KR20220066769A - Token modelling apparatus, system and method for verifying the integrity of data having the same - Google Patents

Abstract

Disclosed are a token modeling device and a system and a method for verifying data integrity including the same. The token modeling device of the present invention comprises the commands of: receiving a transaction; issuing a token on the basis of the transaction; transmitting the token to any one of a plurality of servers; and receiving, from the servers, a processing result value obtained by comparing call transaction attribute information on the token and attribute information on the transaction in the servers. Accordingly, API call transaction information between a user and the servers can be recorded in a blockchain to ensure transaction integrity and non-repudiation of the user or the servers.

Description

TOKEN MODELLING APPARATUS, SYSTEM AND METHOD FOR VERIFYING THE INTEGRITY OF DATA HAVING THE SAME

The present invention relates to a token modeling apparatus and a data integrity verification system and method including the same, and more particularly, to a token modeling apparatus and a token modeling apparatus that utilizes a block chain network technology to individually verify the consistency of a transaction by a plurality of servers; An object of the present invention is to provide a data integrity verification system and method including the same.

Most online web services are provided in such a way that when a user calls a server function through an API (Application Programming Interface), the called server executes the related logic to change the internal state.

In this case, the server is generally composed of multi-tier servers interconnected by API calls.

In the case of an online web service composed of multi-tier servers, since multiple servers are required to process user requests, there is a correlation between system log data information maintained independently by individual servers.

Here, log data related to internal server operation is data that stores all major system events that occur in the server during function execution, including function processing commands called for post-verification, and contains very sensitive information, so it is disclosed outside the server I never do that. Therefore, mutual consistency verification of log data between servers must go through a very complicated process.

In the case of financial or medical services requiring a high degree of security, conventionally, user signatures are recorded for all transactions generated by the user, and transaction integrity and non-repudiation are checked later.

In this case, the top-level server that provides a direct API to the user can store the user signature information in log data, but there is a problem that the user signature information cannot be recorded as log data when calling the API between the lower servers.

In other words, in the case of a lower-level server, since the user's signature cannot be verified in its own log information, in order to check the consistency of its own log information, that is, the integrity and non-repudiation in relation to the user request transaction, the A complex process is required to integrate and analyze all log information.

For example, in the case of a conventional financial or medical service, when sending and receiving a transaction through an API call in API communication between multi-tier servers, user signature information is transmitted together with each transaction for integrity and non-repudiation of the user requested transaction. are doing

Accordingly, the top-tier server directly connected to the user checks the user signature information and processes the transaction, but the lower server cannot verify the user signature information and has no choice but to execute the transaction received from the upper server. If the related state information needs to be updated, there is a problem that a big security problem may occur.

An object of the present invention for solving the above problems is to provide a token modeling device of high efficiency, high reliability, low cost and high safety.

In addition, another object of the present invention for solving the above problems is to provide a data integrity verification method of high efficiency, high reliability, low cost and high safety.

In addition, another object of the present invention for solving the above problems is to provide a data integrity verification system of high efficiency, high reliability, low cost and high safety.

According to an embodiment of the present invention for achieving the above object, in conjunction with a user terminal and a plurality of servers provided in a multi-layered structure, when a transaction is transmitted by a function call between the user terminal and a plurality of servers, the The token modeling apparatus for verifying integrity includes a memory and a processor for executing at least one command stored in the memory, wherein the at least one command is the user terminal or one of the plurality of servers. A command to receive a verification request of the transaction from a calling terminal, which is an upper server, a command to request to issue a token based on the transaction on a blockchain network, and a command to send the token to a lower server of the calling terminal and a command for receiving, from the subordinate server, a verification result value that verifies the integrity of the transaction received from the calling terminal by a function call based on the transaction information in the token.

Here, the command for receiving the request for verification of the transaction from the calling terminal may include a command for receiving the request for verification of the transaction from the calling terminal.

In this case, the request transaction may include information on the transaction from the calling terminal and signature information of the calling terminal.

In addition, the command to request issuance of a token based on the transaction on the blockchain network includes a command to send a blockchain transaction for requesting issuance of a token based on the transaction based on the request transaction, from the blockchain network A command to receive and transmit the issuance completion information of the token to the calling terminal, a command to set the owner of the token to the calling terminal, and to set the owner attribute information of the token to the user terminal, and receive the setting completion information It may include a command to transmit to the calling terminal.

In this case, the token may be an irreplaceable, integrity-guaranteed token.

In the command to transmit the token to the subordinate server of the calling terminal, the owner of the token may change to the subordinate server.

In addition, the verification result value may be a processing result value issued by the subordinate server processing the transaction when the transaction information in the token matches the transaction information received from the calling terminal.

The token modeling apparatus may further include a command to input the verification result value as a processing result attribute value in the token after the command to receive the verification result value verifying the integrity of the transaction.

According to another embodiment of the present invention for achieving the above object, the integrity of the transaction when the transaction is transmitted by a function call between the user terminal and the plurality of servers by interworking with a user terminal and a plurality of servers provided in a multi-layered structure A method of verifying the integrity of data using a token modeling device that verifies requesting to issue a token based on a blockchain network, sending the token to a subordinate server of the calling terminal, and receiving from the subordinate server by a function call based on transaction information in the token and receiving a verification result value verifying the integrity of the transaction.

Here, the step of receiving the transaction verification request from the calling terminal may include receiving a request transaction for verification of the transaction from the calling terminal.

In this case, the request transaction may include information on the transaction from the calling terminal and signature information of the calling terminal.

The step of requesting to issue a token based on the transaction on the blockchain network includes sending a blockchain transaction for requesting issuance of a token based on the transaction based on the request transaction, the token from the blockchain network receiving the issuance completion information and transmitting it to the calling terminal; setting the owner of the token to the calling terminal; setting the owner attribute information of the token to the user terminal; and sending the setting completion information to the calling terminal may include the step of

In addition, the token may be a non-fungible, integrity-guaranteed token.

In the step of transmitting the token to the subordinate server of the calling terminal, the owner of the token may be changed to the subordinate server.

In addition, the verification result value may be a processing result value issued by the subordinate server processing the transaction when the transaction information in the token matches the transaction information received from the calling terminal.

The data integrity verification method may further include, after receiving the verification result value verifying the integrity of the transaction, inputting the verification result value as a processing result attribute value in the token.

A data integrity verification system according to another embodiment of the present invention for achieving the above object is a user terminal, a plurality of servers provided in a multi-layered structure, and the user terminal and the plurality of servers by interworking with the user terminal and a token modeling device for verifying the integrity of the transaction when a transaction is transmitted by a function call between a plurality of servers, wherein the token modeling device includes a memory and a processor for executing at least one command stored in the memory (processor), wherein the at least one command includes a command to receive a verification request of the transaction from a calling terminal that is an upper server of the user terminal or one of the plurality of servers, and a token based on the transaction. A command to request to be issued on a blockchain network, a command to send the token to a subordinate server of the calling terminal, and a command received from the subordinate server by a function call based on transaction information in the token from the calling terminal Includes a command to receive a verification result value that verifies the integrity of the transaction.

In this case, the command for receiving the request for verification of the transaction from the calling terminal includes a command for receiving the request transaction for verification of the transaction from the calling terminal, wherein the request transaction includes: information and signature information of the calling terminal.

In addition, the token may be a non-fungible, integrity-guaranteed token.

In addition, the verification result value may be a processing result value issued by the subordinate server processing the transaction when the transaction information in the token matches the transaction information received from the calling terminal.

A token modeling apparatus according to an embodiment of the present invention and a data integrity verification system and method including the same are commands for receiving a verification request of the transaction from a call terminal that is an upper server of either the user terminal or the plurality of servers , a command to request to issue a token based on the transaction on a blockchain network, a command to send the token to a subordinate server of the calling terminal, and a function call from the subordinate server based on transaction information in the token By including a command to receive a verification result value that verifies the integrity of the transaction received from the calling terminal, information of a transaction according to an API call between a user terminal or a plurality of servers is recorded in the block chain to ensure the integrity of the transaction and non-repudiation.

In addition, through the blockchain network, subordinate servers can independently verify that the transaction that meets the request of the user terminal has been properly delivered to the lowest server, so that the mutual consistency of the transaction information held by individual servers can be verified by themselves. Even without disclosing all internal log data in various hierarchical server environments, it is possible to provide a high-efficiency, high-reliability, low-cost and high-safety token modeling device that can verify consistency, and a data integrity verification system and method including the same.

1 is an operation block diagram of a data integrity verification system according to an embodiment of the present invention.
2 is a block diagram of a data integrity verification system according to an embodiment of the present invention.
3 is a block diagram illustrating software configurations of a token modeling apparatus according to an embodiment of the present invention.
4 is a table for explaining the data structure of a non-fungible token according to an embodiment of the present invention.
5 is a block diagram illustrating hardware configurations of a token modeling apparatus according to an embodiment of the present invention.
6 is a flowchart illustrating a data integrity verification method using a token modeling apparatus according to an embodiment of the present invention.
7 is an image for explaining the structure of an open banking service using a data integrity verification system according to an embodiment of the present invention.

Since the present invention can have various changes and can have various embodiments, specific embodiments are illustrated in the drawings to be described in detail. However, this is not intended to limit the present invention to specific embodiments, and it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention. In describing each figure, like reference numerals have been used for like elements.

Terms such as first, second, A, and B may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may also be referred to as a first component. The term “and/or” includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When an element is referred to as being “connected” or “connected” to another element, it is understood that it may be directly connected or connected to the other element, but other elements may exist in between. it should be On the other hand, when it is said that a certain element is "directly connected" or "directly connected" to another element, it should be understood that the other element does not exist in the middle.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It should be understood that this does not preclude the existence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

The blockchain disclosed in the present invention is a data structure in which a block composed of a set of transactions contains the hash value of the previous block and connects all blocks in a chain format. It is a distributed ledger technology in which nodes maintain the same data structure and create and connect new blocks based on a consensus algorithm. Even if the blockchain data of a specific node is arbitrarily manipulated, data manipulation can be detected immediately because it has the hash value of the previous block between blocks, and the manipulated data is not reflected in the blockchain because it is not agreed upon between nodes. As such, blockchain guarantees data integrity and transparency because it is impossible to arbitrarily forge or falsify data.

Blockchain is divided into permissionless blockchain and permissioned blockchain. A permissionless blockchain is a blockchain that allows users and nodes to participate in a blockchain network without any restrictions. Representative permissionless blockchains include Bitcoin and Ethereum. A permissioned blockchain is a blockchain suitable for use in a business environment where only authorized users and nodes can participate in the blockchain network. A representative permissioned blockchain is Hyperledger Fabric.

A distributed application (dApp) can be developed and operated by configuring business logic in a smart contract, a program executed on the block chain.

Smart contracts have the advantage of automatically executing requests according to business logic without the intervention of a third party. A representative dApp is a token.

A token is a digital asset expressed on a blockchain. Tokenizing digital assets on the blockchain can secure advantages such as proof of ownership of digital assets, transparency and liquidity guarantees. Tokens are divided into fungible tokens and non-fungible tokens. A fungible token is a token that expresses a digital asset that can be split, and a non-fungible token is a token that expresses a digital asset that cannot be split.

API-based service is a technology that makes it easy to implement the connection between systems, integration between software components, or connection between various devices through network communication based on standard technology for data or business processes within a company or organization. Since API-based services are very easy to combine or expand between services, it is common for many services to configure by calling APIs provided by other servers in order to build a specific service in one server. The server that provided the API can also build a specific service by calling the API provided by other servers. This hierarchical structure in which multiple servers are interconnected by API calls is called multi-tiered server-to-server API communication.

Servers that provide API-based services record (log) all internally executed transaction processing and manage them as log data. Log data is very important information used to determine whether there is a malicious attack on server operation through post-analysis.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. In describing the present invention, in order to facilitate the overall understanding, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted.

1 is an operation block diagram of a data integrity verification system according to an embodiment of the present invention.

Referring to FIG. 1 , the data integrity verification system S may include a user terminal 1000 , a plurality of servers 3000 , and a token modeling apparatus 5000 .

More specifically, the user terminal 1000 and the plurality of servers 3000 may be linked with the token modeling apparatus 5000 . Accordingly, the token modeling apparatus 5000 may issue a token based on the transaction information received from the user terminal 1000 and the plurality of servers 3000 on the block chain network (B). Here, a transaction is a basic unit of work that performs a logical function to change the state of the database, and some information of log data may be included as transaction information.

Then, any one of the plurality of servers 3000 compares the transaction dynamically received by the function call with the transaction information in the token issued on the blockchain network B, so that the transaction is transmitted to the user terminal 1000 or the corresponding It can be checked whether the transaction information received from the upper server of the server 3000 is correct.

In other words, the plurality of servers 3000 participate as nodes on the blockchain network B and verify the integrity and consistency of the transaction by comparing the transaction received by the function call from the outside with the transaction information in the token. can do. Accordingly, the plurality of servers 3000 may process a transaction whose integrity and consistency are verified.

In Figure 2 below, the data integrity verification system (S) will be described in more detail for each configuration.

2 is a block diagram of a data integrity verification system according to an embodiment of the present invention.

Referring to FIG. 2 , the user terminal 1000 may be provided as a hardware terminal for executing at least one online web service.

According to an embodiment, the user terminal 1000 may call any one server 3000 by using an application programming interface (API) to provide an online web service according to a user request.

In other words, the user terminal 1000 may transmit a transaction by calling a specific server through the API. Here, the specific server may be a first server existing in the uppermost layer among a plurality of servers 3000 to be described later.

In addition, the user terminal 1000 may transmit a request transaction including information on the transaction and signature information of the user terminal 1000 in order to call the token modeling apparatus 5000 , which will be described later. Accordingly, the token modeling apparatus 5000 may issue a token including the information of the transaction and the signature information of the user terminal 1000 on the block chain network (B).

Thereafter, the user terminal 1000 may transmit the token to the first server by calling the token modeling apparatus 5000 . In other words, the token modeling apparatus 5000 may transmit the token issued on the block chain network B to the top-level server at the request of the user terminal 1000 .

Accordingly, the first server may verify the integrity and consistency of the transaction received from the user terminal 1000 .

According to an embodiment, the first server may verify the integrity and consistency of the transaction by using the signature information of the user terminal 1000 in the transaction received from the user terminal 1000 .

According to another embodiment, the first server may verify the integrity and consistency of the transaction by comparing the transaction received from the user terminal 1000 with transaction information in the token transmitted from the token modeling apparatus 5000 .

The plurality of servers 3000 may include at least one piece of information for executing a specific online web service.

In addition, the plurality of servers 3000 may be provided in a multi-layered server structure (the first server to the nth server) interconnected by an API call. Accordingly, when the user wants to execute a specific online web service, the user terminal 1000 executes the first server among the plurality of servers 3000 by calling the API, and the first server is By sequentially executing the servers, the transaction can be transmitted to the n-th server, which is the lowest server that provides at least one piece of information for the execution of a specific online web service.

In this case, as described above, when the integrity and consistency of the transaction received from the user terminal 1000 are verified, the first server processes the transaction and calls the token modeling device 5000 to process the transaction result value can be written to the token.

Thereafter, the first server may transmit a new transaction to the second server, which is a lower server, by an API call.

In addition, as in the user terminal 1000 described above, the first server causes the token modeling device 5000 to generate a token including the information of the new transaction and the signature information of the first server on the block chain network (B). to be issued, and the newly issued token can be called to be transmitted to the second server.

Accordingly, the second server receiving the new transaction compares the new transaction information with the new transaction information in the new token transmitted from the token modeling device 5000, and the integrity and consistency of the new transaction, like the first server described above. can be verified, and the processing result value can be recorded in the new token.

Thereafter, the second server may call the third server, which is a subordinate server, by an API call.

Hereinafter, the third server to the lowest server, the Nth servers, may verify the integrity and consistency of the corresponding transaction received from the upper server, respectively, by repeating the series of operations of the first server and the second server described above. .

A method of verifying the integrity and consistency of a transaction received from a higher server among the user terminal 1000 or a plurality of servers 3000 using the token issued from the token modeling device 5000 is a method using the token modeling device 5000 It will be described in more detail when the data integrity verification method to be described later is described.

The token modeling apparatus 5000 may provide a communication environment between the user terminal 1000 and the plurality of servers 3000 and the block chain network (B).

In other words, the token modeling apparatus 5000 can issue a token based on the request transaction on the block chain network B based on the request transaction received from the user terminal 1000 or the plurality of servers 3000 . have. In other words, the token modeling apparatus 5000 may model a token based on the request transaction.

The token modeling apparatus will be described in more detail for each configuration with reference to FIGS. 3 and 4 below.

3 is a block diagram illustrating software configurations of a token modeling apparatus according to an embodiment of the present invention.

Referring to FIG. 3 , the token modeling apparatus 5000 may include an issuing unit 5100 , a transmitting unit 5300 , a modifying unit 5500 , and a notification unit 5700 .

More specifically, the issuing unit 5100 may be called and executed by the user terminal 1000 or a higher server of the plurality of servers 3000 .

According to the embodiment, the issuance unit 5100 is called from the user terminal 1000 or the upper server of any one of the plurality of servers 3000, and is a block for issuing a token based on a request transaction received from the configuration. Chain transactions can be created. Accordingly, the issuing unit 5100 transmits the generated block chain transaction to the block chain network (B), so that a token can be issued on the block chain network (B).

According to an embodiment, the blockchain may be provided as a permissioned blockchain. Here, the permission-type block chain may be a restriction so that only a plurality of servers 3000, which are authorized nodes, participate in the block chain network (B). Accordingly, permissioned blockchains may be suitable for application in business environments. For example, a permissioned blockchain may be provided in a hyperledger fabric structure.

The issuance unit 5100 may designate a configuration in which a request transaction is transmitted as the owner of the token when issuing the token. According to an embodiment, when receiving a request transaction from the user terminal 1000 , the issuing unit 5100 may designate the user terminal 1000 as the owner of the corresponding token.

In FIG. 4 below, the data structure of the non-fungible token issued by the issuing unit 5100 will be described in more detail.

4 is a table for explaining the data structure of a non-fungible token according to an embodiment of the present invention.

Referring to FIG. 4 , non-fungible tokens may be classified into standard attributes and extended attributes.

According to an embodiment, the standard attribute of the non-fungible token may include at least one of a token ID, a token type, and attribute information of an owner and an approver.

In addition, the extended attribute of the non-fungible token may include at least one of an on-chain extended attribute and an off-chain extended attribute.

In this case, the on-chain extended attribute may include information about a transaction according to an API call, processing result, and attribute information of at least one of parent and child as sub-properties, and the open chain extended attribute is at least one of path and hash as sub-properties. may include attribute information of For example, the non-fungible token may be provided as a data structure including at least one of a token ID, a token type, an owner, transaction information according to an API call, parent/child attributes, and processing result attribute information.

More specifically, according to the embodiment, the information of the transaction according to the API call, as described above, of the transaction transmitted by the API call of any one of the user terminal 1000 or the plurality of servers 3000 It may be attribute information, and the attribute information of the processing result of the token may be a verification result value verified through comparison of the corresponding transaction and the corresponding transaction in the token.

Also, log data may be applied as the type attribute of the token.

In addition, the parent property may be token ID information of a non-fungible token based on the transaction information of the upper server among the plurality of servers 3000, and the child property may be token ID information of the non-fungible token that records the transaction information of the lower server. have.

For example, the user terminal 1000 issues a first non-replaceable token, transmits it to the first server, which is the highest level server, and the first server uses the first token to complete verification of a transaction according to an API call. When a non-fungible second token is issued and transmitted to a second server that is a lower server, the parent attribute of the second token may be the first token. In other words, the child attribute of the first token may be the second token.

Referring back to FIG. 3 , the transmitting unit 5300 may transmit the non-fungible token issued on the blockchain network B by the issuing unit 5100 .

More specifically, according to the embodiment, the transmission unit 5300 transmits the non-fungible token issued on the blockchain network B by the issuance unit 5100 to the lower server 3000 in a blockchain transaction. can create Accordingly, the transmitter 5300 may transmit the corresponding token to the specific subordinate server 3000 .

In addition, due to the token transfer to a specific sub-server, the ownership of the token may be changed to the corresponding sub-server.

The correction unit 5500 may generate a blockchain transaction for requesting modification of the sub-attribute value of the extended attribute in the token, and may transmit it as a token on the blockchain network (B). Accordingly, the sub-attribute value in the token issued on the blockchain network (B) may be modified.

In more detail according to the embodiment, after the specific server verifies the integrity and consistency of the transaction received by the API call from the upper server (the user terminal when the specific server is the first server), the verification result value When a request transaction including In this case, the specific server may be called by the token owner, and the correction unit 5500 may be called by the token owner.

When the token modeling device 5000 receives an event from the blockchain network B, the notification unit 5700 sends a notification to either the user terminal 1000 or the plurality of servers 3000 related to the event. can do.

According to an embodiment, the notification unit 5700 may transmit a result of processing the token according to the calls of the issuing unit 5100 , the transmitting unit 5300 , and the modifying unit 5500 to the owner of the token.

For example, the notification unit 5700 calls the issuance unit 5100 of the user terminal 1000 or the plurality of servers 3000 to issue a non-fungible token on the blockchain network (B). In this case, the token issuance completion event may be transmitted to the owner of the token who has called the issuing unit 5100 .

In addition, when any one of the user terminal 1000 or the plurality of servers 3000 calls the transmission unit 5300 and transmits the issued token to the lower server, the notification unit 5700 is a new A transmission completion event of the token may be sent to the owner.

And, when any one of the plurality of servers 3000 calls the correction unit 5500 to change the owner attribute information of the token, in other words, the notification unit 5700 records the sub-attribute value of the extended attribute of the token. In this case, a token modification completion event may be transmitted to the caller who has called the correction unit 5500 .

5 is a block diagram illustrating hardware configurations of a token modeling apparatus according to an embodiment of the present invention.

Referring to FIG. 5 , the token modeling apparatus 5000 may include a memory 100 for storing at least one command and a processor 200 for executing at least one command of the memory 100 .

In addition, the token modeling device 5000 is connected to a network executed through the processor 200 to communicate with the transceiver 300 , the input interface device 400 , the output interface device 500 , and the storage device 600 . ) and the like may be further included.

Each of the components included in the token modeling device 5000 may be connected by a bus 700 to communicate with each other.

The memory 100 and the storage device 600 in the token modeling device 5000 may be configured with at least one of a volatile storage medium and a non-volatile storage medium, respectively. For example, the memory 100 may be configured as at least one of a read only memory (ROM) and a random access memory (RAM).

The memory 100 may include at least one instruction to be executed by the processor 200 to be described later. According to an embodiment, the at least one command is a command to receive a verification request of the transaction from a calling terminal that is a higher server of the user terminal or one of the plurality of servers, and a token based on the transaction is transferred to a blockchain network. Integrity of the transaction received from the subordinate server, by a function call based on the transaction information in the token, from the subordinate server and the command to request to issue the token to the It may include a command to receive the verification result value that verified the.

The processor 200 may mean a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which methods according to embodiments of the present invention are performed.

As described above, the processor 200 may execute at least one program command stored in the memory 100 . According to an embodiment, the processor 200 may execute at least one of the above-described at least one software configuration according to at least one instruction stored in the memory 100 .

An operation of the processor 200 for executing the at least one command will be described in more detail when a data integrity verification method using a token modeling apparatus according to an embodiment of the present invention is described later.

Above, a data integrity verification system including a token modeling apparatus according to an embodiment of the present invention will be described. Hereinafter, a data integrity verification method implemented by the processor 200 of the token modeling apparatus will be described.

6 is a flowchart illustrating a data integrity verification method using a token modeling apparatus according to an embodiment of the present invention.

Referring to FIG. 6 , the processor 200 in the token modeling apparatus may receive a request transaction from the user terminal 1000 by being executed by a call of the user terminal 1000 ( S1000 ). In this case, the request transaction may include signature information of the user terminal 1000 and information on the first transaction transmitted from the user terminal 1000 to the first server that is the highest level server by an API call.

Thereafter, the processor 200 executes the issuing unit 5100 by the call of the user terminal 1000 to transmit a block chain transaction requesting generation of the first token based on the request transaction to the block chain network B. can be (S2000). Accordingly, the first token may be issued to the blockchain network (B). In this case, the owner of the first token may be the user terminal 1000 that called the processor 200 , and the transaction attribute information may be set as the first transaction information.

When the first token is issued on the block chain network B, the processor 200 may execute the notification unit 5700 to transmit the issuance completion information of the first token to the user terminal 1000 (S3000) . Thereafter, the processor 200 may execute the transmitter 5300 by calling the user terminal 1000 to transmit the first token to a first server that is a lower server of the user terminal 1000 ( S4000 ). In other words, the owner of the first token may be changed to the first server.

When the owner of the first token is changed, the processor 200 may execute the notification unit 5700 to transmit transmission completion information of the first token to the first server (S5000). Accordingly, the first server compares the first transaction received by the API call from the user terminal 1000 with the first transaction information in the first token received from the processor 200, and the integrity and consistency of the first transaction can be verified. According to an embodiment, when the first transaction received by the API call and the first transaction information in the first token received from the processor 200 match, the first server processes the first transaction received by the API call can do.

Thereafter, the processor 200 executes the correction unit 5500 by the call of the first server, and performs a block chain transaction requesting the recording of the transaction processing result value of the first token issued on the block chain network (B). can be issued (S6000).

Thereafter, the processor 200 may execute the notification unit 5700 to transmit the modification completion information of the transaction processing result value to the first server ( S7000 ). Accordingly, integrity verification of the first transaction by the API call received to the first server may be completed.

Thereafter, the first server may transmit the second transaction by the API call to the second server, which is a lower level server. Accordingly, the processor 200 may verify the data integrity of the second transaction by repeatedly performing steps S1000 to S7000 by the call of the first server. In other words, this may increase N by N+1 until the Nth server is the lowest server (S8000), and repeat steps S1000 to S7000 until the Nth server is the lowest server (S9000).

At this time, when the owner of the N-th token is changed, the processor 200 performing the subsequent step S4000 may set the parent property of the N-th token to the N-1 token, and the correction unit 5500 by the call of the N-th server. ) to change the child attribute of the N-1th token to the Nth token. Accordingly, any one of the plurality of servers 3000, which is a subordinate server, can track the correlation between transactions by API call through the token issued on the blockchain network (B), so that the issuance of the transaction is the first Verification of the requested user terminal 1000 may be possible.

In the above, a data integrity verification system and method including a token modeling apparatus have been described according to an embodiment of the present invention.

Hereinafter, a service structure model using a data integrity verification system according to an embodiment of the present invention will be described.

7 is an image for explaining the structure of an open banking service using a data integrity verification system according to an embodiment of the present invention.

Referring to FIG. 7 , the open banking service may be composed of a user terminal (D), a user institution (A), an open banking center (C), and participating banks (P).

According to the embodiment, the open banking service may be provided in a multi-layered server structure in which the user terminal (D), the user institution (A), the open banking center (C), and the participating banks (P) are interconnected by an API call.

More specifically, the user organization (A) may be a fintech service and a fintech company such as Kakao Pay and Toss, and may be a top-tier server that can check user signature information whenever a transaction occurs.

In addition, the open banking center (C) may be a middle layer server representing a financial clearing house that provides an open banking API.

And, the participating banks (P) are the lowest layer servers representing the financial institutions that manage the user's bank account.

In order to process the user request transaction, the top-tier server, the user institution (A), sends a command transaction to the participating banks (P), the lowest-tier server, through the middle-tier server, the Open Banking Center (C), to inquire the user account. and edit user account status information.

In general, the withdrawal and transfer function among open banking services requires the process of updating the user account status at the participating bank (P), which is the lowest tier server.

Accordingly, in the conventional open banking service, user signature information is transmitted for every transaction, and transaction integrity and non-repudiation are verified in the corresponding server in charge of executing the transaction.

More specifically, in the case of a top-level server directly linked to a user terminal and an API call, the conventional open banking service receives a transaction together with the signature information of the user terminal and stores it as log data, and accordingly, the user terminal received from the top-level server The integrity and non-repudiation of the transaction were verified using the signature information of

However, in the case of a lower server that is not directly connected to the user terminal, since the signature information of the user terminal is not included in the transaction transmitted from the upper server, it is difficult to verify whether the transaction is based on a user request.

In order to solve this problem, conventionally, for transaction verification of a lower server, an open banking service is provided to check the consistency by integrating all of the log information of the upper server, the transaction information of the lower server API call, and the log data information of the lower server.

However, since log data contains customer personal information or highly sensitive financial information within a company or organization, access from outside is very strictly controlled, so the open banking service also uses separate data for each institution to verify the consistency of the transaction. The downside is that you have to go through an approval process.

On the other hand, when the data integrity verification system and method including the token modeling device according to the embodiment of the present invention are applied to the open banking service, all of the integrated log data information received from the upper server is checked as in the conventional open banking service. Even without verifying the consistency, the lower servers, the Open Banking Center and participating banks, can individually verify the integrity and consistency of transactions received from the user terminal or the upper server using the token information of the upper server recorded on the blockchain network. By doing so, it is possible to provide a data integrity verification system and method of high efficiency, high reliability, low cost and high safety.

In the above, a token modeling apparatus and a data integrity verification system and method including the same have been described according to an embodiment of the present invention.

A token modeling apparatus and a data integrity verification system and method including the same according to an embodiment of the present invention are commands for receiving a verification request of the transaction from a calling terminal that is an upper server of any one of the user terminal or the plurality of servers , a command to request to issue a token based on the transaction on a blockchain network, a command to send the token to a subordinate server of the calling terminal, and a function call from the subordinate server based on transaction information in the token By including a command to receive a verification result value that verifies the integrity of the transaction received from the calling terminal, information of a transaction according to an API call between a user terminal or a plurality of servers is recorded in the block chain to ensure the integrity of the transaction and non-repudiation.

In addition, through the blockchain network, subordinate servers can independently verify that the transaction that meets the user terminal's request has been properly delivered to the lowest server, so that the mutual consistency of the transaction information held by individual servers can be verified by themselves. Even without disclosing all internal log data in a hierarchical server environment, it is possible to provide a token modeling device capable of verifying consistency, high efficiency, high reliability, low cost, and high safety, and a data integrity verification system and method including the same.

The operation of the method according to the embodiment of the present invention can be implemented as a computer-readable program or code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. In addition, the computer-readable recording medium may be distributed in a network-connected computer system to store and execute computer-readable programs or codes in a distributed manner.

In addition, the computer-readable recording medium may include a hardware device specially configured to store and execute program instructions, such as ROM, RAM, and flash memory. The program instructions may include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

Although some aspects of the invention have been described in the context of an apparatus, it may also represent a description according to a corresponding method, wherein a block or apparatus corresponds to a method step or feature of a method step. Similarly, aspects described in the context of a method may also represent a corresponding block or item or a corresponding device feature. Some or all of the method steps may be performed by (or using) a hardware device such as, for example, a microprocessor, a programmable computer, or an electronic circuit. In some embodiments, one or more of the most important method steps may be performed by such an apparatus.

In embodiments, a programmable logic device (eg, a field programmable gate array) may be used to perform some or all of the functionality of the methods described herein. In embodiments, the field programmable gate array may operate in conjunction with a microprocessor to perform one of the methods described herein. In general, the methods are preferably performed by some hardware device.

Although described above with reference to preferred embodiments of the present invention, those skilled in the art can variously modify and change the present invention within the scope without departing from the spirit and scope of the present invention described in the claims below. You will understand that you can.

1000: user terminal 3000: server
5000: token modeling device 5100: issuer
5300: transmission unit 5500: correction unit
5700: notification unit 100: memory
200: processor 300: transceiver
400: input interface device 500: output interface device
600: storage device 700: bus
B: Blockchain Network

Claims (20)

In the token modeling apparatus for verifying the integrity of the transaction when transmitting a transaction by a function call between the user terminal and the plurality of servers by interworking with a user terminal and a plurality of servers provided in a multi-layered structure,
memory; and
Comprising a processor (processor) for executing at least one instruction stored in the memory,
The at least one command is
a command to receive a verification request of the transaction from the user terminal or a calling terminal that is an upper server of any one of the plurality of servers;
a command to request to issue a token based on the transaction on the blockchain network;
command to send the token to a lower server of the calling terminal, and
and a command to receive, from the subordinate server, a verification result value that verifies the integrity of the transaction received from the calling terminal by a function call based on the transaction information in the token. According to claim 1,
A command to receive a verification request of the transaction from the calling terminal,
and a command to receive a request transaction for verification of the transaction from the calling terminal. 3. The method of claim 2,
The request transaction is
The token modeling apparatus including information of the transaction from the calling terminal and signature information of the calling terminal. According to claim 1,
The command to request to issue a token based on the transaction on the blockchain network,
A command to transmit a blockchain transaction for requesting token issuance based on the transaction based on the request transaction;
a command to receive the issuance completion information of the token from the blockchain network and transmit it to the calling terminal;
instructions to set the owner of the token to the calling terminal; and
and a command to set the owner attribute information of the token to the user terminal, and to transmit setting completion information to the calling terminal. According to claim 1,
The token is a non-fungible, integrity-guaranteed token. According to claim 1,
In the command to transmit the token to a lower server of the calling terminal,
A token modeling device, wherein the owner of the token is changed to the subordinate server. According to claim 1,
The verification result is
When the transaction information in the token matches the transaction information received from the calling terminal, the token modeling apparatus is a processing result value issued by the subordinate server processing the transaction. According to claim 1,
After the command to receive the verification result value verifying the integrity of the transaction,
The token modeling apparatus further comprising a command to input the verification result value as a processing result attribute value in the token. When a transaction is transmitted by a function call between the user terminal and the plurality of servers by interworking with the user terminal and a plurality of servers provided in a multi-layered structure, a token modeling device that verifies the integrity of the transaction is used to verify the integrity of data in a way to
receiving a verification request of the transaction from the user terminal or a calling terminal that is an upper server of any one of the plurality of servers;
requesting to issue a token based on the transaction on a blockchain network;
transmitting the token to a lower server of the calling terminal; and
and receiving, from the subordinate server, a result of verifying the integrity of the transaction received from the calling terminal by a function call based on the transaction information in the token. 10. The method of claim 9,
Receiving the transaction verification request from the calling terminal comprises:
and receiving a request transaction for verification of the transaction from the calling terminal. 11. The method of claim 10,
The request transaction is
data integrity verification method including information of the transaction from the calling terminal and signature information of the calling terminal. 10. The method of claim 9,
The step of requesting to issue a token based on the transaction on the blockchain network,
transmitting a blockchain transaction for requesting token issuance based on the transaction based on the request transaction;
receiving the issuance completion information of the token from the block chain network and transmitting the information to the calling terminal;
setting the owner of the token to the calling terminal; and
and setting the owner attribute information of the token to the user terminal, and transmitting setting completion information to the calling terminal. 10. The method of claim 9,
The token is a non-fungible, integrity-guaranteed token. 10. The method of claim 9,
In the step of transmitting the token to the lower server of the calling terminal,
The data integrity verification method, wherein the owner of the token is changed to the subordinate server. 10. The method of claim 9,
The verification result is
When the transaction information in the token matches the transaction information received from the calling terminal, the data integrity verification method is a processing result value issued by the subordinate server processing the transaction. 10. The method of claim 9,
After receiving the verification result value verifying the integrity of the transaction,
The data integrity verification method further comprising the step of inputting the verification result value as a processing result attribute value in the token. user terminal;
a plurality of servers provided in a multi-layered structure; and
In conjunction with the user terminal and the plurality of servers, including a token modeling device for verifying the integrity of the transaction when transmitting a transaction by a function call between the user terminal and the plurality of servers,
The token modeling device,
memory; and
Comprising a processor (processor) for executing at least one instruction stored in the memory,
The at least one command is
a command to receive a verification request of the transaction from the user terminal or a calling terminal that is an upper server of any one of the plurality of servers;
a command to request to issue a token based on the transaction on the blockchain network;
a command to transmit the token to a lower server of the calling terminal; and
and a command to receive, from the subordinate server, a verification result value that verifies the integrity of the transaction received from the calling terminal by a function call based on the transaction information in the token. 18. The method of claim 17,
A command to receive a verification request of the transaction from the calling terminal,
a command to receive a request transaction for verification of the transaction from the calling terminal,
The request transaction is
data integrity verification system including information of the transaction from the calling terminal and signature information of the calling terminal. 18. The method of claim 17,
The token is a non-fungible, integrity-guaranteed token. 18. The method of claim 17,
The verification result is
When the transaction information in the token matches the transaction information received from the calling terminal, the data integrity verification system is a processing result value issued by the subordinate server processing the transaction.

Images