KR20210087640A - Bigdata based attestation service method - Google Patents

Abstract

Disclosed is a big data-based attestation service method. According to the present invention, the big data-based attestation service method, in which one or more information providers and an attestation requester requesting information to be attested participate, comprises the steps of: (a) generating, by the information provider, information requested by a platform as a hash value, signing with a private key of the information provider, and providing the information to the platform; (b) requesting, by the attestation request, the platform for attestation by attaching a signature with the private key after generating data to be attested as the hash value; and (c) completing the attestation when the hash value requested by the attestation requester exists in the platform. An attestation service can be provided using big data, and the information is provided as the hash value rather than actual information, such that personal information can be protected.

Description

Big data-based attestation service method {BIGDATA BASED ATTESTATION SERVICE METHOD}

The present invention relates to a verification service, and more specifically, big data-based proof to prove to users that their data exists in big data by encrypting the information held by institutions participating in the block chain platform and uploading it to the platform. It is about service methods.

As the Internet has become a daily life, most people use the Internet to access government institutions, educational institutions, medical institutions, telecommunication companies, financial companies, passenger companies, asset management, credit information, portals, social network services (SNS), games, They use numerous online services such as shopping, ticketing, home delivery, and electronic voting.

In such an Internet environment, people are more active in posting their opinions and experiences on blogs, portals, and SNS.

Content generated in this way is exposed and read by users through a search engine, and there is no way to guarantee trust in the content.

In particular, articles that evaluate or criticize a specific product or service as good or bad are viewed with interest by search users and may affect users' various decision-making. Therefore, how to guarantee trust is a very important issue in the present and future Internet environment. it can be said

Representative examples of such content include 1) a post promoting the product or service while claiming to be a purchaser of the product or service, and 2) proving that you are a buyer and affiliation with an article claiming to be a member of your affiliation or group. This is important.

However, in both cases above, due to the current Personal Information Protection Act and the Information and Communications Network Act, the service provider or institution cannot provide certification service on the Internet. This problem is said to be the biggest cause of malicious slander and dissemination of false information as it lowers the trust of content generated in the current SNS service.

Conversely, if trust in content on the Internet is guaranteed, peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) peer-to-peer (P2P) networks will play a role in activating recommendation services and direct transaction services based on their experiences and knowledge.

KR Registered Patent Publication No. 10-1379168 (2014.03.21)

An object of the present invention to solve this problem is to provide a blockchain-based authentication service method that can implement various authentication services using big data shared by organizations participating in the blockchain network.

Another object of the present invention is to provide a blockchain-based authentication service method that can share information provided by organizations participating in the blockchain network as de-identified information.

In addition, it is another object of the present invention to provide a blockchain-based authentication service method capable of authenticating only by determining the presence or absence of the requested de-identified information on the blockchain network.

And the present invention does not share the information as it is, but converts it into a non-identified hash value and shares it, and it is an object of the present invention to provide a method by which the user can prove that his or her data exists in big data.

In order to solve this problem, the big data-based authentication service method in which one or more information providers providing information about users, users, or purchasers of the present invention and a certification requester requesting information to be certified participate in, (a) the information provider generating the information requested by the platform as a hash value, signing it with the private key of the information provider, and providing it to the platform; (b) generating the data that the requestor wants to prove as a hash value and signing it with the private key This can be accomplished by including the steps of requesting proof from the platform by attaching it, and (c) completing the proof when the hash value requested by the proof requester exists in the platform.

In addition, the method further comprises the steps of: the information provider joining the platform to generate an encryption key composed of a public key and a private key; and the authentication requester joining the platform to generate an encryption key composed of a public key and a private key. can do.

In addition, the information provided by the information provider to the platform includes information about the user identifier, product name, and date of purchase in purchase information at the time of purchase, affiliation information at the time of subscription, or usage information at the time of use, and the user identifier can be set as a phone number.

In addition, the step (a) includes registering a part of the hash value provided by the information provider to the platform (eg, product name or organization name) in the original text on the yellow page, The method may further include the step of retrieving data from the yellow page with minimal information to complete the data to be verified.

And when the proof is completed in step (c), the certification requester pays the usage fee, and the platform can take profits by distributing the paid usage fee at the ratio agreed between the information provider and the platform.

Therefore, according to the big data-based authentication service method of the present invention, it is possible to provide not only the authentication service using big data, but also the effect of protecting personal information because the information is provided as a hash value rather than actual information. have.

In addition, according to the big data-based authentication service method of the present invention, there is an effect of preventing false authentication through false registration and preventing brute force search.

In addition, according to the big data-based authentication service method of the present invention, it is possible to exclude the risk of information exposure because it exists as the requested de-identified information on the block chain network and verifies the proof by judging only the existence or not.

In addition, according to the big data-based authentication service method of the present invention, there is an effect that desired data can be obtained and used with minimal information by using a yellow page even when the data to be requested for verification is uncertain.

And, according to the big data-based proof service method of the present invention, since the fee generated by the proof requester, the information provider, and the platform can be distributed at a certain rate, the conditions for providing or using more active information within the block chain are provided. There is an effect that can be done.

1 is a basic configuration diagram for providing a big data-based authentication service method according to an embodiment of the present invention;
And
2 is a flowchart illustrating a big data-based authentication service method according to an embodiment of the present invention.

The terms or words used in the present specification and claims are not to be construed as limited in their ordinary or dictionary meanings, and on the principle that the inventor can appropriately define the concept of the term in order to best describe his invention. It should be interpreted as meaning and concept consistent with the technical idea of the present invention.

Throughout the specification, when a part "includes" a certain element, it means that other elements may be further included, rather than excluding other elements, unless otherwise stated. In addition, terms such as “…unit”, “…group”, “module”, and “device” described in the specification mean a unit that processes at least one function or operation, which is implemented by a combination of hardware and/or software can be

Throughout the specification, the term “and/or” should be understood to include all possible combinations from one or more related items. For example, the meaning of "the first item, the second item and/or the third item" may be presented from the first, second, or third item as well as two or more of the first, second, or third items. A combination of all possible items.

In each step throughout the specification, identification symbols (eg, a, b, c, ...) are used for convenience of description, and identification codes do not limit the order of each step, and each step is Unless the context clearly dictates a specific order, the order may differ from the stated order. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

First, the basic characteristics of the big data-based authentication service method of the present invention will be described. After the platform users, information providers and authentication requesters, create an asymmetric encryption key pair (private key, public key) through a subscription procedure to the blockchain platform, The first feature is that the information provider creates a hash value with a cryptographic hash algorithm that promises the minimum information required by the platform from the information they have, signs it with their private key, and provides it to the platform.

This is to prevent malicious registration of false information by unauthorized users by attaching a signature.

In addition, the second feature is that the certificate requester makes a hash value created with the same cryptographic hash algorithm for the value of the data to be verified and requests the platform to prove it by signing it with the private key. The reason for requiring a signature is to prevent brute-force attacks for malicious purposes.

In addition, since the requestor may not know the exact value of the data to be verified (for example, the product model name written in the transaction information), the information provider stores the set of data values used when uploading the hash value to the platform in a separate space. As a third feature, it is registered as a yellow page.

This is because the certification requester can create a certification service interface so that the data to be verified can be completed even if the certification requester remembers only the minimum amount of information using the yellow page.

Lastly, in order to motivate information providers to voluntarily and actively participate in the platform, it is characterized by making a profit whenever the information provided by the information provider provides a proof service, and making the requestor pay a fee for the profit.

That is, the present invention intends to provide a system that can prove this in the block chain because the more the P2P service is activated, the more the demand for proof of trust increases, and the data-based proof is required for social services such as product recommendation.

For this, referring to the basic configuration diagram for providing a big data-based authentication service according to an embodiment of the present invention in FIG. 1 , an information provider 110 providing various information and a certification requester 120 requesting data verification participates in the big data-based proof service platform 110 (hereinafter referred to as the platform) and operates to prove the requested information within the corresponding block chain.

Therefore, the information provider 110 includes a purchase information company that has purchaser information input to prove the purchaser at the time of purchase, a usage information company that has user information to prove affiliation and identity registered when using the service, and affiliation information or payment at the time of subscription. It provides the platform with product information, including payment information, owned by the information company.

In addition, it goes without saying that necessary information can be provided to the platform when proof of work is required, such as when works are uploaded, or proof of originality for a registered document is required.

That is, the present invention is mainly described as an embodiment for proving that you are a product buyer using payment information of the product, but as described above, all data including transaction records or document access registration generated as a result of performing social actions as described above It goes without saying that the present invention can be used even when proof is required.

In addition, in the present invention, when requesting proof of necessary information, data to be registered and requested data may be different depending on the information, so by calling API (Application Programming Interface) for each proof method for each information, It is explained that the proof method has been established.

When the information provider 110 wants to register the above-mentioned information on the platform, it must first sign up for the platform, receive an account, and obtain an encryption key pair (private key and public key).

The information provider 110 can provide information to the platform while acquiring the private key, and when it wants to provide information, it generates the information requested by the platform as a de-identified hash value and uses the private key of the information provider. Sign it and provide it to the platform.

At this time, as described above, the information provided by the information provider to the platform is registered including information on the purchase information at the time of purchase, affiliation information at the time of subscription, or usage information at the time of use, including information on the user identifier, product name, and date of purchase.

The user identifier may use various personal identification numbers that can identify an individual, but it is preferable to set it as a phone number.

On the other hand, the information provider 110 may register some of the data values related to the information in the original text on the yellow page when registering the information as a hash value on the platform.

For example, in the case of a product, a list of product names similar to the product model name of the yellow page 130 within the threshold range is registered in the product set, and if necessary, the product name can be easily found.

In addition, the Yellow Page 130 is configured to store data about an API (Application Programming Interface) for each information proof method and a product name set.

After the certificate requester 120 generates the data to be verified as a hash value, a signature is attached with the private key to request proof from the platform.

When the certificate requester 120 also wants to request the above-mentioned information from the platform, it must first sign up to the platform, receive an account, and obtain an encryption key pair (private key and public key).

When requesting proof of data from the platform (API call) with the private key obtained, the data for which the proof is requested is generated as a hash value, signed with the corresponding proof requester's private key, and then requested to the platform.

At this time, the authentication is completed if the same hash value exists by calling the API with the mobile phone number as the user identifier and the product name as the hash value.

In the case of a request for proof of a purchaser of a product, if a hash value exists, the date of purchase or a summary answer may be additionally presented.

That is, if the hash value requested by the proof requester exists on the platform, the proof is completed.

In the present invention, a hash value is a value calculated by calculating the data of a file through a hash function or a hash algorithm, and since such a value becomes a unique value of the file, the hash value of two different files This equivalence means that the two files are the same file with a perfect 100% match.

On the other hand, when there is no data requesting proof, the data to be certified can be completed on the yellow page 130 with minimal information.

For example, in the case of a product, it receives a list of product model names and similar product names within the threshold range from the product set of the yellow page 130, and repeats the steps of requesting proof by calling the API while changing the top 10 similarities. Find the name of the product you are looking for.

When the certification is completed, the platform receives the usage fee from the requestor of the certification and distributes it at the agreed rate between the information provider and the platform, so that more active information can be provided or used.

It is desirable that the platform and the provider distribute 50% of the usage fee per case, but it is not limited to this, and it is shared at an appropriate ratio so that the service can be activated.

Hereinafter, the big data-based authentication service method of the present invention will be described using the above-described configuration.

2 is a flowchart for explaining a big data-based authentication service method according to an embodiment of the present invention. As shown in FIG. 2, the big data-based authentication service method of the present invention is first performed by the big data-based authentication service platform 100 of the present invention. ), the information provider 110 such as a purchase information company or a usage information company registers an account in order to participate (S110).

When registering an account in the big data-based authentication service platform 100 in step S110, an encryption key (private key and public key) is generated and registered.

When an account is registered in step S110, the information provider 110 registers related information in the big data-based authentication service platform 100 (S120).

In step S120, the information provider 110 generates the information to be provided as a hash value, signs it with a private key, and registers it.

In addition, the certificate requester 120 who wants to request proof also registers an account to participate in the big data-based proof service platform 100 of the present invention (S130).

Even when registering an account in the big data-based authentication service platform 100 in step S130, an encryption key (private key and public key) is generated and registered.

When an account is registered, the verification of necessary information is queried to the big data-based verification service platform 100 using the corresponding account (S140).

Step S140 is to calculate the information to be verified as a hash value, attach a private key, and request proof to the big data-based proof service platform 100 .

The big data-based authentication service platform 100 determines whether or not there is an information hash value registered by the information provider 110 when the information of the authentication requester 120 is queried with a hash value (S1510), and the presence of the hash value The presence or absence is transmitted to the certification requester 120 (S160).

When a response is received from the big data-based proof service platform 100 that the hash value of the maritime information exists, it is determined that the information is verified (S170), and the agreed fee according to the use of the information is paid (S180).

Of course, if it is received that there is no information received in step S160, the information is regarded as not verified, and authentication information is input again and post-processing is performed.

On the other hand, when there is no data requesting proof in step S150 , data to be certified can be completed in the yellow page 130 with minimal information.

For example, in the case of a product, a product model name and a list of similar product names within a threshold range are received from the product set of the yellow page 130, and the API is called while changing the top 10 similarities to request proof.

In step S180, when the certification is completed, the platform receives a usage fee from the certification requester and distributes it at the agreed rate between the information provider and the platform, so that more active information can be provided or used (S190).

The contract fee can be distributed by the platform and the provider by 50% of the usage fee per case, but share it at an appropriate ratio to activate this service.

According to the blockchain-based authentication service method of the present invention, it is possible not only to provide a verification service using big data, but also to provide information as a hash value rather than actual information, which has the effect of protecting personal information. will be.

Although the present invention has been described in detail with respect to the described embodiments, it is obvious to those skilled in the art that various changes and modifications are possible within the scope of the technical spirit of the present invention, and it is natural that such variations and modifications belong to the appended claims.

100: Big data-based proof service platform
110: information provider
120: requester for proof
130: yellow page

Claims (5)

In the big data-based authentication service method in which one or more information providers who provide information about users, users or buyers and a requestor for certification who requests information to be certified participate,
(a) the information provider generating the information requested by the platform as a hash value, signing the information provider's private key, and providing the information to the platform;
(b) requesting the platform for proof by attaching a signature with a private key after the proof requester generates the data to be verified as a hash value; And
(c) completing the proof if the hash value requested by the proof requester exists in the platform;
Big data-based attestation service method that includes.
The method according to claim 1,
generating, by the information provider, an encryption key composed of a public key and a private key by joining the platform; and
generating an encryption key composed of a public key and a private key by the certificate requester joining the platform;
Big data-based attestation service method further comprising a. The method according to claim 1,
The information provided by the information provider to the platform is
A big data-based authentication service method, comprising a user identifier, product name, and date of purchase in purchase information at the time of purchase, affiliation information at the time of subscription, or usage information at the time of use, wherein the user identifier is a phone number.
The method according to claim 1,
Step (a) is
and registering some of the data values used in the platform as an original on the yellow page,
The big data-based authentication service method further comprising the step of completing the data to be verified by retrieving the data to be verified in the step (b) with minimal information on the yellow page.
The method according to claim 1,
A big data-based authentication service method in which the authentication requester pays a usage fee when the verification is completed in step (c), and the platform distributes the paid usage fee at the ratio agreed between the information provider and the platform.

Images