KR20210109767A - A method for providing asset backup services based on blockchain monitoring - Google Patents

Abstract

According to an embodiment of the present invention, an operation method of a service providing device which provides a transaction management service through a blockchain network includes the steps of: registering user information received from a user terminal; monitoring transaction data information pending approval of the blockchain network based on user information; and transmitting an alarm message corresponding to an abnormal transaction to the user terminal, when the abnormal transactions are identified according to monitoring. Accordingly, the reliability and stability of blockchain asset transactions can be improved.

Description

A method and device for providing an asset theft prevention service based on block chain monitoring

The present invention relates to a service providing method and an apparatus therefor. More specifically, the present invention relates to a method and apparatus for providing an asset theft prevention service based on block chain monitoring.

In general, blockchain utilizes a peer-to-peer (P2P) network as one of the distributed databases. Distributed database is a technology that allows multiple users to share a large-scale database by physically distributing data. Blockchain creates a peer-to-peer network of cryptocurrency users connected to the Internet.

Through this, the transaction details (blocks) of virtual currency are stored in the user's computer. Among them, transaction details that match the data of the majority of users are verified as normal ledgers and stored in blocks. If errors such as omissions are found in a specific user's ledger, it is corrected by duplicating the normal ledger and replacing it.

When a block containing new transaction details is created, the process of appending it to the back of the previous block is repeated. The name blockchain means that the transaction history (block, block) is linked. When trading, each user's transaction history is compared. Through this, the authenticity of transaction details can be identified, preventing data forgery. The security and stability of the blockchain increases as more users share data. In addition to Bitcoin, blockchain is being used in various online services such as cloud computing services.

Asset information such as cryptocurrency formed by such block chain technology is irreversibly stored by the data of the majority of users, thus ensuring asset transparency and reliability.

However, if there is a service server that brokers asset information transactions, an unintentional attacker's transaction block (transaction block) occurs due to hacking in the input/output process of the service server, and the attacker's transaction is normally approved If it is, there is a problem in that it cannot be returned permanently due to the irreversible nature of the block chain.

That is, even if the service user confirms that the ownership of the asset has been transferred by an unintentional transaction, it is difficult to identify the actual user who has received it, and there is a problem that there is no means to actually get it back.

Attackers use these irreversible characteristics to target cryptocurrencies with high trading volume. For example, the Ethereum block chain, which is used by many, has secured many users, including the smart contract function that enables token issuance. In addition, Ethereum has excellent data integrity and irreversibility by adopting the traditional consensus algorithm, Proof of Work.

The proof-of-work consensus algorithm determines whether a transaction is a valid transaction when a certain transaction occurs, and the participant terminals individually verify whether the new block is real or fake, and the difficulty of work As a result, it usually takes about 10 minutes to complete the proof-of-work agreement. After 10 minutes, the irreversible transaction is completed.

However, as described above, if the transaction service server is hacked and user transaction information (wallet address information, encryption key, etc.) When the completion time of the proof-of-work agreement, such as 10 minutes, expires, irreversible transactions are processed and there is a fatal problem that there is no way to get the transferred Ethereum back.

The present invention was devised to solve the above problems, and by monitoring transaction information on the block chain and providing an asset theft prevention service based on the monitoring information, the occurrence of abnormal block chain transactions caused by an attacker's hacking attempt is detected in advance. A block chain monitoring-based asset theft prevention service that can improve the reliability and stability of block chain asset transactions using transaction brokerage service devices, etc. An object of the present invention is to provide a providing method and an apparatus therefor.

In accordance with an embodiment of the present invention for solving the above problems, there is provided a method of operating a service providing apparatus for providing a transaction management service through a block chain network, the method comprising: registering user information received from a user terminal; monitoring transaction data information pending approval of the block chain network based on the user information; and when an abnormal transaction is identified according to the monitoring, transmitting an alarm message corresponding to the abnormal transaction to the user terminal.

In addition, a service providing apparatus for providing a transaction management service through a block chain network according to an embodiment of the present invention for solving the above-described problems includes: a user information registration unit for registering user information received from a user terminal; Based on the user information, a monitoring interface for monitoring the transaction data information waiting for approval of the block chain network; and an alarm processing unit configured to transmit an alarm message corresponding to the abnormal transaction to the user terminal when an abnormal transaction is identified according to the monitoring.

In addition, the method according to an embodiment of the present invention for solving the above problems may be implemented as a computer program stored in a computer-readable recording medium to execute the method in a computer.

According to an embodiment of the present invention, it is possible to monitor agreement or approval target transaction information formed on a block chain network based on pre-registered user identification information and terminal identification information, and by using the monitoring information to identify abnormal transaction information , by providing a service providing device that handles an appropriate asset theft prevention process corresponding to this and an operation method thereof, even if a transaction brokerage service device is hacked, illegal transactions using it are prevented in advance, and thus the reliability and stability of blockchain asset transactions can be improved

In addition, according to an embodiment of the present invention, a priority transaction block indicating the transfer of block chain assets from the user wallet account to the safe asset wallet account of the service providing device is generated in advance according to the user information, and the attacker's By providing a transaction prevention mechanism that allows transaction blocks to be processed prior to transaction information, it not only detects abnormal block chain transactions caused by attackers hacking attempts, but also secures asset wallets before consensus block approval is completed. By transferring to the account, it is possible to provide a safe blockchain-based asset transaction service that can be returned through follow-up measures even if a transaction block is generated due to the attacker’s takeover by quickly processing theft prevention and returning it to the user. .

1 is a conceptual diagram schematically illustrating an entire system of the present invention.
2 is a block diagram illustrating a service providing apparatus according to an embodiment of the present invention in more detail.
3 to 6 are diagrams for explaining a safe asset return process based on a shared distribution key according to an embodiment of the present invention.
6 is a flowchart illustrating a transaction process according to an embodiment of the present invention in more detail, and FIG. 7 illustrates an encryption key table used in the transaction process.
8 and 9 are diagrams illustrating an alarm interface output from a user terminal according to an embodiment of the present invention.

The following is merely illustrative of the principles of the invention. Therefore, those skilled in the art will be able to devise various devices which, although not explicitly described or shown herein, embody the principles of the present invention and are included within the spirit and scope of the present invention. Moreover, it is to be understood that all conditional terms and examples listed herein are, in principle, expressly intended solely for the purpose of enabling the concept of the present invention to be understood, and not limited to the specifically enumerated embodiments and states as such. should be

Moreover, it is to be understood that all detailed description reciting the principles, aspects, and embodiments of the invention, as well as specific embodiments, are intended to cover structural and functional equivalents of such matters. It is also to be understood that such equivalents include not only currently known equivalents, but also equivalents developed in the future, i.e., all devices invented to perform the same function, regardless of structure.

Thus, for example, the block diagrams herein are to be understood as representing conceptual views of illustrative circuitry embodying the principles of the present invention. Similarly, all flowcharts, state transition diagrams, pseudo code, etc. may be tangibly embodied on computer-readable media and be understood to represent various processes performed by a computer or processor, whether or not a computer or processor is explicitly shown. should be

In addition, clear use of terms presented as processor, control, or similar concepts should not be construed as exclusively referring to hardware having the ability to execute software, and without limitation, digital signal processor (DSP) hardware, ROM for storing software. It should be understood to implicitly include (ROM), RAM (RAM) and non-volatile memory. Other common hardware may also be included.

The above-described objects, features and advantages will become more apparent through the following detailed description in relation to the accompanying drawings, and accordingly, those of ordinary skill in the art to which the present invention pertains can easily implement the technical idea of the present invention. There will be. In addition, in the description of the present invention, if it is determined that a detailed description of a known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted.

Hereinafter, a preferred embodiment according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram schematically illustrating an entire system according to an embodiment of the present invention. First, as shown in FIG. 1 , the block chain network system 1000 according to an embodiment of the present invention may be composed of a block chain mesh network formed by one or more node terminals connected by wire or wirelessly through a network. have. And, among the node terminals, a service providing apparatus 100 for providing a block chain monitoring-based asset theft prevention service according to an embodiment of the present invention, and one or more user terminals 200 receiving a service according to service registration. can do.

In addition, each node terminal including the service providing apparatus 100 and one or more user terminals 200 may be connected to a block chain network through an input/output device and exchange data. To this end, each node terminal includes a mobile device such as a mobile phone, a smart phone, a PDA, a tablet computer, and a laptop computer, a computing device such as a personal computer, a tablet computer, and a netbook, or an electronic product such as a television, a smart television, or a security device for gate control. and various electronic systems.

In addition, each node terminal including the service providing apparatus 100 and one or more user terminals 200 may include a communication module for accessing the block chain network. The blockchain network may be implemented as a wired network, such as, for example, a local area network (LAN), a wide area network (WAN), or a value added network (VAN). In addition, the block chain network is a mobile radio communication network, satellite communication network, Bluetooth (Bluetooth), Wibro (Wireless Broadband Internet), HSDPA (High Speed Downlink Packet Access), Wi-Fi (Wi-Fi), LTE (Long Term) Evolution) can be implemented in all kinds of wireless networks. If necessary, the block chain network may be a network in which wired and wireless are mixed.

In addition, each node terminal including the service providing apparatus 100 and one or more user terminals 200 may register account information according to its own node connection in the transaction book data shared through the network in a cloud manner. And, when a transaction of encrypted information for generating a block chain is required, each trader terminal may propagate the transaction information to be recorded in the transaction book data to each trader terminal.

And, according to the mutual verification process corresponding thereto, for example, when approval from node terminals of a certain rate or more is processed, the transaction book data is updated and the information is shared, so that the transaction of encryption information for creating a block chain is performed can be processed.

Here, the transaction ledger data is a block chain ( block chain) data can be linked.

Accordingly, verification of whether the transaction ledger data has been forged or altered can be easily processed according to the verification of the hash value of the block chain. To this end, each trader terminal may provide computing power for performing calculation and verification processing for calculating the hash value of the next block, and may obtain a corresponding reward.

The security stability of such a block chain can be formed by the system participation of data-sharers. Accordingly, transaction information blocks including details of sharing between each sharer terminal connected to the block chain network and encryption information issuance/transaction details for creating a block chain can be sequentially stored, and for preventing forgery Transaction verification (proof-of-work) processing for sequentially blockchainizing hash values can be performed distributedly at each trader terminal.

For such transaction verification processing, various distributed consensus algorithms may be used, and representative examples thereof include Proof-of-Work (PoW), Proof-of-Stake (PoS), and the like. Proof-of-Work (PoW, Proof-of-Work) is exemplified as a method of suppressing fraud by proving that resources (ex. computing power, etc.) To enable proof in proportion to the stake, PoS provides a process that controls the probability of creating a block in proportion to the stake of the token each node has.

And, according to an embodiment of the present invention, the service providing apparatus 100 is a node terminal participating in a block chain network for asset transaction of cryptocurrency, or receives and processes data from one or more node terminals connected to the block chain network It may be a device that provides the service data to the user terminal 200 .

This service providing apparatus 100 is based on the user identification information and terminal identification information of the pre-registered user terminal 200, corresponding to the user terminal 200 of the agreement or approval target transaction information formed on the block chain network. It is possible to monitor transaction block information, and by identifying abnormal transaction information based on the monitored information, a service process that handles an appropriate asset theft prevention process corresponding thereto is executed, and the execution result information is provided to the user terminal 200 can do.

In particular, the service providing apparatus 100 according to an embodiment of the present invention may collect block information, which is a transaction approval target, within a certain time from the node terminal participating in or participating in the block chain network until the consensus algorithm is completed, and this It has the advantage of enabling a real-time and active response even within a short period of time such as 10 minutes, since it is possible to perform the anti-theft prevention process by identifying abnormal transactions.

Here, the anti-theft service may include an alarm service to the user terminal 200, and the user terminal 200 may receive an alarm message in real time through one or more paths according to the alarm service. As the user terminal 200 outputs the user input interface according to the alarm message, it is possible to take appropriate measures, such as a request to cancel a transaction corresponding to the transaction, and a move to a safe asset wallet account.

That is, the service providing apparatus 100 according to an embodiment of the present invention can solve the problem that a separate transaction service server itself existing outside the block chain is hacked and cannot determine the attacker's abnormal transaction on the block chain system. In addition, it is possible to provide an anti-theft service that allows preliminary measures to be processed in advance before the time when approval or agreement is completed.

In addition, according to an embodiment of the present invention, in the case of a block chain network in which a preferential transaction change according to a priority condition is allowed when a duplicate transaction occurs, the service providing apparatus 100 provides the service providing apparatus 100 to the user information Accordingly, a priority transaction block indicating the transfer of blockchain assets from the user wallet account to the safe asset wallet account of the service providing device can be created in advance, and by performing the asset theft prevention process, the transaction block takes precedence over the attacker’s transaction information It can provide anti-theft and return services based on anti-transaction mechanisms that allow it to be processed.

Therefore, the service providing apparatus 100 according to an embodiment of the present invention not only detects in advance the occurrence of abnormal block chain transactions due to the attacker's hacking attempt, but also uses the safe asset wallet account before the block approval by consensus is completed. It is possible to provide a secure blockchain-based asset transaction service that can be returned through follow-up measures even if a transaction block is generated due to the attacker's takeover by quickly processing theft prevention and returning it to the user through the transfer.

Here, the service functions of the service providing device 100 according to the embodiment of the present invention may be implemented in one service device, but one or more function sets of each component such as a monitoring agent are modularized to form a software development kit ( SDK), and the SDK is installed on various software platforms on which the SDK can be installed, so that each modular service function can be implemented by the function of each block chain node terminal.

The configuration and operations of the service providing apparatus 100 will be described in more detail with reference to the following drawings.

2 is a block diagram illustrating a service providing apparatus according to an embodiment of the present invention in more detail.

Referring to FIG. 2 , the service providing apparatus 100 according to an embodiment of the present invention includes a user information registration unit 110 , a preferential transaction information setting unit 120 , a monitoring interface unit 130 , an alarm processing unit 140 , It includes an asset theft prevention processing unit 150 and a return processing unit 160 .

The user information registration unit 110 acquires, stores and manages user information of the user terminal 200 for providing the service of the service providing apparatus 100 according to an embodiment of the present invention.

Here, the user information may include at least one of user identification information of the user terminal 200, node information, device-specific information, use block chain network information, identity authentication information, and transaction authentication information.

Here, the user identification information may include identification information pre-registered in the service providing device 100 for service use, and in response to the user identification information, the device unique information, use block chain network information, identity authentication information, At least one of the transaction authentication information may be matched and stored and managed.

The device-specific information may be a unique value capable of uniquely identifying the user terminal 200 , for example, a UDID value allocated during the manufacturing of the terminal, etc. may be exemplified. The node information may include node identification information for identifying a user node on a block chain network, and network address information may be exemplified.

In addition, the blockchain network information used can be used to determine appropriate anti-theft prevention and notification processing according to the type and characteristics of the blockchain.

In addition, the identity authentication information and transaction authentication information can be used to generate a priority transaction block or to generate a return transaction block to perform the theft prevention process, It can also be used as a secondary authentication means.

The preferential transaction information setting unit 120 may operate when the block chain network that processes registered cryptocurrency asset transactions according to user information registration has preset transaction conditions corresponding to duplicate transactions.

For example, a blockchain network that supports token transactions using Ethereum or ERC-20 can request approval of other transactions corresponding to the same wallet as a priority transaction before the time when the proof-of-work consensus algorithm is completed.

Here, the condition for the preferential transaction to be pre-processed in response to the existing abnormal transaction block may be different for each block chain network, but a method of allocating a higher transaction fee in general may be exemplified. In this case, it is preferable that the transaction fee of the priority transaction block according to the priority transaction information is higher than the fee of the existing abnormal transaction block by a predetermined ratio or more.

Accordingly, the first transaction information setting unit 120, the security management asset wallet generated by the service providing device 100, all or part of the assets to prevent theft from the wallet account of the user terminal 200 registered with the user information. Priority transaction blocks transferred to the account can be created, and the generated blocks are encrypted and stored and managed by the preferential transaction information setting unit 120 itself, or provided to the user terminal 200 to perform a subsequent hijacking prevention process. can be processed for use.

The monitoring interface unit 130 monitors transaction information of blocks waiting for approval or agreement completion formed on the block chain network, and matches normal user information (network address, terminal unique identification information, etc.) according to preset user information It is determined whether an abnormal transaction block is generated from a terminal node that does not work, and when an abnormal transaction block is generated, the abnormal transaction block information is transmitted to the asset theft prevention processing unit 150 and the alarm processing unit 140 .

Here, the shared data on the block chain network monitoring transaction information may include blocks in the block generation waiting area for performing the consensus process, and the expression is different for each block chain network, but transactions representing blocks in the approval waiting area It may be indicated as state information of names such as a pool (POOL), a mempool (MEMPOOL), and a pending pool (PENDING).

Such a monitoring interface unit 130 directly monitors transaction block information in the state of the approval waiting area of each block chain transaction network by itself, or is installed in each node terminal according to an embodiment of the present invention, as shown in FIG. 2 . Distributed monitoring may be performed through a plurality of possible monitoring agents.

Referring to FIG. 2 , the monitoring interface unit 130 according to an embodiment of the present invention collects, stores and manages distributed monitoring information according to the operation of the monitoring agent from one or more node terminals participating for each block chain network. have.

For example, a blockchain network includes N blockchain networks, such as the first blockchain network, the second blockchain network, ... and the Nth blockchain network, such as the Bitcoin network, the Ethereum network, and the may be composed of In addition, each monitoring agent may be provided for one or more block chains, or one monitoring agent may connect to a plurality of block chain networks to collect monitoring information for each block chain network and deliver it to the monitoring interface unit 130 .

More specifically, the monitoring agent may include an identification unit 131 , a storage unit 132 , and a transmission unit 133 for identification, storage, and transmission of information to the monitoring interface unit 130 of monitoring information, each It may optionally include one or more monitoring information collecting units 134, 135, 136, 137, and 138 for collecting necessary information according to the characteristics of the block chain network.

Here, one or more information collection units include a block information collection unit 134 that collects transaction block information formed in an approval waiting area state on a block chain network, and a transaction information collection unit 135 that collects transaction request information generated from one or more nodes. , a node information collection unit 136 that collects identification information and related address information of each node that has requested a transaction, a network information collection unit 137 that collects network address information, and one or more automated transactions stored by the block chain It may include at least one of the contract information collecting unit 138 that collects contract information that provides process execution.

The identification unit 131 identifies transaction block information corresponding to the user registration information from the monitoring information collection unit 134 , 135 , 136 , 137 , 138 based on the user registration information received from the monitoring interface unit 130 . and may be stored in the storage unit 132 or transmitted to the monitoring interface unit 130 through the transmission unit 133 .

Accordingly, the monitoring interface unit 130 may monitor whether a preset abnormal transaction occurs in response to the transaction information identified through the monitoring agent, and when an abnormal transaction occurs, the alarm processing unit 140 and the asset takeover prevention processing unit ( 150) to provide related services.

For example, the monitoring interface unit 130, based on the user wallet information pre-registered through the user information registration unit 110, a block chain transaction request or approval target transaction for the wallet account corresponding to the user terminal 200 It can be identified whether a block exists, and by analyzing the transaction data of the transaction request or approval target transaction block, it is possible to identify whether unique information is normally transmitted from the registered user terminal 200 . If it is not a normal transaction, the monitoring interface unit 130 may transmit the analyzed abnormal transaction data information to the alarm processing unit 140 and the asset theft prevention processing unit 150 .

More specifically, the monitoring interface unit 130 may collect block generation waiting area information of minor node terminals that perform a process of generating a transaction block each having its own cycle and difficulty. Since each transaction data is not directly generated as a block, but may be temporarily stored in an approval waiting area (mempool, pending pool, pool area, etc.) to be generated as a block in the minor node terminal, the monitoring interface unit 130 waits for approval By indexing blocks in the area, it is possible to determine whether abnormal transaction data exists.

Here, the conditions stored in the approval waiting area may be different for each block chain network, but in the case of a proof-of-work consensus method such as Ethereum, depending on whether the transaction data meets the following conditions, the can be saved.

a) There must be no transaction data with the same hash data.

b) Normal signing must be processed.

c) The nonce information of the transaction data must be greater than or equal to the current nonce.

d) the transaction gas limit does not exceed the block limit gas;

e) The transaction amount (tx value) must be greater than or equal to 0.

f) The transaction amount (tx value) must not be greater than the sender's assets.

g) The set transaction fee (tx gas) must match the value calculated according to the preset operation.

The alarm processing unit 140 may provide an alarm message transmission service according to a preset alarm path to the user terminal 200 based on the abnormal transaction data information received from the monitoring interface unit 130 . To this end, the alarm processing unit 140 transmits an alarm message based on the abnormal transaction data through an external wired/wireless network based on the pre-registered unique identification information, phone number, email or SNS account information of the user terminal 200 . can

For example, the alarm message may indicate at least one of occurrence of abnormal transaction data, a transaction target, a transaction amount, and an approval waiting time, and the user terminal 200 displays the alarm message through an alarm message interface, voice or haptic. It can be processed and output in the form of output alarm data as shown below.

In addition, the user terminal 200 may receive the user request information corresponding to the abnormal transaction data through the alarm message interface, and the user prevention request information is the replacement transaction request corresponding to the abnormal transaction block, the transaction invalidation request, or the service provision It may include information on the request for theft prevention processing through the transfer to the safe asset wallet account of the device 100 .

The asset theft prevention processing unit 150 performs an asset theft prevention process corresponding to the abnormal transaction data according to the request information of the user terminal 200 is received or preset asset theft prevention setting information from the user terminal 200 . In addition, the processing result according to the execution of the asset theft prevention process may be transmitted to the user terminal 200 .

Here, the asset theft prevention process may include an invalidation request according to an alternative transaction processing corresponding to abnormal transaction data or a theft prevention processing through transfer to a safe asset wallet account.

The alternative transaction processing or transaction invalidation request may be processed according to a user request of the user terminal 200 in a state where the approval waiting time is a predetermined time or more, and in this case, the asset theft prevention processing unit 150 responds to the abnormal transaction data The user terminal 200 may invalidate the current abnormal transaction data by generating an alternative transaction block corresponding to the pre-registered backup account for the wallet.

However, block approval according to the consensus algorithm may be processed while the user views the alarm message and inputs a related request, and it becomes impossible to invalidate blocks that have already been processed.

Therefore, the asset theft prevention processing unit 150 according to the embodiment of the present invention, the priority transaction information setting unit 120 according to the theft prevention condition information such as the transaction amount, waiting time, user asset size, etc. preset from the user terminal 200 ) generates preferential transaction request data so that the replacement transaction using the pre-generated preferential transaction block is prioritized, and the block of the preferential transaction request data is first generated to prevent asset theft so that the abnormal transaction data is invalidated can do. In this case, cryptocurrency assets corresponding to a certain amount of assets from the user wallet account according to the preferential transaction block may be transferred to the safe asset wallet account of the service providing device 100 set in the preferential transaction information setting unit 120 .

More specifically, the priority transaction information setting unit 120 according to an embodiment of the present invention generates and stores transaction data for preventing theft from a user wallet account of a predetermined amount of pre-signed assets to a safe asset wallet account. In addition, the asset theft prevention processing unit 150 may propagate a transaction approval request that allows the transaction data for the prevention of theft to be processed in preference to the abnormal transaction to the block chain network.

For example, in the case of a blockchain network based on a proof-of-work consensus algorithm similar to the above-mentioned Ethereum, the existence of duplicate transaction data is allowed, but only one transaction data with the highest priority is approved according to preset reference information. It can be processed to be created as a block. As a standard, a fee standard that a transaction must be 10% higher than the transaction fee (GAS PRICE) of other transaction data may be exemplified.

In the case of such a fee-based standard, the priority transaction information setting unit 120 according to an embodiment of the present invention transmits transaction data for a plurality of preset fees (10%, 20%, 30%, 40%, 50%, etc.) may be generated, and the asset theft prevention processing unit 150 may select the transaction data generated 10% higher than the fee of the abnormal transaction data from among the plurality of transaction data, and request a transaction as the preferential transaction data.

Meanwhile, the return processing unit 160 may receive a return processing request from the user terminal 200 registered in the user information registration unit 110 , and when authentication for return processing is completed, the user terminal from the safe asset wallet account (200) may perform asset return processing to the wallet account.

In particular, according to an embodiment of the present invention, the return process according to the embodiment of the present invention can be processed by the encryption key sharing distribution method, which will be described in more detail with reference to FIGS. 3 to 6 .

3 to 6 are diagrams for explaining a safe asset return process based on a shared distribution key according to an embodiment of the present invention.

Referring to FIGS. 3 to 5 first, for user authentication and return processing according to an embodiment of the present invention, transaction data from the wallet account for return in which the urgently moved safe assets are stored to the user terminal 200 account is to be processed, as the encryption key for authentication, a distributed sharing method encryption key using the user terminal 200 , the service providing apparatus 100 and a separate key management server 300 may be used.

More specifically, first, referring to FIG. 3 , when a wallet account for return is created, the service providing device 100 generates a return encryption key for use of the wallet account with the user terminal 200 and the key management server 300 . It is set as a shared-based encryption key shared together, and once set, distributed sharing information of the encryption key may be stored in the user terminal 200 , the service providing device 100 , and the key management server 300 , respectively.

Here, the distributed sharing information may be generated according to the well-known SHAMIR distributed secret sharing algorithm. For example, when a participant over a threshold value combines a secret key, an encryption key capable of performing encryption key authentication for return may be formed, which is necessary for user authentication even if the secret key is damaged or lost in the user terminal 200 . Accordingly, it is possible to generate an encryption key for return according to the distributed shared key combination between the service providing device 100 and the key management server 300 .

As an example, as shown in FIG. 4 , when the user terminal 200 holds the normal distributed sharing information, the service providing apparatus 100 includes the distributed sharing information stored in the service providing apparatus 100 and the user terminal 200 . By combining distributed shared information, it is possible to generate a share-based encryption key that can be returned from a wallet account for return to perform return processing of safe assets.

On the other hand, as shown in FIG. 5 , when the user terminal 200 loses distributed sharing information or related data is damaged, the user terminal 200 performs terminal and user authentication through a separate channel with the service providing device 100 . When the authentication is completed, the service providing device 100 combines its distributed shared information with the distributed shared information of the key management server 300 to obtain a share-based encryption key that can be returned from the wallet account for return. It can create and process the return of safe assets.

6 is a flowchart illustrating a transaction process according to an embodiment of the present invention in more detail, and FIG. 7 illustrates an encryption key table used in the transaction process.

More specifically, referring to FIGS. 6 and 7 , the entire transaction process according to an embodiment of the present invention will be described. First, the service providing apparatus 100 registers transaction information and terminal information from the user terminal 200 ( S101).

Here, referring to FIG. 7 , transaction information may include wallet information for a user's block chain cryptocurrency transaction, and the wallet information may be registered as, for example, PubA address information based on a public key. In addition, the user may register device-specific identification information such as UDID information as terminal information of the user terminal 200 .

And, according to whether the user's block chain network is a preferred tradable block chain, the service providing apparatus 100 creates a PubC, which is a safe asset wallet account for return, when the block chain network enables preferred transactions (S103).

Thereafter, the service providing apparatus 100 may monitor the block chain waiting area data of the state before approval (S109).

In addition, the service providing apparatus 100 may generate and store and manage preferential transaction block information to a safe asset wallet account based on user authentication information and pre-transaction information obtained from block chain waiting area data (S107).

More specifically, when a preferential transaction is possible, the user terminal 200 may pre-register the user authentication information for setting the preferential transaction information.

When the identity authentication is completed, the service providing device 100 generates the Shamir algorithm-based distributed sharing information (Prv1C, Prv2C, Prv3C) corresponding to the encryption key PrvC for the return of the safe asset wallet PubC, and the first distributed sharing information (Prv1C) ) is transmitted to the user terminal 200 . The second distributed shared information Prv2C may be stored in the service providing device 100 , and the third distributed shared information Prv3C may be transmitted to a separate key management server 300 in preparation for data damage or loss.

In addition, the service providing apparatus 100 may generate the preferential transaction block information from the pre-transaction information (normal transaction data from user 1 to user 2) of the user terminal 200 obtained from the monitoring information.

For example, the service providing device 100 may monitor in real time transaction data designated as address information sent by the PubA value of user 1 to the block generation waiting area, and if there is normal transaction data to user 2 (PubB), After the pre-transaction to User 2, transaction data that allows the remittance of the remaining balance data of User 1 to the safe asset wallet account (PubC) is generated, and a pre-signature (insurance signature) based on the user's authentication information and encryption key (PrvA) to process The pre-signed transaction data is not transmitted to the block chain and may be stored in a secure storage unit of the service providing apparatus 100 or the user terminal 200 .

As described above, in order to prioritize against the attacker's transaction data, the transaction data may include a plurality of signature-processed transaction data according to a priority condition. For example, the service providing apparatus 100 may pre-generate transaction data in which a plurality of fees such as 10%, 20%, 30%, 40%, 50%, etc. are set according to the fee condition as preferential transaction data. . Accordingly, the next transaction of the normal transaction to user 2 may be preset to be processed as the preferential transaction data.

Thereafter, the service providing apparatus 100 determines whether an abnormal transaction different from the user registration information occurs from the monitoring information (S111).

For example, when transaction data with user 1 (PubA) as the sender and the attacker (PubD) as the receiver is identified from a device that is not pre-registered, the service providing device 100 may determine the occurrence of an abnormal transaction. have.

When an abnormal transaction occurs, the service providing apparatus 100 may process an alarm service corresponding to one or more preset paths (S113).

The alarm service may include the service of providing an alarm message of abnormal transaction data as described above. If the block chain network does not support duplicate transaction permit, transaction invalidation, or priority transaction while waiting for approval, the present invention The transaction process according to the embodiment may be terminated at the current stage.

On the other hand, in the case of a block chain network in which duplicate transactions are allowed, transaction invalidated, or priority transaction is possible, the user terminal 200 directly receives invalidation request information from the user and transmits it to the service providing device 100 or preferential transaction set in advance An automatic deodorization prevention process by data can be optionally performed.

However, such a deodorization prevention process or invalidation process may be complexly processed, and may be determined in stages according to a preset expected waiting time condition for approval, etc.

For example, when user invalidation request information is first received ( S115 ), the service providing apparatus 100 may process to generate new signed preferential transaction data in the user terminal 200 ( S117 ).

And, when the automatic theft prevention process is performed after a certain period of time has elapsed (S119), the service providing apparatus 100 generates pre-trade data with a priority condition over the attacker's transaction by using the preset preferential transaction data (S121) ).

Here, the preferred transaction data may be the same as the preferred transaction data generated in step S117, and may include asset transaction data to a safe asset wallet account (PubC). However, if invalidation is possible according to the block chain, the preferential transaction data of step S117 may include own transaction data to one's own wallet (PubA) or a separately designated backup wallet account to invalidate the current transaction.

Accordingly, by the block chain queue selection algorithm, block generation of high-priority transaction data is maintained, the attacker's transaction data is removed from the block, and the transfer of assets to the safe asset wallet account is completed to steal the attacker's assets is rendered useless.

On the other hand, when the asset transfer to the safe asset wallet account is completed, the service providing device 100 checks the first distributed shared information (Pvr1C) from the user terminal 200 or loses the key management server 300 according to the user authentication ) of the third distributed shared information (Pvr3C), it is possible to check the return shared key corresponding to the safe asset wallet account (S123), and process the return of the previously traded asset to the wallet account of the user terminal 200 do (S125).

8 and 9 are diagrams illustrating an alarm interface output from a user terminal according to an embodiment of the present invention.

Referring to FIG. 8 , the alarm message according to an embodiment of the present invention may include transaction data corresponding to an abnormal block chain transaction, and 100 ETH (ETH) from user 1 to user X that does not match normal user information Together with the transaction information, the expected approval time until block generation may be displayed. Accordingly, the user may input a transaction invalidation request if invalidation is possible, or a transfer request to a safe asset wallet account. Accordingly, the preset transaction data or the preferential transaction data newly signed by the user are shared on the block chain network, and abnormal transactions can be deleted.

On the other hand, as shown in FIG. 9 , the service providing apparatus 100 corresponds to an abnormal block chain transaction according to an embodiment of the present invention, according to a preset condition, such as the approval time is less than or equal to a predetermined time. First, it is also possible to automatically perform transfer processing to a safe asset wallet using transaction data. In this case, the user terminal 200 provides an authentication and return menu interface together with an alarm message according to the automatic movement processing, so that the asset moved to the safe asset wallet can be returned to its own account.

The above-described methods according to an embodiment of the present invention may be produced as a program to be executed in a computer. In addition, the program may be stored in a computer-readable recording medium, and examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc. have.

The computer-readable recording medium is distributed in a network-connected computer system, so that the computer-readable code can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the method can be easily inferred by programmers in the art to which the present invention pertains.

In addition, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention belongs without departing from the gist of the present invention as claimed in the claims In addition, various modifications may be made by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or perspective of the present invention.

Claims (20)

A method of operating a service providing device that provides a transaction management service through a block chain network, the method comprising:
registering user information received from a user terminal;
monitoring transaction data information pending approval of the block chain network based on the user information; and
When an abnormal transaction according to the monitoring is identified, transmitting an alarm message corresponding to the abnormal transaction to the user terminal
How the service providing device works. According to claim 1,
generating in advance preset preferential transaction data based on the user information; and
When the abnormal transaction is identified, before the block approval time according to the consensus algorithm of the abnormal transaction, the transaction data from the user terminal account using the priority transaction data to the safe asset wallet account is shared with the block chain network. doing
How the service providing device works. 3. The method of claim 2,
The preferential transaction data includes condition setting information that allows the transaction to take precedence over the data of the abnormal transaction.
How the service providing device works. 4. The method of claim 3,
The condition setting information includes one or more fee setting information
How the service providing device works. 3. The method of claim 2,
The preferred transaction data is
for the next transaction in the normal transaction history from the user terminal account pre-traded to the second user account, indicating balance transfer information from the pre-signed user terminal account to the safe asset wallet account
How the service providing device works. 3. The method of claim 2,
According to the user terminal authentication, further comprising the step of performing asset return processing from the safe asset wallet account to the user terminal account
How the service providing device works. 7. The method of claim 6,
The step of performing the return processing is,
Using distributed shared information pre-distributed to the user terminal or key management server in response to the encryption key for return processing of the safe asset wallet account, and distributed sharing information of the service providing device, authentication of the encryption key for return processing step to check
How the service providing device works. 3. The method of claim 2,
The sharing step is
When the expected approval time of the abnormal transaction is within a predetermined time, requesting approval of the transaction data from the user terminal account using the priority transaction data to the safe asset wallet account to the block chain network
How the service providing device works. According to claim 1,
The monitoring step is
Collecting at least one of block information, transaction information, node information, network information, and contract information according to block chain network characteristics from a monitoring agent provided in one or more node terminals
How the service providing device works. According to claim 1,
Receiving user request information corresponding to the alarm message,
The user request information includes at least one of a transaction invalidation request and a safe asset movement request
How the service providing device works. A service providing device that provides a transaction management service through a block chain network,
a user information registration unit for registering user information received from a user terminal;
Based on the user information, a monitoring interface for monitoring the transaction data information waiting for approval of the block chain network; and
When an abnormal transaction is identified according to the monitoring, comprising an alarm processing unit for transmitting an alarm message corresponding to the abnormal transaction to the user terminal
Service providing device. 12. The method of claim 11,
a preferential transaction information setting unit configured to generate preset preferential transaction data in advance based on the user information; and
When the abnormal transaction is identified, before the block approval time according to the consensus algorithm of the abnormal transaction, the transaction data from the user terminal account using the priority transaction data to the safe asset wallet account is shared with the block chain network to prevent asset theft including a processing unit
Service providing device. 13. The method of claim 12,
The preferential transaction data includes fee condition setting information that allows the transaction to be prioritized over the data of the abnormal transaction
Service providing device. 14. The method of claim 13,
The preferred transaction data is
for the next transaction in the normal transaction history from the user terminal account pre-traded to the second user account, indicating balance transfer information from the pre-signed user terminal account to the safe asset wallet account
Service providing device. 13. The method of claim 12,
According to the user terminal authentication, further comprising a return processing unit for performing asset return processing from the safe asset wallet account to the user terminal account
Service providing device. 16. The method of claim 15,
The return processing unit,
Using distributed shared information pre-distributed to the user terminal or key management server in response to the encryption key for return processing of the safe asset wallet account, and distributed sharing information of the service providing device, authentication of the encryption key for return processing to confirm
Service providing device. 13. The method of claim 12,
The asset theft prevention processing unit,
When the expected approval time of the abnormal transaction is within a certain time, requesting approval of the transaction data from the user terminal account using the priority transaction data to the safe asset wallet account to the block chain network
Service providing device. 12. The method of claim 11,
The monitoring interface unit,
Collecting at least one of block information, transaction information, node information, network information, and contract information according to block chain network characteristics from a monitoring agent provided in one or more node terminals
Service providing device. 12. The method of claim 11,
Further comprising an asset theft prevention processing unit for receiving user request information corresponding to the alarm message,
The user request information includes at least one of a transaction invalidation request and a safe asset movement request
Service providing device. A computer program stored in a computer-readable recording medium for executing the method according to any one of claims 1 to 10 in a computer.

Images