KR20200094522A - System for security network Using blockchain and Driving method thereof - Google Patents

Abstract

The present invention relates to a security system for leisure culture content for armed forces using blockchain technology and a driving method thereof. The security system for leisure culture content for armed forces using blockchain technology comprises: a client terminal to request internet connection via a virtual private network allowing only approved terminals and IPs to use a network, and request connection from a central control server by including an encrypted hash key when executing a web browser requiring security; and a central control server to verify the validity of a hash key received from the client terminal connected to a virtual private network to allow an approved client terminal to connect to the internet, and block internet connection for a non-approved client terminal. The client terminal shares the encrypted hash key based on a blockchain. The security system for leisure culture content for armed forces based on a blockchain and the driving method thereof can provide safe and transparent user/manager environments in preparation for unexpected security accidents by the security system for leisure culture content for armed forces based on a blockchain.

Description

Security system exclusively used for the contents of leisure culture contents of the military using blockchain technology and its driving method {System for security network Using blockchain and Driving method thereof}

The present invention relates to a security system for exclusive use of ROK military leisure culture contents and a driving method thereof, and more particularly, to a security system for exclusive use of ROK military leisure culture content using a blockchain technology and a driving method thereof.

There is a statistic that most of the leak routes of important information leak incidents are insiders' actions, not outside the organization. Rather than invading external hackers through the Internet, members belonging to the organization are leaking data containing important information to the outside.

For example, the security network hacking security incident due to the lack of management of the external and internal networks in September 2016, cybersecurity information network security incidents in the barracks, military personnel gambling and pornographic site access incidents.

In particular, defense agencies are interested in preventing information leakage. As part of this, a proxy (firewall) is installed to prevent information leakage through the network of external hackers and internal members.

As such, the environment using only the internal intranet has been trying to prevent the leakage by removing the route itself to the outside because of concerns about information leakage. That is, to protect the information, the information was protected by removing the connection itself with the server connecting the external connection.

For example, in the general military unit's PC room, only internal intranets were built to educate military personnel, and the actual internet through external connection was set to be unavailable. In addition, industry companies based on information security use important internal business-related information in a separate server to separate the connection from the outside.

If you use only the internal intranet that is blocked from connecting to the external Internet, it can block information leakage to the outside because it blocks the path itself to the Internet environment.

However, in an environment where users' PCs and servers are built, using only internally without connecting to the external Internet can prevent information leakage while wasting resources.

In particular, it is urgent to introduce technology to solve the cultural problems in the barracks, such as the cultural heterogeneity of the soldiers and the decrease in the desire to serve, because there is a limit to using the same content as the society in the barracks.

The military, even on a secure network, has a low level of trust in commonly used web browsers such as Explorer and Chrome.

Therefore, bugs and security programs have been neutralized due to service updates, or the burden of management work and the risk of security accidents are frequently occurring.

KR 10-1858207 B1 KR 10-2001-0078840 A

The present invention has been derived from such a technical background, personal information leakage due to hacking and unauthorized user's site when using online-based multi-leisure content using a specific terminal such as a PC, mobile terminal, tablet in a special security environment of the military The purpose of this is to provide a security system and a method for driving the contents of a block-chain based ROK military culture that can provide a safer and more transparent user/manager environment in case of unexpected security incidents such as access.

It also aims to provide a security platform that makes online-based multimedia content safer to use within the barracks.

In addition, by providing a web browser that allows access only to secured domains, it is possible to strengthen the user's security environment and build a private blockchain system to strengthen the user's personal information protection management. And it is intended to provide a driving method.

Furthermore, it aims to help build trust with transparency and safety of the project by proposing security policies appropriate to the regulations of the subsidiary.

The present invention for achieving the above object includes the following configuration.

In other words, the security system for blockchain-based ROK military leisure culture contents according to an embodiment of the present invention requests Internet access through a virtual private network that allows only authorized terminals and IPs to use the network, and requires a web browser (web browser), upon execution, verify the validity of the hash key received from the client terminal requesting access to the central control server, including the encrypted hash key, and the client terminal accessing the virtual private network, so that the authorized client terminal is connected to the Internet. In addition, the unauthorized client terminal includes a central control server that blocks Internet access, wherein the client terminal is characterized by sharing the encrypted hash key based on a blockchain.

On the other hand, the method of operating a security system for exclusive use of the blockchain-based ROK military leisure culture content according to an embodiment of the present invention requests an Internet connection through a virtual private network that allows a client terminal to use only the approved terminal and the IP network. When executing a web browser that requires security, requesting access to the central control server including the encrypted hash key and verifying the validity of the hash key received from the client terminal where the central control server accesses the virtual private network By allowing the authorized client terminal to access the Internet, the unauthorized client terminal includes blocking the Internet connection, wherein the client terminal is characterized by sharing the encrypted hash key based on a blockchain.

The present invention has been derived from such a technical background, personal information leakage due to hacking and unauthorized user's site when using online-based multi-leisure content using a specific terminal such as a PC, mobile terminal, tablet in a special security environment of the military In the event of unexpected security incidents such as access, an effect that can provide a security system dedicated to the military-based leisure culture contents based on the blockchain and a method of driving the same can be provided to provide a safer and more transparent user/manager environment.

In addition, it not only provides a security platform that makes online-based multimedia content more securely available in the barracks, but also provides a web browser that allows access to secured domains only, strengthening the user's security environment and establishing a private blockchain system. It is possible to provide a security system exclusively for the contents of the Korean military's leisure culture contents based on the blockchain and a method of driving the same, which can strengthen the personal information protection management.

In addition, by proposing security policies appropriate to the regulations of the unit, hacking is established to build trust in the unit's network with transparency and safety of the project, and to further improve the'protection of personal information and usage information management' and'security technology' in the 4th industrial flow. In addition, it has the effect of providing a security system exclusive to the Korean military's leisure culture contents based on a blockchain capable of establishing security technology reliability by introducing the blockchain technology that cannot modify information (irreversible) and distribute usage information.

1 is an exemplary view showing the configuration of a security system for exclusive use of ROK military leisure culture contents based on a blockchain according to an embodiment of the present invention;
2 is a block diagram showing the detailed configuration of a client terminal according to an embodiment of the present invention;
3 is an exemplary diagram for explaining a blockchain-based distributed ledger according to an embodiment of the present invention,
4 is a flowchart of a method of driving a security system for exclusive use of ROK military leisure culture contents based on a blockchain according to an embodiment of the present invention.

It should be noted that the technical terms used in the present invention are only used to describe specific embodiments, and are not intended to limit the present invention. In addition, technical terms used in the present invention should be interpreted as meanings generally understood by a person having ordinary knowledge in the technical field to which the present invention belongs, unless otherwise defined in the present invention. It should not be interpreted as a meaning or an excessively reduced meaning.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary view showing the configuration of a security system for exclusive use of the ROK military leisure culture content based on a blockchain according to an embodiment of the present invention.

As shown in FIG. 1, the security system for exclusive use of blockchain-based ROK military leisure culture content includes a client terminal (10a, 10b, 10c) and a central control server (20).

The client terminals 10a, 10b, and 10c request Internet access through a virtual private network that allows only authorized terminals and IPs to use the network, and when running a web browser that requires security, the encrypted hash key Including the connection request to the central control server 20. At this time, the client terminals 10a, 10b, and 10c share a hash key encrypted based on the blockchain.

For example, a web browser that requires security may be developed using Microsoft's Custom Webbrowser tool.

The web browser that requires security is managed by the central control server 20 as a licensed program. That is, only the domain permitted by the central administrator can be accessed through the central control server 20. Unauthorized domain access can be blocked by nature. At this time, it is desirable to encrypt the list of authorized domains using hash information to prevent illegal acquisition by external users.

Also, when accessing an authorized web page, unnecessary information can be exposed. Then, when the client terminals 10a, 10b, and 10c access an unauthorized domain, it immediately blocks and outputs a notification message indicating that it is an unauthorized domain. Accordingly, unnecessary access points such as advertisements or pop-ups can be prevented from being exposed to the client terminals 10a, 10b, and 10c in the unit.

That is, when the user executes a secure web browser using the client terminals 10a, 10b, and 10c, the client terminals 10a, 10b, and 10c include the encrypted hash key to the central control server 20, and display the corresponding web page. Request connection.

Then, the central control server 20 verifies the validity using the hash key and provides the authorized domain list to the client terminals 10a, 10b, 10c. At this time, the client terminals 10a, 10b, and 10c periodically receive a domain list from the central control server 20, and block access to the domain when requesting access to an unauthorized domain.

For example, the client terminals 10a, 10b, and 10c may be implemented as management servers provided in each unit. Here, personal terminals such as smart phones, mobile phones, navigation, computers, laptops, digital broadcasting terminals, PDAs (Personal Digital Assistants), PMPs (Portable Multimedia Players), and tablet PCs (c1, c2, c3.) This can be connected.

The virtual private network is a network that allows only authorized terminals and IPs to use the network. Therefore, external private IP access is not possible as an internal network system.

A virtual private network (VPN) refers to a network network in which a public network such as the Internet can be used as if a private network was constructed with a dedicated line.

As a method to solve the high cost and inefficient management of the network, the method of using the Internet network as if it was constructed as a private network with a dedicated line has emerged. This is called a virtual private network. Since the virtual private network only needs to be connected to the corporate communication network and the Internet service provider, there is no need to separately purchase and manage expensive equipment or software, and thus has a significant cost savings over the existing private network connection method.

Since the virtual private network is based on the public network called the Internet, it has great disadvantages in that it ensures proper communication speed and bandwidth, and above all, the security of information is not certain. Accordingly, the present invention is implemented to use only an approved terminal and an IP network.

That is, each mobile phone or terminal has unique hardware identification numbers, MAC and IMEI, but only terminals with approved MAC and IMEI use the virtual private network. Likewise, an IP address is assigned for each terminal connected to the network, and a virtual private network is available only when connected through an authorized IP address.

The client terminals 10a, 10b, and 10c are IP-assigned terminals used by a user and request Internet access through a virtual private network. Here, the client terminals 10a, 10b, and 10c may include a desktop PC, a tablet PC, a slate PC, or a notebook computer. Of course, the terminal to which the present invention is applicable is not limited to the above-described types, and it is natural that it can include all terminals capable of communicating with external devices.

In one embodiment, the client terminals 10a, 10b, 10c may be management servers provided for each unit.

2 is a block diagram showing a detailed configuration of a client terminal according to an embodiment of the present invention.

2, the client terminals 10a, 10b, and 10c according to an embodiment of the present invention include a memory 110, a processor 120, a communication interface 130, and an input/output interface 140.

The memory 110 is a computer-readable recording medium, and may include a non-permanent mass storage device such as random access memory (RAM), read only memory (ROM), and a disk drive. Here, a non-destructive large-capacity recording device such as a ROM and a disk drive may be included in the client terminals 10a, 10b, and 10c as separate permanent storage devices separate from the memory 110.

The processor 120 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input/output operations. Instructions may be provided to processor 120 by memory 110 or communication interface 130. For example, the processor 120 may be configured to execute a received command according to program code stored in a recording device such as the memory 110.

In one embodiment, the processor 120 includes a system security module 1210, a program security module 1220, and a block chain operation module 1230.

The system security module 1210 allows only an authenticated user to use the operating system (OS) of the terminal. In addition, the system security module 1210 limits access rights of the Windows folder according to the security level of the logged-in user.

The system security module 1210 checks the security level with user information logging in to the client terminals 10a, 10b, and 10c and determines the level of information that can go outside. The content that can be used by dividing the security level of user information, that is, programs also have restrictions.

Restrictions can be applied to attaching files in general mail. In other words, the file cannot go outside. It checks the used user's time and access path, etc., and stores it as data. If you want to perform a forced operation, closes the program to remove the user's authority.

In addition, the system security module 1210 limits the access authority of the system file (DOS/config) according to the security level of the logged-in user. The security level is checked with user information logging in to the client terminals 10a, 10b, and 10c, and it is determined whether access to the system file is permitted.

The program security module 1220 functions to block the operation of unauthorized programs including text chat programs, voice chat programs, and online game programs. When a user logged into the client terminals 10a, 10b, and 10c attempts to start an unauthorized program such as an unauthorized text chat program, a voice chat program, and an online game program, the operation of the unauthorized program is blocked. .

In addition, the program security module 1220 encrypts and stores user information including user personal information, point information, and user login history information. For example, the program security module 1220 has an ID of each user, and there is a private/public key pair registered as the user ID.

It also creates a session key for encryption and a temporary private key/public key pair for electronic signature, and encrypts the session key or determines the security settings with the temporary private key. User information is encrypted and stored using these security settings. Encrypted storage database (DB; DataBase) includes hard disk drive, solid state drive, flash memory, compact flash card, and SD card (Secure Digital Card). , SM card (Smart Media Card), MMC card (Multi-Media Card) or memory stick (Memory Stick) as a module that can input and output information, may be provided inside the device, or may be provided in a separate device have.

The block chain operation module 1230 generates new blocks based on encryption information information at each block generation cycle.

At this time, the client terminal (10a, 10b, 10c) every synchronization cycle (approximately 10 minutes), the existing block chain data and newly created encryption information in another node, the management server of another unit, that is, another client terminal (10a, 10b, 10c) to share.

The block chain operation module 130 of the client terminals 10a, 10b, and 10c combines all newly created encryption information into one frame to form a block, and combines with previously created blockchain data to become a chained data aggregate. Prepare.

A block is a unit for storing data, and is divided into a body and a header. The body contains the contents of the transaction, and the header contains the cryptographic codes such as muhash (merklet) and nons (any number related to encryption).

For each block, the previous hash generated in the previous block, the merkle hash generated by the transaction, and the nonce are combined to obtain the block hash value. The block is composed of chained data connected to each other in such a way that the hash value becomes the previous hash of the next block.

That is, if the transaction section is arbitrarily modified, the current block hash value changes, and the previous hash value of the next block changes. If the previous transaction data is arbitrarily modified, the hash value of all blocks including the modified block is changed. Results.

Also, in the blockchain network, a blockchain that has an incorrect hash value is rejected. In this way, the data are connected to each other and also verified.

Blocks may be generated, for example, every block generation cycle of about 10 minutes. However, it is not limited thereto.

At this time, the blockchain operation module 1230 combines the generated new block with the existing blockchain data in the form of a chain.

3 is an exemplary diagram for explaining a blockchain-based distributed ledger according to an embodiment of the present invention.

The blockchain operation module 1230 connects to the blockchain data b1 to b5 in such a way that the newly created block nb receives a portion of the hash value of the previous block b5 and stores it in a header. That is, it is possible to provide integrity to detect an error or falsification of a message by outputting an immutable evidence value for an input message using a hash function.

In addition, an operating system and at least one program code may be stored in the memory 110. These software components may be loaded into the memory 110 from a computer-readable recording medium separate from the memory 110. Such a separate computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, disk, tape, DVD/CD-ROM drive, and memory card.

In other embodiments, software components may be loaded into memory 110 through communication interface 230 rather than a computer-readable recording medium. For example, software components can be loaded into the memory 110 of the client terminals 10a, 10b, 10c based on a computer program installed by files received over the network.

The communication interface 130 may provide a function for communicating with other client terminals through a network. For example, requests, commands, data, files, etc. generated by the processor 120 of the client terminal 10a, 10b, 10c according to the program code stored in the recording device such as the memory 110 may include the communication interface 130. Under control, it can be delivered to other devices over the network.

The communication method of the communication interface 130 is not limited, and a communication method using a communication network (for example, a mobile communication network, a wired Internet, a wireless Internet, a broadcasting network) that the network may include, as well as short-range wireless communication between devices are included. Can.

For example, the network includes a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), a broadband network (BBN), the Internet, and the like. The network may include any one or more of the network.

Further, the network may include any one or more of a network topology including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree, or a hierarchical network, but is not limited thereto. .

Conversely, signals, commands, data, files, and the like from other client terminals 10a, 10b, and 10c may be received through the communication interface 130 of the client terminals 10a, 10b, 10c over a network. Signals, commands, data, etc. received through the communication interface 130 may be transferred to the processor 120 or the memory 110, and files may be further stored by the client terminals 10a, 10b, and 10c. It may be stored in a medium (permanent storage device described above).

The input/output interface 140 may be a means for interfacing with the input/output device. For example, the input device may include a device such as a microphone, keyboard, or mouse, and the output device may include a device such as a display or speaker. As another example, the input/output interface 140 may be a means for interfacing with a device in which functions for input and output are integrated into one, such as a touch screen. The input/output device may be composed of client terminals 10a, 10b, and 10c and one device.

In one embodiment, the client terminals 10a, 10b, and 10c request access to the central control server 20 including an encrypted hash key when a web browser that requires security is executed.

The central control server 20 verifies the validity of the hash key received from the client terminals 10a, 10b, and 10c connected to the virtual private network so that the approved client terminals 10a, 10b, and 10c are connected to the Internet. The approved client terminals 10a, 10b, 10c block Internet access.

The central control server 20, among the client terminals 10a, 10b, and 10c connected to the virtual private network, allows only authorized terminals and IPs (white lists) to access the Internet, and unauthorized terminals and IPs (black lists). Blocks the Internet access.

The virtual private network first determines whether to access the Internet, but additionally, the central control server determines that only authorized users can access the Internet. Therefore, when accessing unauthorized terminals and IPs, the Internet is blocked. If an unauthorized access event occurs, an alarm is alerted to the administrator.

To this end, the central control server 20 has the same configuration as a conventional web server in hardware, and is implemented through various types of languages such as C, C++, Java, Visual Basic, and Visual C in software. Contains program modules that perform various functions.

In addition, it can be implemented using web server programs provided in various ways according to operating systems such as DOS, Windows, Linux, Unix, and Macintosh on general server hardware. As representative examples, a website (website) used in a Windows environment, an Internet Information Server (IIS), and CERN, NCSA, and APPACH used in a Unix environment may be used.

The central control server 20 and client terminals 10a, 10b, 10c are involved in a secure session. An SSL or TLS session is an association between a client and a server created by a handshake protocol. The session defines a set of cryptographic security parameters, which can be shared among multiple connections. They are used to avoid expensive negotiation of new security parameters for individual connections.

In SSL or TLS, a session identifier is a value generated by a server that identifies a particular session. To establish an SSL or TLS session, the client and server perform a handshake, which is the first negotiation to establish the parameters of transactions between entities. When a session is created, communication between the central control server and the client terminal takes place over a connection, which is a transport that provides a suitable type of service (to the OSI layer model definition). In the case of SSL and TLS, such a connection is a peer-to-peer relationship.

The connection is temporary and all connections are associated with one session. Typically, communication over a connection is protected using public key cryptography, which is a type of encryption technique that uses two-key ciphers.

Messages encrypted with the public key can only be decrypted with the associated specific key. Conversely, messages signed with a particular key can be authenticated using the public key. Once the session is established, the client terminals 10a, 10b, 10c have a certificate, which is sent to the central control server 20 to authenticate the client terminals 10a, 10b, 10c to the central control server 20. Is issued by. The client terminals 10a, 10b, and 10c may also request that the central control server 20 present a certificate to authenticate the central control server 20 as valid.

Authentication is the ability of one entity to determine the identity of another entity. Typically, as part of the X.509 protocol (an ISO authentication framework as an alias), a certificate is granted by a trusted authentication authority and has a strong association between the user's party's identity (or some other attribute) and its public key. Gives

The security passage between the central control server 20 and the client terminals 10a, 10b, 10c is well known in the art. For example, the functionality is implemented within protocols approved for IETF TLS version 1.0 and SSL version 2.0/3.0. Although these protocols are very simple, they consist of two layers, the record protocol and the handshake protocol.

The central control server 20 may be implemented as a computer device or a plurality of computer devices that provide commands, codes, files, contents, services, etc. by communicating with a plurality of client terminals 10a, 10b, and 10c over a network. .

For example, the central control server 20 serves as a plurality of client terminals 10a, 10b, and 10c accessed through a network (eg, financial services, payment services, social network services, messaging services, search services, mail) Service, content providing service, etc.).

In one aspect, the client terminals 10a, 10b, and 10c receive a list of authorized domains from the central control server 20 when a web browser requiring security is executed, and block access to the domains when accessing unauthorized domains. . At this time, the client terminal (10a, 10b, 10c) is characterized in that periodically issued a list of authorized domains from the central control server.

Meanwhile, the central control server 20 verifies the validity of the hash key received from the client terminals 10a, 10b, and 10c and provides the authorized domain list to the client terminals 10a, 10b, 10c.

In addition, the client terminals 10a, 10b, and 10c encrypt and store the main member information including at least one of the member's personal information, agreement information, usage information, and payment information, and store it in a blockchain. That is, in one embodiment, client terminals 10a, 10b, and 10c, which can be implemented as PCs dedicated to designated administrators in the unit, serve as blockchain nodes.

In one embodiment, the central control server 20 may have the authority to approve and block the distributed data.

Accordingly, a blockchain-based distributed and irreversible network system can be built to provide a minimum authorized domain and secure service environment. This can be implemented in the form of introducing the Decentralized App and Web, which is a web-blockchain combination system, and the Private Blockchain technology, which is a kind of blockchain.

In more detail, in order to prevent security accidents due to hacking attempts and illegal access to the client terminals 10a, 10b, and 10c, a dedicated content platform can be additionally built in the physical security network. In other words, it is possible to prepare a three-level security measure based on blockchain.

First, external access is blocked using the central control server 20 and a secure network. In addition, the system access restriction is strengthened by using the secure client terminals 10a, 10b, and 10c. In addition, personal information protection and security software may be applied using a private web browser based on a private blockchain according to an embodiment.

The private blockchain is designed as a blockchain with limited participation by building an internal network or a separate authentication method. Depending on the purpose, it can be applied in various versions.

Maintain a minimal central management system, and the rest of the main data is implemented so that data between different nodes, that is, client terminals 10a, 10b, 10c, can be completely trusted without having to go through an intermediary. In other words, it is possible to provide transparency and credibility of military security censorship by applying block chains such as military document security, digital forensics, and security audit.

In one embodiment, when the client terminals 10a, 10b, and 10c access a web browser that requires security, key information such as access log, member information, subscription information, payment information, and content usage information are generated. The client terminals 10a, 10b, and 10c block-chain the verified key information and share it between other client terminals, that is, nodes.

At this time, the linked blockchain information cannot be modified. And using the central control server 20, the operator can approve access to information to the authorized administrator. At this time, the central control server 20 may be implemented to handle minimal information such as network and service policies.

4 is a flow chart of a method of driving a security system for exclusive use of ROK military leisure culture content based on a blockchain according to an embodiment of the present invention.

When the client terminal requests Internet access through a virtual private network that allows only the authorized terminal and IP to use the network, and when a web browser that requires security is executed (S300), central control including an encrypted hash key is performed. Request to connect to the server.

Then, the central control server verifies the validity of the hash key received from the client terminal connected to the virtual private network so that the authorized client terminal is connected to the Internet (S310, S320), and the unauthorized client terminal blocks Internet access.

In particular, the client terminal is characterized by sharing an encrypted hash key based on the blockchain. When the client terminal executes a web browser that requires security, it receives a list of authorized domains from the central control server and determines whether it is a request to access the authorized domain (S330).

According to the determination result, an attempt is made to access an authorized domain (S340), and when accessing an unauthorized domain (S330), an error message is output and access to the domain is blocked (S335).

The client terminal may periodically receive a list of authorized domains from the central control server to determine whether the authorized domains are allowed to access.

In addition, the central control server verifies the validity of the hash key received from the client terminal and provides the authorized domain list to the client terminal.

In addition, the member information including at least one of the member's personal information, agreement information, usage information, and payment information is encrypted and further stored in the block chain of the client terminal.

The security system for exclusive use of the ROK military leisure culture content and its driving method according to an embodiment may be implemented as a hardware component or a combination of a hardware component and a software component. For example, the devices and components described in the embodiments include, for example, processors, controllers, arithmetic logic units (ALUs), digital signal processors (micro signal processors), microcomputers, field programmable gate arrays (FPGAs). , A programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose computers or special purpose computers.

The processing device may perform an operating system (OS) and one or more software applications running on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of the software. For convenience of understanding, a processing device may be described as one being used, but a person having ordinary skill in the art, the processing device may include a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that may include. For example, the processing device may include a plurality of processors or a processor and a controller. In addition, other processing configurations, such as parallel processors, are possible.

The software may include a computer program, code, instruction, or a combination of one or more of these, and configures the processing device to operate as desired, or processes independently or collectively You can command the device.

Software and/or data may be interpreted by a processing device, or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. Can be embodied in. The software may be distributed on networked computer systems, and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

10a, 10b, 10c: client terminal 20: central control server
110: memory 120: processor
130: communication interface 140: input and output interface
1210: System security module 1220: Program security module
1230: Blockchain operation module

Claims (10)

A client that requests Internet access through a virtual private network that allows only authorized terminals and IPs to use the network, and requests to access to the central control server, including an encrypted hash key, when running a web browser that requires security Terminal; And
It includes a central control server that verifies the validity of the hash key received from the client terminal connected to the virtual private network so that the authorized client terminal is connected to the Internet, and the unauthorized client terminal blocks access to the Internet.
The client terminal is a blockchain-based security system for exclusive use of ROK military leisure culture content, characterized by sharing the encrypted hash key on a blockchain basis.
According to claim 1,
The client terminal is issued a list of authorized domains from the central control server when the web browser in need of security is executed, and blocks access to the domains when accessing unauthorized domains. Dedicated security system.
According to claim 2,
The client terminal is periodically issued a list of authorized domains from the central control server, a blockchain-based security system dedicated to leisure and military content based on the blockchain.
According to claim 1,
The central control server verifies the validity of a hash key received from the client terminal and provides an authorized domain list to the client terminal.
According to claim 1,
A security system for exclusive use of ROK military leisure culture contents using blockchain technology, characterized in that member information including at least one of a member's personal information, terms of use, usage information, and payment information is encrypted and further stored in a blockchain.
When the client terminal requests Internet access through a virtual private network that allows only the authorized terminal and IP to use the network, and when a web browser that requires security is executed, it accesses the central control server including the encrypted hash key. Requesting step; And
Including the step of verifying the validity of the hash key received from the client terminal connected to the virtual private network by the central control server so that the authorized client terminal is connected to the Internet, and the unauthorized client terminal is blocked from accessing the Internet.
The client terminal is a blockchain-based method for driving a security system for exclusive use of the ROK military leisure culture content, characterized by sharing the encrypted hash key.
The method of claim 6,
The client terminal is issued a list of authorized domains from the central control server when the web browser in need of security is executed, and blocks access to the domains when accessing unauthorized domains. How to operate a dedicated security system.
The method of claim 7,
The client terminal periodically issued a list of authorized domains from the central control server Blockchain-based method of driving a security system dedicated to leisure culture content based on the army.
The method of claim 6,
The central control server verifies the validity of the hash key received from the client terminal and provides an authorized domain list to the client terminal.
The method of claim 6,
A method of driving a security system for exclusive use of ROK military leisure culture contents using blockchain technology, characterized in that member information including at least one of a member's personal information, terms of use information, usage information, and payment information is encrypted and further stored in a blockchain.

Images