KR102663355B1 - Black box image data verification method and apparatus based on blockchain - Google Patents

Abstract

The blockchain-based black box video data verification method according to an embodiment of the present invention uses black box video data composed of blocks based on the digital signature authentication method and the message authentication code authentication method. A verification method comprising: receiving investigation target data, which is image data for a time period corresponding to a predetermined event; Verifying a plurality of blocks constituting the data to be investigated through the electronic signature authentication, and dividing the plurality of blocks into normal blocks that have been verified and blocks to be investigated; Uploading verification data, which is data corresponding to the block to be investigated, to the blockchain system; and verifying at least one section data included in the verification data in the blockchain system through the message authentication code authentication.

Description

Black box image data verification method and device based on blockchain {BLACK BOX IMAGE DATA VERIFICATION METHOD AND APPARATUS BASED ON BLOCKCHAIN}

The present invention relates to a method and device for verifying black box video data based on blockchain.

Recently, vehicles sold on the market are equipped with an EDR (Event Data Recorder), represented by a black box, and vehicle accident recording and accident record analysis are performed using this. In this way, the data recorded in EDR is used as a key measure in the analysis of incidents and accidents that even involve human lives.

However, when incidents such as car crashes occur, serious criminal cases are occurring, such as falsifying or altering the vehicle's black box data to turn the situation to one's advantage or maliciously creating innocent victims in ordinary situations. As a result, there is a problem of decreased trust in corporations and public authorities, such as insurance companies, police, and courts, that ultimately made judgments or rulings based on forged or altered data from black boxes.

In order to prevent such incidents, security technologies such as electronic signatures that can be applied to EDR such as black boxes are being researched, but in terms of efficiency, they may not be suitable for EDR environments where large amounts of data are generated.

Therefore, when an incident that requires verification of black box video data, such as a vehicle crash, occurs, an arbitrary number of data verifiers who have been granted appropriate authority in advance can verify the authentication data for the data recorded in the EDR. Therefore, there is an emerging need for technology to prevent malicious forgery and alteration of vehicle data recorded in EDR.

In order to solve the above problems, the present invention seeks to provide a method and device for verifying black box video data based on blockchain.

In addition, the present invention seeks to provide a method and device for verifying data generated from a vehicle, such as CAN (Controller Area Network) data.

However, the object of the present invention is not limited to the matters mentioned above, and other objects not mentioned will be clearly understood by those skilled in the art from the description below.

The blockchain-based black box image data verification method according to an embodiment of the present invention to achieve the above-mentioned purpose is a block unit based on the digital signature authentication method and the message authentication code authentication method. A method of verifying black box image data consisting of: receiving investigation target data, which is image data for a time section corresponding to a predetermined event; Verifying a plurality of blocks constituting the data to be investigated through the electronic signature authentication, and dividing the plurality of blocks into normal blocks that have been verified and blocks to be investigated; Uploading verification data, which is data corresponding to the block to be investigated, to the blockchain system; and verifying at least one section data included in the verification data in the blockchain system through the message authentication code authentication.

Preferably, the message authentication code authentication method is a method of authenticating based on an authentication key generated by performing Shamir's Secret Sharing (SSS)-based key initialization for a plurality of participants, and each of the plurality of participants When the secret value is distributed to the user after the generation of the authentication key, the step of verifying the at least one section data includes: receiving a secret value from a predetermined number of the plurality of participants; restoring the authentication key based on the secret value; and verifying at least one section data included in the block to be investigated using the restored authentication key.

Preferably, the message authentication code authentication method may be performed for the block based on the previous block in the time series, and may be performed based on individual section data for each of the plurality of section data included in the block.

Preferably, the step of receiving the investigation target data further receives the investigation target hash, which is hash data corresponding to the investigation target data, and the step of uploading the verification data to the blockchain system includes the investigation target hash. When further uploading, the step of verifying at least one section data included in the investigation target block can further verify whether the investigation target data has been forged or altered using the investigation target hash.

Preferably, the public key required for electronic signature authentication, the secret value received from the predetermined person, and the hash to be investigated may be stored in the TEE (Trusted Execution Environment) of the main processor.

In addition, the blockchain-based black box video data verification device according to an embodiment of the present invention to achieve the above-described purpose uses black box video data composed of blocks based on the electronic signature authentication method and the message authentication code authentication method. A verification device comprising: a receiving unit that receives investigation target data, which is image data for a time period corresponding to a predetermined event; a first verification unit that verifies a plurality of blocks constituting the data to be investigated through the electronic signature authentication and divides the plurality of blocks into normal blocks that have been verified and blocks to be investigated; A connection unit that uploads verification data corresponding to the block to be investigated to the blockchain system; and a second verification unit that verifies at least one section data included in the verification data in the blockchain system through the message authentication code authentication.

Preferably, the message authentication code authentication method is a method of authenticating based on an authentication key generated by performing Shamir's secret sharing-based key initialization for a plurality of participants, and after generating the authentication key for each of the plurality of participants. When the secret value is distributed, the receiving unit further receives a secret value from a predetermined number of the plurality of participants, the second verification unit restores the authentication key based on the secret value, and the restored authentication key is At least one section data included in the investigation target block can be verified using this method.

Preferably, the message authentication code authentication method may be performed for the block based on the previous block in the time series, and may be performed based on individual section data for each of the plurality of section data included in the block.

Preferably, when the receiving unit further receives a search target hash, which is hash data corresponding to the search target data, and the connection unit further uploads the search target hash, the second verification unit receives the search target hash It is possible to further verify whether the data subject to investigation has been forged or altered by using .

Preferably, the public key required for electronic signature authentication, the secret value received from the predetermined person, and the hash to be investigated may be stored in the TEE of the main processor.

The blockchain-based black box image data verification method and device according to an embodiment of the present invention can improve the reliability of black box image data by preventing insurance fraud or event manipulation through forgery or alteration of black box image data. There is an effect.

1 is a flowchart illustrating a blockchain-based black box image data verification method according to an embodiment of the present invention.
Figure 2 is a flowchart illustrating a message authentication code authentication method according to an embodiment of the present invention.
Figure 3 is a block diagram illustrating a black box image data verification device based on blockchain according to an embodiment of the present invention.
Figure 4 is a diagram explaining the structure of logged data according to an embodiment of the present invention.
Figure 5 is a diagram explaining a normal block and a block to be investigated according to an embodiment of the present invention.
Figure 6 is a reference diagram for explaining a blockchain-based black box image data verification method according to an embodiment of the present invention.

Since the present invention can make various changes and have various embodiments, specific embodiments will be described in detail with reference to the drawings. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and technical scope of the present invention. While describing each drawing, similar reference numerals are used for similar components.

Terms such as first, second, A, and B may be used to describe various components, but the components should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, a first component may be named a second component without departing from the scope of the present invention, and similarly, the second component may also be named a first component. The term and/or includes any of a plurality of related description items or a combination of a plurality of related description items.

The terms used in this application are only used to describe specific embodiments and are not intended to limit the invention. Singular expressions include plural expressions unless the context clearly dictates otherwise. In this application, terms such as “comprise” or “have” are intended to designate the presence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification, but are not intended to indicate the presence of one or more other features. It should be understood that it does not exclude in advance the possibility of the existence or addition of elements, numbers, steps, operations, components, parts, or combinations thereof.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by a person of ordinary skill in the technical field to which the present invention pertains. Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present application. No.

Throughout the specification and claims, when it is said that a part includes a certain component, this means that other components may be further included rather than excluding other components unless specifically stated to the contrary.

Meanwhile, the black box video data of the present invention may be block-level data based on the digital signature authentication method and the message authentication code authentication method. In other words, the black box video data of the present invention may further include authentication data for electronic signature authentication and message authentication code authentication along with the video data.

At this time, an electronic signature is information in electronic form attached to or logically combined with the electronic document in order to be used to indicate that the signer has signed the electronic document. Most electronic signature authentication methods are implemented using public key cryptography algorithms, which are cryptographic technologies that verify integrity and provide authentication and non-repudiation functions.

Additionally, the message authentication code is information used to authenticate messages and is also called Authentication Tag. The message authentication code authentication method can determine whether the message has not been forged or altered by the sender when the message is received, and this MAC value can guarantee the integrity and reliability of the message data.

That is, in the present invention, for black box image data, a digital signature using public key encryption and a MAC using symmetric key encryption can be used simultaneously for efficient generation of authentication data. This is because when only electronic signatures are used for data authentication, it is difficult to use them in a vehicle environment where large amounts of data are generated in real time due to the signature generation time delay for video data.

1 is a flowchart illustrating a blockchain-based black box image data verification method according to an embodiment of the present invention.

In step S110, the image data verification device receives investigation target data, which is image data for a time period corresponding to a predetermined event.

For example, assume that an incident such as a car crash occurs in a vehicle equipped with a black box. At this time, serious incidents may occur, such as forging or altering the video data of the black box to make the situation favorable to oneself or maliciously creating an innocent victim.

Accordingly, the video data verification device can receive investigation target data, which is video data for a section from the time an event such as a vehicle collision occurred until a predetermined time, to verify whether it has not been forged or altered. More specifically, the video data verification device can receive investigation target data from storage such as an SD card inserted into the black box.

Meanwhile, the data subject to investigation may be image data in which an electronic signature value for specific image data is not created or is damaged due to damage caused by a vehicle collision (e.g., functional stoppage due to power loss, data loss due to external shock, etc.).

For example, referring to Figure 5, it can be seen that electronic signature values were normally generated in the two blocks on the left, but electronic signature values were not generated in the block on the right due to a vehicle collision.

In step S120, the image data verification device verifies a plurality of blocks constituting the data to be investigated through electronic signature authentication and divides the plurality of blocks into normal blocks that have been verified and blocks to be investigated.

At this time, the image data verification device can verify each of the plurality of blocks constituting the data to be investigated by performing electronic signature authentication.

In other words, the image data verification device can authenticate the electronic signature included in each of the plurality of blocks using a public key it already possesses, and classify the block for which authentication has been successfully completed as a normal block. Additionally, the image data verification device can classify blocks for which authentication has not been successfully completed due to missing or damaged electronic signatures as blocks subject to investigation.

For example, assuming that the data to be investigated includes a total of 3 blocks, the video data verification device classifies the 2 blocks that were written before the event occurred as normal blocks, and since they were being written at the time the event occurred, the electronic data verification device classifies them as normal blocks. Blocks with missing signatures can be classified as blocks subject to investigation.

In step S130, the video data verification device uploads verification data, which is data corresponding to the block to be investigated, to the blockchain system.

In other words, the video data verification device can upload verification data corresponding to the block to be investigated, which is a block for which electronic signature authentication has not been successfully completed, to a blockchain system connected by wired or wireless communication.

At this time, the blockchain system refers to an algorithm that forms a block by combining multiple transaction details or data, connects several blocks like a chain using a hash, and then copies them and stores them distributedly across multiple people. Using blockchain technology, forgery and alteration of data is impossible, enabling reliable and safe transactions and data processing even without an authoritative intermediary agency.

Finally, in step S140, the video data verification device verifies at least one section data included in the verification data in the blockchain system through message authentication code authentication.

That is, the video data verification device can perform verification by performing message authentication code (MAC) authentication on each of at least one section data included in verification data uploaded to the blockchain system.

For example, when only two section data exist in the verification data, the video data verification device may perform message authentication code authentication for each of the two section data.

Meanwhile, a method for the video data verification device to obtain an authentication key to perform message authentication code authentication will be described later in the description of FIG. 2. However, it goes without saying that the image data verification device can obtain and retain the authentication key through various methods not mentioned in the present invention.

Figure 2 is a flowchart illustrating a message authentication code authentication method according to an embodiment of the present invention.

The message authentication code authentication of the present invention is a method of authenticating a plurality of participants based on an authentication key generated by performing Shamir's Secret Sharing (SSS)-based key initialization. Additionally, a secret value may be pre-distributed to each of the plurality of participants after generating the authentication key.

Meanwhile, Shamir proposed a secret sharing technique based on the (t,n)-threshold concept, polynomial operations, and Lagrange's interpolation. In all processes, including the initialization process, secret value distribution process, and authentication key recovery process, the dealer performs the role of generating, distributing, and restoring secret values from one authentication key. At this time, the dealer is assumed to be a legally authorized person.

During the initialization process, the dealer selects n different non-zero elements of Z _p (all elements of Z _p are coprime with p) for the prime p (p>=n+1), and denotes them as x _i. . At this time, i refers to the participants' turn number, and the range satisfies 1<=i<=n.

In the secret value distribution process, first, the secret (S) that the dealer wants to share is assumed to be an element on Z _p . The dealer secretly selects (t-1) elements from Z _p and assigns them to a ₁ , a ₂ , … , a _t-1, respectively. For any i, the dealer generates a secret value y _i =f(x _i ) using Equation 1 below. The dealer distributes the participant's secret value (y _i ).

In the secret restoration process, the secret value y _i owned by participant P _i is collected from at least t of the n participants by the dealer, and the secret value is distributed using the collected (i, y _i ) pairs and Lagrange interpolation. Restore Equation 1 used in Equation 2 using Equation 2. Additionally, after calculating the authentication key through Equation 2 restored by the dealer, restoration of the authentication key can be completed.

Meanwhile, in the present invention, a plurality of participants include the owner of a vehicle equipped with a black box, the vehicle manufacturer, companies such as the vehicle insurance company, vehicle rental company, etc., and judicial and administrative agencies such as the police, National Institute of Forensic Science, and courts. This can be. However, it will be apparent to those skilled in the art that various participants not mentioned in the present invention may be included in the plurality of participants.

In step S210, the video data verification device receives a secret value from a predetermined number of participants.

For example, the video data verification device may request secret values from a plurality of participants (t) and then receive secret values from n or more of them.

At this time, it may be recorded in the blockchain system which of the plurality of participants agreed to proceed with the verification process and transmitted the secret value.

In step S220, the image data verification device restores the authentication key based on the secret value.

In other words, the video data verification device can restore the authentication key (AK) using the secret value received from a predetermined person as described above.

Finally, in step S230, the image data verification device verifies at least one section data included in the investigation target block using the restored authentication key.

That is, the video data verification device compares the message authentication code for at least one section data included in the investigation target block with the message authentication code generated using the restored authentication key for at least one section data, thereby providing at least one The section data can be verified.

Meanwhile, referring to FIG. 6, a blockchain-based black box image data verification method according to an embodiment of the present invention is shown.

In another embodiment, the message authentication code authentication method may be performed for a block based on the previous block in the time series, and may be performed based on individual section data for each of a plurality of section data included in the block.

For example, referring to Figure 4, the structure of the investigation target data composed of blocks is shown.

Here, the logs recorded for message authentication code authentication include Auth _index and Auth _data , where i is the index of the block included in the investigation target data, j is the index of the section data within the block, and AK is the authentication key.

That is, referring to Equation 3, it can be seen that the image data verification device calculates authentication data for block (i,j) using the authentication data of (i,j-1), which is the previous block in the time series. (At this time, the authentication data of block (i,0) is 0.)

Additionally, referring to Equation 4, it can be seen that the image data verification device calculates authentication data using individual section data for each of a plurality of section data.

In addition, the video data verification device can perform an electronic signature on the block using the hash value of Equation 5 below when the preset number (K) of section data inside the block is filled. Preferably, the image data verification device is capable of performing an electronic signature on the TEE.

In another embodiment, when the video data verification device further receives the investigation target hash, which is hash data corresponding to the investigation target data in step S110, and step S130 further uploads the investigation target hash, the investigation target hash You can use to further verify whether the data subject to investigation has been forged or altered.

For example, the video data verification device cannot successfully verify whether the data under investigation has been forged or altered if the data under investigation is manipulated after the authentication key (AK) is restored and the MAC of the data under investigation is also manipulated. .

Therefore, the video data verification device can verify whether the investigation target data has been forged or altered from the original by separately receiving the investigation target hash corresponding to the investigation target data and uploading it to the blockchain system.

At this time, the hash to be investigated is a value calculated using a cryptographic hash function. The cryptographic hash function is a function that maps data of arbitrary length to data of fixed length, and includes Collision Resistance, Preimage Resistance, and 2nd Preimage Resistance. It is designed to be safe.

In another embodiment, the public key required for electronic signature authentication, the secret value received from a predetermined person, and the hash to be investigated may be stored in the TEE (Trusted Execution Environment) of the main processor.

In other words, the TEE stores data requiring security, such as the public key used for electronic signature authentication, secret values received from a certain number of people to restore the authentication key, and hashes to be investigated, thereby improving the security of the entire system. .

At this time, TEE refers to the security area of the main processor. In general, it ensures that the code and data loaded inside are protected in terms of confidentiality and integrity. More specifically, it can provide security features such as isolated execution, integrity of applications running using TEE, and confidentiality of assets.

Figure 3 is a block diagram illustrating a black box image data verification device based on blockchain according to an embodiment of the present invention.

Referring to FIG. 3, the blockchain-based black box image data verification device 300 according to an embodiment of the present invention includes a receiving unit 310, a first verification unit 320, a connection unit 330, and a second verification unit. Includes (340).

The receiver 310 receives investigation target data, which is image data for a time section corresponding to a predetermined event.

The first verification unit 320 verifies a plurality of blocks constituting the data to be investigated through electronic signature authentication and divides the plurality of blocks into normal blocks that have been verified and blocks to be investigated.

The connection unit 330 uploads verification data, which is data corresponding to the block to be investigated, to the blockchain system.

The second verification unit 340 verifies at least one section data included in the verification data in the blockchain system through message authentication code authentication.

In another embodiment, the message authentication code authentication method is a method of authenticating based on an authentication key generated by performing Shamir's secret sharing-based key initialization for a plurality of participants, and each of the plurality of participants receives a secret key after generation of the authentication key. When the value is distributed, the receiving unit 310 further receives a secret value from a predetermined number of the plurality of participants, the second verification unit 340 restores the authentication key based on the secret value, and the restored At least one section data included in the block to be investigated can be verified using the authentication key.

In another embodiment, the message authentication code authentication method may be performed for a block based on the previous block in the time series, and may be performed based on individual section data for each of a plurality of section data included in the block.

In another embodiment, when the receiving unit 310 further receives the investigation target hash, which is hash data corresponding to the investigation target data, and the connection unit 330 further uploads the investigation target hash, the second verification unit ( 340) can further verify whether the data subject to investigation has been forged or altered by using the hash of the subject of investigation.

In another embodiment, the public key required for electronic signature authentication, the secret value received from a predetermined person, and the hash to be investigated may be stored in the TEE of the main processor.

Exemplary methods of the present invention are presented as a series of operations for clarity of explanation, but this is not intended to limit the order in which the steps are performed, and each step may be performed simultaneously or in a different order, if necessary. In order to implement the method according to the present disclosure, other steps may be included in addition to the exemplified steps, some steps may be excluded and the remaining steps may be included, or some steps may be excluded and additional other steps may be included.

Meanwhile, the above-described embodiments of the present invention can be written as a program that can be executed on a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium.

The computer-readable recording media includes magnetic storage media (eg, ROM, floppy disk, hard disk, etc.) and optical read media (eg, CD-ROM, DVD, etc.).

So far, the present invention has been examined focusing on its preferred embodiments. A person skilled in the art to which the present invention pertains will understand that the present invention may be implemented in a modified form without departing from the essential characteristics of the present invention. Therefore, the disclosed embodiments should be considered from an illustrative rather than a restrictive perspective. The scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the equivalent scope should be construed as being included in the present invention.

Claims (10)

In the method of verifying black box video data composed of blocks based on the digital signature authentication method and the message authentication code authentication method,
Receiving investigation target data, which is image data for a time section corresponding to a predetermined event;
A plurality of blocks constituting the data subject to investigation are verified through the digital signature authentication, and the plurality of blocks are verified to be a normal block - the normal block is a block for which the digital signature authentication has been successfully completed among the plurality of blocks - and a block to be investigated that requires verification - the block to be investigated is a block in which the digital signature authentication has not been successfully completed among the plurality of blocks because the digital signature is missing or damaged.
Uploading verification data, which is data corresponding to the investigation target block excluding the normal block among the plurality of blocks, to the blockchain system through the electronic signature authentication; and
Through the message authentication code authentication, the verification data in the blockchain system - the verification data is data classified as the block to be investigated, excluding data corresponding to the normal block among the plurality of blocks through the electronic signature authentication. Step of verifying at least one section data included in -
Black box video data verification method based on blockchain including. According to paragraph 1,
The message authentication code authentication method is
This is a method of authentication based on the authentication key generated by performing Shamir's Secret Sharing (SSS)-based key initialization for multiple participants,
When a secret value is distributed to each of the plurality of participants after generating the authentication key,
The step of verifying the at least one section data is
Receiving a secret value from a predetermined number of the plurality of participants;
restoring the authentication key based on the secret value; and
Verifying at least one section data included in the investigation target block using the restored authentication key.
A blockchain-based black box video data verification method comprising: According to paragraph 2,
The message authentication code authentication method is
The block is performed based on the previous block in the time series,
A blockchain-based black box image data verification method, characterized in that each of the plurality of section data included in the block is performed based on individual section data. According to paragraph 2,
When the step of receiving the investigation target data further receives the investigation target hash, which is hash data corresponding to the investigation target data, and the step of uploading the verification data to the blockchain system further uploads the investigation target hash. ,
The step of verifying at least one section data included in the investigation target block is
A blockchain-based black box video data verification method characterized by further verifying whether the investigation target data has been forged or altered using the investigation target hash. According to clause 4,
Blockchain-based black box video data, wherein the public key required for electronic signature authentication, the secret value received from the predetermined person, and the hash to be investigated are stored in the TEE (Trusted Execution Environment) of the main processor. Verification method. In the device for verifying black box video data composed of blocks based on the electronic signature authentication method and the message authentication code authentication method,
A receiving unit that receives investigation target data, which is image data for a time section corresponding to a predetermined event;
A plurality of blocks constituting the data subject to investigation are verified through the digital signature authentication, and the plurality of blocks are verified to be a normal block - the normal block is a block for which the digital signature authentication has been successfully completed among the plurality of blocks - A first verification unit that classifies a block to be investigated and a block requiring verification - the block to be investigated is a block in which the digital signature authentication has not been successfully completed among the plurality of blocks due to missing or damaged digital signatures.
A connection unit that uploads verification data, which is data corresponding to the investigation target block excluding the normal block among the plurality of blocks, to the blockchain system through the electronic signature authentication; and
Through the message authentication code authentication, the verification data in the blockchain system - the verification data is data classified as the block to be investigated, excluding data corresponding to the normal block among the plurality of blocks through the electronic signature authentication. A second verification unit that verifies at least one section data included in -;
Black box video data verification device based on blockchain including. According to clause 6,
The message authentication code authentication method is
This is a method of authenticating based on the authentication key generated by performing Shamir's secret sharing-based key initialization for multiple participants,
When a secret value is distributed to each of the plurality of participants after generating the authentication key,
The receiver is
Receiving additional secret values from a predetermined number of the plurality of participants,
The second verification unit
Restore the authentication key based on the secret value,
A blockchain-based black box image data verification device characterized in that it verifies at least one section data included in the investigation target block using the restored authentication key. In clause 7,
The message authentication code authentication method is
The block is performed based on the previous block in the time series,
A blockchain-based black box image data verification device, characterized in that each of the plurality of section data included in the block is performed based on individual section data. In clause 7,
When the receiving unit further receives the investigation target hash, which is hash data corresponding to the investigation target data, and the connection unit further uploads the investigation target hash,
The second verification unit
A blockchain-based black box video data verification device that further verifies whether the investigation target data has been forged or altered using the investigation target hash. According to clause 9,
The public key required for electronic signature authentication, the secret value received from the predetermined person, and the hash to be investigated are
A blockchain-based black box video data verification device that is stored in the TEE of the main processor.