KR20200021123A - Access control system and method for media blockchain - Google Patents

Abstract

The present invention relates to an access control system for a media blockchain, which is capable of allowing only a registered vendor or user to access a blockchain and a method thereof. According to the present invention, a blockchain access control system comprises an access control management server, an agent server, and a blockchain network such that the blockchain network is accessed through only the agent server. The blockchain network generates a block storing content purchase history information, content copyright information, or content information to add and store the block to and in a blockchain. The access control management server manages a blockchain access right for each blockchain user and issues the blockchain user with a token in accordance with the access right. The agent server is connected to the access control management server to request issuance of the token for the blockchain user, verifies the token of the blockchain user who accesses the blockchain, and is connected to the blockchain network to process information registration or information search in the blockchain in accordance with a request of the blockchain user.

Description

Access Control System and Method for Media Blockchain {ACCESS CONTROL SYSTEM AND METHOD FOR MEDIA BLOCKCHAIN}

The present invention relates to a blockchain-based DRM system, and more specifically, to a blockchain-based DRM system, an invention is disclosed for a system for controlling access such as an access server for recording on a blockchain or for inquiring in a blockchain. do.

Digital Rights Management (DRM) is a technology that prevents illegal and unlimited copying of content that is digitalized and can be easily distributed through an information communication network, and manages digital content to be used only by legitimate users.

DRM is a technology that collectively manages the creation, distribution, and management of content. It provides a comprehensive digital rights management system that includes content packaging, content distribution, billing for content use, content monitoring, and personalization of content. It is a technique to construct.

In the DRM system, content information and license information for content management are generally stored only in a central server, so that various communication loads are generated between the user terminal and the server when various user terminals access the DRM content.

Blockchain refers to a technology that processes various data by distributing it to nodes participating in a network without storing it in a central server. It is widely used in virtual currency as well as public systems such as real estate, land, and resident registration. Transaction records are organized in units of blocks, each of which has a characteristic of being followed by time, and each block contains connection information connected to the preceding block and the following block, making it difficult to manipulate the contents of the past block.

However, since it is impossible to change or delete the contents already recorded on the blockchain, the contents created by illegal access of unauthorized vendors or users are also impossible to delete or change so that illegal access of unauthorized vendors or users may be prevented. The need for a way to do this is increasing.

According to the present invention, even if a media blockchain uses a public blockchain, a method for blocking access of a blockchain of a vendor or a user who does not have access to the blockchain and allowing only registered vendors or users to access the blockchain The purpose is to provide.

The blockchain access control system according to an embodiment of the present invention includes an access control management server, an agent server, and a blockchain network.

The blockchain access control system can only connect to the blockchain network through an agent server.

In the blockchain network, a blockchain node that generates a block for storing content purchase history information or content copyright information or content information and adds the blockchain to the blockchain is connected to a P2P network.

The access control management server manages the access rights of the blockchain for each blockchain user, and issues tokens according to the access rights to the blockchain users.

The agent server connects to the access control management server to request issuance of tokens for blockchain users, verifies the tokens of blockchain users accessing the blockchain, and connects to the blockchain network to blockchain users according to the request of blockchain users. Process information registration or process information inquiry.

Further, according to a further aspect of the present invention, it may further comprise a content provider server for registering the content information in the blockchain.

In addition, the service provider server and the license management server may further include a content purchase history or content copyright information according to an additional aspect of the present invention.

According to the present invention, since the agent server capable of storing information on the blockchain or querying information accesses the blockchain after confirming the access right, the blockchain of a vendor or user who does not have access to the blockchain can be blocked. Occurs.

1 schematically shows a blockchain access control system according to an embodiment of the present invention.
2 schematically illustrates a blockchain access control system according to a further aspect of the present invention.
3 shows a block diagram of each server of the blockchain access control system according to an additional aspect of the present invention.
4 is a block diagram of respective servers of a blockchain access control system according to another aspect of the present invention.
5 is a flowchart illustrating a content information registration procedure according to another embodiment of the present invention.
6 illustrates a content copyright information registration procedure according to another embodiment of the present invention.
7 illustrates a content purchase history storage and license issuance procedure according to another embodiment of the present invention.

The foregoing and further aspects are embodied through the embodiments described with reference to the accompanying drawings. It is to be understood that the components of the embodiments can be variously combined within the embodiments as long as there are no other mentions or contradiction. Each block in the block diagram may in some cases represent a physical part, but in another case may be a logical representation of a function of one physical part or of a function across a plurality of physical parts. Sometimes a block or part of it may be a set of program instructions. These blocks may be implemented in whole or in part by hardware, software or a combination thereof.

1 schematically shows a blockchain access control system according to an embodiment of the present invention. According to an embodiment of the present invention, the blockchain access control system 10 includes a blockchain network 300, an access control management server 200, and an agent server 100.

The blockchain network 300 stores content purchase history information or content copyright information or content information. That is, if there is a request for registration of content purchase history information or content copyright information or content information, a transaction is generated to generate a block including these and added to the blockchain. The blockchain network 300 may be classified into an open type, a consortium type, and a private type according to an aspect of the present invention.

Public blockchains do not have a trust relationship between operators and participants. The blockchain is open to anyone, and there are no restrictions on the ability to generate and send transactions. Since there is no restriction of the participant in the blockchain network 300, anyone has the right to create and verify the block, that is, the right to participate in the consensus algorithm. Consensus algorithms generally use proof of work (PoW) or proof of stake (PoS). Because it guarantees anonymity, ID management for blockchain nodes is not performed.

Consortium-type blockchains are operated by consortium members consisting of content providers and copyright holders, and there is a trust relationship between consortium members who are participants. Blockchain access is granted only to consortium members, and only consortium members have the right to create and send transactions, and only the consortium members have the right to create and view blocks, that is, to participate in consensus algorithms. Delegated PoS (DPoS) and Practical Byzantine Fault Tolerance (PBFT) may be used as a consensus algorithm. ID management is performed for blockchain nodes for authentication and access control.

Private blockchains have content providers, that is, specific operators, and blockchain access rights are determined by the operator. The authority to create and send a transaction can be owned by the operating entity or a specific member, and only the operating entity has the authority to participate in the consensus algorithm. As a consensus algorithm, DPoS, PBFT and Proof of Authority (PoA) can be used. For authentication and access control, ID management can be performed for blockchain nodes and it can record which node requested data to which blockchain and when.

The access control management server 200 includes an access authority management unit 210 and a token issuer 220. The access right management unit 210 and the token issuing unit 220 are program instruction sets loaded in a memory and executed by a processor. The access right management unit 210 and the token issuing unit 220 may be located in one physical server, or may exist in separate physical servers.

The access right management unit 210 manages access rights of blockchains for each user or vendor of blockchain users registered in the system. In the blockchain access control system 10, a blockchain user may be a service user, a content provider server, or a service provider that purchases and uses content.

The token issuing unit 220 issues a token according to the access right to the blockchain user according to the token issuance request of the blockchain user through the agent server 100. Therefore, the token issuing unit 220 issues tokens having different authority according to the access authority managed. The issued token is also delivered to the blockchain user who requested the issue through the agent server 100 in the same manner as the request.

The agent server 100 includes a token issue processing unit 110, a token verification unit 120 of the agent server 100, and a blockchain interface unit 130. The token issue processing unit 110, the token verification unit 120 of the agent server 100, and the blockchain interface unit 130 are a set of program instructions that are loaded into a memory and executed in a processor. The token issue processing unit 110, the token verification unit 120 of the agent server 100, and the blockchain interface unit 130 may be located in one physical server or may exist in separate physical servers. Can be.

When the token issuance processing unit 110 receives a token issue request of the blockchain user, the token chain is connected to the access control management server 200 to request a token issue for the blockchain user, and receives the issued token to request the blockchain to issue the token. Pass it to the user.

The token verification unit 120 of the agent server 100 stores and stores the tokens passed through the token issuing processing unit 110 with the blockchain users and compares them with the tokens of the blockchain users included in the request to access the blockchain. To verify. It also verifies that the tokens included in the request have the necessary access rights to fulfill the request.

The blockchain interface unit 130 connects to the blockchain network 300 and processes information registration or information inquiry on the blockchain at the request of the blockchain user. The node of the blockchain network 300 may be accessed only through the blockchain interface unit 130. In general, when a blockchain is not changed, a transaction is not generated (processed by calling the Call function), and when a blockchain is changed, a transaction is generated.

Even if the blockchain access control system 10 uses an open blockchain, the blockchain can be accessed only through the agent server 100, thereby allowing access control like a private blockchain.

2 schematically shows a blockchain access control system according to a further aspect of the invention and FIG. 3 shows a block diagram of each server of the blockchain access control system 10 according to a further aspect of the invention. The blockchain access control system 10 illustrated in FIGS. 2 and 3 has a content provider server 400, a service provider server 500, and a license management server as compared to the blockchain access control system 10 illustrated in FIG. 1. 600 is added.

According to another embodiment of the invention the blockchain access control system 10 includes a blockchain network 300, an access control management server 200, an agent server 100, and additionally the content provider server 400 It may further include. As shown in FIG. 2, the content provider server 400 may access the blockchain through the agent server 100.

The content provider server 400 may include a token manager 410 and a content information register 420. The token management unit 410 and the content information registration unit 420 of the content provider server 400 are a set of program instructions loaded into a memory and executed by a processor. The token management unit 410 and the content information registration unit 420 of the content provider server 400 may be located in one physical server or may exist in separate physical servers.

The token manager 410 of the content provider server 400 may request to issue a token to the agent server 100 and store and manage the issued token. The token issuance request requested by the token manager 410 of the content provider server 400 includes a content provider ID (CP ID) for identifying the content provider. At this time, the content provider server 400 is registered in advance in the system.

The content information registration unit 420 may request content information registration including a token, a content provider ID (CP ID), and content information issued to the agent server 100 to store the content information in the blockchain.

The token verification unit 120 of the agent server 100 receiving the content information registration request of the content provider server 400 verifies the token included in the content information registration request from the content provider server 400. At this time, the token verification unit 120 of the agent server 100 matches the CP ID of the content provider server 400 with the tokens transferred through the token issuing processing unit 110 and stores the tokens included in the content information registration request. Verify by comparison. It also verifies that the tokens included in the request have the necessary access rights to fulfill the request.

After token verification, the blockchain interface unit 130 of the agent server 100 connects to the blockchain network 300 and requests the blockchain storage of content information. In this case, since the blockchain needs to be changed, a transaction occurs in the blockchain.

According to another embodiment of the invention blockchain access control system 10 includes a blockchain network 300, an access control management server 200, an agent server 100, and additionally the service provider server 500 And, the license management server 600 may further include. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token manager 510 and a content packaging requester 520. The token management unit 510 and the content packaging requesting unit 520 of the service provider server 500 are a set of program instructions that are loaded into a memory and executed in a processor. The token management unit 510 and the content packaging requesting unit 520 of the service provider server 500 may be located in one physical server or may exist in separate physical servers.

The token manager 510 of the service provider server 500 may request to issue a token to the agent server 100 and store and manage the issued token. The token issuance request requested by the token manager 510 of the service provider server 500 includes a service provider ID (SP ID) for identifying a service provider. At this time, the service provider server 500 is registered in advance in the system.

The content packaging requesting unit 520 may transmit a content packaging request including the issued token, the content ID, and the SP ID to the license management server 600. In this case, the content packaging request may further include a content download path, a content packaging path, and a content name. In the content packaging request, DCM information including the content download path, the content packaging path, and the content name may be delivered to the content ID and the content packaging request instead of the content ID.

The license management server 600 may include a token verification request unit 610, a content information request unit 620, a packaging unit 630, and a copyright information registration unit 640. The token verification request unit 610, the content information request unit 620, the packaging unit 630, and the copyright information registration unit 640 are a program instruction set loaded in a memory and executed by a processor. The token verification request unit 610, the content information request unit 620, the packaging unit 630, and the copyright information registration unit 640 may be located on a single physical server, or may be located on a separate physical server. Each may be present.

The token verification request unit 610 verifies the token included in the content packaging request of the service provider server 500 through the agent server 100. That is, when the content packaging request is transmitted to the agent server 100, the token verification unit 120 of the agent server 100 is included in the content packaging request and the token stored in match with the SP ID of the service provider server 500. Validate by comparing tokens. It also verifies that the tokens included in the request have the necessary access rights to fulfill the request.

The content information requesting unit 620 obtains a Universal Content Identifier (UCI) as a content ID included in the content packaging request, and transmits a request for information on content corresponding to the UCI to the blockchain through the agent server 100. The blockchain inquires the content information stored in the blockchain with the corresponding UCI and transmits the retrieved content information to the content information request unit 620 of the license management server 600 through the agent server 100. UCI is a well-known technique and a detailed description of the UCI is omitted.

The packaging unit 630 packages the content based on the content information received by the content information requesting unit 620 from the blockchain. Packaging is the process of processing with DRM to protect the content.

The copyright information registration unit 640 may generate content copyright information based on the received content information and request a registration to the blockchain through the agent server 100. At this time, since the contents of the blockchain change, transactions occur in the blockchain.

According to another embodiment of the invention blockchain access control system 10 includes a blockchain network 300, an access control management server 200, an agent server 100, and additionally the service provider server 500 It may further include. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token manager 510 and a purchase history information register 530. The token manager 510 and the purchase history information register 530 of the service provider server 500 are a program instruction set loaded in a memory and executed by a processor. The token manager 510 and the purchase history information register 530 of the service provider server 500 may be located in one physical server or may exist in separate physical servers.

The token manager 510 of the service provider server 500 may request to issue the token of the service user to the agent server 100 according to the purchase of the content of the service user, and store and manage the issued token. At this time, the token issuance request requested by the token management unit 510 of the service provider server 500 includes a service user ID for identifying a service user. At this time, the service user is registered in advance in the system.

The purchase history information registration unit 530 transmits a request for the encryption code of the service user including the issued token, the content ID, and the service user ID to the agent server 100 to request the content purchase history information registration of the service user.

The agent server 100 may further include an encryption code generator 140 in addition to the token issuing processor 110, the token verification unit 120 of the agent server 100, and the blockchain interface 130.

When the encryption code generation unit 140 receives the encryption code request, the encryption code generation unit 140 may generate the encryption code information used for the encryption and decryption of the license information and transmit the encryption code information to the service user through the service provider server 500.

In addition, when the token verification unit 120 of the agent server 100 receives the encryption code request from the service provider server 500, the token verification unit 120 verifies the token included in the request. The blockchain interface unit 130 may connect to the blockchain network 300 and request the blockchain storage of content purchase history information. At this time, since the contents of the blockchain are changed, a transaction occurs.

According to another embodiment of the invention blockchain access control system 10 includes a blockchain network 300, an access control management server 200, an agent server 100, a service provider server 500 The license management server 600 may further include. As shown in FIG. 2, the service provider server 500 may access the blockchain through the agent server 100.

The service provider server 500 may include a token manager 510, a purchase history information register 530, and may further include a license requester 540. The token manager 510, the purchase history information register 530, and the license requester 540 of the service provider server 500 are a set of program instructions that are loaded into a memory and executed in a processor. The token manager 510, the purchase history information register 530, and the license requester 540 of the service provider server 500 may be located on one physical server, or may exist on separate physical servers. have.

The license request unit 540 may transmit a license issuance request of a service user including the received encryption code, a service user ID, and a content ID to the license management server 600 to request a license.

The license management server 600 may include a license issuer 650. The license issuer 650 is a program instruction set loaded in a memory and executed by a processor.

The license issuing unit 650 receives a request for issuing a license of a service user including encryption code information, an identification ID and a content identifier of a service user from the service provider server 500, and transmits the license to the agent server 100. The content information and the content copyright information are received from the blockchain through 100), and an encrypted license is issued to the service user who has requested the issuance of the license through the service provider server 500.

According to another embodiment of the present invention, the blockchain access control system 10 includes a blockchain network 300, an access control management server 200, an agent server 100, and a service provider server 500. It may further include.

The service provider server 500 includes a content information list requester 550 and a content information list provider 560. The content information list requesting unit 550 and the content information list providing unit 560 are a set of program instructions loaded into a memory and executed by a processor. The content information list requesting unit 550 and the content information list providing unit 560 may be located in one physical server or may exist in separate physical servers.

The service user who wants to check the list of contents provided by the service provider may request the corresponding list from the service provider server 500. The content information list request unit 550, which is requested to provide a content list list of a service user, requests an agent server to query the contents information list registered in the blockchain with the service provider ID (SP ID). The request can be sent to 100).

The content information list providing unit 560 may receive the content information list registered in the blockchain through the agent server 100 and provide the same to the service user.

At this time, when the token verification unit 120 of the agent server 100 receives a request for querying the content information list from the service provider server 500, the token verification unit 120 verifies the token included in the request, and the blockchain interface unit of the agent server 100 ( 130 may be connected to the blockchain network 300 to query and deliver a list of registered content information. At this time, since the contents of the blockchain are not changed, no transaction occurs.

4 is a block diagram of respective servers of a blockchain access control system according to another aspect of the present invention. As shown in FIG. 4, the access control management server 200 may further include a token verification unit 230.

According to this aspect, the token verification unit 120 of the agent server 100 requests only the verification of the received token from the access control management server 200, and the token verification unit 230 of the access control management server 200 The token is validated against the received token issued by itself. At this time, the token also checks whether the agent server 100 has the authority to perform the received request. Accordingly, the agent server 100 must deliver the information for verifying the token including the content of the request and the blockchain user who transmitted the token.

A blockchain access control method according to an aspect of the present invention includes a token issuing request step, a token issuing reception step, a token transmission step, an access request reception step, a token verification step, and a request processing step.

In the token issuance step, the agent server 100 receives a token issue request of a blockchain user. The blockchain user in the blockchain access control method of this aspect may be a service user, a content provider server, or a service provider that purchases and uses content.

In the token issuance receiving step, the agent server 100 requests the token issuance from the access control management server 200 and receives the token issued by the access control management server 200 according to the access authority of the corresponding blockchain user.

In the token transmission step, the agent server 100 transmits the issued token to the blockchain user who requested the token issuance.

In the access request receiving step, the agent server 100 receives a request for accessing an information block stored in a blockchain including a token or an access request for a blockchain including an information registration request in the blockchain.

The token verification step is a token verification step in which the agent server 100 verifies the validity of the token included in the access request to the blockchain. In this step, the agent server 100 matches and stores the issued token with the blockchain user, and then compares the token with the token of the blockchain user included in the request to access the blockchain. It also verifies that the tokens included in the request have the necessary access rights to fulfill the request.

In the request processing step, the agent server 100 connects to the blockchain to process an access request, and delivers the processing result to the blockchain user.

5 is a flowchart illustrating a content information registration procedure according to another embodiment of the present invention. A blockchain access control method according to another aspect of the invention includes a token issuing request step, a token issuing receiving step, a token transmitting step, an access request receiving step, a token verification step, and a request processing step.

The blockchain user in this aspect is the content provider server 400.

The access request receiving step in this aspect is a step in which the agent server 100 receives a content information registration request of the content provider server 400 including the issued token, the content provider ID (CP ID), and the content information.

In this aspect, the request processing step is a step in which the agent server 100 connects to the blockchain network 300 to request blockchain storage of content information and delivers the request result to the content provider server 400.

In other words, this aspect is an access control method for a procedure in which the content provider server 400 registers content information in the blockchain through the agent server 100.

Referring to FIG. 5, the content provider server 400 first requests a token from the agent server 100 to register content information in the blockchain (S1000). This request includes a content provider ID (CP ID). The agent server 100 transmits a token issuance request of the content provider server 400 to the access control management server 200 (S1020), and the access control management server generates a token corresponding to the access authority of the corresponding content provider ID. (S1040). The generated token is delivered to the content provider server 400 through the agent server 100 (S1060, S1080). The content provider server 400 transmits a content information registration request including the issued token, its content provider ID, and content information to the agent server 100 to request registration with the blockchain (S1100). Upon receiving the content information registration request, the agent server 100 verifies the token included in the request (S1120), and if the verification result token is valid, connects to the blockchain and requests the content information registration (S1140). The blockchain generates a transaction for this request and adds it to the block (S1160). The agent server 100 transmits the request result to the content provider server 400.

6 illustrates a content copyright information registration procedure according to another embodiment of the present invention. A blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance reception step, a token transmission step, an access request reception step, a token verification step, a request processing step, and copyright information. The method may further include receiving a registration request and requesting registration in the blockchain.

The blockchain user in this aspect is a service provider server 500.

In this aspect, the access request receiving step includes a content packaging request in which the agent server 100 includes a token, a service provider ID (SP ID), and a content ID issued from the service provider server 500 through the license management server 600. Receiving.

The request processing step in this aspect is a step in which the agent server 100 connects to the blockchain network 300 to query the content information and delivers the retrieved content information to the license management server 600.

Receiving a request for registration of copyright information added in the blockchain access control method of this aspect is a step in which the agent server 100 receives a blockchain registration request of content copyright information generated by a license server and registers in a blockchain. The requesting is a step in which the agent server 100 connects to the blockchain network 300 to request blockchain storage of content copyright information and delivers the request result to the license server.

Referring to FIG. 6, the service provider server 500 first requests a token from the agent server 100 to register content copyright information in the blockchain (S2000). This request includes a Service Provider ID (SP ID). Agent server 100 transmits a token issuance request of the service provider server 500 to the access control management server 200 (S2020), the access control management server generates a token corresponding to the access authority of the service provider ID. (S2040). The generated token is delivered to the service provider server 500 through the agent server 100 (S2060, S2080). The service provider server 500 transmits a content packaging request including the issued token, its service provider ID, and DCF information (including content ID) to the license management server 600 (S2100). The license management server 600 transmits a content packaging request to which the license server ID is added to the agent server 100 to verify that the request is valid (S2120). Upon receiving the content packaging request, the agent server 100 verifies the token included in the request (S2140), and transmits the verification result back to the license management server 600 (S2160). The license management server 600 obtains the UCI from the content ID included in the DCF information (S2180) and transmits a content information request including the UCI to the agent server 100 (S2200). The agent server 100 requests a content information inquiry by connecting to the blockchain (S2220). The blockchain inquires the content on the basis of the UCI (S2240) and transmits the retrieved content information to the license management server 600 through the agent server 100 (S2260, S2280). The license management server 600 generates copyright information based on the received content information and performs packaging (S2300). The generated content copyright information is included in the content copyright information registration request and transmitted to the agent server 100 to request registration in the blockchain (S2320). The agent server 100 registers content copyright information by connecting to the blockchain (S2340). At this time, the blockchain generates a transaction and adds it to the block (S2360). The agent server 100 transmits the request result to the service provider server 500 through the license management server (S2380, S2400).

7 illustrates a content purchase history storage and license issuance procedure according to another embodiment of the present invention. A blockchain access control method according to another aspect of the invention includes a token issuance request step, a token issuance reception step, a token transmission step, an access request reception step, a token verification step, a request processing step, and a license issuance step. The method may further include receiving a request, verifying a license issuance request, querying content information and content copyright information, and delivering a license.

The blockchain user in this aspect is a service user.

In this aspect, the access request receiving step is a step in which the agent server 100 receives the encryption code request from the service user who purchased the content through the service provider server 500.

In the request processing step in this aspect, the agent server 100 connects to the blockchain network 300 to request the blockchain storage of the content purchase history information of the service user, and generates an encryption code to generate the service provider server 500. It is a step of delivering to the service user through.

In the blockchain access control method of this aspect, the license issuance request receiving step is a step in which the agent server 100 receives a license issuance request of a service user delivered by the service provider server 500 from the license management server 600, The step of verifying the license issuance request is the step of the agent server 100 verifying the license issuance request, and the step of inquiring the content information and the content copyright information is the agent server 100 is connected to the blockchain network 300 to the content The information and content copyright information is inquired and delivered to the license management server 600. In the license delivery step, the license management server 600 generates license information based on the received content information and content copyright information. Provides services by encrypting license information using password A step of delivering services to users through a server.

Referring to FIG. 7, the service user who purchased the content to the service provider transmits a token request including his or her service user ID to the service provider in order to obtain a license (S3000). The service provider server 500 requests a token from the agent server 100 by adding its service provider ID to the received token request (S3020). The agent server 100 transmits a token issuance request of the service user transmitted by the service provider server 500 to the access control management server 200 (S3040), and the access control management server conforms to the access authority of the corresponding service user ID. Token is generated (S3060). The generated token is delivered to the service provider server 500 through the agent server 100 (S3080 and S3100). The service provider server 500 finally delivers the token issued to the service user again (S3120). The service user who receives the token transmits an encryption code request used to decrypt the license to the service provider server 500 (S3140). The cipher code request includes the issued token, the service user ID and the content ID. The service provider server 500 adds its service provider ID (SP ID) to the received encryption code request and transmits it to the agent server 100 (S3160). Agent server 100 verifies the token of the received request (S3180), and generates a random encryption code (S3200). The encryption code and the User ID can be combined to generate a key that encrypts and decrypts the license metadata. After generating the encryption code, the agent server 100 connects to the blockchain and requests registration of content purchase history information including a service user ID (User ID) and a content ID included in the encryption code generation request (S3220). At this time, the blockchain generates a transaction to store the corresponding information in the block (S3240). The agent server 100 transmits the generated encryption code to the service user through the service provider server 500 (S3260, S3280). The service user who has received the encryption code transmits a license request for the purchased content to the service provider server 500 (S3300). The license request includes an encryption code, a service user ID, and a content ID. The service provider server 500 adds its service provider ID (SP ID) to the license request and transmits it to the license management server 600 (S3320). The license management server 600 adds its license server ID to the received license request to verify that the request is valid and transmits it to the agent server 100 (S3340). The agent server 100 verifies the encryption code, the service provider ID, and the license server ID included in the received request (S3360), and requests copyright information and content information from the blockchain (S3380). The blockchain inquires the blockchain in response to the request (S3400) and transmits copyright information and content information to the agent server 100 (S3420), and the agent server 100 transmits copyright information and content information to the license management server 600. To be transmitted (S3440). The license management server 600 generates license information based on the received content information and content copyright information (S3460) and encrypts it with an encryption key generated by using an encryption code, and then provides the service user with the service provider server 500. Transfer (S3480, S3500). The service user decrypts the received encrypted license information with an encryption key generated by using an encryption code, obtains a content decryption key from the license information, and plays the content (S3520).

A blockchain access control method according to another aspect of the invention includes a token issuing request step, a token issuing receiving step, a token transmitting step, an access request receiving step, a token verification step, and a request processing step.

The blockchain user in this aspect is a service user.

The access request receiving step in this aspect is a step in which the agent server 100 receives a content information list request registered from a service user through the service provider server 500.

The request processing step in this aspect is a step in which the agent server 100 connects to the blockchain network 300 to inquire and deliver a registered content information list.

That is, this aspect is an access control method for a procedure in which a service user requests and obtains a blockchain stored content information list through an agent server 100.

In the token verification step of the blockchain access control method according to another aspect of the invention, the agent server 100 passes the token included in the access request to the blockchain to the access control management server 200 to verify the validity of the token. Step. In other words, the agent server 100 is a blockchain access control method for a method of validating the token through the access control management server 200 rather than directly validating the token. At this time, the token also checks whether the agent server 100 has the authority to perform the received request. Therefore, the agent server 100 must deliver the information for verifying the token including the blockchain user who transmitted the token and the content of the request to the access control management server 200 together.

Although the present invention has been described above with reference to the accompanying drawings, the present invention is not limited thereto, and it should be interpreted to cover various modifications that can be obvious to those skilled in the art. The claims are intended to cover these modifications.

10: Blockchain Access Control System
100: agent server
110: token issue processing unit 120: token verification unit
130: blockchain interface unit 140: encryption code generation unit
200: access control management server
210: access authority management unit 220: token issue unit
230: token verification unit
300: blockchain network
400: content provider server
410: token management unit 420: content information register
500: service provider server
510: token management unit 520: content packaging request unit
530: purchase history information register 540: license request
550: content information list request unit 560: content information list provider
600: license management server
610: token verification request unit 620: content information request unit
630: packaging unit 640: copyright information register
650: license issuer

Claims (13)

A blockchain network generating a block storing content purchase history information or content copyright information or content information and adding the block to the blockchain;
An access control management server including an access right management unit for managing access rights of blockchains for each blockchain user, and a token issuing unit for issuing tokens according to access rights to blockchain users; And
Token issuing processing unit for requesting token issuance for blockchain users by connecting to the access control management server, token verification unit for verifying tokens of blockchain users accessing the blockchain, and blockchain users by connecting to the blockchain network. An agent server including a blockchain interface unit for processing information registration on the blockchain or processing information inquiry according to a request;
Blockchain access control system comprising a.
The system of claim 1 wherein the system is
A content provider server including a token manager to request issuance of a token from the agent server and a content information register to request content agent registration from the agent server;
More,
The token verification unit of the agent server verifies the token included in the content information registration request from the content provider server, the block chain interface unit of the agent server connects to the blockchain network to request the blockchain storage of the content information.
The method of claim 1,
The system further includes a service provider server and a license management server,
The service provider server includes a token management unit for requesting issuance of a token to an agent server, and a content packaging request unit for transmitting a content packaging request including a content ID to the license management server.
The license management server includes a token verification request unit for verifying a token included in a content packaging request of a service provider server through an agent server, a content information request unit for requesting and receiving content information stored in a blockchain through an agent server; A block chain access control system including a packaging unit for packaging content based on one content information, and a copyright information registration unit for generating content copyright information based on the received content information and requesting registration to the blockchain through an agent server.
The system of claim 1 wherein the system is
A token management unit for requesting issuance of the token of the service user to the agent server according to the purchase of the content of the service user, and a purchase history information registration unit for requesting registration of the content purchase history information by transmitting a request for generating the encryption code of the service user to the agent server; A service provider server;
More,
The agent server further includes an encryption code generation unit for generating encryption code information used for encryption and decryption of license information and delivering it to the service consumer through the service provider server.
The token verification unit of the agent server verifies the token included in the request when receiving the encryption code generation request from the service provider server, and the blockchain interface unit of the agent server connects to the blockchain network to request blockchain storage of content purchase history information. Blockchain Access Control System.
The method of claim 4, wherein
The service provider server further includes a license request unit which forwards a license request of a service user to a license management server.
The system receives a license request of a service user including encryption code information, a service user identification ID and a content identifier from a service provider server, delivers the service request to an agent server, and transfers the content information and content copyright information from the blockchain through the agent server. Blockchain access control system further comprising a license management server including a license issuing unit for receiving and issuing an encrypted license.
The system of claim 1 wherein the system is
A service provider server including a content information list request unit for requesting an agent server to query a content information list registered in a blockchain, and a content information list provider for receiving and providing a list of content information registered in a blockchain through an agent server;
More,
The token verification unit of the agent server verifies the token included in the request when receiving the content information list inquiry request from the service provider server,
The blockchain interface of the agent server connects to the blockchain network to query and transmit a list of registered content information.
The method according to any one of claims 1 to 6,
Token verification unit of the agent server requests the verification of the received token to the access control management server,
Block access control system further comprises a token verification unit for the access control management server to validate the received token.
A token issuing request step of the agent server receiving a token issuing request of the blockchain user;
A token issuing receiving step of receiving, by the agent server, a token issuing request to the access control management server;
A token transmission step of transmitting, by the agent server, a token issued to a blockchain user who has requested a token issuance;
An access request receiving step, wherein the agent server receives an information inquiry request stored in the blockchain including the token or an access request for the blockchain including the information registration request in the blockchain;
A token verification step of the agent server validating a token included in a request for access to the blockchain; And
A request processing step of the agent server connecting to the blockchain to process an access request and transferring the processing result to the blockchain user;
Blockchain access control method comprising a.
The method of claim 8,
Blockchain users are content provider servers,
In the access request receiving step, the agent server receives the content information registration request from the content provider server.
The request processing step is a blockchain access control method, wherein the agent server connects to the blockchain network to request blockchain storage of content information and delivers the result of the request to the content provider server.
The method of claim 8,
Blockchain users are service provider servers,
In the step of receiving an access request, an agent server receives a content packaging request from a service provider server through a license management server.
In the request processing step, the agent server connects to the blockchain network to query the content information and delivers the retrieved content information to the license management server.
Blockchain access control method
Receiving, by the agent server, a blockchain registration request of content copyright information generated by the license server; And
The agent server further comprises the step of connecting to the blockchain network to request the blockchain storage of content copyright information, and forwarding the result of the request to the license server.
The method of claim 8,
Blockchain users are service users,
In the step of receiving an access request, the agent server receives an encryption code request from a service user through a service provider server.
In the request processing step, the agent server connects to the blockchain network to request the blockchain storage of the content purchase history information of the service user, generates an encryption code and delivers it to the service user through the service provider server.
Blockchain access control method
Receiving, by the agent server, a license issuance request of the service user delivered by the service provider server from the license management server;
Verifying, by the agent server, a license issuance request;
The agent server connecting to the blockchain network to query the content information and the content copyright information, and forwarding the search result to the license management server; And
Generating, by the license management server, license information based on the received content information and content copyright information, encrypting the license information by using an encryption code, and delivering the license information to a service user through a service providing server;
Blockchain access control method further comprising.
The method of claim 8,
Blockchain users are service users,
In the access request receiving step, the agent server receives the content information list request registered from the service user through the service provider server.
The request processing step is a blockchain access control method, wherein the agent server connects to the blockchain network to query and transmit a list of registered content information.
The method according to any one of claims 8 to 12,
The token verification step is a blockchain access control method in which an agent server passes a token included in an access request to a blockchain to an access control management server to validate the token.

Images