KR102519141B1 - Cloud-based gold wealth management server that enables gold present based on digital gold tokens and operating method thereof - Google Patents

Abstract

A gold asset management server enabling gold futures based on digital gold tokens and a method of operating the same are disclosed. The present invention relates to a gold asset management server and operation method for supporting a member holding gold to gift the gold he/she possesses to another member.

Description

Cloud-based gold asset management server enabling gold futures based on digital gold tokens and its operating method

The present invention relates to a gold asset management server enabling gold futures based on digital gold tokens and a method of operating the same.

Usually, at a first birthday party, a gold stone ring or gold-related products are given as a gift to celebrate that a child has passed the age of one in good health.

In addition, it is often seen that gold-related products are presented as gifts or souvenirs at various commemorative events by companies or organizations.

However, in a situation where the COVID-19 epidemic has recently been going on for a long time around the world, and as movement and contact between people are restricted, it is difficult to directly gift gold at first birthday parties or various commemorative events at companies or organizations. .

Therefore, it is necessary to introduce a gold futures platform that supports non-face-to-face gifting of gold at first birthday parties or various commemorative events by companies or organizations.

On the other hand, recently, in order to protect important information such as personal information, digital tokenization technology is widely used to prevent original data for important information from being leaked by converting the information into a digital token and using it in the data transmission process.

Therefore, it is necessary to study the service technology related to the gold asset management server that enables gold futures, and at the same time, by digitally tokenizing and managing the asset information of each member holding gold in the gold asset management server, Research on technology that can increase reliability and stability when gifting gold through futures platforms is needed.

An object of the present invention is to provide a gold asset management server and an operating method thereof that support a member holding gold to gift the gold he/she possesses to another member.

In addition, the gold asset management server and its operating method according to the present invention prevent asset information on gold held by members from being leaked by converting and managing asset information on gold held by members. make it possible

A gold asset management server enabling a gold gift based on a digital gold token according to an embodiment of the present invention is a preset private key for electronic signature - the private key and the public key constituting the key pair are members of a plurality of members. pre-distributed to each terminal - private key storage unit in which is stored, member identification information of the plurality of members, gold owned by each of the plurality of members - gold owned by each of the plurality of members Purity is the same as each other - asset information for - the asset information means information on the weight of gold each of the plurality of members possesses - and digital gold corresponding to the asset information of each of the plurality of members Token - The digital gold token includes a hash value generated by applying the asset information data of each of the plurality of members as an input to a preset hash function, and an electronic signature value generated by encrypting the hash value with the private key. Is stored - A process processing request for presenting the gold held by the first member to the second member, another one of the plurality of members, from the member terminal of the first member, which is one of the plurality of members, in the gold information database. is received, a token transmission unit extracting a first digital gold token corresponding to asset information on gold held by the first member from the gold information database and transmitting the first digital gold token to a member terminal of the first member; A verification completion message indicating that verification of the first digital gold token has been completed from a member terminal of a member - The verification completion message is sent after the first digital gold token is received by the member terminal of the first member, and the first digital gold token is received. A value obtained by decrypting the electronic signature value included in the first digital gold token by the member terminal of the member with the public key pre-distributed to the member terminal of the first member and the asset information included in the first digital gold token As a result of comparing whether the hash values of the data of are identical to each other, if it is confirmed that both values match each other, it means a message generated to indicate that the verification of the first digital gold token has been completed - is received , an asset information providing unit extracting asset information on gold held by the first member from the gold information database and transmitting the extracted asset information to a member terminal of the first member; When a gold gift request instructing the second member to present gold corresponding to the first weight of the gold possessed is received, authentication of the member terminal of the first member is performed, and the gold information In the asset information on the gold held by the first member stored in the database, it is checked whether the weight of the gold held by the first member exceeds the first weight, and the gold held by the first member is checked. When it is confirmed that the weight exceeds the first weight, the gift request approval unit for completing and processing the approval of the gold gift request, and when the approval of the gold gift request is completed, stored in the gold information database Asset information on gold held by the first member is updated by subtracting the weight of gold held by the first member by the first weight from asset information on gold held by the first member. and by increasing the weight of gold held by the second member by the first weight in the asset information on gold held by the second member, asset information on gold held by the second member Includes an asset updating unit that updates.

In addition, a method of operating a gold asset management server enabling a gold gift based on a digital gold token according to an embodiment of the present invention includes a preset private key for electronic signature - a public key constituting the private key and key pair pre-distributed to each member terminal of a plurality of members - maintaining a private key storage unit in which is stored, member identification information of the plurality of members, gold held by each of the plurality of members - the plurality of members The purity of the gold each possesses is the same as each other - asset information for - the asset information means information on the weight of gold each of the plurality of members possesses - and each of the plurality of members A digital gold token corresponding to asset information of - The digital gold token includes a hash value generated by applying the asset information data of each of the plurality of members as an input to a preset hash function, and the hash value is encrypted with the private key. and the generated digital signature value is included - maintaining the stored gold information database, the gold held by the first member from the member terminal of a first member, which is one of the plurality of members, When a process processing request for gifting to a second member is received, a first digital gold token corresponding to asset information on gold held by the first member is extracted from the gold information database and the value of the first member is Transmitting to a member terminal, a verification completion message indicating that verification of the first digital gold token has been completed from the member terminal of the first member - the verification completion message is transmitted to the member terminal of the first member After the gold token is received, the member terminal of the first member decrypts the digital signature value included in the first digital gold token with the public key pre-distributed to the member terminal of the first member and the first digital gold token. 1 As a result of comparing whether the hash values of the asset information data included in the digital gold token match each other, if it is confirmed that both values match each other, to indicate that the verification of the first digital gold token has been completed If a generated message is received, extracting asset information about gold held by the first member from the gold information database and transmitting the information to a member terminal of the first member, a member of the first member When a gold gift request is received from the terminal instructing the second member to present gold corresponding to the first weight of the gold held by the first member to the second member, authentication of the member terminal of the first member is performed. After proceeding, it is checked whether the weight of gold held by the first member exceeds the first weight in the asset information on the gold held by the first member stored in the gold information database, and 1 When it is confirmed that the weight of the gold held by the member exceeds the first weight, the process of completing the approval of the request for gold gift, and when the approval of the request for the gold gift is completed, the gold information By subtracting the weight of gold held by the first member by the first weight from the asset information on the gold held by the first member stored in the database, By updating the asset information and increasing the weight of the gold held by the second member by the first weight in the asset information on the gold held by the second member, Updating asset information for

The present invention may provide a gold asset management server and operation method for supporting a member holding gold to gift the gold he/she owns to another member.

In addition, the gold asset management server and its operating method according to the present invention prevent asset information on gold held by members from being leaked by converting and managing asset information on gold held by members. can do.

1 is a diagram showing the structure of a gold asset management server according to an embodiment of the present invention.
2 is a flowchart illustrating a method of operating a gold asset management server according to an embodiment of the present invention.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the accompanying drawings. This description is not intended to limit the present invention to specific embodiments, but should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention. While describing each drawing, similar reference numerals have been used for similar components, and unless otherwise defined, all terms used in this specification, including technical or scientific terms, are common knowledge in the art to which the present invention belongs. has the same meaning as commonly understood by the person who has it.

In this document, when a certain component is said to "include", it means that it may further include other components without excluding other components unless otherwise stated. In addition, in various embodiments of the present invention, each component, functional block, or means may be composed of one or more sub-components, and the electrical, electronic, and mechanical functions performed by each component are electronic It may be implemented with various known elements or mechanical elements such as circuits, integrated circuits, ASICs (Application Specific Integrated Circuits), and may be implemented separately or two or more may be integrated into one.

On the other hand, the blocks of the accompanying block diagram or the steps of the flowchart are computer program instructions that perform designated functions by being loaded into a processor or memory of a device capable of data processing, such as a general-purpose computer, a special purpose computer, a portable notebook computer, and a network computer. can be interpreted as meaning Since these computer program instructions may be stored in a memory included in a computer device or in a computer readable memory, the functions described in blocks of a block diagram or steps of a flowchart are produced as a product containing instruction means for performing them. It could be. Further, each block or each step may represent a module, segment or portion of code that includes one or more executable instructions for executing specified logical function(s). Also, it should be noted that in some alternative embodiments, functions mentioned in blocks or steps may be executed out of a predetermined order. For example, two blocks or steps shown in succession may be performed substantially simultaneously or in reverse order, and in some cases, some blocks or steps may be omitted.

1 is a diagram showing the structure of a gold asset management server according to an embodiment of the present invention.

The gold asset management server 110 according to an embodiment of the present invention is a device that enables a gold present based on a digital gold token, and includes a private key storage unit 111, a gold information database 112, a token It includes a transmission unit 113, an asset information providing unit 114, a gift request approval unit 115, and an asset updating unit 116.

A preset private key for electronic signature is stored in the private key storage unit 111 . Here, the private key and the public key constituting the key pair are pre-distributed to each member terminal of a plurality of members.

The gold information database 112 stores member identification information of the plurality of members, asset information on gold possessed by each of the plurality of members, and digital gold tokens corresponding to the asset information of each of the plurality of members. there is.

Here, member identification information refers to identification information such as the name, contact information, address of each member, or identification number of a terminal possessed by each member.

Further, the purity of gold each of the plurality of members is the same, and the asset information refers to information about the weight of gold each of the plurality of members possesses. In addition, the digital gold token includes a hash value generated by applying the asset information data of each of the plurality of members as an input to a preset hash function and an electronic signature value generated by encrypting the hash value with the private key. there is.

In relation to this, information as shown in Table 1 below may be stored in the gold information database 112 .

Member identification information Asset Information for Gold digital gold token Member identification information for Member 1 Weight of gold: 100g Digital Gold Token 1 Member identification information for Member 2 Weight of gold: 50 g Digital Gold Token 2 ... ... ...

The token transmission unit 113 receives a process processing request from the member terminal 130 of a first member, one of the plurality of members, to gift the gold held by the first member to a second member, the other one. If received, the first digital gold token corresponding to the asset information on the gold held by the first member is extracted from the gold information database 112 and transmitted to the member terminal 130 of the first member.

At this time, according to one embodiment of the present invention, the member terminal 130 of the first member corresponds to the asset information on the gold held by the first member from the gold asset management server 110, the first digital gold When the token is received, the electronic signature value included in the first digital gold token is decrypted with the public key pre-distributed to the member terminal 130 of the first member and the first digital gold token. When it is confirmed that the hash values of the data of the asset information match each other and both values match each other, the verification completion message indicating that the verification of the first digital gold token is completed is generated, and then the verification A completion message may be transmitted to the gold asset management server 110 .

When the asset information providing unit 114 receives the verification completion message indicating that verification of the first digital gold token has been completed from the member terminal 130 of the first member, the first digital gold token is received from the gold information database 112. Asset information on gold held by the member is extracted and transmitted to the member terminal 130 of the first member.

That is, the asset information providing unit 114 sends information about the gold held by the first member to the member terminal 130 of the first member only when the verification completion message is received from the member terminal 130 of the first member. By transmitting asset information, it can contribute to increasing the stability of gold trading.

In this way, when the member terminal 130 of the first member receives asset information on the gold owned by the first member, the first member through the member terminal 130 of the first member After looking at the asset information on the gold held by the first member, the first weight, which is the weight enough to present the gold to the second member, is designated, and the first member's member terminal 130 displays information about the gold held by the first member. The first weight may be input, and at this time, the member terminal 130 of the first member sends the gold asset management server 110 gold corresponding to the first weight of the gold owned by the first member. You can send a gift request.

The gift request approval unit 115 instructs, from the member terminal 130 of the first member, to gift the second member with gold corresponding to a first weight of the gold possessed by the first member as a gold gift. When the request is received, authentication is performed on the member terminal 130 of the first member, and then asset information on gold held by the first member stored in the gold information database 112 is retrieved from the first member. It is checked whether the weight of gold held by the first member exceeds the first weight, and if it is confirmed that the weight of gold held by the first member exceeds the first weight, approval of the gold gift request is granted. complete processing

When the approval of the gold gift request is completed, the asset updating unit 116 obtains information about the gold held by the first member from the asset information stored in the gold information database 112 and By subtracting the weight of the gold held by the first member by the first weight, the asset information on the gold held by the first member is updated, and the asset information on the gold held by the second member is updated. Asset information on gold held by the second member is updated by increasing the weight of gold held by the second member by the first weight.

Hereinafter, operations of the token transmission unit 113, the asset information providing unit 114, the gift request approval unit 115, and the asset updating unit 116 will be described in detail by way of example.

First, when a process processing request for presenting gold held by the first member to a second member is received from the member terminal 130 of a first member, one of a plurality of members, the token transmission unit Step 113 may extract a first digital gold token corresponding to asset information on gold held by the first member from the gold information database 112 and transmit the extracted digital gold token to the member terminal 130 of the first member.

In relation to this, when the first member and the second member are referred to as 'Member 1' and 'Member 2' in the gold information database 112 as shown in Table 1, the token transmission unit 113 From the same gold information database 112, 'Digital Gold Token 1' corresponding to 'weight of gold: 100g', which is asset information on gold held by 'Member 1', is extracted, and the member terminal of 'Member 1' (130 ) can be transmitted.

At this time, when the member terminal 130 of 'Member 1' receives 'Digital Gold Token 1' from the gold asset management server 110, the electronic signature value included in 'Digital Gold Token 1' is changed to that of 'Member 1'. When the value decrypted with the public key pre-distributed in the member terminal 130 and the hash value of the asset information included in 'Digital Gold Token 1' are compared to match, and it is confirmed that both values match each other , After generating a verification completion message indicating that verification of 'digital gold token 1' has been completed, the verification completion message can be transmitted to the gold asset management server 110.

In this way, when the verification completion message indicating that verification of 'digital gold token 1' has been completed is received from the member terminal 130 of 'member 1', the asset information providing unit 114 provides gold information as shown in Table 1 above. 'Weight of gold: 100g', which is asset information on gold possessed by 'Member 1', may be extracted from the database 112 and transmitted to the member terminal 130 of 'Member 1'.

At this time, when the member terminal 130 of 'Member 1' receives asset information on the gold held by 'Member 1', 'Member 1' transmits information through the member terminal 130 of 'Member 1' to 'Member 1'. 1' can view the asset information on the gold held by 'Member 2' and designate the first weight, which is the weight enough to gift gold to 'Member 2', and at this time, 'Member 1' will gift 'Member 2' When '30g' is input to the member terminal 130 of 'Member 1' as the first weight, which is the weight of 'Member 1', the member terminal 130 of 'Member 1' A gold gift request corresponding to the first weight of '30 g' may be transmitted to the gold asset management server 110 .

In this way, a gold gift instructing, from the member terminal 130 of 'Member 1', to gift 'Member 2' with gold corresponding to the first weight of '30g' for the gold owned by 'Member 1'. When the request is received, the gift request approval unit 115 authenticates the member terminal 130 of the 'member 1', and then the 'member 1' stored in the gold information database 112 as shown in Table 1 above. In the asset information on the gold held by 'Member 1', it can be confirmed whether the weight of '100g' of gold held by 'Member 1' exceeds the first weight of '30g'.

At this time, since the weight of '100g' of gold possessed by 'Member 1' exceeds the first weight of '30g', the gift request approval unit 115 completes and processes the approval of the gold gift request. can

In this way, when the approval for the gold gift request is completed, the asset updating unit 116 retrieves the asset information on the gold held by 'Member 1' stored in the gold information database 112 as shown in Table 1 above. By subtracting '100g', the weight of gold held by 'Member 1', by '30g', the first weight, the asset information on the gold held by 'Member 1' can be updated as shown in Table 2 below. can

After that, the asset updating unit 116 determines the weight of gold held by 'Member 2' from the asset information on gold held by 'Member 2' stored in the gold information database 112 as shown in Table 1 above. By increasing phosphorus '50g' by the first weight of '30g', asset information on gold held by 'Member 2' can be updated as shown in Table 2 below.

Member identification information Asset Information for Gold digital gold token Member identification information for Member 1 Weight of gold: 70g Digital Gold Token 1 Member identification information for Member 2 Weight of gold: 80g Digital Gold Token 2 ... ... ...

At this time, according to one embodiment of the present invention, the gold asset management server 110 may further include a token renewal unit 117.

The token updating unit 117 updates the asset information on the gold held by the first member and the asset information on the gold held by the second member by the asset updating unit 116. A first hash value is generated by applying data of asset information on gold held by a first member as an input to the hash function, and a first electronic signature value is generated by encrypting the first hash value with the private key; , After generating a second digital gold token including the first hash value and the first electronic signature value, the first digital gold corresponding to the asset information of the first member stored in the gold information database 112 The token is replaced with the second digital gold token, and a second hash value is generated by applying updated data of asset information about gold held by the second member to the hash function as an input, and the second hash value is generated. A second electronic signature value is generated by encrypting a value with the private key, and a third digital gold token including the second hash value and the second electronic signature value is generated, and then stored in the gold information database 112. The digital gold token corresponding to the asset information of the second member is replaced with the third digital gold token.

For example, according to the above example, the token updating unit 117, when the asset information on the gold held by 'Member 1' is updated by the asset updating unit 116 as shown in Table 2 above, the updated ' A first hash value is generated by applying data of asset information on gold held by member 1' as an input to the hash function, and a first electronic signature value is generated by encrypting the first hash value with the private key; After generating 'Digital Gold Token 3', which is a second digital gold token including the first hash value and the first electronic signature value, 'Member 1' stored in the gold information database 112 as shown in Table 2 above. 'Digital Gold Token 1', which is a digital gold token corresponding to asset information of ', can be replaced with 'Digital Gold Token 3', which is the second digital gold token, as shown in Table 3 below.

In addition, the token updating unit 117 generates a second hash value by applying the updated data of asset information on gold held by 'Member 2' to the hash function as an input, and converts the second hash value to the hash function. A second electronic signature value is generated by encrypting with a private key, and a third digital gold token, 'Digital Gold Token 4' including the second hash value and the second electronic signature value is generated, and then gold as shown in Table 2 above. 'Digital Gold Token 2', which is a digital gold token corresponding to the asset information of 'Member 2' stored in the information database 112, is set to 'Digital Gold Token 4', which is the third digital gold token, as shown in Table 3 below. can be replaced

Member identification information Asset Information for Gold digital gold token Member identification information for Member 1 Weight of gold: 70g Digital Gold Token 3 Member identification information for Member 2 Weight of gold: 80g Digital Gold Token 4 ... ... ...

According to one embodiment of the present invention, the gift request approval unit 115 transfers gold corresponding to a first weight to the gold possessed by the first member from the member terminal 130 of the first member to the second member. As a configuration for authenticating the member terminal 130 of the first member when a gold gift request instructing to present to a member is received, the OTP storage unit 118, the number storage unit 119 for authentication, and an authentication event occur It may include a unit 120, an operation value calculation unit 121, a random value generator 122, a feedback value request unit 123, a confirmation unit 124, and an authentication completion unit 125.

The OTP storage unit 118 stores a first one-time password (OTP) generating function and a second OTP generating function that are pre-shared with the member terminal 130 of the first member.

Here, OTP means a one-time authentication number generated randomly instead of a fixed password, and the first OTP generating function and the second OTP generating function are functions that can be preset by a developer.

In the authentication number storage unit 119, a preset first authentication number m (m is a natural number equal to or greater than 2) and a preset second authentication number k (k is a natural number of 2 or more different from m) is stored.

When the gold gift request is received from the member terminal 130 of the first member, the authentication event generating unit 120 generates an authentication event to authenticate the member terminal 130 of the first member.

When the authentication event occurs, the calculation value calculation unit 121 generates a first one-time authentication number based on the first OTP generating function, and uses the first one-time authentication number as a dividend, the first authentication number m. A first operation value x is calculated by performing a modulo operation with a divisor of , and a second one-time authentication number is generated based on the second OTP generation function, and then the second one-time authentication number is used as the dividend. , a second calculation value y is calculated by performing a modulo operation having the second authentication number k as a divisor.

Here, the modulo operation refers to an operation of calculating a remainder by performing division by dividing a dividend by a divisor.

The random value generating unit 122 generates a random matrix having a size of m×k composed of random component values and randomly generates a first random value.

The feedback value requesting unit 123 generates a substitution matrix having a size of m x k by substituting the element located in the (x+1) row (y+1) column of the random matrix with the first random value, and the substitution matrix While transmitting the matrix to the member terminal 130 of the first member, transmission of a feedback value corresponding to the substitution matrix is requested to the member terminal 130 of the first member.

For example, '12341234' is generated as the first one-time authentication number, '56785678' is generated as the second one-time authentication number, the preset number m for first authentication is '4', and the preset number k for second authentication is In the case of '3', the calculation value calculation unit 121 performs a modulo operation with '12341234', the first one-time authentication number, as the dividend and the first authentication number '4' as the divisor. 1 operation value '2' can be calculated, and the second operation value is performed by performing a modulo operation with '56785678', the second one-time authentication number, as the dividend and the second authentication number '3' as the divisor. '1' can be calculated.

'을 생성할 수 있고, 제1 랜덤 값인 'R'을 랜덤하게 생성할 수 있다.Then, the random value generator 122 is a random matrix having a size of 4 x 3 composed of random component values '

', and 'R', which is the first random value, can be randomly generated.

'을 생성할 수 있고, 상기 치환 행렬을 제1 회원의 회원 단말(130)로 전송하면서, 제1 회원의 회원 단말(130)로 상기 치환 행렬에 대응되는 피드백 값의 전송을 요청할 수 있다.After that, the feedback value requesting unit 123 substitutes the first random value 'R' for a component located in '3rd row and 2nd column', which is a (2+1) row (1+1) column in the random matrix, ', a substitution matrix of size 4 x 3

', and while transmitting the permutation matrix to the member terminal 130 of the first member, transmission of a feedback value corresponding to the permutation matrix may be requested to the member terminal 130 of the first member.

At this time, according to an embodiment of the present invention, the member terminal 130 of the first member stores the first OTP generating function, the second OTP generating function, and the first OTP generating function in the memory of the member terminal 130 of the first member. 1 authentication number m and the second authentication number k are stored in advance, and when the substitution matrix is received from the gold asset management server 110, stored in the memory of the member terminal 130 of the first member After generating the first one-time authentication number based on the first OTP generating function, by performing a modulo operation using the first one-time authentication number as a dividend and the first authentication number m as a divisor, After calculating the operation value x and generating the second one-time authentication number based on the second OTP generating function stored in the memory of the member terminal 130 of the first member, the second one-time authentication number is the dividend number. , the second operation value y may be calculated by performing a modulo operation having the second authentication number k as a divisor.

Thereafter, the member terminal 130 of the first member obtains an element value located in the (x+1) row (y+1) column of the substitution matrix based on the first operation value x and the second operation value y. After extracting as 1 feedback value, the first feedback value may be transmitted to the gold asset management server 110.

'이 수신되는 경우, 제1 회원의 회원 단말(130)의 메모리 상에 저장되어 있는 상기 제1 OTP 생성 함수를 기초로 상기 제1 일회용 인증 번호인 '12341234'를 생성한 후, 상기 제1 일회용 인증 번호인 '12341234'를 피제수로, 상기 제1 인증용 숫자 '4'를 제수로 하는 모듈로 연산을 수행함으로써, 상기 제1 연산 값 '2'를 산출할 수 있다.For example, according to the above example, the member terminal 130 of the first member stores the first OTP generating function, the second OTP generating function, and the first authentication function in the memory of the member terminal 130 of the first member. The number '4' and the second authentication number '3' may be stored in advance, and the substitution matrix '3' from the gold asset management server 110

' is received, the first one-time authentication number '12341234' is generated based on the first OTP generating function stored in the memory of the member terminal 130 of the first member, and then the first one-time authentication number is generated. The first calculation value '2' may be calculated by performing a modulo operation with the authentication number '12341234' as the dividend and the first authentication number '4' as the divisor.

Then, the member terminal 130 of the first member generates the second one-time authentication number '56785678' based on the second OTP generation function stored in the memory of the member terminal 130 of the first member. Then, the second operation value '1' may be calculated by performing a modulo operation with the second one-time authentication number '56785678' as the dividend and the second authentication number '3' as the divisor.

After that, the member terminal 130 of the first member is a (2+1) row (1+1) column 'of the substitution matrix based on the first operation value '2' and the second operation value '1'. After extracting 'R', a component value located in row 3, column 2', as the first feedback value, the first feedback value 'R' may be transmitted to the gold asset management server 110.

When the first feedback value is received as a feedback value corresponding to the permutation matrix from the member terminal 130 of the first member, the checking unit 124 checks whether the first feedback value is equal to the first random value. .

When it is confirmed that the first feedback value is equal to the first random value, the authentication completion unit 125 completes the authentication of the member terminal 130 of the first member.

'에 대응되는 상기 제1 피드백 값으로 'R'이 수신되는 경우, 상기 제1 피드백 값인 'R'이 상기 제1 랜덤 값인 'R'과 동일한지 확인할 수 있다. 이때, 확인부(124)에 의해 상기 제1 피드백 값인 'R'이 상기 제1 랜덤 값인 'R'과 동일한 것으로 확인되면, 인증 완료부(125)는 제1 회원의 회원 단말(130)에 대한 인증을 완료할 수 있다.For example, according to the above example, the confirmation unit 124 receives the substitution matrix ' from the member terminal 130 of the first member.

When 'R' is received as the first feedback value corresponding to ', it can be checked whether the first feedback value 'R' is equal to the first random value 'R'. At this time, if it is confirmed by the confirmation unit 124 that the first feedback value 'R' is the same as the first random value 'R', the authentication completion unit 125 determines the information about the member terminal 130 of the first member. authentication can be completed.

In this way, the gift request approval unit 115 includes an OTP storage unit 118, an authentication number storage unit 119, an authentication event generation unit 120, a calculation value calculation unit 121, a random value generation unit 122, After authentication of the member terminal 130 of the first member is performed through the feedback value requesting unit 123, the confirmation unit 124, and the authentication completion unit 125, the information stored in the gold information database 112 In the asset information on the gold held by the first member, it is checked whether the weight of gold held by the first member exceeds the first weight, and if the weight of gold held by the first member is the first weight. If it is confirmed that the gold gift exceeds the weight, the approval for the gold gift request may be completed.

2 is a flowchart illustrating a method of operating a gold asset management server enabling a gold gift based on a digital gold token according to an embodiment of the present invention.

In step S210, a private key storage unit in which a preset private key for electronic signature (a public key constituting a key pair with the private key is pre-distributed to each member terminal of a plurality of members) is stored.

In step S220, member identification information of a plurality of members, asset information on gold owned by each of the plurality of members (the purity of gold held by each of the plurality of members is the same) (the asset Information refers to information on the weight of gold possessed by each of the plurality of members) and a digital gold token corresponding to asset information of each of the plurality of members (the digital gold token includes each of the plurality of members) maintains a gold information database in which a hash value generated by applying the data of asset information to a preset hash function as an input and an electronic signature value generated by encrypting the hash value with the private key) is stored .

In step S230, when a process processing request for presenting gold held by the first member to a second member is received from a member terminal of a first member, which is one of the plurality of members, the gold held by the first member is received. A first digital gold token corresponding to asset information on gold held by the first member is extracted from the information database and transmitted to the member terminal of the first member.

In step S240, a verification completion message indicating that verification of the first digital gold token has been completed from the member terminal of the first member (the verification completion message is sent to the member terminal of the first member). is received, the value obtained by the member terminal of the first member decrypting the digital signature value included in the first digital gold token with the public key pre-distributed to the member terminal of the first member and the first digital gold token. As a result of comparing whether the hash values of the asset information data included in the gold token match each other, if it is confirmed that both values match each other, generated to indicate that the verification of the first digital gold token has been completed message) is received, asset information on gold held by the first member is extracted from the gold information database and transmitted to the member terminal of the first member.

In step S250, when a gold gift request is received from the member terminal of the first member instructing the second member to present gold corresponding to a first weight of the gold owned by the first member as a gift, After authentication of the member terminal of the first member is performed, the weight of gold held by the first member is determined from asset information on gold held by the first member stored in the gold information database. It is checked whether the gold gift weight exceeds the first weight, and if it is confirmed that the weight of the gold possessed by the first member exceeds the first weight, the approval for the gold gift request is completed.

In step S260, when the approval for the gold gift request is completed, the weight of gold owned by the first member is determined from asset information on gold held by the first member stored in the gold information database. By deducting by the first weight, the asset information on the gold held by the first member is updated, and the asset information on the gold held by the second member is the amount of gold held by the second member. Asset information on gold held by the second member is updated by increasing the weight by the first weight.

At this time, according to an embodiment of the present invention, when the member terminal of the first member receives the first digital gold token corresponding to asset information on gold held by the first member from the gold asset management server, , For the value obtained by decrypting the electronic signature value included in the first digital gold token with the public key pre-distributed to the member terminal of the first member and the asset information data included in the first digital gold token. When it is confirmed that the hash values match each other and both values match each other, the verification completion message indicating that the verification of the first digital gold token has been completed is generated, and the verification completion message is sent to the gold asset. can be sent to the management server.

Further, according to an embodiment of the present invention, the operation method of the gold asset management server is performed when asset information on gold held by the first member and asset information on gold held by the second member are updated. , A first hash value is generated by applying the updated data of asset information on gold held by the first member as an input to the hash function, and the first hash value is encrypted with the private key to obtain a first electronic signature. value, and after generating a second digital gold token including the first hash value and the first electronic signature value, the first digital gold token corresponding to asset information of the first member stored in the gold information database. The digital gold token is replaced with the second digital gold token, and a second hash value is generated by applying the updated data of asset information about gold held by the second member to the hash function as an input, 2 A second electronic signature value is generated by encrypting the hash value with the private key, and a third digital gold token including the second hash value and the second electronic signature value is generated, and then stored in the gold information database. The method may further include replacing the digital gold token corresponding to the asset information of the second member with the third digital gold token.

In addition, according to one embodiment of the present invention, in step S250, a first OTP (One Time Password) generating function pre-shared with the member terminal of the first member and a pre-set second OTP generating function are stored. maintaining a pre-set OTP storage unit, a preset first authentication number m (m is a natural number equal to or greater than 2) and a preset second authentication number k (k is m maintaining a number storage unit for authentication in which 2 or more natural numbers other than 2 or more) is stored, and when the gold gift request is received from the member terminal of the first member, authentication for performing authentication of the member terminal of the first member Generating an event, when the authentication event occurs, generating a first one-time authentication number based on the first OTP generating function, and then using the first one-time authentication number as a divisor and the first authentication number m as a divisor By performing a modulo operation to calculate a first operation value x, and after generating a second one-time authentication number based on the second OTP generation function, the second one-time authentication number as a dividend, the Calculating a second calculation value y by performing a modulo operation with the second authentication number k as a divisor, generating a random matrix having a size of m x k composed of random component values, and generating a random first random value Generating a substitution matrix having a size of m x k by substituting an element located in a (x + 1) row (y + 1) column in the random matrix with the first random value, and generating the substitution matrix as described above Requesting transmission of a feedback value corresponding to the permutation matrix to the member terminal of the first member while transmitting to a member terminal of the first member, a feedback value corresponding to the permutation matrix from the member terminal of the first member A first feedback value (the first feedback value is pre-stored in the memory of the member terminal of the first member in the member terminal of the first member; the first OTP generating function; the second OTP generating function; 1 After the first calculation value x and the second calculation value y are calculated based on the authentication number m and the second authentication number k, they are located in the (x+1) row (y+1) column of the substitution matrix. is a feedback value generated by extracting a component value) is received, checking whether the first feedback value is equal to the first random value, and when it is confirmed that the first feedback value is equal to the first random value, and completing authentication of the member terminal of the first member.

At this time, according to an embodiment of the present invention, the member terminal of the first member stores the first OTP generating function, the second OTP generating function, and the first authentication number in the memory of the member terminal of the first member. m and the second authentication number k are pre-stored, and when the substitution matrix is received from the gold asset management server, based on the first OTP generating function stored in the memory of the member terminal of the first member. After generating the first one-time authentication number by performing a modulo operation with the first one-time authentication number as a dividend and the first authentication number m as a divisor, the first operation value x is calculated, After generating the second one-time authentication number based on the second OTP generation function stored in the memory of the member terminal of the first member, the second one-time authentication number is used as the dividend and the second authentication number k is used. By performing a modulo operation as a divisor, the second operation value y is calculated, and the (x + 1) row (y + 1) in the substitution matrix based on the first operation value x and the second operation value y ) After extracting the component value located in the column as the first feedback value, the first feedback value may be transmitted to the gold asset management server.

In the above, the operating method of the gold asset management server according to an embodiment of the present invention has been described with reference to FIG. 2 . Here, since the operation method of the gold asset management server according to an embodiment of the present invention may correspond to the configuration of the operation of the gold asset management server 110 described with reference to FIG. 1, a detailed description thereof will be omitted. do it with

A method of operating a gold asset management server enabling a gold gift based on a digital gold token according to an embodiment of the present invention may be implemented as a computer program stored in a storage medium for execution through a combination with a computer.

In addition, a method of operating a gold asset management server enabling a gold gift based on a digital gold token according to an embodiment of the present invention is implemented in the form of program instructions that can be executed through various computer means and is stored in a computer readable medium. can be recorded. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the medium may be those specially designed and configured for the present invention or those known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. - includes hardware devices specially configured to store and execute program instructions, such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include high-level language codes that can be executed by a computer using an interpreter, as well as machine language codes such as those produced by a compiler.

As described above, the present invention has been described by specific details such as specific components and limited embodiments and drawings, but these are provided to help a more general understanding of the present invention, and the present invention is not limited to the above embodiments. , Those skilled in the art in the field to which the present invention belongs can make various modifications and variations from these descriptions.

Therefore, the spirit of the present invention should not be limited to the described embodiments, and it will be said that not only the claims to be described later, but also all modifications equivalent or equivalent to these claims belong to the scope of the present invention. .

110: gold asset management server 111: private key storage unit
112: gold information database 113: token transfer unit
114: asset information provision unit 115: gift request approval unit
116: asset update unit 117: token update unit
118: OTP storage unit 119: number storage unit for authentication
120: Authentication event generation unit 121: Calculation value calculation unit
122: random value generator 123: feedback value request unit
124: confirmation unit 125: authentication completion unit
130: member terminal of the first member

Claims (12)

A gold asset management server that enables a gold present based on a digital gold token,
a private key storage unit in which a preset private key for electronic signature is stored, in which a public key constituting a key pair with the private key is pre-distributed to each member terminal of a plurality of members;
Member identification information of the plurality of members, asset information for gold possessed by each of the plurality of members - the purity of gold possessed by each of the plurality of members is identical to each other - the asset information is Indicates information on the weight of gold possessed by each member of the - and a digital gold token corresponding to the asset information of each of the plurality of members - the digital gold token includes the asset information of each of the plurality of members a gold information database storing a hash value generated by inputting data to a preset hash function and an electronic signature value generated by encrypting the hash value with the private key;
When a process processing request for presenting gold possessed by the first member to a second member, which is another member, is received from a member terminal of one of the plurality of members, the first member, the second member from the gold information database. a token transmission unit extracting a first digital gold token corresponding to asset information on gold held by one member and transmitting the extracted digital gold token to a member terminal of the first member;
A verification completion message indicating that verification of the first digital gold token has been completed from the member terminal of the first member - the verification completion message is received after the first digital gold token is received by the member terminal of the first member, The member terminal of the first member decrypts the electronic signature value included in the first digital gold token with the public key pre-distributed to the member terminal of the first member and is included in the first digital gold token. As a result of comparing whether the hash values of the asset information data match each other, if it is confirmed that both values match each other, it means a message generated to indicate that the verification of the first digital gold token has been completed. an asset information providing unit extracting asset information on gold held by the first member from the gold information database and transmitting the extracted asset information to a member terminal of the first member;
When a gold gift request instructing to gift the second member with gold corresponding to the first weight of the gold owned by the first member is received from the member terminal of the first member, the first member After authentication of the member terminal, the weight of the gold held by the first member exceeds the first weight in the asset information on the gold held by the first member stored in the gold information database. a gift request approval unit that checks whether or not the gold gift held by the first member exceeds the first weight, and completes the approval of the gold gift request; and
When the approval for the gold gift request is completed, the weight of the gold held by the first member is determined from the asset information on the gold held by the first member stored in the gold information database. By deducting the weight of the gold held by the first member, asset information on gold held by the first member is updated, and the weight of gold held by the second member is calculated from the asset information on gold held by the second member. An asset updating unit for updating asset information on gold held by the second member by increasing the weight by the weight.
including,
The gift request approval department
an OTP storage unit storing a first OTP (One Time Password) generating function pre-shared with the member terminal of the first member and a pre-set second OTP generating function;
The preset first authentication number m (m is a natural number of 2 or more) and the preset second authentication number k (k is a natural number of 2 or more different from m) that are shared with the member terminal of the first member are stored. number storage unit for authentication;
an authentication event generating unit configured to generate an authentication event for authenticating the member terminal of the first member when the gold gift request is received from the member terminal of the first member;
When the authentication event occurs, a first one-time authentication number is generated based on the first OTP generating function, and then the first one-time authentication number is used as a dividend and the first authentication number m is used as a divisor. ) operation, a first operation value x is calculated, a second one-time authentication number is generated based on the second OTP generating function, and the second one-time authentication number is used as the dividend, and the second authentication number k an operation value calculation unit that calculates a second operation value y by performing a modulo operation with a divisor of ;
a random value generating unit generating a random matrix having a size of mxk composed of random component values and randomly generating a first random value;
A substitution matrix having a size of mxk is generated by substituting an element located in an (x+1) row (y+1) column in the random matrix with the first random value, and the substitution matrix is a member of the first member. a feedback value requesting unit requesting transmission of a feedback value corresponding to the permutation matrix to a member terminal of the first member while transmitting the data to a terminal;
A first feedback value as a feedback value corresponding to the permutation matrix from the member terminal of the first member - the first feedback value is pre-stored in the memory of the member terminal of the first member in the member terminal of the first member After the first operation value x and the second operation value y are calculated based on the first OTP generation function, the second OTP generation function, the first authentication number m and the second authentication number k A checker for confirming whether the first feedback value is the same as the first random value when - is a feedback value generated by extracting a component value located in a (x+1) row (y+1) column in the substitution matrix. ; and
If it is determined that the first feedback value is equal to the first random value, an authentication completion unit that completes authentication of the member terminal of the first member.
A gold asset management server that includes. According to claim 1,
The member terminal of the first member is
When the first digital gold token corresponding to asset information on gold held by the first member is received from the gold asset management server, the electronic signature value included in the first digital gold token is changed to the first member. When it is confirmed that the value decrypted with the public key pre-distributed to the member terminal of and the hash value of the asset information data included in the first digital gold token match each other, both values match each other, After generating the verification completion message indicating that verification of the first digital gold token has been completed, the gold asset management server, characterized in that for transmitting the verification completion message to the gold asset management server. According to claim 1,
When asset information on gold held by the first member and asset information on gold held by the second member are updated by the asset updating unit, the updated gold held by the first member is updated. A first hash value is generated by applying data of asset information to the hash function as an input, a first electronic signature value is generated by encrypting the first hash value with the private key, and the first hash value and the first hash value are generated. 1 After generating a second digital gold token including an electronic signature value, replacing the first digital gold token corresponding to the asset information of the first member stored in the gold information database with the second digital gold token; , A second hash value is generated by applying the updated data of asset information on gold held by the second member as an input to the hash function, and the second hash value is encrypted with the private key to obtain a second electronic signature. value, and after generating a third digital gold token including the second hash value and the second electronic signature value, the digital gold token corresponding to the asset information of the second member stored in the gold information database. Token renewal unit for replacing with the third digital gold token
A gold asset management server further comprising a. delete According to claim 1,
The member terminal of the first member is
The first OTP generating function, the second OTP generating function, the first authentication number m and the second authentication number k are stored in advance in the memory of the member terminal of the first member, and the gold asset management When the substitution matrix is received from the server, the first one-time authentication number is generated based on the first OTP generation function stored in the memory of the member terminal of the first member, and then the first one-time authentication number is used as the dividend. , the second OTP generation function that calculates the first operation value x by performing a modulo operation having the first authentication number m as a divisor, and is stored in the memory of the member terminal of the first member. Calculating the second operation value y by performing a modulo operation with the second one-time authentication number as a dividend and the second authentication number k as a divisor after generating the second one-time authentication number based on , Based on the first operation value x and the second operation value y, the component value located in the (x + 1) row (y + 1) column of the substitution matrix is extracted as the first feedback value, and then the first feedback A gold asset management server, characterized in that for transmitting the value to the gold asset management server. A method of operating a gold asset management server that enables a gold present based on a digital gold token,
maintaining a private key storage unit in which a preset private key for digital signature is stored;
Member identification information of the plurality of members, asset information for gold possessed by each of the plurality of members - the purity of gold possessed by each of the plurality of members is identical to each other - the asset information is Indicates information on the weight of gold possessed by each member of the - and a digital gold token corresponding to the asset information of each of the plurality of members - the digital gold token includes the asset information of each of the plurality of members maintaining a gold information database storing a hash value generated by inputting data to a preset hash function and an electronic signature value generated by encrypting the hash value with the private key;
When a process processing request for presenting gold possessed by the first member to a second member, which is another member, is received from a member terminal of one of the plurality of members, the first member, the second member from the gold information database. extracting a first digital gold token corresponding to asset information on gold held by one member and transmitting the same to a member terminal of the first member;
A verification completion message indicating that verification of the first digital gold token has been completed from the member terminal of the first member - the verification completion message is received after the first digital gold token is received by the member terminal of the first member, The member terminal of the first member decrypts the electronic signature value included in the first digital gold token with the public key pre-distributed to the member terminal of the first member and is included in the first digital gold token. As a result of comparing whether the hash values of the asset information data match each other, if it is confirmed that both values match each other, it means a message generated to indicate that the verification of the first digital gold token has been completed. If is received, extracting asset information on gold held by the first member from the gold information database and transmitting the extracted asset information to a member terminal of the first member;
When a gold gift request instructing to gift the second member with gold corresponding to the first weight of the gold owned by the first member is received from the member terminal of the first member, the first member After authentication of the member terminal, the weight of the gold held by the first member exceeds the first weight in the asset information on the gold held by the first member stored in the gold information database. confirming whether or not the weight of gold possessed by the first member exceeds the first weight, completing approval of the gold gift request; and
When the approval for the gold gift request is completed, the weight of the gold held by the first member is determined from the asset information on the gold held by the first member stored in the gold information database. By deducting the weight of the gold held by the first member, asset information on gold held by the first member is updated, and the weight of gold held by the second member is calculated from the asset information on gold held by the second member. Updating asset information on gold held by the second member by increasing the weight by the weight.
including,
The step of completing the approval process is
maintaining an OTP storage unit in which a first OTP (One Time Password) generation function and a second OTP generation function pre-shared with the member terminal of the first member are stored;
The preset first authentication number m (m is a natural number of 2 or more) and the preset second authentication number k (k is a natural number of 2 or more different from m) that are shared with the member terminal of the first member are stored. maintaining a numeric storage unit for authentication;
generating an authentication event for authenticating the member terminal of the first member when the gold gift request is received from the member terminal of the first member;
When the authentication event occurs, a first one-time authentication number is generated based on the first OTP generating function, and then the first one-time authentication number is used as a dividend and the first authentication number m is used as a divisor. ) operation, a first operation value x is calculated, a second one-time authentication number is generated based on the second OTP generating function, and the second one-time authentication number is used as the dividend, and the second authentication number k Calculating a second calculation value y by performing a modulo operation having a divisor of y;
generating a random matrix having a size of mxk composed of random component values and randomly generating a first random value;
A substitution matrix having a size of mxk is generated by substituting an element located in an (x+1) row (y+1) column in the random matrix with the first random value, and the substitution matrix is a member of the first member. requesting transmission of a feedback value corresponding to the permutation matrix to a member terminal of the first member while transmitting to a terminal;
A first feedback value as a feedback value corresponding to the permutation matrix from the member terminal of the first member - the first feedback value is pre-stored in the memory of the member terminal of the first member in the member terminal of the first member After the first operation value x and the second operation value y are calculated based on the first OTP generation function, the second OTP generation function, the first authentication number m and the second authentication number k Checking whether the first feedback value is equal to the first random value when a feedback value generated by extracting a component value located in a (x+1) row (y+1) column in the substitution matrix is received; and
If it is determined that the first feedback value is equal to the first random value, completing authentication of the member terminal of the first member.
A method of operating a gold asset management server comprising a. According to claim 6,
The member terminal of the first member is
When the first digital gold token corresponding to asset information on gold held by the first member is received from the gold asset management server, the electronic signature value included in the first digital gold token is changed to the first member. When it is confirmed that the value decrypted with the public key pre-distributed to the member terminal of and the hash value of the asset information data included in the first digital gold token match each other, both values match each other, After generating the verification completion message indicating that verification of the first digital gold token has been completed, the verification completion message is transmitted to the gold asset management server. According to claim 6,
When the asset information on gold held by the first member and the asset information on gold held by the second member are updated, the updated asset information on gold held by the first member is updated. Applying it as an input to a hash function to generate a first hash value, generating a first electronic signature value by encrypting the first hash value with the private key, and including the first hash value and the first electronic signature value After generating a second digital gold token, the first digital gold token corresponding to the asset information of the first member stored in the gold information database is replaced with the second digital gold token, and the updated second member A second hash value is generated by applying data of asset information about the gold held as an input to the hash function, the second hash value is encrypted with the private key to generate a second electronic signature value, and the second hash value is generated. 2 After generating the third digital gold token including the hash value and the second electronic signature value, the digital gold token corresponding to the asset information of the second member stored in the gold information database is converted into the third digital gold token. step to replace with
Method of operating a gold asset management server further comprising a. delete According to claim 6,
The member terminal of the first member is
The first OTP generating function, the second OTP generating function, the first authentication number m and the second authentication number k are stored in advance in the memory of the member terminal of the first member, and the gold asset management When the substitution matrix is received from the server, the first one-time authentication number is generated based on the first OTP generation function stored in the memory of the member terminal of the first member, and then the first one-time authentication number is used as the dividend. , the second OTP generation function that calculates the first operation value x by performing a modulo operation having the first authentication number m as a divisor, and is stored in the memory of the member terminal of the first member. Calculating the second operation value y by performing a modulo operation with the second one-time authentication number as a dividend and the second authentication number k as a divisor after generating the second one-time authentication number based on , Based on the first operation value x and the second operation value y, the component value located in the (x + 1) row (y + 1) column of the substitution matrix is extracted as the first feedback value, and then the first feedback A method of operating a gold asset management server, characterized in that for transmitting the value to the gold asset management server. Claim 6, claim 7, claim 8 or claim 10 of any one of the method through a combination with a computer to execute a computer program recorded on a computer-readable recording medium. A computer program stored in a storage medium for executing the method of any one of claims 6, 7, 8 or 10 through a combination with a computer.

Images