KR20240061561A - Device that collects and manages my data using a personal ledger linked with the blockchain and manages my data transactions using smart contracts - Google Patents

Abstract

A personal ledger generation unit that creates a personal ledger that can manage my data in conjunction with my data recorded on the blockchain; When a My Data input request is received through an encryption key delivery medium containing the user's encryption key, the encryption key is identified, a personal ledger corresponding to the encryption key is derived, and My Data is recorded on the blockchain. A personal ledger record that links my data so that it is managed by the derived personal ledger; And when my data is recorded on the blockchain as my data input is performed, a personal ledger management unit that classifies my data according to the field in which the encryption key delivery medium was used and registers it in the personal ledger, linked to the blockchain. This is about a my data collection and management device using a personal ledger.

Description

A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts {DEVICE THAT COLLECTS AND MANAGES MY DATA USING A PERSONAL LEDGER LINKED WITH THE BLOCKCHAIN AND MANAGES MY DATA TRANSACTIONS USING SMART CONTRACTS}

The present invention relates to a device that collects and manages my data using a personal ledger linked to a blockchain and manages my data transactions using a smart contract.

My Data refers to a series of processes in which individuals not only actively manage and control their own information, but also actively utilize this information for credit and asset management.

By using My Data, you can manage your information distributed across various organizations and companies, and use this to provide high-value services.

My Data is a transformation of the data utilization system from an institution-centered system to a data subject-centered system. In other words, individuals control and manage their own data and actively utilize it according to their own wishes.

With the implementation of the 3 Data Acts in August 2020, Korea began to legally guarantee the use of My Data in the financial and public sectors.

The core of My Data is to ensure that individuals can access their My Data at any time and send it to a third party for use.

However, if data is altered or forged during the process of collecting and transmitting data, the reliability of the data is greatly reduced, making it difficult to fully recognize its industrial value.

Accordingly, the inventor of the present invention completed the present invention after a long period of research and development through trial and error in order to solve the above-mentioned problems based on his experience and technology in the field of blockchain and information security.

In order to solve the problems described above, the present invention creates a personal ledger that can record and manage my data on a blockchain, allowing individuals to easily collect and manage their own data, and The purpose is to provide a my data collection and management device using a personal ledger linked to the blockchain so that entities such as companies that need data can receive my data with guaranteed reliability through the blockchain.

The technical problems to be achieved in the present invention are not limited to the above technical problems, and other technical problems not mentioned will be clearly understood by those skilled in the art from the description below.

One aspect of the present invention to solve the above-described problem includes a personal ledger generator that creates a personal ledger capable of managing my data in conjunction with my data recorded on a blockchain; When a My Data input request is received through an encryption key delivery medium containing the user's encryption key, the encryption key is identified, a personal ledger corresponding to the encryption key is derived, and My Data is recorded on the blockchain. A personal ledger record that links my data so that it is managed by the derived personal ledger; And when my data is recorded on the blockchain as my data input is performed, it includes a personal ledger management unit that classifies my data according to the field in which the encryption key delivery medium was used and registers it in the personal ledger, and the encryption key delivery medium is It is a medium that allows collection of user's my data in multiple fields, and is configured to include at least one of user authentication information and payment method.

According to a preferred embodiment of the present invention, when a my data input request is received through an encryption key delivery medium, the personal ledger generating unit generates a classification code to classify and categorize my data according to the field in which the encryption key delivery medium was used. It may include a classification code generation unit that automatically generates.

According to a preferred embodiment of the present invention, the personal ledger generation unit may include a classification code management unit that provides a classification code index through which a terminal accessing the personal ledger using an encryption key can visually check information about the generated classification code. there is.

According to a preferred embodiment of the present invention, the classification code management unit edits the classification code using a classification code index consisting of a classification code object set to enable interaction through a user interface by a terminal accessed to the personal ledger using an encryption key. It is possible to ensure that the collected my data is classified based on the classification code configuration according to the classification code editing results.

According to a preferred embodiment of the present invention, the classification code management unit creates interrelated distributed my data through a user custom classification code created by combining a plurality of classification codes for fields that the user determines to be related to each other. You can view and manage them in an integrated manner.

According to a preferred embodiment of the present invention, it further includes a my data display and transaction device using the metaverse, and the my data sales terminal connected to the virtual space implemented on the metaverse can access its my data in the virtual space. My data loading unit for loading; A personal ledger provision unit that visualizes the personal ledger consisting of my data of the sales terminal and floats it in virtual space, allowing the sales terminal to edit my data to be displayed using the personal ledger; And when the My Data of the sales terminal is registered in the market as My Data for Transactions upon the request of the Sales Terminal, it may include a My Data Exhibition Department that displays the My Data for Transactions in a My Data Exhibition Hall implemented in a separate virtual space.

The present invention has the effect of building a database composed of highly reliable my data by creating a personal ledger that can record and manage my data on the blockchain.

The present invention can prevent the loss of valuable my data by automatically collecting my data without the individual having to pay special attention.

The present invention allows users to easily query only the My Data they wish to query among the collected My Data.

Meanwhile, it is to be added that even if the effects are not explicitly mentioned herein, the effects described in the following specification and their potential effects expected from the technical features of the present invention are treated as if described in the specification of the present invention.

1 is a reference diagram for explaining an overview of a my data collection and management device according to the present invention.
Figures 2 and 3 are reference diagrams for explaining the configuration of the my data collection and management device according to the present invention.
Figures 4 and 5 are reference diagrams for explaining the configuration of a my data display and transaction device using the metaverse according to the present invention.
Figures 6 to 8 are reference diagrams for explaining the configuration of an encryption key and smart contract implementation management system according to the present invention.
Figures 9 and 10 are reference diagrams for explaining a smart contract monitoring method and a method for preventing falsification of fulfillment details of a smart contract according to an embodiment of the present invention.

In describing the present invention, detailed descriptions of related known functions will be omitted if they are obvious to those skilled in the art and are judged to unnecessarily obscure the gist of the present invention.

Figure 1 shows a device 100 (hereinafter referred to as "my data collection and management device") that collects and manages my data using a personal ledger linked to the blockchain according to the present invention and manages my data transactions using a smart contract. This is a reference diagram to explain the overview.

Referring to FIG. 1, the my data collection and management device 100 according to the present invention can provide users with a service that can collect and manage my data generated by various individual activities.

Here, the collected my data is related to all of the user's activities, and is representative of my data in the financial field, including income, expenditure, remittance and investment activities, my data in the consumption field, including product purchase history and purchase patterns, It may include activity location my data, which includes information on movement and places visited, and medical field my data, which includes medical-related information such as occurring diseases.

In addition, by intermediary so that the my data managed by users can be partially and easily transmitted, transactions between users and subjects who need specific my data can be activated.

Figure 2 is a reference diagram for explaining the configuration of the my data collection and management device 100 according to the present invention, and Figure 3 is a reference diagram for explaining the detailed configuration of the personal ledger generation unit 110 according to an embodiment of the present invention. This is a reference diagram for

Referring to FIG. 2, the my data collection and management device 100 includes a personal ledger creation unit 110, a personal ledger recording unit 120, and a personal ledger management unit 130.

The personal ledger creation unit 110 is linked with my data recorded on the blockchain to create a personal ledger capable of managing my data.

Here, the personal ledger is not intended to directly record and manage my data, and my data can be recorded on the blockchain and stored semi-permanently. My data recorded in the blockchain is linked to the personal ledger, providing a service that allows users to view their own my data through the personal ledger.

In addition, each personal ledger can be set to be viewed through a single corresponding encryption key, and accordingly, the user will need to have an encryption key to view the personal ledger to which his/her my data is linked.

Below, we will explain how users can easily view, check, or manage their my data through their personal ledger.

Referring to FIG. 3, the personal ledger generation unit 110 may be configured to include a classification code generation unit 111 and a classification code management unit 112.

When a my data input request is received through an encryption key delivery medium, the classification code generator 111 automatically generates a classification code to classify and categorize my data according to the field in which the encryption key delivery medium was used.

Here, the classification code is intended to provide my data classified according to set standards when the user views the personal ledger. For example, if a user wants to search for My Data belonging to a specific category, the desired My Data can be searched and confirmed using the corresponding classification code.

Specifically, if the classification code of my data related to the financial sector is created as A, the classification code of my data related to location information is created as H, and the classification code of my data related to medical information is created as S, the user You can check the classification code generated for each field and search for the desired My Data.

Additionally, the encryption key delivery medium may be configured to include at least one of user authentication information and a payment method, and enables collection of the user's my data for multiple fields in which at least one of the user authentication information and payment method is used.

The classification code management unit 112 provides a classification code index that allows a terminal connected to the personal ledger using an encryption key to visually check information about the generated classification code.

In addition, the classification code management unit 112 allows a terminal accessed to the personal ledger using an encryption key to edit the classification code using a classification code index composed of classification code objects set to be interactive through a user interface, The collected my data is classified based on the classification code configuration according to the classification code editing results.

In addition, the classification code management unit 112 integrates and searches interrelated distributed my data through one user custom classification code created by combining a plurality of classification codes for fields that the user determines to be related to each other. You can manage it.

Specifically, the classification code index basically includes list information listing all classification codes currently created in the personal ledger, and the listed classification codes may be composed of classification code objects. As described above, the classification code object is set to be interactive through the user interface and can be moved, integrated, separated, etc. through touch input through a terminal operated by the user.

For example, the user can create one user custom classification code by integrating multiple classification code objects through drad input for each classification code object, and the classification code index is updated as the user custom classification code is created. This can be provided.

Referring to Figure 3, when A to G are classification codes for classifying my data in the financial field, A to G can be formed into one group (user custom classification code), and a classification code index for this can be provided. there is.

When a my data input request is received through an encryption key delivery medium containing the user's encryption key, the personal ledger record unit 120 identifies the encryption key, derives a personal ledger corresponding to the encryption key, and blocks my data. It is recorded on the chain and linked so that the recorded my data is managed by the derived personal ledger.

Here, the encryption key delivery medium may be configured to include at least one of user authentication information and payment means as described above, and may deliver the encryption key to record my data generated at the user's request on the blockchain. It can be said to be a possible means.

For example, a card that a user passes to a clerk to pay for clothing at a clothing store or a terminal operated by the user can be the encryption key transmission medium. At this time, the card delivered to the clerk will need to include encryption key information along with the payment function. When payment is made through a card containing encryption key information, my data is generated for the clothing purchase, and this can be recorded on the blockchain along with the user's personal ledger information confirmed through the encryption key. Additionally, a request to enter my data may be received when payment is made through a card containing encryption key information or when a user wishes to input the user's activity history, etc. through an encryption key delivery medium containing user authentication information.

When my data is recorded on the blockchain as payment or my data input is performed, the personal ledger management unit 130 classifies my data according to the field in which the encryption key delivery medium was used and registers it in the personal ledger.

Here, the user's my data can be classified according to the embodiments of the above-described classification code so that the user can easily search and confirm at a later date, and the information classifying my data may also be classified according to the embodiments of the above-described classification code index. Accordingly, it can be registered in the personal ledger.

In addition, the classification code of the personal ledger may be provided to the user in a pre-generated state, but a new classification code is generated each time a new type of my data is collected to reduce traffic due to data usage related to the management of the personal ledger. It can be set to be.

[My data display and transaction device]

According to an embodiment of the present invention, the my data collection and management device 100 may include a my data display and transaction device 300 using the metaverse.

Figures 4 and 5 are reference diagrams for explaining the configuration of the my data display and transaction device 300 using the metaverse according to the present invention.

Referring to FIG. 4, the my data display and transaction device 300 according to the present invention is comprised of a my data loading unit 310, a personal ledger providing unit 320, and a my data display unit 330.

The my data loading unit 310 loads my data so that the my data sales terminal connected to the virtual space implemented on the metaverse can access its my data in the virtual space.

For example, the my data loading unit 310 can load my data by linking with a database where the my data collected by the user is stored, and in a form that can be visualized so that the user can easily check his/her my data in virtual space. It can be converted to .

Here, my data is related to all activities of the user, typically my data in the financial field including income, expenditure, remittance and investment activities, my data in the consumption field including product purchase history and purchase patterns, movement and It may include activity location my data, which includes information about places visited, and medical field my data, which includes medical-related information such as occurring diseases.

In addition, the database where my data is stored is composed of blockchain, so highly reliable my data can be collected, and details about this will be described later.

The personal ledger providing unit 320 visualizes the personal ledger consisting of the my data of the sales terminal and floats it in virtual space, allowing the sales terminal to edit the my data to be displayed using the personal ledger.

Here, the personal ledger providing unit 320 classifies my data according to a classification code automatically generated based on the field in which my data is collected, and creates a classification code index to visually display information about the generated classification code. It provides a personal ledger that includes, and thus allows the sales terminal to edit the classification code of the personal ledger using a classification code index composed of classification code objects set to be interactive through a user interface.

For example, if the my data that makes up the personal ledger is classified by classification codes A to F, the user interacts with the classification code objects of A to C and selects only my data corresponding to the classification codes of A to C. You can perform various editing tasks, such as creating a separate data group or integrating specific classification codes so that My Data is included and managed in one classification code. Additionally, the user can register only the desired My Data among his/her My Data for trading by requesting registration in the virtual space market using the edited My Data.

According to one embodiment of the present invention, the my data display and transaction device 300 can collect my data information desired by purchase terminals and provide it to sales terminals. Accordingly, the sales terminal can generate a classification code that integrates only the my data desired by the purchasing terminal that wants to purchase my data, register it in the market as my data for transaction and display it, and the purchasing terminal can display the items for sale that the sales terminal wants. You can encourage them to register and exhibit in the market.

When the My Data of the sales terminal is registered in the market as My Data for Transaction upon the request of the Sales Terminal, the My Data Exhibition Unit 330 displays the My Data for Transaction in the My Data Exhibition Hall implemented in a separate virtual space.

Referring to FIG. 5, the my data exhibition unit 330 includes an exhibition hall implementation unit 331, an avatar creation unit 332, a keyword creation unit 333, and an exhibition hall eastern part 334 according to an embodiment of the present invention. It can be configured as follows.

The exhibition hall implementation unit 331 can implement the My Data exhibition hall by analyzing the classification code for the My Data for transaction of the sales terminal and creating a place in a separate virtual space that is judged to be highly related to the classification code as a result of the analysis. .

According to one embodiment of the present invention, the exhibition hall implementation unit 331 analyzes classification codes for all transaction my data registered in the market, derives classification code groups that are related to each other, and creates a representative place representing the classification code group. The My Data exhibition hall can be implemented by creating a separate virtual space and creating a representative place to include a detailed place to display My Data for transaction corresponding to each classification code that constitutes the classification code group.

Additionally, the exhibition hall implementation unit 331 may not implement My Data exhibition halls in advance where My Data for transactions are displayed in order to minimize server traffic generated to maintain the metaverse environment.

For example, a place to implement the My Data exhibition hall can be created in a separate virtual space using only the classification codes related to the entire My Data for Transactions currently registered in the market, and a new classification code can be created based on the newly registered My Data for Transactions. Only when is derived can a place be created to implement the corresponding My Data exhibition hall.

Additionally, My Data for Transactions displayed in the My Data Exhibition Hall may be displayed based on the exhibition viewing option settings of the user who has moved to the My Data Exhibition Hall. For example, when a user who moves to the My Data exhibition hall sets a descending sort order based on the amount of My Data collection, the exhibition hall implementation unit 331 sorts items from the items with the largest data volume among the My Data for transaction at a distance close to the user's avatar. They can be displayed in a sorted manner. In addition, various other exhibition viewing options can be provided to users, and users can apply multiple exhibition viewing options to check or purchase the My Data they most want in advance.

The avatar creation unit 332 may create a seller avatar or a buyer avatar based on the classification information of a user accessing the virtual space, and provide a keyword tag function for the seller avatar.

Additionally, the avatar creation unit 332 can change the appearance of the user avatar that has moved to the My Data exhibition hall to correspond to the location created in the My Data exhibition hall.

The keyword generator 333 may generate at least one keyword representing the transaction my data of the sales terminal according to the my data for transaction disclosure settings of the sales terminal, and tag the generated keyword to the seller avatar.

For example, after My Data for Transaction, which is the My Data for sale that the sales terminal wants to trade, is registered in the market, when the sales terminal performs the disclosure setting to disclose My Data for Transaction to My Data purchase terminals, the keyword generation unit ( 333) can create a keyword representing my data for transaction of a sales terminal. Specifically, if my data for transactions includes card usage details and payment patterns, keywords such as card payment and usage cycle can be created and tagged on the seller's avatar.

Additionally, the keyword generator 333 can float or tag keywords related to each location implemented in the virtual space and expose them to users.

For example, similar to tagging a public keyword to a user's avatar, keywords generated for each place implemented in virtual space can be floated or tagged in a specific area of that place. Taking a park implemented in a virtual space as an example, keywords related to jogging exercise, such as exercise time, exercise distance, heart rate, and listening music, may be floated or tagged in the park.

The eastern part of the exhibition hall (334) moves the keywords tagged in the seller avatar and the avatars of users interacting through the user interface to the My Data exhibition hall, which is implemented based on the classification code linked to the interacted keyword. It can be moved.

In addition, the avatar of the user who interacts with the keywords floating or tagged in a specific place in the eastern part of the exhibition hall (334) and the user interface is moved to the My Data exhibition hall, and the My Data system implemented based on the classification code linked to the interacted keywords is moved to the My Data exhibition hall. It can be moved to the data exhibition hall.

Specifically, a purchasing terminal that has accessed a virtual space to purchase My Data can visit a location in the virtual space related thereto to purchase the My Data that it needs. For example, if the purchasing terminal wants to find out my data related to medical themes, it can visit a medical facility, one of the places created in virtual space, and look around the my data for medical-related transactions on display.

Additionally, you can navigate to more specific locations to obtain Transaction My Data information by interacting with keywords tagged in the avatars of other sellers located in that location, or keywords floating or tagged in that location, and other places related to that location. You can also move to .

[Encryption key and smart contract implementation management system]

According to one embodiment of the present invention, the my data collection and management device 100 may include an encryption key and a smart contract execution management system 200 using a hardware security module.

Figures 6 to 8 are reference diagrams for explaining the configuration of the encryption key and smart contract implementation management system 200 (hereinafter referred to as the management system) using a hardware security module according to the present invention.

Referring to FIG. 6, the management system 200 includes a service server 210, a data management server 220, and a hardware security module 230.

The service server 210 can provide a service that manages encryption keys such as digital keys and public keys of users' electronic wallets according to user requests through the user terminal 10, and the service is provided by the service server 210. It is connected to the blockchain network 30 used by receiving users, and services based on the blockchain network 30 can be provided separately.

Specifically, the user terminal 10 and the administrator terminal 20 can receive services based on the blockchain network 30 from the service server 210, and can receive services based on the blockchain network 30, which will be described below. This may include the smart contract implementation management service being implemented. Here, the administrator terminal 20 may refer to a terminal operated by an administrator who manages the status of the blockchain network 30 and the service server 210.

Additionally, the data management server 220 stores encrypted encryption keys and encrypted smart contract data to provide smart contract implementation management services.

Additionally, the hardware security module 230 manages a master key for encrypting data stored in the data management server 220. The master key is used when encrypting or decrypting data stored in the data management server 220, and is used as a security configuration to prepare in case the data stored in the data management server 220 is hacked. The hardware security module 230 is driven by a dedicated OS and can secure higher security compared to equipment driven by a public OS, and even when a physical attack is performed rather than a network attack, the master key for management is used. It plays a role in preventing leakage of data stored in the data management server 220 by self-destructing.

For organic operation between the components constituting the management system 200, the service server 210 communicates with the data management server 220 when receiving an encryption key request from the user terminal 10 on which user authentication has been performed. An agent may be installed to provide an encryption key to the user terminal 10. Also, referring to FIG. 7, the data management server 220 uses the master key managed by the hardware security module 230 to secure the user terminal ( It may include an encryption key management server 221 in which a driver is installed to decrypt the encryption key requested from 10) and provide it to the service server 210.

The data management server 220 is a smart contract data management server ( 222) can be included separately.

According to a preferred embodiment of the present invention, the service server 210 performs user authentication using the user's biometric authentication information input through the user terminal 10, and manages data for the user terminal 10 on which user authentication has been performed. A cloud-type personal safe that can manage encryption keys by linking with the server 220 can be provided. Accordingly, others will not be able to access the personal safe provided to each user, and the security of the encryption key stored in the personal safe will be secured, thereby improving the reliability of transactions made on the blockchain network.

In addition, referring to FIGS. 7 and 8, the service server 210 is a blockchain monitoring server that monitors whether the smart contract concluded on the blockchain network 30 is implemented through the user terminal 10 on which user authentication has been performed. It may include (211). Specifically, the blockchain monitoring server 211 includes a code transmission unit 212 and a implementation monitoring unit 213, and the implementation monitoring unit 213 includes a implementation history tampering detection unit 214 and a virtual security node activation unit ( 215) may be included.

When a smart contract code is generated to fulfill a smart contract concluded through the user terminal 10 on which user authentication has been performed, the code transmission unit 212 of the blockchain monitoring server 211 sends the smart contract code to the data management server. It can be transmitted to and stored as smart contract data.

According to actual cases, it may be difficult to manipulate a large-scale blockchain network, but it has been proven that if a vulnerability is discovered in the smart contract code, staking assets using it can be hacked, so information to deal with such situations is provided. It is best to save it in advance.

Below, we will explain how the blockchain monitoring server 211 responds by complementing even if a vulnerability in a smart contract is discovered by attackers.

Figures 9 and 10 are reference diagrams for explaining a smart contract monitoring method and a method for preventing falsification of fulfillment details of a smart contract according to an embodiment of the present invention.

The implementation monitoring unit 213 of the blockchain monitoring server 211 can monitor whether a block containing a smart contract implementation transaction created based on the smart contract implementation conditions is created, and the block containing the smart contract implementation transaction is If it is not created, it is determined that the concluded smart contract has not been properly implemented, and smart contract data related to the smart contract can be transmitted to the manager terminal 20.

Referring to Figure 9 (A), if the smart contract execution block 40 is not created as shown on the right based on the execution conditions of the smart contract concluded on the blockchain network, it means that the concluded smart contract has not been properly implemented. can be judged. In addition, even if a tampered block is created and added instead of the smart contract execution block 40, it may be determined that the concluded smart contract has not been properly implemented. In this case, the blockchain monitoring server 211 has already been tampered with. Damage from altered transactions can be prevented by freezing the blockchain network 30 before the transaction is actually implemented and regenerating and registering the block before the alteration. Additionally, in order for the above-described process to be performed, the blockchain monitoring server 211 must be granted control over the blockchain network 30.

In addition, the implementation history tampering detection unit 214 of the blockchain monitoring server 211 can detect a tampering attempt on a previously created block containing a smart contract implementation transaction, and the virtual security node activation unit 215 can detect such tampering attempts. In this case, tampering with the execution details according to the concluded smart contract can be prevented by participating in the virtual security node in the blockchain network and regenerating the block before tampering.

Referring to (B) of Figure 9, when modulation is performed on the already created block containing the smart contract execution transaction on the left, and a new block containing the modulation block 41 is created as shown on the right, blockchain monitoring is performed. The server 211 can execute a response protocol using a virtual security node.

In this regard, FIG. 10 illustrates a process in which a response protocol for the (B) type attack of FIG. 9 is performed.

Referring to FIG. 9, when a plurality of nodes constituting the blockchain network 30 are composed of normal nodes (31-1 to 31-n), normal blocks can be created and registered without problem.

If more than half of the nodes constituting the blockchain network 30 (or hash power) are composed of attacker nodes (32-1 to 32-n), the blockchain network 30 contains the attackers' intended A modulation block 41 containing a transaction may be created and registered.

When the modulation block 41 is registered on the blockchain network 30, the blockchain monitoring server 211 activates a plurality of virtual security nodes (33-1 to 33-n) included in the normal node category to block By participating in the chain network (30), the normal nodes (31) can again account for more than half of the majority.

According to the above process, when the normal node 31 takes the lead in creating blocks in the blockchain network 30, the blockchain before the tampering can be regenerated and registered, and the blockchain containing the tampered block can be registered. is not left on the blockchain network (30) and is replaced.

The process according to FIG. 10 can be applied even when a modulated block is newly created and registered, such as type (A) in FIG. 9, even if modulation has not been performed on a previously generated block. However, since the restoration of the blockchain network 30 can be performed while the blockchain network 30 is frozen, without allowing multiple virtual security nodes 33 to participate in the blockchain network 30, the attacker node ( The block before tampering can also be recreated by removing 32) from the blockchain network 30.

Additionally, the virtual security nodes 33 may be created differently depending on the operation method of the blockchain network 30.

Specifically, in the case of a blockchain network 30 operated by proof of work, the virtual security node 33 may be configured as a mining node. Additionally, in the case of a blockchain network 30 operated using a delegated proof-of-stake method, the virtual security node 33 may be configured as a super node. Mining nodes can contribute to block creation by participating in mining using computing power resources, and supernodes are nodes that can exercise voting rights according to the amount of digital assets held and represent decision-making on major agendas, and have authority from multiple nodes. By being delegated, it can play an important role in maintaining the network, such as creating blocks or confirming transactions.

[Secure Cloud System]

According to an embodiment of the present invention, the management system 200 may include a secure cloud system 500.

The secure cloud system 500 includes a storage unit 510 and a cloud unit 520.

The storage unit 510 is a place to store data, and stores separate data generated in the process of providing cloud services through the service server 210 or data necessary to provide cloud services.

The cloud unit 520 provides a secure cloud service and connects the storage unit 510 with the user terminal and administrator terminal through an internal network. The cloud unit 520 includes a security execution unit 521 to maintain the security of the cloud service it provides. The security execution unit 521 is connected to the external security server 800 that monitors the cloud module and an external network, and can maintain the security function of the cloud without performing the security monitoring function of the security cloud service itself. At the same time, the cloud unit 520 uses a fire prevention function to distinguish between the internal network and the external network to prevent data transmission and reception between the internal network and the external network. However, the cloud unit 520 allows access to the internal network for signals transmitted by the external security server 800 to the security executing unit 521. The security implementation department 521 can provide security functions in the form of a SEIM-based 24-hour security control service. SEIM stands for security software that provides real-time analysis of security alerts generated by applications and network hardware.

The security execution unit 521 collects security logs from the storage unit 510, the cloud unit 520, the user terminal, and the administrator terminal to provide security functions to the cloud service. Here, the security log refers to information about the connection time to the network or the IP address of the host. The security execution unit 521 transmits the collected security log to the external security server 800 to request analysis of the collected security log. The external security server 800 analyzes the received security log to determine whether there is abnormal activity. In other words, it determines whether it is an attack on the system. The external security server 800 mechanizes security logs and analyzes the collected security logs using natural language processing techniques. If the analyzed security log does not fall into the preset normal behavior category, the external security server 800 transmits a security warning signal to the security execution unit 521.

The cloud unit 520 includes a connection information storage unit 523 that stores access information input from a user terminal or an administrator terminal to access a cloud service. Here, the connection information refers to the authentication key. The security executing unit 521 creates and transmits a login interface whenever a user terminal or an administrator terminal accesses a cloud service, and the terminal enters access information into the login interface and accesses the cloud service. In this process, the connection information generated by the terminal is transmitted to the connection information storage unit 523. The access information storage unit 523 has an allocated area within the cloud and may be based on volatile memory resources such as cache and RAM memory. Accordingly, the connection information storage unit 523 can quickly provide the stored connection information.

The security enforcement unit 521 strengthens security by periodically authenticating user terminals or administrator terminals connected to the cloud service. The security executing unit 521 periodically receives an authentication key from the connected user terminal or administrator terminal and periodically matches the access information stored in the access information storage unit 523. As a result of the matching, if the connection information received from both sides is the same, the security executing unit 521 maintains the terminal's connection. The secure cloud system 500 provides security along with a comfortable network environment for the terminal by providing quick access information from the access information storage unit 523.

The cloud unit 520 includes a security execution control unit 524 to reduce the load on the security execution unit 521 due to large-scale access. The security execution control unit 524 adjusts the number of security execution units 521 to reduce the load on the security execution unit 521 due to an increase in the amount of user terminal connections to the cloud service. To this end, the security execution control unit 524 detects traffic in real time and, if it exceeds a preset first standard amount, increases the number of security execution units 521 according to a set ratio.

Additionally, after the traffic exceeds the first reference amount, the security performance control unit 524 blocks the internal network at regular time intervals in the order in which the user terminal accesses the cloud service. Additionally, when the traffic falls below the first standard amount, the security performance control unit 524 allows user terminals whose access has been blocked to access the internal network in the order in which they were blocked. Since the user terminal that connects first in the connection order has a higher probability of fully using the security cloud service, the security performance control unit 524 can maintain a smooth network environment by blocking the access of the user terminal that connected first.

Additionally, the cloud unit 520 includes a connection control unit 525 and a network control unit 626 to avoid network overload due to large-scale access of user terminals.

If the cloud service access traffic of the user terminal exceeds the preset second standard amount, the access control unit 525 does not allow the user terminal that attempts to connect additionally. Here, the second reference amount is a higher value than the first reference amount and means a state in which traffic has increased. Access from too many user terminals can cause the entire system to stop. To prevent this situation, when traffic exceeds the preset second standard amount, the access control unit 525 blocks the internal network for user terminals that access after the traffic exceeds the second preset standard amount. Furthermore, when the traffic exceeds the second standard amount, the access control unit 525 generates network necessary information requesting expansion of the internal network and transmits it to the administrator terminal. Accordingly, the manager can prevent dangerous situations such as exceeding the second standard amount of traffic from occurring in the future.

If the detected traffic exceeds the preset first reference amount, the network control unit 626 reduces the internal network speed of the connected user terminal or administrator terminal. In other words, it prevents a situation in which additional access to the user terminal is not permitted because traffic exceeds the second standard amount.

It is obvious to those skilled in the art that the present invention can be embodied in other specific forms without departing from the characteristics of the present invention. Accordingly, the above detailed description should not be construed as restrictive in all respects and should be considered illustrative. The scope of the present invention should be determined by reasonable interpretation of the appended claims, and all changes within the equivalent scope of the present invention are included in the scope of the present invention.

10: User terminal
20: Administrator terminal
30: Blockchain Network
31: Normal node
32: Attacker node
33: Virtual security node
40: Smart contract execution block
41: Modulation block
100: A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
110: Personal ledger creation unit
111: Classification code generation unit
112: Classification code management department
120: Personal ledger record
130: Personal ledger management department
200: Encryption key and smart contract implementation management system
210: Service server
211: Blockchain monitoring server
212: Code transmission unit
213: Implementation Monitoring Department
214: Fulfillment history tampering detection unit
215: Virtual security node activation unit
220: Data management server
221: Encryption key management server
222: Smart contract data management server
230: Hardware security module
300: My data display and transaction device using metaverse
310: My data loading unit
320: Personal ledger provision department
330: My Data Exhibition Department
331: Exhibition hall implementation department
332: Avatar creation unit
333: Keyword generation unit
334: Eastern part of the exhibition hall

Claims (6)

A personal ledger generation unit that creates a personal ledger that can manage my data in conjunction with my data recorded on the blockchain;
When a My Data input request is received through an encryption key delivery medium containing the user's encryption key, the encryption key is identified, a personal ledger corresponding to the encryption key is derived, and My Data is recorded on the blockchain. A personal ledger record that links my data so that it is managed by the derived personal ledger; and
When my data is recorded on the blockchain as my data input is performed, it includes a personal ledger management unit that classifies my data according to the field in which the encryption key delivery medium was used and registers it in the personal ledger;
The encryption key delivery medium is
It is a medium that makes it possible to collect users’ my data in multiple fields,
It is configured to include at least one of user authentication information and payment method,
It further includes an encryption key and smart contract implementation management system using a hardware security module,
The management system is
A service server that provides a user's encryption key management service and a smart contract execution management service signed by the user according to the user's request;
A data management server that stores encrypted encryption keys and encrypted smart contract data to provide smart contract implementation management services; and
It includes a hardware security module that manages the master key for encrypting data stored in the data management server.
The service server is
Including a blockchain monitoring server that monitors the implementation of a smart contract concluded on a blockchain network through a user terminal on which user authentication has been performed,
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
According to paragraph 1,
Personal ledger creation department
When a my data input request is received through an encryption key delivery medium, it includes a classification code generator that automatically generates a classification code to classify and categorize my data according to the field in which the encryption key delivery medium was used,
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
According to paragraph 2,
Personal ledger creation department
It includes a classification code management unit that provides a classification code index that allows a terminal accessed to the personal ledger using an encryption key to visually check information about the generated classification code,
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
According to paragraph 3,
Classification code management department
A terminal that accesses the personal ledger using an encryption key can edit the classification code using a classification code index composed of classification code objects set to allow interaction through a user interface.
So that the collected my data is classified based on the classification code configuration according to the classification code editing results,
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
According to clause 4,
Classification code management department
Allows users to integratedly search and manage interrelated distributed my data through a single user custom classification code created by combining multiple classification codes for fields that are judged to be related to each other.
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.
According to paragraph 1,
It further includes my data display and transaction devices using Metaverse,
a my data loading unit that loads my data so that the my data sales terminal connected to the virtual space implemented on the metaverse can access the virtual space;
A personal ledger provision unit that visualizes the personal ledger consisting of my data of the sales terminal and floats it in virtual space, allowing the sales terminal to edit my data to be displayed using the personal ledger; and
When the My Data of the sales terminal is registered in the market as My Data for Transactions at the request of the Sales Terminal, the My Data Exhibition Unit includes a My Data Exhibition Unit that displays My Data for Transactions in a My Data Exhibition Hall implemented in a separate virtual space.
A device that collects and manages my data using a personal ledger linked to blockchain and manages my data transactions using smart contracts.