KR20220061465A - Method for operating service platform for KYC/AML solution protocols satisfied travel rule for VASP - Google Patents

Abstract

The present invention relates to a method for operating a know-your-customer (KYC)/anti-money laundering (AML) solution protocol service platform satisfying a travel rule for a virtual asset service provider (VASP), which increases security and stability. According to the present invention, the method comprises: a step of receiving a remittance request from a sender; a step of acquiring a recipient's phone number from the sender; a step of sending a text message to the recipient and performing authentication of the recipient on the basis of information included in the recipient's reply; a step of generating a first hash value (H1) and a second hash value (H2) on the basis of the recipient's information obtained in the identity authentication step and a stored recipient wallet address; a step of dividing the first hash value (H1) into a 1a hash value (H1a) and a 1b hash value (H1b) and transmitting the divided hash values to institutions, respectively; and a step of generating a transaction number (TxID).

Description

{Method for operating service platform for KYC/AML solution protocols satisfied travel rule for VASP}

The present invention relates to a method of operating a KYC/AML solution protocol service platform that satisfies the travel rules for VASP, and according to the recommendations of the International Anti-Money Laundering Organization (Financial Action Task Force; hereafter referred to as FATF), legal identity authentication ( It relates to a platform that provides services for Know-Your-Customer (KYC) and Anti-Money Laundering System (　, AML).

After the Recommendation of the International Anti-Money Laundering Organization (FAFT) was finalized on June 21, 2019, the provision of a device for preventing money laundering and financing of terrorism by Virtual Asset Service Providers (VASPs) became necessary

FATF classifies virtual assets, that is, transactions of cryptocurrencies such as Bitcoin and altcoins as high risk of money laundering. In addition, with the confirmation of this recommendation, it has been stipulated that each country's competitive authority should voluntarily establish appropriate regulation and management for the VASP in that country.

Therefore, there is a need for a solution that satisfies FATF recommendations and reflects VASP's KYC and AML recommendations for anti-money laundering and terrorist financing.

An object of the present invention is to provide a platform that provides services for legal identity authentication (KYC) and anti-money laundering (AML) in accordance with FATF recommendations of VASP.

In addition, it is an object of the present invention to propose appropriate anti-money laundering (AML) methodological standards to regulatory authorities in order to prescribe the legal obligations of VASPs that are not institutionalized.

In addition, it is an object of the present invention to provide a method of operating a service platform for self-authentication and anti-money laundering that can manage risk when a risk occurs while protecting some of the anonymity of individuals possessed by the blockchain philosophy. will do

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention not mentioned may be understood by the following description, and will be more clearly understood by the examples of the present invention. It will also be readily apparent that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the appended claims.

The KYC/AML solution protocol service satisfying the travel rule for VASP according to an embodiment of the present invention receives a remittance request from a sender, obtains a recipient's phone number from the sender, and receives a text message from the recipient's corresponding phone number and the recipient's identity is authenticated based on the information contained in the received text, and the first hash value (H1) and the second hash value (H1) and the second hash value ( H2), dividing the first hash value (H1) into the first hash value (H1a) and the first hash value (H1b), transmitting it to each institution, and generating a transaction number (TxID) do.

In addition, the service platform performs abnormal transaction analysis using the generated transaction number (TxID), and when it is determined that the transaction is abnormal, generates a suspicious transaction report (STR) and transmits it to the FIU through the VASP.

In addition, the service platform transmits the second hash value (H2) to the FIU, requests a 1b hash value (H1b) corresponding to the second hash value (H2), and a pre-stored 1a hash value (H1a) can be used to derive the first hash value H1.

In addition, the service platform may receive the name and phone number of the corresponding recipient by transmitting the derived first hash value H1 to the identity authentication authority 130 .

In addition, the service platform transmits the received recipient's name, phone number, and the second hash value (H2) to the VASP, and the VASP may perform EDD on the sender or receiver of the transaction.

The service platform according to the present invention partially protects the anonymity of individuals possessed by the blockchain philosophy, and maintains some degree of decentralization that can manage risks when a risk occurs, while satisfying the FATF recommendation of VASP. We can provide services for authentication and anti-money laundering.

In addition, the service platform according to the present invention can acquire comprehensive information of the recipient, which could not be identified during the movement of VA (virtual asset) until now, and the voluntary risk of the VASP can also be predicted.

In addition, since the service platform according to the present invention does not store the integrated DB (recipient personal information + wallet address), the service platform according to the present invention cannot independently know about the customer's financial transaction, maintaining the anonymity of the cryptocurrency transaction and , security and stability can be improved because the DB owned by each institution does not have information that can withdraw cryptocurrency even if it is hacked.

In addition, the service platform according to the present invention enables identity verification even if the recipient's wallet is a wallet service that is not KYC, and easily satisfies the FATF Travel Rule without cooperating with each other, It is possible to prepare a mechanism to prevent money laundering and terrorist financing.

In addition, since the service platform according to the present invention stores the hash through biometric authentication, if biometric information registration is performed only once for one wallet, it is possible to receive directly with biometric authentication from the next time, so the convenience of identity authentication is improved. .

The specific effects of the present invention in addition to the above will be described together while explaining the specific details for carrying out the invention below.

1 is a diagram illustrating a schematic configuration of a service platform according to some embodiments of the present invention.
2 is a block diagram illustrating a basic framework according to a method of operating a service platform according to some embodiments of the present invention.
FIG. 3 is a diagram illustrating a method of hashing recipient data and a method of storing DB information for each institution of FIG. 2 .
4A, 4B and 4C are diagrams for explaining an example of a method of operating a service platform according to an embodiment of the present invention.
5 is a diagram for explaining another example of a method of operating a service platform according to an embodiment of the present invention.
6A is a diagram for explaining a method of operating a service platform according to another embodiment of the present invention.
6B is a diagram for explaining a method of operating a service platform according to another embodiment of the present invention.

Terms or words used in this specification and claims should not be construed as being limited to a general or dictionary meaning. In accordance with the principle that the inventor can define a term or concept of a word in order to best describe his/her invention, it should be interpreted as meaning and concept consistent with the technical idea of the present invention. In addition, since the embodiments described in this specification and the configurations shown in the drawings are only one embodiment in which the present invention is realized, and do not represent all the technical spirit of the present invention, they can be substituted at the time of the present application. It should be understood that there may be various equivalents and modifications and applicable examples.

Hereinafter, according to the recommendations of the International Anti-Money Laundering Organization (FATF), travel rules for virtual asset service providers (hereinafter referred to as VASPs) for legal identity authentication (hereinafter referred to as KYC) and anti-money laundering (hereinafter referred to as AML) The KYC/AML solution protocol service platform that satisfies the travel rule) will be described.

The service platform of the present invention may include the following features in common.

First, the service platform of the present invention includes a KYC model that does not create an integrated DB that simultaneously stores the recipient's personal information and wallet address.

Specifically, the service platform includes a model that achieves that no organization or institution owns individual real-name wallet information without creating a centralized integrated DB for the purpose of maintaining the philosophy of blockchain.

In this case, the service platform does not own the integrated DB as individual institutions store only the original or hash of the recipient's personal information. However, when a risky transaction occurs, the recipient information can be checked by collecting the information stored under the agreement of each institution.

Through this, the service platform of the present invention satisfies the Travel Rule of the International Anti-Money Laundering Organization (FATF) while maintaining the blockchain philosophy of 'anonymity' and 'decentralization' to some extent.

Second, the service platform of the present invention distributes access rights to personal information by using multiple key share using a hash value.

Specifically, the service platform changes personal information and wallet address to a hash value (that is, encrypted data rather than the original), and by distributing and storing it, it is possible to check forgery and falsification with each other, but the original will not be stored. can

In addition, the service platform divides and stores the hash value in the form of a multi-key by the platform server and a third-party institution. However, in order for an identity verification service company that has personal information to access the original hash, the agreement of multiple organizations is required.

Third, the service platform of the present invention provides a method for confirming the owner of the cryptocurrency wallet that is not KYC.

Currently, there is a way to share personal information from an exchange to another exchange, but in the case of wallet services that are not KYC, the owner cannot be confirmed. On the other hand, the service platform of the present invention can verify the owner through the recipient's voluntary authentication method, and can implement a decentralized cryptocurrency wallet.

Fourth, the service platform of the present invention can monitor the transmission of cryptocurrency abroad, and when transferring cryptocurrency to a wallet that is not KYC, it is confirmed through device location (GPS) that the recipient is in a foreign country It is possible.

Specifically, in the case of a customer who cannot authenticate by phone, the country can be identified through the GPS function of a mobile phone or electronic device, and the service platform monitors detailed information of where the subject with the wallet is currently located. can do. Through this, the service platform can check the destination in the transfer situation between cryptocurrencies, which was not possible until now, so it is possible to prepare a primary standard for monitoring overseas transfer cases of funds.

Fifth, the service platform of the present invention can comprehensively analyze the integrated SNS activity to derive the recipient's real name and photo, and can confirm the truth and enhance security through the identity verification question.

That is, the service platform collects personal information (name, photo, occupation, address, etc.) disclosed online through the customer's e-mail address or existing SNS service through an automatic search algorithm, and among them, core information can be shown to the recipient to perform an identity verification operation.

Hereinafter, an operation of a service platform and a data processing method according to some embodiments of the present invention will be described with reference to FIGS. 1 to 6B .

1 is a diagram illustrating a schematic configuration of a service platform according to some embodiments of the present invention.

Referring to FIG. 1 , the service platform according to some embodiments of the present invention may be performed by a platform server 110 (ie, a service provider), and a virtual asset service provider 120 (hereinafter, VASP), self-authentication In connection with the institution 130 (eg, a telecommunication company), the public credibility institution 140 (eg, a Financial Intelligence Unit; hereinafter, FIU) may perform an operation.

Specifically, the platform server 110 is an operating entity of the service platform of the present invention. In addition, the platform server 110 may be implemented as a server-client system in connection with the user terminal 200 .

VASP 120 refers to a service provider associated with a cryptocurrency exchange. The VASP 120 may receive a remittance request from the sender, and may transmit information about the receiver received from the sender to the platform server 110 . In addition, when the identity authentication is completed in the platform server 110 , the VASP 120 may receive an approval for the remittance request from the sender and generate a transaction number (TxID) for the transaction.

The public credibility authority 140 refers to a third party for hashing the recipient's data. The public trust authority 140 may store and manage some hashes related to recipient information used in the platform server 110 . In addition, the public credibility authority 140 may provide the stored hash to the platform server 110 when there is a request for recipient information accompanying a specified reason from the platform server 110 .

For example, the public credibility institution 140 may be a police station, the National Tax Service, the Korea Customs Service, the Financial Services Commission, the National Election Commission, a notary center, a tax accountant, a bank, and the like. However, this is only an example, and the present invention is not limited thereto.

The identity authentication authority 130 refers to an identity authentication service provider that performs authentication of the recipient on behalf of the platform server 110 . For example, the identity authentication authority 130 may perform identity authentication using a unique address including at least one of the recipient's mobile phone number, e-mail address, resident registration number, account number, passport number, and digital ID.

The user terminal 200 may provide the information provided from the service platform of the present invention to the user through a terminal application installed in the user terminal 200 .

In this case, the terminal application may be a dedicated application for providing cryptocurrency transaction information or a web browsing application for providing cryptocurrency information through a web page. Here, the dedicated application for providing 　 information of cryptocurrency may be an application built into the user terminal 200 or an application downloaded from an application distribution server and installed in the user terminal 200 .

The terminal application installed in the user terminal 200 may display information provided from the service platform on the screen of the user terminal 200 .

Hereinafter, for convenience of description, it is assumed that the user terminal 200 displays the interface and information provided from the service platform on the screen using a pre-installed terminal application.

In this case, the user terminal 200 refers to a communication terminal capable of using a terminal application in a wired/wireless communication environment. The user terminal 200 may be a user's portable terminal. Although the user terminal 200 is illustrated as a smart phone, which is a type of portable terminal in FIG. 1 , the present invention is not limited thereto, and as described above, the user terminal 200 may be applied without limitation to a device capable of mounting a terminal application. . For example, the user terminal 200 may include various types of electronic devices, such as a personal computer (PC), a notebook computer, a tablet, a mobile phone, a smart phone, and a wearable device (eg, a watch-type terminal).

In addition, although only one user terminal 200 is illustrated in the drawing, the present invention is not limited thereto, and the service platform may operate in conjunction with a plurality of user terminals 200 .

On the other hand, the communication network serves to connect the server (that is, the platform server 110, VASP 120, public trust authority 140, and identity authentication authority 130) of each institution constituting the service platform and the user terminal 200 carry out That is, the communication network 400 refers to a communication network that provides an access path so that the user terminals 200 can transmit and receive data after accessing the service platform. The communication network 400 is, for example, a wired network such as LANs (Local Area Networks), WANs (Wide Area Networks), MANs (Metropolitan Area Networks), ISDNs (Integrated Service Digital Networks), wireless LANs, CDMA, Bluetooth, satellite communication, etc. may cover a wireless network, but the scope of the present invention is not limited thereto.

Hereinafter, an operation method of the service platform of the present invention will be described in detail.

2 is a block diagram illustrating a basic framework according to a method of operating a service platform according to some embodiments of the present invention. FIG. 3 is a diagram illustrating a method of hashing recipient data and a method of storing DB information for each institution of FIG. 2 .

Referring to FIG. 2 , the VASP 120 receives a remittance request from the sender ( S110 ). In this case, the sender generates a remittance request through an application installed in the sender's terminal. The generated remittance request is transmitted to the platform server 110 .

Next, the platform server 110 generates an interface capable of receiving the receiver's unique information and displays it on the sender's terminal (S120). Here, the unique information may include the recipient's mobile phone number, e-mail address, resident registration number, account number, passport number, digital ID, and the like.

The sender inputs the receiver's unique information, and the input unique information is transmitted to the platform server 110 .

Next, the platform server 110 performs authentication and reception of the recipient (S130).

Specifically, the platform server 110 may perform Customer Due Diligence (hereinafter, CDD) for identity authentication. At this time, the platform server 110 agrees to 1) location-based service use, 2) agrees to responsibility for the transaction, 3) confirms IP information, agrees to introduce device identifier, 4) agrees to use personal information, etc. can receive

Identity authentication performed by the platform server 110 may be performed through an authentication service of a third organization. In this case, the third-party authentication service may include, for example, communication company authentication, international phone authentication, email authentication, SNS ID authentication, bank account authentication, credit card company authentication, and the like.

On the other hand, user authentication can be performed directly through KYC (personal authentication) of the platform server 110 . For example, the platform server 110 is based on information such as name, address (actual residence), date of birth, country, identification number (resident registration number, passport number, etc.), wallet address, face, video recording, voice recording, etc. You can proceed with KYC. In this case, when KYC is performed using a face or an image, the platform server 110 may perform a liveness test on the captured facial image.

For example, the platform server 110 may perform user authentication using a liveness test. Here, the liveness test is a step of confirming whether a subject for performing self-authentication is live, and is a test for confirming whether or not the recipient's own authentication attempt is made with respect to a recipient performing biometric authentication.

When the receiver performs identity authentication using facial authentication for the first time, the platform server 110 may perform a registration step for the receiver's face image.

Specifically, the platform server 110 may perform a liveness test on the facial image captured through the receiver terminal. In this case, the platform server 110 may determine whether the face included in the face image is a live object such as an actual face or a fake object such as a photo, video, or mask.

Subsequently, when it is determined that the recipient's face image is a live object, the platform server 110 may request a picture of the recipient's ID through the recipient's terminal.

Subsequently, the platform server 110 may extract facial feature points included in the received facial image and the photographed ID image to check whether the facial image and the ID image match. When the face image and the ID image match, the platform server 110 may store the face image as recipient-specific information.

At this time, if the face image and the ID image do not match, the platform server 110 may request a re-capture of the face image through the receiver terminal or display a pop-up window indicating that identity authentication has failed.

On the other hand, when the platform server 110 receives a user authentication request using facial authentication from the receiver, the platform server 110 may receive the receiver's face image taken through the receiver terminal. In this case, the face image of the recipient may be an image captured in real time.

Subsequently, the platform server 110 may perform a liveness test on the facial image. When it is determined as a live object through the liveness test, the platform server 110 may determine whether or not the face image registered in advance in the receiver's unique information and the photographed face image match.

Then, when the pre-registered facial image and the photographed facial image match, the platform server 110 may complete the identity authentication of the recipient. At this time, if the pre-registered facial image and the photographed facial image do not match, the platform server 110 requests self-authentication or re-photography of the face image through another method through the receiver terminal, or displays a pop-up window stating that self-authentication has failed. can do.

A detailed description of the face authentication method using the above-described liveness test will be described later with reference to FIG. 4B .

Next, the VASP 120 performs remittance approval and transaction creation for the remittance request (S140). At this time, the VASP 120 generates a transaction number (TxID) after the remittance is approved.

Subsequently, the platform server 110 may generate a transaction analysis and a suspicious transaction report (STR) for anti-money laundering (AML) using the transaction number (TxID) (S150).

Specifically, the platform server 110 analyzes the transaction number (TxID) based on the 'standards for suspected money laundering transactions' and the 'standards designated by the regulatory authorities' prescribed by the FATF, and conducts suspicious transactions. If it is determined that , a suspicious transaction report (STR) may be prepared and transmitted to the public trust agency 140 .

Here, the 'Standard for Suspicious Money Laundering Transactions' for virtual assets in the FATF's recommendations are 1) one-time transactions of USD/EUR 1,000 or more, 2) single transactions and 7 under the name of the same person. It refers to a transaction with a daily combined transaction amount exceeding this, 3) a transaction of a risky person or corporation/organization that falls under money laundering (ML)/terrorism financing (TF).

In addition, the 'regulatory authority's designation criteria' are: 1) when the same person transfers money to an overseas exchange (especially an exchange connected to Fiat), 2) when it is related to a cryptocurrency wallet in a case reported as a crime, 3) illegally similar receiving behavior It can include transactions corresponding to the above, 4) in the case of a collection-type transaction from a large number of people, and 5) in a staged sales case suspected of unauthorized multi-level sales.

Next, the platform server 110 transmits related information to the VASP 120 to perform enhanced due diligence (EDD) for the corresponding customer determined to be a risky transaction (S160). In this case, the subject performing EDD may be the VASP 120 , and the platform server 110 may provide related information to the VASP 120 to perform EDD for the sender and/or the receiver.

Next, referring to FIG. 3 , FIG. 3 shows a method of hashing receiver data of the platform server 110 and a method of storing database (DB) information for each institution.

The table in FIG. 3 shows the DB items for each institution for recipient information, and the present invention ensures that individual institutions have an incomplete DB, so that no one creates a centralized integrated DB, and the 'anonymity' and 'decentralization' of the block chain It can satisfy the standards of the FATF recommendations while maintaining the characteristics of

Specifically, the VASP 120 stores the recipient's wallet address, and a second hash value (Hash2; hereinafter, H2).

The platform server 110 stores the recipient's wallet address, the 1a hash value (H1a), the second hash value (H2), and the recipient's unique password. Here, the first hash value H1a may be a part of the first hash value Hash1 (hereinafter, H1).

The identity authentication authority 130 stores the recipient's name, phone number, and the first hash value H1.

Public credibility authority 140 stores the first hash value (H1b), the second hash value (H2). Here, the 1b hash value H1b may be another part of the first hash value Hash1 (hereinafter, H1). In this case, when the above-mentioned 1a hash value H1a and 1b hash value H1b are summed, the first hash value H1 may be derived.

Specifically, the first hash value H1 may be generated using a hash function based on the above-described recipient's phone number, the recipient's wallet address, and the recipient's unique password. The second hash value H2 may be generated using a hash function based on the recipient's phone number, the recipient's unique password, and the hash generation time of the first hash value H1.

In this case, the second hash value H2 may be used as an index value for deriving the first hash value H1.

Here, the hash function is a function that compresses an input message of an arbitrary length into an output value of a fixed length, and the hash function must satisfy two properties of unidirectionality and collision avoidance. In this case, unidirectionality means that it is computationally impossible to find a value that satisfies H(x)=h for a given hash value h, and collision avoidance means that it is computationally impossible to find a value that satisfies H(x)=H(y) for a given hash value h. This means that it is computationally impossible to find any input message.

In summary, in the service platform of the present invention, the VASP 120 , the platform server 110 , the identity authentication authority 130 , and the public trust authority 140 each store different recipient information.

Additionally, in another embodiment of the present invention, the service platform may use an e-mail address, a resident registration number, an account number, a passport number, etc. instead of a phone number according to a user authentication method.

In addition, it is sufficient if the public credibility institution 140 can distribute the rights of the service platform as a third institution, and can keep the hash and share the designated reason at the time of submission. For example, the public credibility institution 140 may be a police station, the National Tax Service, the Korea Customs Service, the Financial Services Commission, the National Election Commission, a notary center, a tax accountant, a bank, and the like.

4A, 4B and 4C are diagrams for explaining an example of a method of operating a service platform according to an embodiment of the present invention.

First, referring to FIG. 4A , in the service platform according to an embodiment of the present invention, the VASP 120 receives a remittance request from a sender. The received remittance request is transmitted to the platform server 110 .

Then, the platform server 110 displays a pop-up for entering the recipient's phone number on the sender's terminal. The sender enters the recipient's phone number in the pop-up. The input recipient's phone number may be transmitted to the platform server 110 .

Then, the platform server 110 receives a text message from the recipient, and performs authentication of the recipient based on information included in the text. In this case, the recipient's name, the recipient's phone number, and the recipient's unique password may be registered in the recipient's identity authentication process.

Then, the platform server 110 generates a first hash value (H1) and a second hash value (H2) based on the recipient's information and the previously stored recipient's wallet address obtained in the identity authentication process.

In this case, the first hash value H1 may be generated using a hash function based on the above-described recipient's phone number, the recipient's wallet address, and the recipient's unique password. The second hash value H2 may be generated using a hash function based on the recipient's phone number, the recipient's unique password, and the hash generation time.

Then, the platform server 110 divides the first hash value H1 into a 1a hash value H1a and a 1b hash value H1b, and then transmits it to each institution.

Specifically, the 1a hash value (H1a) is stored in the platform server 110, the 1b hash value (H1b) is transmitted to the public trust authority (140). The second hash value H2 is transmitted to the VASP 120 , the platform server 110 , and the public trust authority 140 , respectively. At this time, the second hash value (H2) is later used as an index value for deriving the first hash value (H1) by summing the 1a hash value (H1a) and the 1b hash value (H1b) in the platform server 110. can

Next, when the identity authentication is completed in the platform server 110 , the VASP 120 approves the remittance request and generates a transaction number (TxID).

Referring to FIG. 4B , as another example of the self-authentication method of the present invention, the platform server 110 may perform self-authentication of the recipient through facial authentication. In this case, the platform server 110 may perform face authentication using a liveness test, face shooting, and matching.

For example, when the receiver receives a request for authentication using facial authentication through the receiver's terminal, the platform server 110 may determine whether the receiver has a history of facial authentication or whether a facial image is registered.

If there is no facial authentication history or whether a facial image is registered, the platform server 110 may perform a facial authentication registration step.

First, the platform server 110 may request a face photograph of the receiver through the receiver terminal. In this case, the platform server 110 may receive a real-time facial image or a video including the face captured through the receiver terminal. When a real-time video is received, the platform server 110 may extract a face image from the real-time video.

Subsequently, when the face photographing is completed, the platform server 110 may perform a liveness test on the received face image. The platform server 110 may perform a liveness test on the face image by comprehensively considering various elements appearing in the received face image.

Specifically, the platform server 110 may determine whether the object attempting authentication is the face of a live person, not a photo or video, in consideration of the overall shape of the face and facial feature information shown in the face image.

For example, the platform server 110 may perform a liveness test using the entire shape of the face. The platform server 110 may analyze the entire shape of the face and determine whether it is a live object in consideration of the location where light is reflected, the amount of light reflected or distortion of the shape. In addition, the platform server 110 may determine whether the live object is a live object by using the bending or wrinkling of the shape in the face image.

As another example, the platform server 110 may perform a liveness test by extracting facial texture information. The platform server 110 may determine whether a live object exists by analyzing a photographed real human skin texture, paper texture, or screen of the electronic terminal.

In this case, when it is determined that the face image is a fake object, the platform server 110 may display a re-capture request for the face image through the receiver terminal.

Subsequently, when it is determined that the face image is a live object, the platform server 110 may request photographing of the recipient's ID through the recipient's terminal. Then, the platform server 110 includes the received face image and ID image in real time. The matching rate can be calculated by comparing the facial images.

Specifically, the platform server 110 may extract the recipient's face image from the received identification image. In this case, the platform server 110 may derive feature points, such as eyes, nose, mouth, jawline, or bridge of the nose, from the face image received in real time and the face image of the ID. The platform server 110 may calculate a matching rate by comparing the feature points derived from the facial image of the ID card corresponding to the feature points derived from the real-time facial image.

However, the present invention is not limited thereto, and the platform server 110 may calculate a matching rate using a real-time facial image and an image of the recipient stored in the national database (DB). In this case, the platform server 110 may derive the recipient's image from the national database by using the recipient's personal information included in the recipient's identification card.

Then, when the calculated matching rate is greater than or equal to the preset reference value, the platform server 110 registers the real-time facial image in the receiver's unique information and stores the registered face image, so that the receiver can be registered with the platform server 110 . .

Then, after the registration step is completed, when receiving a request for facial authentication from the receiver, the platform server 110 may perform the authentication step through the receiver terminal.

Specifically, the platform server 110 may request a face photograph from the receiver through the receiver terminal.

Subsequently, when the face photographing is completed, the platform server 110 may conduct a liveness test in consideration of the overall shape of the face and the texture of the face shown in the face image received in real time.

At this time, if the facial image is determined to be a fake object, the platform server 110 may display a re-photography request pop-up, a pop-up for selecting a self-authentication method, or a self-authentication failure pop-up on the receiver terminal.

When it is determined that the face image is a live object, the platform server 110 may determine whether the pre-registered face image of the recipient's unique information and the real-time face image match.

Specifically, the platform server 110 may calculate a matching rate by comparing a real-time facial image with a pre-registered image. The platform server 110 may derive a feature point from a real-time facial image and a pre-registered facial image, respectively, and calculate a matching rate by comparing the feature points corresponding to each image.

Then, when the calculated matching rate is greater than or equal to the preset reference value, the platform server 110 may complete the user authentication.

Next, referring to FIG. 4C , the platform server 110 performs abnormal transaction analysis using the generated transaction number (TxID). For example, the platform server 110 may determine whether a high-value cash transaction report (CTR) is used, whether the same account is used repeatedly, whether a blacklist wallet is used, and whether an ICO type of transaction is performed.

Subsequently, when it is determined that the transaction is abnormal, the platform server 110 transmits the second hash value H2 to the VASP 120 , and the VASP 120 performs EDD on the sender of the transaction.

In addition, when it is determined that the transaction is abnormal, the platform server 110 generates a suspicious transaction report (STR) and transmits it to the public trust authority 140 through the VASP 120 . In addition, the platform server 110 transmits the second hash value (H2) to the public trust authority 140, and receives the hash value 1b (H1b) corresponding to the second hash value (H2).

Next, the platform server 110 requests information about the recipient of the transaction from the identity authentication authority 130 . At this time, the platform server 110 derives a first hash value (H1) based on the 1b hash value (H1b) received from the public trust authority 140 and the 1a hash value (H1a) stored in the platform server 110 . In this process, the platform server 110 may refer to the second hash value H2.

Subsequently, the platform server 110 transmits the derived first hash value H1 to the identity authentication authority 130 to receive the name and phone number of the corresponding recipient.

Then, the platform server 110 transmits the received recipient's name, phone number, and the second hash value (H2) to the VASP 120, and the VASP 120 performs EDD on the recipient of the transaction.

Through this, the service platform of the present invention partially protects the anonymity of individuals possessed by the blockchain philosophy, and maintains a certain degree of decentralization that can manage risk when a risk occurs, while maintaining the FATF of the VASP 120. We can provide services for self-authentication and anti-money laundering that satisfy the recommendations.

5 is a diagram for explaining another example of a service platform according to an embodiment of the present invention. Hereinafter, content overlapping with the above will be omitted and the differences will be mainly described.

Referring to FIG. 5 , in the service platform according to another embodiment of the present invention, the VASP 120 receives a remittance request from a sender. The received remittance request is transmitted to the platform server 110 .

Then, the platform server 110 displays a pop-up for entering the recipient's phone number on the sender's terminal. The sender enters the recipient's phone number in the pop-up.

Then, the platform server 110 transmits a text message to the recipient, and performs authentication of the recipient based on information included in the response of the recipient of the corresponding text.

At this time, in the recipient's self-authentication process, the platform server 110 performs self-authentication using a third-party authentication service based on the recipient's location-based (GPS) information use consent, or in the platform server 110 This can be done directly through existing KYC. Since a detailed description thereof has been described above with reference to FIG. 1 , a redundant description thereof will be omitted.

Next, the platform server 110 generates a first hash value (H1) and a second hash value (H2) based on the recipient's information and the previously stored recipient's wallet address obtained in the identity authentication process.

Next, the platform server 110 divides the first hash value H1 into a 1a hash value H1a and a 1b hash value H1b, and transmits it to each institution.

Specifically, the 1a hash value (H1a) is stored in the platform server 110, the 1b hash value (H1b) is transmitted to the public trust authority (140). The second hash value H2 is transmitted to the VASP 120 , the platform server 110 , and the public trust authority 140 , respectively. At this time, the second hash value (H2) is later used as an index value for deriving the first hash value (H1) by summing the 1a hash value (H1a) and the 1b hash value (H1b) in the platform server 110. can

Next, when identity authentication is completed in the platform server 110 , the VASP 120 approves the remittance request and generates a transaction number (TxID).

Subsequently, the platform server 110 may perform the above-described abnormal transaction analysis with reference to FIG. 4 . Since a detailed description of this has been described with reference to FIG. 4 , redundant content will be omitted here.

6A is a diagram for explaining a method of operating a service platform according to another embodiment of the present invention. Hereinafter, content overlapping with the above will be omitted and the differences will be mainly described.

Referring to FIG. 6A , in the service platform according to another embodiment of the present invention, the identity authentication step performed by the platform server 110 can be replaced by another organization that can verify the identity of the receiver. For example, a self-authentication service linked with Internet banking or an SNS service using a real name may replace the recipient's self-authentication step of the platform server 110 .

Through this change in the identity authentication step, the service platform of the present invention makes communication company authentication unnecessary when cooperating with the exchange of the recipient's wallet, so that the identity authentication step can be simplified.

In addition, taking a bank as an example, if the bank authenticates the real-name account, it is possible to deposit KRW from the account, so the recipient's real name-wallet address-bank account is connected, thereby simplifying the identity verification step.

In addition, when the platform server 110 directly performs KYC, it can be effective because it is possible to effectively perform identity authentication in the case of a third country where a communication company is not developed or a foreign customer.

In addition, since the platform server 110 stores the hash through a secondary authentication means such as a fingerprint, if fingerprint registration is performed only once for a wallet, it is possible to receive directly with fingerprint authentication from the next time, so it is convenient for identity authentication gender can be secured.

6B is a diagram for explaining a method of operating a service platform according to another embodiment of the present invention. Hereinafter, content overlapping with the above will be omitted and the differences will be mainly described.

In an embodiment of the present invention, the platform server 110 divides the first hash value H1 into a 1a hash value H1a and a 1b hash value H1b, and then transmits it to each institution. At this time, the 1a hash value (H1a) is stored in the platform server 110, and the 1b hash value (H1b) is transmitted to the public trust authority (140).

On the other hand, referring to FIG. 6B , in another embodiment of the present invention, the platform server 110 may transmit a 1b hash value H1b to another third party on behalf of the public trust agency 140 . For example, the platform server 110 may transmit the 1b hash value H1b to a trusted third institution such as a bank, a government office, a police station, or Interpol.

Thereafter, when an abnormal transaction is detected, the platform server 110 completes the first hash value H1 by requesting the 1b hash value H1b from the third institution, and sends the recipient to the identity authentication authority 130 based on this. You can receive by requesting your name and phone number.

Through this, the platform server 110 may perform EDD (Enhanced Customer Identification) of the receiver.

Therefore, in the service platform according to the present invention, since no institution stores the integrated DB (recipient personal information + wallet address), it is not possible to know independently about the customer's financial transaction, so that the anonymity of the cryptocurrency transaction is maintained and , security and stability can be improved because the DB of each institution does not have information that can withdraw cryptocurrency even if it is hacked.

In addition, the service platform according to the present invention can acquire comprehensive information of the recipient that could not be identified during the movement of VA (virtual asset) until now, and the voluntary risk of the VASP 120 can also be predicted.

The service platform according to the present invention partially protects the anonymity of individuals possessed by the blockchain philosophy, and maintains a certain degree of decentralization that can manage risk when a risk occurs, while maintaining the FATF recommendation of the VASP 120. Satisfying identity authentication and anti-money laundering services can be provided.

In addition, the service platform according to the present invention enables identification even if the recipient's wallet is not a KYC wallet service, and easily satisfies the FATF Travel Rule without cooperating with each other, preventing money laundering and It is possible to prepare a mechanism to prevent the financing of terrorism.

It is to be understood that the above-described embodiments are illustrative in all respects and not restrictive, and the scope of the present invention will be indicated by the appended claims rather than the foregoing detailed description. And, it should be construed to be included in the scope of the present invention, as well as the meaning and scope of the claims to be described later, as well as all changes and modifications derived from the equivalent concept.

110: platform server
120 : VASP
130: identity authentication institution
140: public trust agency

Claims (12)

In the operating method of a service platform linked with a virtual asset service provider (VASP), a personal authentication institution, and a public trust institution,
generating a first hash value using a hash function based on the recipient's unique information, wallet address, and password in the service platform;
generating a second hash value using a hash function based on the unique information of the receiver, the password, and the generation time of the first hash value in the service platform;
dividing the first hash value into a first partial hash value and a second partial hash value;
storing the first partial hash value in a database in the service platform;
transmitting the first hash value to the identity authentication authority in the service platform; and
Comprising the step of transmitting the second partial hash value and the second hash value to the public trust authority in the service platform,
How the service platform works.
According to claim 1,
The identity authentication authority stores and manages the unique information of the recipient and the received first hash value,
The public trust authority stores and manages the second partial hash value and the second hash value,
Based on the transaction number (TxID) generated in the process of remittance of cryptocurrency, determining whether or not an abnormal transaction occurs in the service platform;
When it is determined that the remittance process is an abnormal transaction, the service platform transmits the second hash value to the public credibility institution, and in response, the service platform responds to the second partial hash value corresponding to the second hash value Further comprising the step of receiving from the public credibility authority
How the service platform works.
3. The method of claim 2,
deriving the first hash value by merging the second partial hash value received from the public trust authority and the first partial hash value corresponding to the second hash value;
Further comprising the step of transmitting the derived first hash value to the identity authentication authority
How the service platform works.
4. The method of claim 3,
The identity authentication authority transmits the receiver's unique information corresponding to the first hash value to the VASP,
The VASP performs customer identification (EDD) of the receiver based on the unique information
How the service platform works.
3. The method of claim 2,
receiving a remittance request from the VASP;
Receiving the receiver's unique information from the sender;
performing identity authentication of the recipient;
When the remittance request is approved, the method further comprising the step of receiving a transaction number (TxID) generated by the VASP from the service platform
How the service platform works.
6. The method of claim 5,
The step of performing the identity authentication of the recipient,
The service platform delivers the receiver's unique information to perform identity authentication in the identity authentication authority, or directly performs identity authentication based on the receiver's unique information in the service platform
How the service platform works.
7. The method of claim 6,
The identity authentication performed by the identity authentication institution includes at least one of telecommunication company authentication, international phone authentication, email authentication, bank account authentication, card company authentication, and digital ID authentication
How the service platform works.
6. The method of claim 5,
The step of performing the identity authentication of the recipient,
extracting the user's face image by using the receiver's face photographing and liveness test;
receiving an identification image of the recipient;
calculating a matching rate between the extracted facial image and the facial image included in the ID image;
When the calculated matching rate is greater than a preset reference value, comprising the step of storing the extracted facial image
How the service platform works.
9. The method of claim 8,
The step of performing the identity authentication of the recipient,
extracting the user's face image by using the receiver's face photographing and liveness test;
calculating a matching rate between the extracted facial image and the previously stored facial image of the recipient;
When the calculated matching rate is greater than a preset reference value, further comprising the step of completing the user authentication
How the service platform works.
6. The method of claim 5,
The step of performing the identity authentication of the receiver includes determining the receiver's country based on the receiver's location information, and performing identity authentication based on the receiver's country and unique information in the service platform
How the service platform works.
11. The method of claim 10,
Determining whether there is an abnormal transaction based on the transaction number (TxID) generated in the process of remittance of cryptocurrency;
When it is determined that the transaction is abnormal, the service platform comprising the step of transmitting the second hash value to the VASP,
The VASP performs customer identification (EDD) of the sender based on the unique information.
How the service platform works.
According to claim 1,
The unique information includes at least one of the recipient's mobile phone number, email address, resident registration number, account number, passport number, and digital ID
How the service platform works.

Images