the.

If there is a request for access to management target files after permission limit setting is performed, it may be determined whether the requester making the access request is the same person as the user who performed permission limit setting through biometric authentication information registration. To this end, biometric authentication information of the requestor may be measured through the FIDO biometric authentication security key 100.

In connection with the file management service 11, the processor 220 executes instructions stored in the memory 210 to determine the identity of the measured requester's biometric authentication information and the registered user's biometric authentication information. It may be configured to determine whether or not to authenticate the user.

For example, when the fingerprint authentication information of the registered user and the fingerprint authentication information of the measured requester are compared, and the matching rate between the two exceeds a critical value, for example, 99%, it is determined that the requestor and the user are the same person, and authentication is performed. this can be completed. In addition to the method using the exemplified threshold value, the identity determination may be performed in another appropriate method.

In relation to the file management service 11, the processor 220 executes commands stored in the memory 210 to manage target files within the range set by the authority restriction setting based on whether or not the user authenticates himself. can be configured to restrict access to

For example, when the user's identity authentication is completed, access to management target files may not be restricted, and thus access to all management target files that are locked or hidden may be allowed. . On the other hand, if the user's identity authentication is not completed, access to managed files that are locked or hidden may not be allowed, so the managed files may not be executed/deleted/moved/copied, It may not be displayed on the computer device 200.

According to the above file management service 11, sensitive or important files can be set as files to be managed, and access rights to them can be limited using the FIDO biometric authentication security key 100, so conventional user authentication While resolving the inconvenience of requiring an ID and password for the purpose, it may be possible to perform simple and safe self-authentication through the FIDO biometric authentication security key (100).

In relation to the blockchain electronic wallet service 12, the processor 220 executes instructions stored in the memory 210 to register the user's biometric authentication information provided through the FIDO biometric authentication security key 100 can be configured.

In a manner similar to that in the file management service 11, the user may provide his/her fingerprint information through the USB-type FIDO biometric authentication security key 100, and the fingerprint information is the user's biometric authentication information, and the computer device 200 ) of the memory 210 or other storage devices. The stored fingerprint information may be registered as user's biometric authentication information.

In relation to the blockchain electronic wallet service 12, the processor 220 executes instructions stored in the memory 210 to generate a user's blockchain electronic wallet according to the user's identity authentication based on biometric authentication information. can be configured to

When the user's identity is authenticated through the FIDO biometric authentication security key 100, a new blockchain electronic wallet is created and the electronic wallet address can be distributed and registered in the blockchain network 300. When a blockchain electronic wallet is created, a pair of private key and public key for a transaction may be generated, the private key may be stored in the computer device 200 and the public key may be distributed to the blockchain network 300.

Regarding the blockchain e-wallet service 12, the processor 220 may be configured to store the private key of the blockchain e-wallet in at least one additional storage by executing instructions stored in the memory 210. .

For example, the private key may be additionally stored in at least one additional storage such as the FIDO online server 400 or the mobile device 500. The private key stored in at least one additional storage may be used for the purpose of additional authentication to strengthen user authentication, or to synchronize and retrieve the public key stored in the computer device 200 when it is lost. can be used for a purpose.

In relation to the blockchain electronic wallet service 12, the processor 220 executes instructions stored in the memory 210, thereby generating a FIDO biometric authentication security key 100 in response to a requester's transaction request for the blockchain electronic wallet. ), it may be configured to measure the biometric authentication information of the requestor.

When there is a transaction request for a blockchain electronic wallet, the biometric authentication information of the requestor can be measured through the FIDO biometric authentication security key 100 to confirm whether the requestor is the same person as the user. Biometric authentication information through the FIDO biometric authentication security key 100 may correspond to a primary authentication requirement for a transaction request.

In connection with the blockchain electronic wallet service 12, the processor 220 executes instructions stored in the memory 210, so that when the measured requester's biometric authentication information and the registered user's biometric authentication information match, at least It can be configured to pass the private key stored in one additional storage to the blockchain network 300 along with the transaction request.

When the biometric authentication information of the requester and the user match, for example, when the matching rate of the fingerprint authentication information exceeds a predetermined threshold and is determined to be the same person, as described above, the second authentication requirement may be proceeded. The secondary authentication requirement may mean whether the private key is stored in at least one additional storage. That is, if the private key is not delivered to the blockchain network 300, the transaction request may be rejected. Along with the transaction request, if the private key is delivered to the blockchain network 300 in at least one additional storage, the transaction request is approved and the transaction in the blockchain electronic wallet, such as transfer, sale, exchange, or Multiple runs may be performed.

According to the above blockchain electronic wallet service 12, the high level of identity authentication required for transactions in the blockchain electronic wallet is primarily achieved by replacing the conventional password method through the FIDO biometric authentication security key 100 Secondarily, since the procedure for verifying the private key can be performed in at least one additional storage such as the FIDO online server 400 or the user's mobile device 500, the identity authentication of the blockchain electronic wallet is highly convenient and security.

3 is a diagram for explaining the structure of a USB type FIDO biometric authentication security key according to the present invention.

Referring to Figure 3, the structure of the USB type FIDO biometric authentication security key 100 may be shown. A separate microcontroller unit MS500 (110) may be mounted on the USB type FIDO biometric authentication security key (100).

The FIDO biometric authentication security key 100 may be configured to measure biometric authentication information. For example, biometric authentication information may include fingerprint information. However, this is only an example, and biometric authentication such as facial recognition, iris information, and vein recognition may be used in addition to fingerprint information.

The FIDO biometric authentication security key 100 is connected to the computer device 200 and may be a USB type fingerprint authentication security key including a fingerprint measurement pad 120 for measuring fingerprint information. In addition to the fingerprint measuring pad 120, a configuration for measuring different biometric authentication information as described above may be utilized. On the other hand, the FIDO biometric authentication security key 100 may also perform a data storage function of the USB method. For example, as will be described later, a secret key in which the private key of the blockchain electronic wallet is encrypted with the AES-256 algorithm can be stored in the storage of the FIDO biometric authentication security key 100.

4 is a diagram for explaining a process of registering user's biometric information using a FIDO biometric authentication security key according to the present invention.

Referring to Figure 4, the process of registering the user's biometric information using the FIDO biometric authentication security key (100) (41, 42, 43, 44) may be shown. Using the FIDO biometric authentication security key 100, convenience and high security can be secured compared to the method of performing identity authentication by entering a conventional ID and password.

In step 41, biometric authentication information of the user, for example, fingerprint information, may be initially registered in the computer device 200, and such biometric authentication information may be registered by various member companies of the FIDO Alliance as in step 42. It may be requested for authentication instead of the password method. When the requester attempts to log in as in step 43, it may be determined whether the biometric authentication information matches the registered information through the FIDO biometric authentication security key 100 as in step 44.

5 is a diagram for explaining a file management service based on a FIDO biometric authentication security key according to the present invention.

Referring to FIG. 5 , an example screen 50 for explaining the file management service 11 based on the FIDO biometric authentication security key 100 may be shown. The example screen 50 may show a management target file 51 of the file explorer 52, a management program 53 of the file management service 11, and a biometric authentication method 54.

For example, a file/folder to be managed in the file explorer 52 may be set to a locked state or a hidden state by utilizing the file/folder hide tab of the management program 53 . Thereafter, when the user authentication is performed by the biometric authentication method 54, the management object file 51 may be displayed in the file explorer 52, and when the user authentication is not performed, the management object file 51 may not be displayed, or access may be restricted in a locked state.

That is, permission restriction settings may include lock settings and hide settings for management target files, and management when it is determined that the requester's biometric authentication information and the registered user's biometric authentication information measured by the identity determination are not the same. Access to target files can be restricted in a locked or hidden state.

On the other hand, the processor 220, when determining whether or not to authenticate the user: to request additional authentication information based on the requester's operation pattern, and determine whether or not to authenticate the user based on the identity determination and additional authentication information. can

If the requester's operation pattern shows a large difference from the user's usual operation pattern, it may be determined that another person is using the computer device 200 while the user is away. In this case, it may be verified once more whether the person currently operating the computer device 200 is the same person as the user in a manner that requests additional authentication information.

The requester's manipulation pattern may include an input device input pattern, a program execution pattern, and an manipulation time/location pattern.

For example, unlike the usual use of mouse double-click to open a file or folder, if the current operator opens a file or folder through the keyboard enter key, or if the speed of the mouse double-click or the typing speed of the keyboard is different If mouse and keyboard input is being performed at high speed, or if a keyboard shortcut that has not been used or is used infrequently is frequently used, it is assumed that the current operator is a different person from the registered user in terms of the input device input pattern. can be judged

In addition, when the computer device 200 is used at a time when the computer device 200 is not used at all, when the computer device 200 is used in a different place than usual Even if there is, additional authentication information may be required to verify whether the user is the same person.

The additional authentication information may include at least one of ID/password, unlock pattern, certificate authentication, and mobile phone authentication.

Since additional authentication information is additionally required after biometric authentication through the FIDO biometric authentication security key (100), conventional authentication methods such as ID/password, unlock pattern, certificate authentication, and mobile phone authentication are used. It can be. Alternatively, additional authentication may be performed in a manner that requires biometric authentication through the FIDO biometric authentication security key 100, which is not a conventional authentication method.

When requesting additional authentication information, the processor 220 calculates a similarity score by comparing a user manipulation pattern pre-registered for the user and a requester manipulation pattern measured for the requestor, and when the similarity score is less than the threshold score. It can be configured to require additional authentication information.

Whether the current operator is a different person from the registered user may be determined by comparing a pre-registered user manipulation pattern with a measured requester manipulation pattern. Comparison between the manipulation patterns may be performed by quantifying the manipulation patterns and comparing numerical values. For example, a method of quantifying input speed of a keyboard/mouse, etc., calculating a similarity score based on a difference between the numerical values, and determining whether the similarity score is out of a critical range may be utilized.

When calculating the similarity score, the processor 220 receives two different manipulation patterns and uses a deep learning neural network model trained to output a similarity score between the two different manipulation patterns to the user manipulation pattern and requester manipulation. It may be configured to calculate a similarity score between patterns.

Calculation of the similarity score through digitization and numerical comparison of the above-described manipulation patterns may be performed through a deep learning neural network model. For example, a deep learning neural network model may be a machine learning model using a convolutional neural network (CNN), and the CNN model performs learning on training data and sets weights and parameters of layers and nodes in the model. You can adjust your learning accordingly. When learning is completed, the weights and parameters can be stored in the computer device 200 to be used for calculating the similarity score, and the CNN model can be updated as needed, such as when a registered user's manipulation pattern is changed.

6 is a diagram for explaining a blockchain electronic wallet service based on a FIDO biometric authentication security key according to the present invention.

Referring to FIG. 6 , a management program 60 executed in a computer device 20 to implement a blockchain electronic wallet service 12 based on a FIDO biometric authentication security key 100 may be illustrated.

In the management program 60, when the information change tab 61 related to the blockchain electronic wallet service 12 is selected, a management menu 62 for managing the blockchain electronic wallet may be displayed. Management of the blockchain electronic wallet through the management menu 62 may require biometric authentication through the FIDO biometric authentication security key 100.

On the other hand, as described above, at least one additional storage may include the user's mobile device 500 and the FIDO online server 400, and in at least one of the mobile device 500 and the FIDO online server 400, private When the key is verified, the transaction request is approved by the blockchain network 300 and the transaction can be executed.

When authentication of biometric information is performed primarily through the FIDO biometric authentication security key 100, secondary authentication is performed to determine whether the private key is stored in at least one of the mobile device 500 and the FIDO online server 400 can proceed For example, the computer device 200 may request at least one of the mobile device 500 and the FIDO online server 400 to transmit the private key being stored to the blockchain network 300, and according to the request, the private key When the key is delivered to the blockchain network 300, the blockchain network 300 may approve the transaction request, considering that the second authentication has been performed.

On the other hand, when checking whether the private key is stored in at least one additional storage by secondary authentication, the private key is stored in both, not only one of the mobile device 500 and the FIDO online server 400. that may be required.

When the processor 220 stores the private key in at least one additional storage: the private key of the blockchain electronic wallet and additional information of the electronic wallet between the computer device 200, the mobile device 500 and the FIDO online server 400 It can be configured to synchronize by sharing to.

E-wallet additional information of the blockchain e-wallet may refer to data that stores user information, date and time of creation, used cryptocurrency balance information, and other various information of the e-wallet in plain text. When a blockchain electronic wallet is created for the first time, the private key and additional information of the electronic wallet are created in the form of plain text, and after they are encrypted and stored, the plain text can be zeroed out and deleted.

When the private key is synchronized between the computer device 200, the mobile device 500 and the FIDO online server 400, the private key in a valid state stored in one place may be shared and stored in another storage. Such synchronization may be achieved through biometric authentication through the FIDO biometric authentication security key (100). Accordingly, when a private key in one place is lost or becomes invalid, synchronization may be performed to share the private key.

When the processor 220 transmits the private key to the blockchain network 300: through the FIDO biometric authentication security key 100, the additional biometric authentication information of the requestor is measured, and the measured additional biometric authentication information of the registered user If the biometric authentication information matches, it may be configured to transmit the private key and electronic wallet additional information synchronized to either the mobile device 500 or the FIDO online server 400 to the blockchain network 300.

That is, in order to transmit the synchronized private key to the blockchain network 300 without a separate request, instead of requesting the transfer of the private key to the blockchain network 300, through the FIDO biometric authentication security key 100 It may be requested to measure additional biometric information of the requestor. As such, even if the computer device 200 does not store the private key, a method of directly transmitting the synchronized private key to the blockchain network 300 through additional biometric authentication may be implemented.

On the other hand, the processor 220, when creating a blockchain electronic wallet: generates a pair of public key and private key in an asymmetric encryption method, stores the private key in the computer device 200, and the blockchain network 300 may be configured to distribute public keys to

A blockchain electronic wallet can be encrypted and decrypted with a private key and a public key by an asymmetric encryption method. Since the public key can be distributed in the blockchain network 300, it may be required to provide a private key for transactions in the blockchain electronic wallet. Additional encryption may be performed on the private key for high security of blockchain electronic wallets and transactions.

When storing the private key, the processor 220: generates encrypted information by encrypting the private key of the blockchain electronic wallet and additional information of the electronic wallet with the AES-256 algorithm, stores the encrypted information in the computer device 200, It may be configured to store the secret key of the encrypted information in the FIDO biometric authentication security key 100.

As described above, the private key of the blockchain electronic wallet and additional information of the electronic wallet can be additionally encrypted using the AES-256 algorithm. Unlike the asymmetric encryption of the Salpin blockchain e-wallet, additional encryption of the private key can be performed with a symmetric encryption method such as the AES-256 algorithm. Encryption and decryption by the AES-256 algorithm may be performed by a secret key, and the secret key may be stored in the USB type FIDO biometric authentication security key 100.

In the above way, the private key may be stored in at least one additional storage such as the mobile device 500 or the FIDO online server 400, or the encrypted information may be stored in the computer device 200, and the encryption A secret key for decrypting information to restore the plaintext of the private key may be stored in the FIDO biometric authentication security key (100). Therefore, it is possible to prevent the plaintext of the private key from being stolen or damaged in the computer device 200, and without the FIDO biometric authentication security key 100, it is impossible to restore the private key through decryption. The security and stability of the wallet can be greatly improved.

When the processor 220 stores the encryption information: When the biometric authentication information of the requestor and the biometric authentication information of the registered user, which are measured by locking or hiding the encryption information, do not match, access to the encryption information may be configured to limit to a locked or hidden state.

According to the above locking/hiding structure, since the encrypted information in which the private key is encrypted by the AES-256 algorithm can be managed in a hidden or locked state and stored safely, the private key is sent to the mobile device 500 or the mobile device 500 for a transaction request. In the case of decrypting the encryption information stored in the computer device 200 and transmitting it to the blockchain network 300, rather than passing it through at least one additional storage such as the FIDO online server 400, the encryption information may be prevented from being corrupted or invalidated in the computer device 200 .

7 is a diagram for explaining steps constituting a method for providing a file management service based on a FIDO biometric authentication security key according to the present invention.

Referring to FIG. 7 , a method 700 of providing a file management service 11 based on a FIDO biometric authentication security key 100 may include steps 710 to 720 . However, other general-purpose steps may be further included in the method 700 without being limited thereto.

The method 700 for providing the file management service 11 based on the FIDO biometric authentication security key 100 may consist of steps processed time-sequentially in the computer device 200 providing the file management service 11. can Therefore, even if the contents are omitted below, the contents described above with respect to the computer device 200 may be equally applied to the method 700 .

The method 700 of providing the file management service 11 based on the FIDO biometric authentication security key 100 may be performed by the processor 220 executing instructions stored in the memory 210 in the computer device 200 there is.

In step 710, the computer device 200 may register the user's biometric authentication information provided through the FIDO biometric authentication security key 100.

In step 720, the computer device 200 may perform permission restriction setting to set the range of file access authority for management target files according to whether or not the user authenticates himself.

In step 730, the computer device 200 may measure the biometric authentication information of the requestor through the FIDO biometric authentication security key 100 in response to the requestor's request for access to the management target files.

In step 740, the computer device 200 may determine whether the user is authenticated by performing identity determination on the measured requester's biometric authentication information and the registered user's biometric authentication information.

In step 750, the computer device 200 may restrict access to management target files to a range set by permission restriction setting based on whether the user is authenticated or not.

On the other hand, the method 700 for providing the file management service 11 based on the FIDO biometric authentication security key 100 may be implemented in the form of a computer program stored in a computer-readable storage medium. That is, the computer program may include instructions for implementing the method 700, and the instructions of the computer program may be stored in a computer-readable storage medium. A computer program may include a mobile application.

For example, computer-readable storage media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, floptical disks and It may include a hardware device specially configured to store and execute computer program instructions, such as magneto-optical media, and ROM, RAM, flash memory, and the like. Computer program instructions may include machine language codes generated by a compiler and high-level language codes that can be executed by a computer using an interpreter.

8 is a diagram for explaining steps constituting a method for providing a blockchain electronic wallet service based on a FIDO biometric authentication security key according to the present invention.

Referring to FIG. 8 , a method 800 of providing a blockchain electronic wallet service 12 based on a FIDO biometric authentication security key 100 may include steps 810 to 820. However, other general-purpose steps may be further included in the method 800 without being limited thereto.

The method 800 for providing the blockchain electronic wallet service 12 based on the FIDO biometric authentication security key 100 is processed in a time-sequential manner in the computer device 200 providing the blockchain electronic wallet service 12 may consist of Therefore, even if the contents are omitted below, the contents described above with respect to the computer device 200 may be equally applied to the method 800 .

The method 800 of providing the blockchain electronic wallet service 12 based on the FIDO biometric authentication security key 100 is performed by the processor 220 executing instructions stored in the memory 210 in the computer device 200 It can be.

In step 810, the computer device 200 may register the user's biometric authentication information provided through the FIDO biometric authentication security key (100).

In step 820, the computer device 200 may generate the user's blockchain electronic wallet according to the user's identity authentication based on the biometric authentication information.

At step 830, the computer device 200 may store the private key of the blockchain electronic wallet in at least one additional storage.

In step 840, the computer device 200 may measure the biometric authentication information of the requestor through the FIDO biometric authentication security key 100 in response to the requestor's transaction request for the blockchain electronic wallet.

In step 850, the computer device 200 transmits the private key stored in at least one additional storage to the blockchain network along with the transaction request when the measured biometric authentication information of the requestor and the biometric authentication information of the registered user match. (300).

On the other hand, the method 800 for providing the blockchain electronic wallet service 12 based on the FIDO biometric authentication security key 100 may be implemented in the form of a computer program stored in a computer-readable storage medium. That is, the computer program may include instructions for implementing the method 800, and the instructions of the computer program may be stored in a computer-readable storage medium. A computer program may include a mobile application.

For example, computer-readable storage media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, floptical disks and It may include a hardware device specially configured to store and execute computer program instructions, such as magneto-optical media, and ROM, RAM, flash memory, and the like. Computer program instructions may include machine language codes generated by a compiler and high-level language codes that can be executed by a computer using an interpreter.

Although the embodiments of the present invention have been described in detail above, the scope of rights according to the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concept of the present invention described in the following claims are also the present invention. It should be interpreted as being included in the scope of rights according to

Claims (11)

In a computer device that provides a blockchain electronic wallet service based on a FIDO biometric authentication security key,
a memory configured to store instructions; and
By executing the above commands:
Registering the user's biometric authentication information provided through the FIDO biometric authentication security key,
Creating a blockchain electronic wallet for the user according to the user's identity authentication based on the biometric authentication information;
Store the private key of the blockchain electronic wallet in at least one additional storage;
Measuring the biometric authentication information of the requestor through the FIDO biometric authentication security key in response to the requestor's transaction request for the blockchain electronic wallet;
a processor configured to transmit the private key stored in the at least one additional storage to a blockchain network together with the transaction request when the measured biometric authentication information of the requestor and the registered user biometric authentication information match; including,
the processor,
Permission limit setting is performed to set the range of file access rights for the files to be managed according to the user's identity authentication,
In response to the requestor's request for access to the management target files, the biometric authentication information of the requestor is measured through the FIDO biometric authentication security key,
determining whether the user is authenticated by performing identity determination on the measured requester's biometric authentication information and the registered user's biometric authentication information;
When the processor determines whether to authenticate the user:
configured to request additional authentication information based on an operation pattern of the requestor;
configured to determine whether or not to authenticate the user based on the identity determination and the additional authentication information;
The operation pattern of the requestor includes an input device input pattern, a program execution pattern, and an operation time/place pattern;
the processor,
When the operation pattern of the requester shows a large difference from the usual operation pattern of the user, the requestor is configured to determine that the requestor is a different person from the registered user and request the additional authentication information;
the processor,
In relation to the input device input pattern, when the requestor opens a file or folder through the keyboard enter key, or when the requestor inputs the mouse and keyboard at a speed different from the usual mouse double-click speed or keyboard typing speed , or when a keyboard shortcut that has not been used normally or is used infrequently by the requester is frequently used, determining that the requestor is a person different from the registered user and requesting the additional authentication information,
In relation to the program execution pattern, if the type or execution order of the computer program normally executed by the user is different, the requester is determined to be a different person from the registered user and configured to request the additional authentication information,
Regarding the operation time/place pattern, if the computer device is being used by the requester at a time when it is not normally used, or if the computer device is being used by the requestor in a different location than usual, the requester configured to request the additional authentication information by determining that the user is different from the registered user;
Computer device that provides blockchain electronic wallet service based on FIDO biometric authentication security key. According to claim 1,
the at least one additional storage comprises the user's mobile device and a FIDO online server;
When the private key is confirmed in at least one of the mobile device and the FIDO online server, the transaction request is approved by the blockchain network and the transaction is executed, providing a blockchain electronic wallet service based on a FIDO biometric authentication security key A computer device that does. According to claim 2,
When the processor stores the private key in at least one additional store:
Provides a blockchain electronic wallet service based on a FIDO biometric authentication security key configured to share and synchronize the private key and additional information of the electronic wallet between the computer device, the mobile device and the FIDO online server A computer device that does. According to claim 3,
When the processor delivers the private key to the blockchain network:
Measuring additional biometric authentication information of the requestor through the FIDO biometric authentication security key;
If the measured additional biometric authentication information matches the biometric authentication information of the registered user, the private key and the electronic wallet additional information synchronized with either the mobile device or the FIDO online server are transferred to the blockchain network A computer device that provides a blockchain electronic wallet service based on a FIDO biometric authentication security key, configured to deliver to. According to claim 1,
When the processor creates the blockchain electronic wallet:
Generate a pair of a public key and the private key using an asymmetric encryption method;
storing the private key in the computer device;
A computer device for providing a blockchain electronic wallet service based on a FIDO biometric authentication security key, configured to distribute the public key to the blockchain network. According to claim 5,
When the processor stores the private key:
Encrypting the private key and additional information of the electronic wallet of the blockchain electronic wallet with the AES-256 algorithm to generate encrypted information;
storing the encryption information in the computer device;
A computer device for providing a blockchain electronic wallet service based on a FIDO biometric authentication security key, configured to store a secret key of the encrypted information in the FIDO biometric authentication security key. According to claim 6,
When the processor stores the encryption information:
If the requester's biometric authentication information measured by locking or hiding the encryption information and the registered user's biometric authentication information do not match, the access to the encryption information is restricted to the locked or hidden state. A computer device that provides a blockchain electronic wallet service based on a FIDO biometric authentication security key configured to. According to claim 1,
The biometric authentication information includes fingerprint information, a computer device that provides a blockchain electronic wallet service based on a FIDO biometric authentication security key. According to claim 8,
The FIDO biometric authentication security key is a USB-type fingerprint authentication security key that is connected to the computer device and includes a fingerprint measurement pad for measuring the fingerprint information, providing a blockchain electronic wallet service based on the FIDO biometric authentication security key computer device. In the method of providing a blockchain electronic wallet service based on a FIDO biometric authentication security key, performed by a processor executing instructions stored in a memory in a computer device,
Registering user's biometric authentication information provided through the FIDO biometric authentication security key;
generating a blockchain electronic wallet of the user according to the authentication of the user based on the biometric authentication information;
storing the private key of the blockchain electronic wallet in at least one additional storage;
Measuring the biometric authentication information of the requestor through the FIDO biometric authentication security key in response to the requestor's transaction request for the blockchain electronic wallet; and
and transmitting the private key stored in the at least one additional storage to a blockchain network together with the transaction request when the measured biometric authentication information of the requestor and the registered user biometric authentication information match. do,
the processor,
Permission limit setting is performed to set the range of file access rights for the files to be managed according to the user's identity authentication,
In response to the requestor's request for access to the management target files, the biometric authentication information of the requestor is measured through the FIDO biometric authentication security key,
determining whether the user is authenticated by performing identity determination on the measured requester's biometric authentication information and the registered user's biometric authentication information;
When the processor determines whether to authenticate the user:
configured to request additional authentication information based on an operation pattern of the requestor;
configured to determine whether or not to authenticate the user based on the identity determination and the additional authentication information;
The operation pattern of the requestor includes an input device input pattern, a program execution pattern, and an operation time/place pattern;
the processor,
When the operation pattern of the requester shows a large difference from the usual operation pattern of the user, the requestor is configured to determine that the requestor is a different person from the registered user and request the additional authentication information;
the processor,
In relation to the input device input pattern, when the requestor opens a file or folder through the keyboard enter key, or when the requestor inputs the mouse and keyboard at a speed different from the usual mouse double-click speed or keyboard typing speed , or when a keyboard shortcut that has not been used normally or is used infrequently by the requester is frequently used, determining that the requestor is a person different from the registered user and requesting the additional authentication information,
In relation to the program execution pattern, if the type or execution order of the computer program normally executed by the user is different, the requester is determined to be a different person from the registered user and configured to request the additional authentication information,
Regarding the operation time/place pattern, if the computer device is being used by the requester at a time when it is not normally used, or if the computer device is being used by the requestor in a different location than usual, the requester configured to request the additional authentication information by determining that the user is different from the registered user;
A method of providing a blockchain electronic wallet service based on FIDO biometric authentication security key. In a computer program stored in a computer readable storage medium to implement a method of providing a blockchain electronic wallet service based on a FIDO biometric authentication security key, instructions of the computer program when executed cause a processor to:
Registering the user's biometric authentication information provided through the FIDO biometric authentication security key;
generate a blockchain electronic wallet of the user according to the user's identity authentication based on the biometric authentication information;
store the private key of the blockchain electronic wallet in at least one additional storage;
Measure biometric authentication information of the requestor through the FIDO biometric authentication security key in response to the requestor's transaction request for the blockchain electronic wallet; and
When the measured requester's biometric authentication information and the registered user's biometric authentication information match, transmit the private key stored in the at least one additional storage to the blockchain network along with the transaction request;
the processor,
Permission limit setting is performed to set the range of file access rights for the files to be managed according to the user's identity authentication,
In response to the requestor's request for access to the management target files, the biometric authentication information of the requestor is measured through the FIDO biometric authentication security key,
determining whether the user is authenticated by performing identity determination on the measured requester's biometric authentication information and the registered user's biometric authentication information;
When the processor determines whether to authenticate the user:
configured to request additional authentication information based on an operation pattern of the requestor;
configured to determine whether or not to authenticate the user based on the identity determination and the additional authentication information;
The operation pattern of the requestor includes an input device input pattern, a program execution pattern, and an operation time/place pattern;
the processor,
When the operation pattern of the requester shows a large difference from the usual operation pattern of the user, the requestor is configured to determine that the requestor is a different person from the registered user and request the additional authentication information;
the processor,
In relation to the input device input pattern, when the requestor opens a file or folder through the keyboard enter key, or when the requestor inputs the mouse and keyboard at a speed different from the usual mouse double-click speed or keyboard typing speed , or when a keyboard shortcut that has not been used normally or is used infrequently by the requester is frequently used, determining that the requestor is a person different from the registered user and requesting the additional authentication information,
In relation to the program execution pattern, if the type or execution order of the computer program normally executed by the user is different, the requester is determined to be a different person from the registered user and configured to request the additional authentication information,
Regarding the operation time/place pattern, if the computer device is being used by the requester at a time when it is not normally used, or if the computer device is being used by the requestor in a different place than usual, the requester is registered configured to determine that the user is different from the user and request the additional authentication information;
computer program.

Images