KR20200041607A - Blockchain-based cryptocurrency wallet and blockchain transaction method and firmware anti-forgery method - Google Patents

Abstract

Provided are a blockchain-based cryptocurrency wallet, a blockchain transaction method and a firmware forgery prevention method. According to an embodiment of the present invention, the wallet storing cryptocurrency based on a blockchian can comprise: a software part including a wallet application having an interface and an API for communicating with a blockchain network; and a hardware part performing approval for blockchain transactions.

Description

Blockchain-based cryptocurrency wallet and blockchain transaction method and firmware anti-forgery method

The present invention relates to a blockchain-based cryptocurrency wallet and blockchain transaction method and a method for preventing firmware forgery.

With the development of blockchain technology, hacking technology that attempts to exploit it is also evolving day by day, and cases of hacking cryptocurrency wallets have rapidly increased, and a hardware (HW) based wallet for security has been released, but it is also possible to hack.

In addition, as shown in FIG. 1, the existing cryptocurrency wallet 10 can be used only in a PC environment because it can be used through a wired connection to the host device 20. Since the PC environment is very vulnerable to malicious codes such as viruses and malware, when the cryptocurrency wallet 10 is connected through a wire, it may be infected, so a private key leak due to hacking may occur. In particular, it is possible to leak in the process of generating a private key in the initialization stage of the cryptocurrency wallet 10. Therefore, in case of being infected with malicious code, it is possible to steal cryptocurrencies and cause financial damage, so safe key management is required.

Conventionally, the user authentication of the cryptocurrency wallet 10 and the final approval method of the blockchain transaction are made through simple PIN (password) input, and thus are vulnerable to security. PIN-based authentication is very vulnerable to brute force attacks. In addition, the existing cryptocurrency wallet 10 stores the private key in an unencrypted state (raw state), and the access method is vulnerable to security because it is possible by PIN input.

Therefore, there is a need for enhanced personal information protection, private key management, and a secure storage method.

In addition, the system of the existing cryptocurrency wallet 10 is controlled based on firmware installed in a microcontroller unit (MCU). The firmware of the MCU includes hardware-equipped peripherals (Hardware resource) and software (SW) that implements the wallet function, so when the forged custom firmware is installed, the cryptocurrency wallet 10 operates in a jailbreak state Therefore, it is possible to leak wallet data (recovery code and private key). In addition, MCUs are very vulnerable to SW-based attacks and physical attacks such as side-channel attacks, system bus probing, and memory probing. Therefore, a security method for preventing forgery and alteration of the firmware is needed.

Korean Patent Publication No. 10-2018-0107037 (published Oct. 1, 2018)-Payment system using virtual currency

The present invention is to provide a blockchain-based cryptocurrency wallet and a blockchain transaction method that can be used in a mobile environment by mounting a wireless connection function using Bluetooth (BLE) so that a physical connection with a host device is not necessary.

The present invention provides a fingerprint-based technology and a separate hardware security storage device to enhance personal information protection, securely perform personal key management, and provide a blockchain-based cryptocurrency wallet and blockchain transaction method that can be stored in a protected state. It is for.

The present invention uses a software (SW) -based attack and a tamper-proof security element (SE, Secure Element) for physical attacks, and a blockchain-based cryptocurrency wallet that ensures a secure execution environment through system control based on SE And to provide a blockchain transaction method.

The present invention divides the function of the wallet into hardware (HW) and software (SW), and blocks data and tasks processed by each part (hardware part, software part) according to security needs, thereby providing improved safety It is intended to provide a chain-based cryptocurrency wallet and blockchain transaction method.

The present invention is a blockchain-based cryptocurrency wallet and blockchain transaction method that ensures the security of the cryptocurrency wallet execution environment by periodically monitoring for forgery and alteration of the firmware mounted on the hardware side, especially the MCU, and It is to provide a method for preventing firmware forgery and alteration.

Objects other than the present invention will be easily understood through the following description.

According to an aspect of the present invention, a wallet based on a blockchain and storing a cryptocurrency, a software unit including a wallet app having an interface and an API to communicate with a blockchain network; And a blockchain-based cryptocurrency wallet is provided that includes a hardware unit that performs approval for blockchain transactions.

The software unit and the hardware unit each include a BLE communication unit, and can transmit data to each other through BLE communication.

The hardware unit includes a fingerprint sensor that receives a user's fingerprint; A security element (SE) that manages private key and fingerprint information and performs signature processing for blockchain transactions; It may include an MCU that loads firmware to boot the wallet environment for blockchain transactions.

The SE encrypts and stores the private key, grants access when the fingerprint information is verified, decrypts the private key encrypted by the access permission, and signs a blockchain transaction with the decrypted private key The MCU may include the signed blockchain transaction information and the generated hash value in the data and transmit it to the software unit.

The SE may generate a new address to be used for the next blockchain transaction in a hierarchical decision (HD) method and deliver it to the software unit.

The SE includes: a firmware verification module that verifies the signature of the firmware before loading the firmware to the MCU and operates only when it is approved through forgery verification; A firmware monitor that periodically monitors for forgery and alteration of the firmware even at runtime; If the firmware is not approved, it may include a firmware server communication module for forcibly downloading and updating the approved firmware by communicating with the firmware server.

Even when updating the firmware, the SE can maintain the private key.

The hardware unit can be initialized by itself to safely generate the private key.

On the other hand, according to another aspect of the present invention, the hardware and software is a blockchain transaction method performed in a separate blockchain-based cryptocurrency wallet, comprising: executing the wallet app in the software unit; Generating first blockchain transaction data by inputting a value for a blockchain transaction; Transferring the first blockchain transaction data to the hardware unit; Displaying a user input value through a display unit; The SE approving the blockchain transaction using the fingerprint information; Including the signed blockchain transaction information and hash value in the second blockchain transaction data; Transferring the second block chain transaction data to the software unit; There is provided a blockchain transaction method comprising the step of transmitting the second blockchain transaction data from the software unit to a blockchain network.

Data transfer between the hardware unit and the software unit may be performed through BLE communication.

The blockchain transaction approval step includes receiving a user's fingerprint from a fingerprint sensor; Verifying the fingerprint information in the SE; Granting access to the SE when fingerprint verification is successful; Decrypting the encrypted private key; And signing the blockchain transaction with the private key.

On the other hand, according to another aspect of the present invention, a software forgery prevention method performed in the hardware unit of a blockchain-based cryptocurrency wallet with a separate software unit, when power is applied to the hardware unit, activating SE; Verifying the first firmware to be loaded into the MCU; If verification is successful, loading the first firmware into the MCU to normally boot a wallet environment; If verification fails, downloading and verifying the approved second firmware by communicating with the firmware server; A method for preventing forgery and alteration of firmware is provided, comprising: if the verification is successful, loading the second firmware into the MCU to boot the wallet environment normally, and if verification fails, communicating with the firmware server again.

Other aspects, features, and advantages than those described above will become apparent from the following drawings, claims, and detailed description of the invention.

According to an embodiment of the present invention, a wireless connection function using Bluetooth (BLE) is mounted so that a physical connection with a host device is not necessary, and thus it can be used in a mobile environment.

In addition, it is equipped with fingerprint recognition technology and a separate hardware security storage device to enhance personal information protection, safely perform private key management, and to store in a protected state.

In addition, there is an effect of using a secure SE for SW-based attacks and physical attacks, and ensuring a safe execution environment through SE-based system control.

In addition, there is an effect of separating the functions of the wallet into HW and SW to separate the data and tasks processed by each part (SW wallet part, HW wallet part) according to security needs to provide improved safety.

In addition, there is an effect of ensuring the security of the cryptocurrency wallet execution environment by periodically monitoring for forgery and alteration of the firmware installed on the hardware side, especially the MCU, and allowing only approved firmware to operate.

1 is a view showing an existing cryptocurrency wallet and a host device,
2 is a block diagram of a blockchain-based cryptocurrency wallet according to an embodiment of the present invention,
3 is a flowchart of a blockchain transaction method performed in a blockchain-based cryptocurrency wallet according to an embodiment of the present invention,
4 is a diagram illustrating a process of signing a blockchain transaction through fingerprint information;
5 is a block diagram of a hardware part of a cryptocurrency wallet and a firmware server according to an embodiment of the present invention;
6 is a flow chart of a firmware update method of a cryptocurrency wallet according to an embodiment of the present invention,
7 is a hardware part of a cryptocurrency wallet according to an embodiment of the present invention,
8 is an exemplary view showing cryptocurrency types and account information displayed through a display unit.

The present invention can be applied to various changes and can have various embodiments, and specific embodiments will be illustrated in the drawings and described in detail. However, this is not intended to limit the present invention to specific embodiments, and should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

When an element is said to be "connected" or "connected" to another component, it is understood that other components may be directly connected to or connected to the other component, but other components may exist in the middle. It should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that no other component exists in the middle.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from other components.

The terms used in this specification are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this specification, terms such as “include” or “have” are intended to indicate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, and that one or more other features are present. It should be understood that the existence or addition possibilities of fields or numbers, steps, operations, components, parts or combinations thereof are not excluded in advance.

In addition, the components of the embodiments described with reference to the drawings are not limited to those embodiments, and may be implemented to be included in other embodiments within the scope of maintaining the technical spirit of the present invention. Although the description is omitted, it is natural that a plurality of embodiments may be reimplemented as one integrated embodiment.

In addition, in the description with reference to the accompanying drawings, the same components, regardless of reference numerals, are assigned the same or related reference numerals, and redundant description thereof will be omitted. In the description of the present invention, when it is determined that detailed descriptions of related known technologies may unnecessarily obscure the subject matter of the present invention, detailed descriptions thereof will be omitted.

In addition, terms such as “… unit”, “… module”, and “… group” described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware or software or a combination of hardware and software. You can.

2 is a block diagram of a blockchain-based cryptocurrency wallet according to an embodiment of the present invention, and FIG. 3 is a flowchart of a blockchain transaction method performed in a blockchain-based cryptocurrency wallet according to an embodiment of the present invention , FIG. 4 is a diagram showing a process of signing a blockchain transaction through fingerprint information.

The blockchain-based cryptocurrency wallet 100 according to an embodiment of the present invention includes a hardware part 110 corresponding to the HW part and a software part 120 corresponding to the SW part, and functions of the cryptocurrency wallet HW And SW.

The software unit 120 is mounted on a host device and processes general data and tasks that do not require security. The hardware unit 110 processes tasks requiring security such as personal authentication processing, blockchain signature processing, and account (private key) management.

The software unit 120 and the hardware unit 110 each include BLE communication units 123 and 113, thereby providing improved safety by synchronizing data with each other through Bluetooth (BLE) communication. In the existing environment as shown in FIG. 1, when the host device 20 is infected with a wired connection to the host device 20, the cryptocurrency wallet 10 composed of hardware may be infected through the wired connection line. Due to this, there is a risk that an incorrect address is displayed or a private key is leaked in a blockchain transaction through hacking.

Therefore, in this embodiment, in the blockchain transaction, the software unit 120 includes the wallet app 121, and the wallet app 121 mainly processes functions that do not require security. For example, when the wallet app 121 is executed (step S200), it provides an intuitive user interface function for a user to navigate through the menu of a cryptocurrency wallet, and for executing a blockchain transaction. An input field for inputting a specific value (eg, counterpart address, amount, fee, etc.) is provided (step S205).

The wallet app 121 has an interface that communicates with a blockchain network, and may have an API that can be connected to a specific blockchain network. In addition, it is possible to provide a user interface (a simple interface that does not require security, such as menu navigation, account information inquiry, transaction information input) that can use the functions of a cryptocurrency wallet.

Thereafter, the blockchain transaction data generated by the software unit 120 is transferred to the hardware unit 110 (step S210).

The hardware unit 110 includes an MCU 111, a SE 112, a BLE communication unit 113, a fingerprint sensor 114, a display unit 116, and an input unit 115.

The hardware unit 110 can check whether a value input by the user (eg, counterpart address, amount, fee, etc.) matches the value displayed on the software unit 120 through the display unit 116 (step S215). ). In addition, all procedures for approving the verified blockchain transaction are safely processed within the secure element (SE) 112.

When the blockchain transaction is approved, the user enters the fingerprint through the fingerprint sensor 114 to perform personal authentication (step S220), and the SE 112 verifies the fingerprint information (step S225). When the fingerprint is verified, the authority to access the SE 112 is given (step S230), the private key encrypted and stored in the SE 112 is decrypted, and the blockchain transaction is signed with the decrypted private key (step S235). . The signed transaction information of the blockchain and the generated hash value are included in the data and transmitted to the software unit 120 (step S240).

The software unit 120 completes the transaction by transmitting the received data to the blockchain network (step S245). Therefore, it is possible to improve safety by performing all major security processing required for the blockchain transaction within the SE 112 of the hardware unit 110.

The hardware unit 110 of the cryptocurrency wallet 100 according to the present embodiment is an environment separated from the host device on which the software unit 120 is installed. If the software unit 120 is hacked and the cryptocurrency account information is forged, the hardware unit 110 is hardware. When connected to the unit 110, the account information stored in the hardware unit 110 is guaranteed integrity. Therefore, the correct information can be displayed by updating the existing account information through the blockchain network by passing the correct information to the software unit 120 through periodic synchronization through a BLE wireless connection.

In addition, the account address used in the blockchain transaction uses a hierarchical deterministic (HD) method, and a new address is used whenever a new blockchain transaction occurs. Unlike the existing wallet, the new address is generated in the SE 112 of the hardware unit 110 and delivered to the software unit 120. The new address created at this time does not require security because it is public information, but the process of creating a new address requires security.

The address used in the transaction is generated based on the parent private key or the parent public key (Xpub), which is the top of the HD chain. The parent private key is stored in an encrypted state within the SE 112, and thus cannot be exposed. The parent public key (Xpub) is public information, but is not recommended.

In the existing cryptocurrency wallet 10 as shown in FIG. 1, an address is generated by operating on the MCU chip of the HW part. However, the act of generating an address outside SE may expose the parent public key (Xpub) if the cryptocurrency wallet device is infected. When the user's parent public key (Xpub) is exposed, anyone can check the transaction history of the account and the total amount of the account held through the blockchain network, as well as predict the address to be used for the next blockchain transaction. This harms the privacy of the individual as well as security issues.

Accordingly, in this embodiment, a new address (Child Public Key) to be used for the next blockchain transaction is generated in the SE 112 so that the parent public key (Xpub) is not exposed and interworked with the software unit 120 through a BLE wireless connection. To apply a new address.

5 is a block diagram of a hardware part of a cryptocurrency wallet and a firmware server according to an embodiment of the present invention, and FIG. 6 is a flowchart of a firmware update method of a cryptocurrency wallet according to an embodiment of the present invention.

The hardware unit 110 of the cryptocurrency wallet 100 according to this embodiment includes a SE 112 having a firmware update function.

The SE 112 includes a firmware verification module 1121, a firmware monitor 1122, and a firmware server communication module 1123.

When the power of the hardware unit 110 is turned on (step S300), the SE 112 is first activated through a secure booting procedure (step S305). And the firmware verification module 1121 checks the signature of the firmware before loading the firmware to the MCU 111 (step S310), so that only approved firmware is operated through forgery verification (steps S315 to S325) to improve security. You can.

Even at run time, the firmware monitor 1122 monitors the falsification of periodic firmware to ensure the security of the cryptocurrency wallet execution environment. If it is determined that it has been tampered with through verification of the firmware (that is, if the firmware is not approved (step S330)), the firmware server communication module 1123 communicates with the firmware server 50 (step S335) to force the approved firmware. Download and update (step S340). And it is possible to load only the approved firmware (steps S345 to S355) and prevent the operation of unauthorized firmware (step S360). If the firmware is not approved, the process returns to step S335 to re-communicate with the firmware server 50 to download and update the approved firmware again.

Unlike the existing, the hardware unit 110 of the cryptocurrency wallet 100 according to the present embodiment can initialize itself without a wired connection with the host device, thereby improving the security of the private key leakage due to hacking when generating the private key. to provide.

Initialization of the cryptocurrency wallet 100 proceeds in three cases.

(1) Purchasing and using a new cryptocurrency wallet, deleting an account in the wallet and creating a new account, (2) recovering an existing wallet, (3) forcing personal authentication to exceed the maximum attemptable limit When all data is deleted (mostly when the user fails to authenticate or attempts to authenticate by someone else)

The newly purchased cryptocurrency wallet 100 is initialized so that the user directly creates a wallet account (private key). If a private key is generated on the device before the hardware unit 110 (that is, the wallet device) of the newly purchased cryptocurrency wallet 100 is delivered to the user, there is a possibility that the private key is exposed. It is impossible to check if it has been exposed at. Therefore, the initialization procedure is a method to prevent the private key from being exposed in the life cycle from the time of mass production of the device to delivery to the user, and also to secure the reliability by inducing the user to directly generate the private key.

Since the existing cryptocurrency wallet 10 was produced for the main purpose of storage of cryptocurrency by users who have cryptocurrencies, the function is limited to use only in the PC environment, so wired connection was essential. The wallet device itself has a limited display and a user interface (UI) for entering values, so it is wired to a PC and a program installed on the PC provides a user interface for initialization. However, if the PC is infected with malicious codes such as viruses and malware, if the cryptocurrency wallet 10 is connected to the wire, the private key and recovery code are exposed when the private key is generated by infecting the cryptocurrency wallet 10 through a wired connection. It is possible.

Therefore, in the present embodiment, it can be used in a PC environment and a mobile environment and can be initialized by itself, so that the user initializes through the display unit 116 and the input unit 115 provided by the hardware unit 110. We want to safely generate the private key and prevent the recovery code for wallet recovery from leaking to the outside.

The recovery code is an association code capable of recovering the user's private key, and may be composed of a plurality of simple English words (for example, 24) having an order.

The user uses functions such as input, inquiry, and manipulation through the wallet app 121 for general public data of blockchain transactions. The input data is transmitted to the hardware unit 110 through a BLE wireless connection, and a hardware unit 110 that is a hardware device that provides important processing functions (for example, blockchain signature, account management, key management, etc.) requiring security. Through, the user directly performs processing through personal authentication.

The blockchain data processed through the hardware unit 110 is transmitted back to the wallet app 121 of the host device through a BLE wireless connection, and the wallet app 121 delivers blockchain data to the blockchain network through the network. Blockchain transactions will be completed. The data included in the blockchain transaction includes information such as the account address (receiver, sender), amount, and fee, which is publicly available and can be checked through the blockchain network. However, before the data on the blockchain transaction is transmitted to the blockchain network, a user approval process is performed. In this process, the relevant blockchain transaction information is signed with the user's private key to secure non-repudiation. In addition, the package data including the hash value of the blockchain transaction information is transmitted to the blockchain network. Blockchain networks prove that the corresponding data has not been tampered with by performing an operation to obtain the nonce of the included hash.

In this embodiment, when data is transmitted through the BLE between the software unit 120 (host device) and the hardware unit 110 (encryption wallet device), the data is encrypted and transmitted, thereby snooping to steal data Defense against man-in-the-middle attacks is made.

The private key management is processed through a secure SE 112 installed in the hardware unit 110. Even if the firmware is updated, the private key used for blockchain transactions is maintained. Therefore, according to the present embodiment, unlike the existing cryptocurrency wallet 10, there is no need to recover the private key, and it is possible to update the account through the delivery of the public key of the existing account through synchronization with the wallet app 121.

In the existing cryptocurrency wallet 10, when updating the firmware, the wallet device is initialized, so all data (private key, account information, etc.) stored in the wallet device is deleted, and the user has to enter the recovery code to recover. For the recovery procedure, for example, 12, 18, or 24 recovery codes must be correctly entered to create a private key of an existing wallet.

It is very cumbersome and time consuming to enter the recovery code every time the firmware is updated.

In the cryptocurrency wallet 100 according to the present embodiment, even if the firmware is updated differently from the existing wallet, the data stored in the SE 112 (eg, PIN, fingerprint, private key, etc.) is maintained, so the recovery procedure is performed. no need.

The address (public key) used in the wallet app 121 is also managed by the SE 112, and when it is necessary to use the wallet app 121, it is created within the SE 112 to protect privacy and secure BLE wireless connection. The data is transmitted to the wallet app 121 through.

The wallet app 121 then updates the data of the corresponding address through the blockchain network. Here, the address means an address that exists in the user's wallet. For example, when a user sends a blockchain transaction to the blockchain network, if the blockchain transaction sent by the user is judged to be the correct transaction by multiple nodes in the blockchain network, the corresponding blockchain transaction is added to the block shared by the blockchain network. From the sender's address (user's address), the amount transferred is reflected in the recipient's address. Therefore, the user's address is retrieved from the blockchain network, and the updated data (such as transaction history and amount change) is called to bring the wallet (the wallet app 121 of the software unit 120 or the display unit 116 of the hardware unit 110). ).

The cryptocurrency wallet according to this embodiment prevents external leakage of the private key and is secured. In the case of existing cryptocurrency wallets, access is managed by PIN matching, and the private key is stored unencrypted.

On the other hand, in this embodiment, the private key is encrypted with the registered fingerprint information by using the fingerprint recognition technology and safely stored in the SE. When requesting a blockchain signature, the user scans the fingerprint to perform personal authentication, decrypts and activates the private key stored in the SE only when the fingerprint information matches, activates it, and proceeds with signature processing within the SE to prevent external leakage. It can provide absolutely improved security.

7 is a view of a hardware part of a cryptocurrency wallet according to an embodiment of the present invention, and FIG. 8 is an exemplary view showing cryptocurrency types and account information displayed through a display part.

Referring to FIG. 7, the hardware unit 110 of the cryptocurrency wallet 100 is illustrated.

The input unit 115 is implemented as a button, and an input value can be changed through a button operation. For example, the (Up) button can change the value to be input (numbers, alphabets, etc.) to a higher order value (e.g. 1-> 2, a-> b). The (Down) button can change the value to be input (numbers, alphabets, etc.) to a value in a lower order (eg 1-> 0, a-> z).

And (Up / Down) button allows you to move to the items displayed on the screen. For example, the (Up) button moves up, and the (Down) button moves down.

(OK / OK) button is used to confirm the selected item or the entered value.

(Previous / BACK) button is used to move to the previous screen or cancel input of the current location and move to the previous input location. One or more cryptocurrency (Bitcoin, Ethereum, Monacoin, ERC-20, Ripple, etc.) may be stored in the cryptocurrency wallet 100 according to the present embodiment.

If you select the type of cryptocurrency you own, you can check your account information through the display unit 116 (see Fig. 8 (a)).

And the account information receiving the remittance may be displayed by a text and a QR code (see FIG. 8 (b)).

It is natural that the above-mentioned block chain transaction method and firmware forgery prevention method may be performed by an automated procedure according to a time series sequence by a software program embedded in a digital processing device. The codes and code segments constituting the program can be easily deduced by a computer programmer in the field. In addition, the program is stored in a computer readable media, and read and executed by a computer to implement the method. The information storage medium includes a magnetic recording medium, an optical recording medium, and the like.

Although described above with reference to embodiments of the present invention, those skilled in the art variously modify the present invention without departing from the spirit and scope of the present invention as set forth in the claims below. And can be changed.

100: blockchain-based cryptocurrency wallet 110: hardware
111: MCU 112: SE
113: BLE communication unit 114: fingerprint sensor
115: input unit 116: display unit
120: software unit 121: wallet app
123: BLE communication unit 50: firmware server
1121: firmware verification module 1122: firmware monitor
1123: Firmware server communication module

Claims (12)

A wallet that is based on blockchain and stores cryptocurrency,
A software unit including a wallet app having an interface and API to communicate with a blockchain network; And
A blockchain-based cryptocurrency wallet that includes a hardware part that performs approval for blockchain transactions.
According to claim 1,
The software unit and the hardware unit each include a BLE communication unit, a blockchain-based cryptocurrency wallet characterized in that data is transmitted to each other through BLE communication.
According to claim 1,
The hardware unit,
A fingerprint sensor that receives a user's fingerprint;
A security element (SE) that manages private key and fingerprint information and performs signature processing for blockchain transactions;
A blockchain-based cryptocurrency wallet that includes an MCU that loads firmware to boot the wallet environment for blockchain transactions.
According to claim 3,
The SE encrypts and stores the private key, grants access rights when the fingerprint information is verified, decrypts the private key encrypted by the access rights, and signs a blockchain transaction with the decrypted private key And
The MCU is a blockchain-based cryptocurrency wallet characterized by including the signed transaction data and the generated hash value in data to the software unit.
According to claim 4,
The SE is a blockchain-based cryptocurrency wallet characterized by generating a new address to be used for the next blockchain transaction in a hierarchical decision (HD) method and delivering it to the software unit.
According to claim 3,
The SE,
A firmware verification module that verifies the signature of the firmware before loading the firmware into the MCU and operates only when approved through forgery and alteration verification;
A firmware monitor that periodically monitors for forgery and alteration of the firmware even at runtime;
If the firmware is not approved, a blockchain-based cryptocurrency wallet including a firmware server communication module for forcibly downloading and updating the approved firmware by communicating with the firmware server.
The method of claim 6,
Blockchain-based cryptocurrency wallet characterized in that the SE maintains the private key even when the firmware is updated.
According to claim 3,
The hardware part is initialized by itself and is a blockchain-based cryptocurrency wallet characterized in that the private key is safely generated.
As a blockchain transaction method performed in a blockchain-based cryptocurrency wallet where the hardware and software parts are separated,
Executing a wallet app in the software unit;
Generating first blockchain transaction data by inputting a value for a blockchain transaction;
Transferring the first blockchain transaction data to the hardware unit;
Displaying a user input value through a display unit;
The SE approving the blockchain transaction using the fingerprint information;
Including the signed blockchain transaction information and hash value in the second blockchain transaction data;
Transferring the second blockchain transaction data to the software unit;
And transmitting, by the software unit, the second blockchain transaction data to a blockchain network.
The method of claim 9,
Blockchain transaction method characterized in that the data transfer between the hardware portion and the software portion is made through BLE communication.
The method of claim 9,
The blockchain transaction approval step,
Receiving a user's fingerprint from a fingerprint sensor;
Verifying the fingerprint information in the SE;
Granting access to the SE when fingerprint verification is successful;
Decrypting the encrypted private key; And
Blockchain transaction method comprising the step of signing the blockchain transaction with the private key.
As a method of preventing forgery of firmware performed in the hardware part of a blockchain-based cryptocurrency wallet with a separate software part,
Activating a SE when power is applied to the hardware unit;
Verifying the first firmware to be loaded into the MCU;
If verification is successful, loading the first firmware into the MCU to normally boot a wallet environment;
If verification fails, downloading and verifying the approved second firmware by communicating with the firmware server;
The method for preventing forgery and alteration of firmware, comprising loading the second firmware to the MCU to successfully boot the wallet environment if verification is successful, and communicating with the firmware server again if verification is unsuccessful.

Images