KR20240073387A - Did-based verification system for strengthening sovereignty of copyright holders and method for the same - Google Patents

Abstract

The present invention relates to a DID-based verification system and method for strengthening the sovereignty of copyright holders, which has been improved to prevent the issuance of NFTs for digital content without permission of the copyright holder.
The present invention includes an issuer server that authenticates the copyright holder terminal and the user terminal, verifies digital content, issues NFT for the digital content that has been verified, and stores it in a distributed storage; A copyright holder terminal that receives identity authentication and digital content verification from the issuer server, transmits the digital content to the issuer server, receives an NFT, and then conducts a transaction with the user terminal for use of the digital content; In order to use the digital content, the user pays a certain amount to the copyright holder's terminal and requests its use. The NFT received after the request for use is verified through the distributed storage, and when verification is completed, the user receives a master key from the copyright holder's terminal. terminal and; It provides a DID-based verification system to strengthen the sovereignty of copyright holders, including a distributed storage that registers and verifies DID, DID documents, and NFTs, and stores the digital content off-chain.

Description

DID-based verification system and method to strengthen sovereignty of copyright holders {DID-BASED VERIFICATION SYSTEM FOR STRENGTHENING SOVEREIGNTY OF COPYRIGHT HOLDERS AND METHOD FOR THE SAME}

The present invention relates to a DID-based verification system and method for strengthening the sovereignty of copyright holders, and more specifically, to a DID-based verification system for strengthening the sovereignty of copyright holders, which has been improved to prevent the issuance of NFTs for digital content without permission of the copyright holder. It relates to systems and methods.

Copyright is a legal right to the work created by the creator and protects the work. As the production and distribution of digital content becomes more active online, illegal copying and security threats are increasing. This threatens the copyright of copyright holders and requires strengthening of sovereignty.

Additionally, blockchain is receiving attention to enhance security, and research is being actively conducted as it can guarantee transparency and integrity of transactions. In particular, NFT (Non-Fungible Token) using blockchain technology is attracting attention because it can guarantee unique ownership.

The above-mentioned NFT can guarantee scarcity and prove originality of digital content, and since forgery and alteration of owner information and transaction history are impossible, it is often traded in the form of NFT. For this reason, NFTs are highly regarded for their usability in the field of digital content with various copyrights, and the market size is growing and the number of users is also increasing.

However, the above-mentioned NFT purchaser does not have a copyright to the digital content, and ownership and copyright are separate concepts. Even if you are the owner of the above-mentioned digital content, your copyright may be violated under the Copyright Act if you display or use it for purposes such as sale.

And even if you secure ownership of digital content by purchasing an NFT, the copyright is held by the creator and copyright holder, so if you want to copy or transmit the digital content, you need permission from the copyright holder.

In addition, NFT buyers cannot reproduce or transmit digital content according to the principle of interpretation in favor of the author unless permission to use the work or transfer of copyright is specified in the smart contract terms.

And making digital content into NFT also requires a copyright holder with rights to the digital content.

If a third party without the rights of the copyright holder mints digital content in the form of NFT, the copyright holder's right to copy or transmit is violated during the process of digitizing and uploading to the marketplace.

In addition, since digital content can be copied by anyone, a problem with NFT technology is that digital content can be minted as NFT regardless of the copyright holder or creator, and there is a possibility of loss of the original asset.

To solve these problems with NFTs, the NFT marketplace must verify the creator of the creation, legally resolve ownership disputes, and resolve the possibility of loss of the original asset.

And to prevent performance degradation of the blockchain network, the original file of digital content is replaced with an off-chain link where the file was uploaded instead of being stored in the blockchain network.

If such off-chain is used as an insecure server, there is a possibility that the original files of digital content may be deleted due to hacking and neglect of management, so a decentralized storage platform using IPFS (Inter-Planetary File System) is emerging. .

And the digital content refers to data or information produced digitally, such as music, video, and images.

These digital content protection technologies include DOI (Digital Object Identifier), DRM (Digital Right Management), and Watermarking.

The DOI system was launched by the International DOI Foundation in 1998 and was adopted as an international standard through ISO 26324. A DOI is permanently assigned to an object to provide an interpretable, network link to the object's current information, including the object's location and information about the object as it can be found on the Internet. Information about an object may change over time, but its DOI name does not change.

In addition, DRM is a technology and system for controlling and restricting the use of digital content distributed by copyright holders to protect copyright holders. Users must use digital content in accordance with the Terms of Use, which include key conditions and restrictions under which the right to use must be exercised.

DRM is a technology that inserts and manages confidential information of the copyright holder in digital content such as photos or videos. It is possible to trace the source and information of the original digital content and has functions such as copyright protection, prevention of illegal copying and copying, and user control.

And Decentralized Identifier (hereinafter referred to as DID) is an identity verification technology based on distributed ledger technology.

The DID serves as an identifier for the subject and at the same time serves as a Uniform Resource Identifier (URI) that refers to the DID document stored in the distributed storage.

In addition, DID is a distributed system that gives users complete control over their information and data, which was not possible in existing centralized systems. This is a method in which the user stores his/her own information in a digital wallet linked to a distributed storage and enters the private key that only the user has whenever necessary to prove himself.

This DID is a technology that enables self-sovereign identity (hereinafter referred to as SSI).

The SSI is based on a decentralized system where users directly manage their ID and grants sovereignty over data to the ID subject. The self-sovereign identity verification platform includes DID, DID document, distributed storage (Verifiable Data Registry), issuer, user (Holder), and verifier.

Additionally, there is a verifiable credential (VC: Verifiable Credential), which is an ID attribute kept by the user, and a verifiable presentation ID data set (VP: Verifiable Presentation), which is an ID attribute for the user to reprocess the VC and submit it to the verifier.

Meanwhile, an example of existing digital content research is digital content authentication and management technology based on blockchain technology.

This technology allows digital content creators to register and manage digital content through a distribution and management system and deliver it to users. It consists of a copyright registration management system, a digital content distribution management system, and a system for user authority and authentication.

Copyright registration establishes copyright by confirming and distinguishing the identity of the registrant. In order to use the work's own information as authentication information, a hash value is generated and registered. It provides integrity by authenticating digital content and users using hash values.

However, the above-mentioned conventional technology focuses only on the technical area of self-protection for digital content and is insufficient in the distribution management area.

Additionally, another example of existing digital content research is a blockchain-based self-sovereign content management system.

This system provides a self-sovereign content management function, and allows users to register, provide, access control, and delete content whenever they want without the content being dependent on a specific server or service, and to control the content itself without using a central server. Distributed storage is used to resolve dependencies.

In addition, it provides ownership authentication, access control, and integrity of usage history for blockchain-based content, uses an Ethereum-based smart contract for registration and management of content, and uses IPFS as a distributed storage to store the original content.

However, in the conventional system described above, users directly register, manage, and control content, but there is no authentication process when registering a user, and there is no verification of content. In particular, there is no encryption process when storing content, so it is vulnerable to confidentiality even when distributed.

Another example of existing digital content research is a security system based on Android phones for safe distribution of content.

This system consists of a copyright holder, a user, a distribution right holder, and a server. It authenticates the user using the USIM and IMEI of the user terminal, and verifies authentication and integrity through the server using the user's unique number and hash value during the user authentication process. Replay attacks are prevented because the authentication process is performed using SMS and random numbers.

And because digital content is encrypted and stored on the server, confidentiality is strengthened, and users are issued a session key to decrypt and use the content.

However, the above-described conventional system also has problems with availability in the event of a network failure due to the use of a centralized server, is vulnerable to malicious insider attacks, and increases commission costs due to the intervention of a third party called a distribution authority.

1. Blockchain-based secondary copyright revenue distribution system and method of Publication Patent Publication No. 10-2022-0038970 (published March 29, 2022) 2. Content management device and method using blockchain DID of Registered Patent Publication No. 10-2412511 (registered on June 20, 2022) 3. Protocol-based copyright transaction credential issuance system and method of Registered Patent Publication No. 10-2428571 (registered on July 29, 2022) 4. Method of providing original authentication service for real assets using ＤＩＤ and NF＿ of Registered Patent Publication No. 10-2411652 (registered on June 16, 2022) 5. English learning method using movies, dramas, news, etc. copyrighted by Publication Patent Publication No. 10-2013-0000208 (published on January 2, 2013)

The present invention was created to solve the above problems,

To prevent unauthorized issuance of NFTs for digital content without the permission of the copyright holder.

The purpose is to provide a DID-based verification system and method to strengthen the sovereignty of copyright holders.

The DID-based verification system for strengthening the sovereignty of copyright holders of the present invention to achieve the above purpose,

An issuer server that authenticates the copyright holder terminal and the user terminal, verifies the digital content, issues an NFT for the verified digital content, and stores it in a distributed storage;

A copyright holder terminal that receives identity authentication and digital content verification from the issuer server, transmits the digital content to the issuer server, receives an NFT, and then conducts a transaction with the user terminal for use of the digital content;

In order to use the digital content, the user pays a certain amount to the copyright holder's terminal and requests its use. The NFT received after the request for use is verified through the distributed storage, and when verification is completed, the user receives a master key from the copyright holder's terminal. terminal and;

It is characterized by including a distributed storage that registers and verifies DID, DID documents, and NFT, and stores the digital content off-chain.

In the present invention, the issuer server stores the encrypted original digital content in IPFS.

In the present invention, the user terminal loads encrypted digital content stored in IPFS using the issued master key, decrypts it, and uses it.

In the present invention, the issuer server, the copyright holder terminal, and the user terminal require identity authentication to register and use the digital content, and the identity authentication requires the issuer server and the copyright holder terminal to authenticate the identity. After generating the DID and DID document and registering them in the distributed storage, the copyright holder terminal transmits the DID to the issuer server for identity authentication and requests authentication, and the issuer server generates a challenge using a random number and Transmitted to the copyright holder terminal, the copyright holder terminal generates a challenge using a random number, generates a response corresponding to the challenge and transmits it to the issuer server, and the issuer server compares the random number it generated and responds if it matches. is transmitted to the copyright holder terminal, and the copyright holder terminal also verifies the response and mutually authenticates.

In the present invention, in order to verify and register the digital content, the copyright holder terminal generates a 16-digit random number value corresponding to the master key, then encrypts the digital content with the Rijndael encryption algorithm, and encrypts the digital content. After generating a hash value using SHA-2 on the original, the generated hash value is encrypted with the private key of the copyright holder's terminal, the master key is encrypted with the public key of the issuer server, and then the encrypted digital content, the encrypted hash The value and encrypted master key are transmitted to the issuer server.

In the present invention, the issuer server is used to verify and register the digital content,

Obtain a master key by decrypting the encrypted master key received from the copyright holder's terminal with the private key of the issuer server, decrypt the encrypted digital content using the obtained master key, and then generate a hash value using SHA-2. The encrypted hash value is decrypted with the public key of the copyright holder terminal to obtain a hash value, and the integrity of the digital content is verified by comparing the hash value sent by the copyright holder terminal and the hash value generated by the issuer server. The issuer server creates an NFT license for digital content and registers it in the distributed storage, stores the encrypted digital content in IPFS, and transmits the generated NFT license to the copyright holder terminal.

The DID-based verification method for strengthening the sovereignty of the copyright holder of the present invention to achieve the above purpose is,

In the digital content verification method to prevent the issuance of NFTs for digital content without permission of the copyright holder,

(a) generating a DID and a DID document and storing them in a distributed storage, and the issuer server and copyright holder terminal generating a DIDIssuer, DIDHolder, DID documentIssuer, and DID documentHolder and storing them in the distributed storage;

(b) the copyright holder terminal requests identity authentication from the issuer server and transmits DIDHolder to request identity authentication;

(c) the issuer server responding to identity authentication by transmitting the DIDIssuer of the issuer server to the copyright holder terminal in response to identity authentication;

(d) The issuer server and the copyright holder terminal request the DID document of the issuer server and the copyright holder terminal registered in the distributed storage using DID, and the distributed storage sends the corresponding DID document to the issuer server and the copyright holder. Requesting and obtaining a DID document by transmitting it to the terminal;

(e) the issuer server and the copyright holder terminal generate a random number by generating RNIssuer and RNHolder for DID Auth, which is a mutual authentication process;

(f) the issuer server retrieves the pubHolder value of the copyright holder terminal among the publicKey items in the DID documentHolder of the copyright holder terminal and transmits ChaIssuer = (RNIssuer, pubHolder) to the copyright holder terminal to generate a challenge of the issuer server;

(g) The copyright holder terminal calculates RN`Issuer = (priHolder, ChaIssuer) using the ChaIssuer received from the issuer server, retrieves the pubIssuer value of the issuer server among the publicKey items in the DID documentIssuer of the issuer server, and obtains ChaHolder = Generating a challenge and response of the copyright holder terminal by transmitting (RNHolder, pubIssuer), ResHolder = (RN`Issuer, priHolder) to the issuer server;

(h) The issuer server receives ChaHolder and ResHolder from the copyright holder terminal, calculates RN`Issuer = (priIssuer, ResHolder), verifies RNIssuerRN`Issuer, and uses RN`Holder = (priIssuer, ChaHolder) After generating ResIssuer = (RN`Holder, pubHolder), ResIssuer transmits it to the copyright holder terminal to generate a response from the issuer server;

(i) The copyright holder terminal calculates RN`Holder = (priHolder, ResIssuer) using ResIssuer received from the issuer server and then completes mutual authentication with RNHolderRN`Holder.

The DID-based verification method for strengthening the sovereignty of copyright holders of the present invention to achieve the above-mentioned other purposes is,

In the digital content verification and registration method to prevent the issuance of NFTs for digital content without permission of the copyright holder,

(A) the copyright holder's terminal generates a master key (MK) by generating a 16-digit random number corresponding to the master key;

(B) the copyright holder terminal generates encrypted content by generating E(M) = EMK(Data) using a master key in the Rijndael encryption algorithm when encrypting digital content;

(C) the copyright holder terminal generates a content hash value by generating H(M)=HSHA2(Data) using SHA-2 in the original digital content;

(D) the copyright holder terminal generates E(HM)=EpriHolder(HM) using its private key in HM;

(E) generating the master key as E(MK) = EpubIssuer(MK) using the public key of the issuer server;

(F) the copyright holder terminal transmits the encrypted {EMK, EM, EHM} to the issuer server;

(G) the issuer server obtains MK = DpriIssuer(EMK) using a private key;

(H) The issuer server uses the acquired MK to obtain Data = DMK(EM), and generates H(M`)= HSHA2(Data) for the acquired content source to create H(M)H(M`). ), verifying the integrity of the content, registering the generated NFT License (VC) in a distributed storage, storing the encrypted content original EM in IPFS, and transmitting the NFT License (VC) to the copyright holder terminal. It is characterized by including ;.

The DID-based verification method for strengthening the sovereignty of copyright holders of the present invention to achieve the above-mentioned other purpose is,

In the method of requesting, verifying and using digital content to prevent the issuance of NFTs for digital content without permission of the copyright holder,

(a) the user terminal requests the copyright holder terminal to use digital content and then pays a certain amount of money;

(b) the copyright holder terminal processes VC into VP form and then transmits it to submit an NFT License (VP) to the user terminal;

(c) The user terminal uses distributed storage to verify whether it is the NFT of the copyright holder terminal using the proof value in the VP, and when NFT verification is completed, requesting a master key (MK) from the copyright holder terminal. and;

(d) the copyright holder terminal generates E(MK) = EpubUser(MK) using the public key of the user terminal and then transmits it to the user terminal;

(ㅁ) The user terminal obtains MK = DpriUser (EMK) using the private key, requests and obtains the stored EM of IPFS using the off-chain link stored in the VP, and calculates Data = DMK (EM) obtaining and using digital content;

(ㅂ) the copyright holder terminal requests an NFT update from the issuer server along with the transaction details after completing the transaction;

(s) The issuer server updates the NFT, generates UnNFT, registers it in the distributed storage, transmits the updated UnNFT to the copyright holder terminal, and then terminates the transaction.

According to an embodiment of the present invention, the sovereignty of copyright holders is strengthened by allowing only copyright holders certified based on DID to issue and distribute NFTs for digital content.

In particular, because digital content has a large data capacity, storing the digital content itself on the blockchain main network can cause network load, so off-chain IPFS is used, and the NFT itself has a hash link of IPFS. Including increased efficiency.

Additionally, as the NFT market grows, the proposed protocol can be used to strengthen copyright protection for copyright holders and ensure safe and transparent transactions.

Figure 1 is a block diagram showing the overall configuration of a DID-based verification system for strengthening the sovereignty of copyright holders according to the present invention.
Figure 2 is an operation flowchart of an identity authentication method using a DID-based verification method to strengthen the sovereignty of copyright holders according to the present invention.
Figure 3 shows an operation flowchart of the digital content verification and registration method using the DID-based verification method for strengthening the sovereignty of the copyright holder according to the present invention.
Figure 4 is an operational flowchart of a digital content request, verification, and use method using a DID-based verification method to strengthen the sovereignty of copyright holders according to the present invention.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the attached drawings.

Figure 1 shows a block diagram showing the overall configuration of a DID-based verification system for strengthening the sovereignty of copyright holders according to the present invention.

Referring to Figure 1, the DID-based verification system for strengthening the copyright holder's sovereignty according to the present invention includes an issuer (or publisher) server 10, a copyright holder terminal 20, a user terminal 30, a distributed storage 40, and It is configured to include IPFS (50).

More specifically, first, the issuer server 10 authenticates the copyright holder terminal 20 and the user terminal 30, verifies the digital content, and issues an NFT for the digital content for which verification has been completed to store the distributed storage (40). ) and the encrypted original digital content is stored in IPFS (50).

And the copyright holder terminal 20 receives identity authentication and digital content verification from the issuer server 10, transmits the digital content to the issuer server 10, and receives an NFT, and then sends the user terminal 30 and the digital content for use. Proceed with the transaction.

In addition, the user terminal 30 requests use after paying a certain amount to the copyright holder terminal 20 for use of digital content, and the NFT received after the use request is verified through the distributed storage 40, and verification is completed. Once completed, a master key (MK: Master Key) is issued from the copyright holder terminal (20).

The master key issued in this way is used to load and decrypt the encrypted digital content stored in the IPFS (50).

And the distributed storage 40 registers and verifies the DID, DID document, and NFT of the components.

Additionally, the IPFS 50 stores the original digital content.

Meanwhile, since the digital content usually has a large capacity, it is inefficient to store it in a blockchain network, so it is stored in an off-chain such as IPFS (50).

The issuer server 10, copyright holder terminal 20, and user terminal 30 of the DID-based verification system for strengthening the copyright holder's sovereignty according to the present invention configured as described above require identity authentication for registration and use of digital content.

However, since all components of the identity authentication process are the same, only the identity authentication process of the copyright holder terminal 20 will be described in detail.

First, the issuer server 10 and the copyright holder terminal 20 generate the DID and DID document required for identity authentication and then register them in the distributed storage 40.

In addition, the copyright holder terminal 20 transmits a DID to the issuer server 10 for identity authentication and requests authentication, and the issuer server 10 generates a challenge using a random number and the copyright holder terminal 20 send to

And the copyright holder terminal 20 also generates a challenge using a random number, generates a response corresponding to the challenge and transmits it to the issuer server 10, and the issuer server 10 compares it with the random number it generated. If they match, the response is transmitted to the copyright holder terminal 20, and the copyright holder terminal 20 also verifies the response and mutually authenticates it.

In addition, the verification and registration of digital content through a DID-based verification system to strengthen the sovereignty of copyright holders according to the present invention are explained.

First, the copyright holder terminal 20 generates a 16-digit random number corresponding to the master key (MK), encrypts the digital content with the Rijndael encryption algorithm, and hashes the original digital content using SHA-2. After generating the value, the generated hash value is encrypted with the private key of the copyright holder terminal 20.

Then, the master key (MK) is encrypted with the public key of the issuer server 10, and then the encrypted digital content, encrypted hash value, and encrypted master key are transmitted to the issuer server 10, and the issuer server 10 is the copyright holder terminal. The master key is obtained by decrypting the encrypted master key received from (20) with the private key of the issuer server (10).

After decrypting the encrypted digital content using the master key obtained in this way, a hash value is generated using SHA-2, and the encrypted hash value is decrypted with the public key of the copyright holder terminal 20 to generate the hash value. obtain.

In addition, after verifying the integrity of the digital content by comparing the hash value sent by the copyright holder terminal 20 and the hash value generated by the issuer server 10, the issuer server 10 generates an NFT license for the digital content It is registered in the distributed storage 40, the encrypted digital content is stored in the IPFS 50, and the generated NFT license is transmitted to the copyright holder terminal 20.

In addition, the request, verification, and use of digital content through a DID-based verification system to strengthen the sovereignty of copyright holders according to the present invention are explained.

First, the user terminal 30 requests the copyright holder terminal 20 to use digital content, pays a certain amount, and the copyright holder terminal 20 transmits an NFT license for the requested digital content to the user terminal 30. .

Then, the NFT license received by the user terminal 30 is verified as digital content of the copyright holder terminal 20 through the distributed storage 40, and when completed, the user terminal 30 requests the master key from the copyright holder terminal 20. The copyright holder terminal 20 encrypts the master key for the digital content with the user's public key and transmits it.

Additionally, the user terminal 30 retrieves the encrypted digital content from the IPFS 50 through a link to the off-chain IPFS 50 where the digital content is stored.

Then, the user terminal 30 decrypts the encrypted digital content using the master key and then uses the digital content.

When the transaction is completed, the copyright holder terminal 20 requests the issuer server 10 to issue an NFT with updated transaction information, and the issuer server 10 stores the updated NFT (buyer, seller, sale date, sale amount, etc.) in a distributed storage. Register at (40).

Additionally, the updated NFT is transmitted to the copyright holder terminal 20 and the transaction process is completed.

A DID-based verification method for strengthening the copyright holder's sovereignty according to the present invention will be explained by applying the DID-based verification system for strengthening the copyright holder's sovereignty according to the present invention, which has the configuration described above.

Figure 2 shows an operation flowchart of an identity authentication method using a DID-based verification method for strengthening the sovereignty of copyright holders according to the present invention.

Referring to Figure 2, the identity authentication method using the DID-based verification method for strengthening the sovereignty of the copyright holder according to the present invention will be described as follows.

First, DID and DID documents are created and stored in the distributed storage (40), and the issuer server (10) and copyright holder terminal (20) generate DIDIssuer, DIDHolder, DID documentIssuer, and DID documentHolder and then stored in the distributed storage (40). Save.(S1)

Next, the copyright holder terminal 20 requests identity authentication from the issuer server 10 and transmits DIDHolder (S2).

And the issuer server 10 transmits the DIDIssuer of the issuer server 10 to the copyright holder terminal 20 in response to identity authentication (S3).

In addition, the issuer server 10 and the copyright holder terminal 20 request the DID document of the issuer server 10 and the copyright holder terminal 20 registered in the distributed storage 40 using DID, and the distributed storage 40 Transmits the corresponding DID document to the issuer server 10 and the copyright holder terminal 20 (S4).

And the issuer server 10 and the copyright holder terminal 20 create RNIssuer and RNHolder for DID Auth, which is a mutual authentication process (S5).

In addition, the issuer server 10 retrieves the pubHolder value of the copyright holder terminal 20 among the publicKey items from the DID documentHolder of the copyright holder terminal 20 and transmits ChaIssuer = (RNIssuer, pubHolder) to the copyright holder terminal 20. (S6 )

And the copyright holder terminal 20 calculates RN`Issuer = (priHolder, ChaIssuer) using the ChaIssuer received from the issuer server 10, and selects the publicKey item among the publicKey items in the DID documentIssuer of the issuer server 10. Get the pubIssuer value and send ChaHolder = (RNHolder, pubIssuer), ResHolder = (RN`Issuer, priHolder) to the issuer server 10. (S7)

In addition, the issuer server 10 receives ChaHolder and ResHolder from the copyright holder terminal 20, calculates RN`Issuer = (priIssuer, ResHolder), verifies RNIssuerRN`Issuer, and then RN`Holder = (priIssuer After creating ResIssuer = (RN`Holder, pubHolder) using , ChaHolder), ResIssuer is transmitted to the copyright holder terminal 20. (S8)

Then, the copyright holder terminal 20 calculates RN`Holder = (priHolder, ResIssuer) using the ResIssuer received from the issuer server 10 and then mutually authenticates with RNHolderRN`Holder (S9).

Figure 3 shows an operation flowchart of the digital content verification and registration method using the DID-based verification method for strengthening the sovereignty of the copyright holder according to the present invention.

Referring to FIG. 3, the digital content verification and registration method using the DID-based verification method for strengthening the sovereignty of the copyright holder according to the present invention will be described as follows.

First, the copyright holder terminal 20 generates a 16-digit random number value corresponding to MK (S11).

Subsequently, the copyright holder terminal 20 generates E(M) = EMK(Data) using the master key in the Rijndael encryption algorithm when encrypting digital content (S12).

And the copyright holder terminal 20 uses SHA-2 in the original digital content to generate H(M)=HSHA2(Data) (S13).

Additionally, the copyright holder terminal 20 uses its own private key in HM to generate E(HM)=EpriHolder(HM) (S14).

Then, the master key is generated using the public key of the issuer server 10, E(MK) = EpubIssuer(MK) (S15).

Additionally, the copyright holder terminal 20 transmits the encrypted {EMK, EM, EHM} to the issuer server 10 (S16).

And the issuer server 10 obtains MK = DpriIssuer(EMK) using the private key, obtains Data = DMK(EM) using the obtained MK, and uses the public key of the copyright holder terminal 20. After calculating H(M) = DpubHolder(EHM), obtain the hash value, generate H(M`)= HSHA2(Data) for the obtained content source, and compare H(M)H(M`) to obtain the content. The integrity of the content is verified and an NFT License (VC) is created by minting the original content. (S17~S21)

Subsequently, the issuer server 10 registers the generated NFT license (VC) in the distributed storage 40 (S22).

In addition, the issuer server 10 stores the encrypted content original EM in the IPFS 50, and transmits the NFT license (VC) to the copyright holder terminal 20 (S23).

Figure 4 shows an operational flowchart of a method for requesting, verifying, and using digital content using a DID-based verification method for strengthening the sovereignty of copyright holders according to the present invention.

With reference to FIG. 4, the method of requesting, verifying, and using digital content using the DID-based verification method for strengthening the sovereignty of the copyright holder according to the present invention will be described as follows.

First, the user terminal 30 requests the copyright holder terminal 20 to use digital content and then pays a certain amount of money (S31).

Subsequently, the copyright holder terminal 20 processes the VC into VP form to submit an NFT license (VP) to the user terminal 30 and then transmits it (S32).

And the user terminal 30 uses the distributed storage 40 to verify whether it is an NFT of the copyright holder terminal 20 using the proof value in the VP (S33).

Additionally, when NFT verification is completed, the user terminal 30 requests a master key (MK) from the copyright holder terminal 20 (S34).

Then, the copyright holder terminal 20 generates E(MK) = EpubUser(MK) using the public key of the user terminal 30 and transmits it to the user terminal 30 (S35).

Additionally, the user terminal 30 obtains MK = DpriUser(EMK) using the private key (S36).

Then, the user terminal 30 requests and obtains the EM stored in the IPFS 50 using the off-chain link stored in the VP (S37).

Additionally, the user terminal 30 calculates Data = DMK(EM), obtains digital content, and then uses it (S38).

And after completing the transaction, the copyright holder terminal 20 requests an NFT update from the issuer server 10 along with the transaction details (S39).

Subsequently, the issuer server 10 updates the NFT, creates UnNFT, and registers it in the distributed storage 40 (S40).

Then, the updated UnNFT is transmitted to the copyright holder terminal 20 and the transaction is terminated (S41).

As described above, the DID-based verification system and method for strengthening the copyright holder's sovereignty according to the present invention have the following advantages over the conventional technology.

First, the digital content of the copyright holder terminal 20 registers only digital content verified by the issuer server 10, and the issuer server 10 registers the original digital content obtained from the copyright holder terminal 20 with H(M') = HSHA2(Data) is generated and the integrity of the digital content is verified by comparing H(M)H(M`), and the original hash value of the digital content is recorded in NFT metadata and stored in the distributed storage 40. , it is possible to verify forgery and falsification of digital content.

In addition, the copyright holder terminal 20 generates a master key MK required when encrypting digital content, and the copyright holder terminal 20 uses the MK to encrypt the digital content with the Rijndael encryption algorithm, E(M) = Even if EMK (Data) is generated and sent to the issuer server 10, and intercepted by eavesdropping, only those who know the secret key can decrypt it.

At this time, the secret key is encrypted and transmitted with the public key of the transmitter, such as E(MK) = EpubIssuer(MK), and decryption is possible only with the private key held only by the transmitter, such as MK = DpriIssuer(EMK). .

In addition, the use of digital content is controlled by the copyright holder terminal (20) with access rights directly delivering and controlling the NFT License (VP) and master key to the user terminal (30), and the NFT License (VC) is stored in the distributed storage (40). The original digital content can be stored in IPFS (50) to reduce network load and improve efficiency.

In addition, the distributed storage 40 and IPFS 50 are safe from DDoS and DRDoS attacks because it is impossible to attack all nodes as a distributed system.

And the configurations are authenticated by performing DID Auth, which uses PKI-based challenge-response Auth and generates random numbers RNIssuer and RNHolder. It is safe from replay attacks because the challenge-response is performed by generating a random number with a different value each time during authentication.

In addition, the response value response to the challenge created with the public key can only be generated with the private key that only the owner has, so even if the challenge value is stolen in the middle, the attacker cannot create a response value, so it is safe from man-in-the-middle attacks.

Also, when transmitting the hash value of the original digital content to the issuer server 10, the hash value is encrypted and transmitted using a private key that only the copyright holder terminal 20 has, so decryption is possible only with the public key of the copyright holder terminal 20. Non-repudiation is possible because this is encrypted and transmitted using a private key that only the copyright holder terminal 20 has.

In addition, the NFT license (VC) registered in the distributed storage 40 records the hash value of the original digital content and the authentication information of the copyright holder terminal 20, so that original verification of the digital content is possible and illegal Copyright protection is possible through distribution and distribution.

Since the authentication process is performed using DID, only the authenticated copyright holder terminal 20 registers the digital content, and the integrity of the digital content is verified using a hash value from the issuer server 10, and the original hash value of the digital content, the copyright holder, is verified. An NFT in which metadata such as authentication information of the terminal 20 is recorded is issued, and the user terminal 30 using digital content is also used only by the user terminal 30 that has gone through the authentication process and uses the distributed storage 40 to store the digital content. Verify NFT for content.

In addition, NFTs including the hash link of the IPFS (50) are stored in the distributed storage (40), and the original digital content is stored in the IPFS (50) to reduce the load on the network to improve efficiency.

In addition, if a transaction is made using the verification protocol proposed to use digital content, the copyright holder terminal 20 and the user terminal 30 transact directly without the intervention of a third party such as a distribution right holder, distributor, etc., thereby reducing commission costs. You can conduct safe and transparent transactions.

As described above, the present invention has been described with reference to an embodiment shown in the drawings, but this is merely illustrative, and various modifications and equivalent embodiments can be made by those skilled in the art. You will understand.

Therefore, the true scope of protection of the present invention should be determined only by the appended claims.

10. Issuer Server
20. Copyright holder terminal
30. User terminal
40. Distributed storage
50.IPFS

Claims (10)

An issuer server that authenticates the copyright holder terminal and the user terminal, verifies the digital content, issues an NFT for the verified digital content, and stores it in a distributed storage;
A copyright holder terminal that receives identity authentication and digital content verification from the issuer server, transmits the digital content to the issuer server, receives an NFT, and then conducts a transaction with the user terminal for use of the digital content;
In order to use the digital content, the user pays a certain amount to the copyright holder's terminal and requests its use. The NFT received after the request for use is verified through the distributed storage, and when verification is completed, the user receives a master key from the copyright holder's terminal. terminal and;
A DID-based verification system for strengthening the sovereignty of copyright holders, comprising a distributed storage that registers and verifies DID, DID documents, and NFTs, and stores the digital content off-chain. According to paragraph 1,
A DID-based verification system for strengthening the sovereignty of copyright holders, characterized in that the issuer server stores the encrypted original digital content in IPFS. According to paragraph 1,
A DID-based verification system for strengthening the sovereignty of copyright holders, characterized in that the user terminal loads and decrypts encrypted digital content stored in IPFS using the issued master key and uses it. According to paragraph 1,
The issuer server, the copyright holder terminal, and the user terminal require identity authentication to register and use the digital content,
The identity authentication is,
The issuer server and the copyright holder terminal generate the DID and DID document required for identity authentication and then register them in the distributed storage,
The copyright holder terminal transmits a DID to the issuer server for identity authentication and requests authentication,
The issuer server generates a challenge using a random number and transmits it to the copyright holder terminal,
The copyright holder terminal generates a challenge using a random number, generates a response corresponding to the challenge, and transmits it to the issuer server,
The issuer server compares the random number it generated, and if it matches, transmits a response to the copyright holder terminal, and the copyright holder terminal also verifies the response and mutually authenticates the DID-based verification system for strengthening the copyright holder's sovereignty. According to paragraph 1,
The copyright holder terminal is used to verify and register the digital content,
After generating a 16-digit random number corresponding to the master key, the digital content is encrypted using the Rijndael encryption algorithm,
After generating a hash value using SHA-2 on the original digital content, the generated hash value is encrypted with the private key of the copyright holder's terminal,
A DID-based verification system for strengthening the sovereignty of copyright holders, characterized in that the master key is encrypted with the public key of the issuer server and then the encrypted digital content, encrypted hash value, and encrypted master key are transmitted to the issuer server. According to clause 5,
The issuer server verifies and registers the digital content,
Obtain a master key by decrypting the encrypted master key received from the copyright holder terminal with the private key of the issuer server,
Decrypt the encrypted digital content using the obtained master key and then generate a hash value using SHA-2.
Obtain a hash value by decrypting the encrypted hash value with the public key of the copyright holder's terminal,
After verifying the integrity of the digital content by comparing the hash value sent by the copyright holder terminal and the hash value generated by the issuer server, the issuer server generates an NFT license for the digital content, registers it in the distributed storage, and stores the encrypted digital content. Content is stored in IPFS,
A DID-based verification system for strengthening the copyright holder's sovereignty, characterized in that the generated NFT license is transmitted to the copyright holder terminal. In the digital content verification method to prevent the issuance of NFTs for digital content without permission of the copyright holder,
(a) generating a DID and a DID document and storing them in a distributed storage, and the issuer server and copyright holder terminal generating a DIDIssuer, DIDHolder, DID documentIssuer, and DID documentHolder and storing them in the distributed storage;
(b) the copyright holder terminal requests identity authentication from the issuer server and transmits DIDHolder to request identity authentication;
(c) the issuer server responding to identity authentication by transmitting the DIDIssuer of the issuer server to the copyright holder terminal in response to identity authentication;
(d) The issuer server and the copyright holder terminal request the DID document of the issuer server and the copyright holder terminal registered in the distributed storage using DID, and the distributed storage sends the corresponding DID document to the issuer server and the copyright holder. Requesting and obtaining a DID document by transmitting it to the terminal;
(e) the issuer server and the copyright holder terminal generate a random number by generating RNIssuer and RNHolder for DID Auth, which is a mutual authentication process;
(f) the issuer server retrieves the pubHolder value of the copyright holder terminal among the publicKey items in the DID documentHolder of the copyright holder terminal and transmits ChaIssuer = (RNIssuer, pubHolder) to the copyright holder terminal to generate a challenge of the issuer server;
(g) The copyright holder terminal calculates RN`Issuer = (priHolder, ChaIssuer) using the ChaIssuer received from the issuer server, retrieves the pubIssuer value of the issuer server among the publicKey items in the DID documentIssuer of the issuer server, and obtains ChaHolder = Generating a challenge and response of the copyright holder terminal by transmitting (RNHolder, pubIssuer), ResHolder = (RN`Issuer, priHolder) to the issuer server;
(h) The issuer server receives ChaHolder and ResHolder from the copyright holder terminal, calculates RN`Issuer = (priIssuer, ResHolder), verifies RNIssuerRN`Issuer, and uses RN`Holder = (priIssuer, ChaHolder) After generating ResIssuer = (RN`Holder, pubHolder), ResIssuer transmits it to the copyright holder terminal to generate a response from the issuer server;
(i) the copyright holder terminal calculates RN`Holder = (priHolder, ResIssuer) using the ResIssuer received from the issuer server and then completing mutual authentication with RNHolderRN`Holder; DID-based verification method for strengthening sovereignty. In the digital content verification and registration method to prevent the issuance of NFTs for digital content without permission of the copyright holder,
(A) the copyright holder terminal generates a master key (MK) by generating a 16-digit random number corresponding to the master key;
(B) the copyright holder terminal generates encrypted content by generating E(M) = EMK(Data) using a master key in the Rijndael encryption algorithm when encrypting digital content;
(C) the copyright holder terminal generates a content hash value by generating H(M)=HSHA2(Data) using SHA-2 in the original digital content;
(D) the copyright holder terminal generates E(HM)=EpriHolder(HM) using its private key in HM;
(E) generating the master key as E(MK) = EpubIssuer(MK) using the public key of the issuer server;
(F) the copyright holder terminal transmits the encrypted {EMK, EM, EHM} to the issuer server;
(G) the issuer server obtains MK = DpriIssuer(EMK) using a private key;
(H) The issuer server uses the acquired MK to obtain Data = DMK(EM), and generates H(M`)= HSHA2(Data) for the acquired content source to create H(M)H(M`). ), verifying the integrity of the content, registering the generated NFT License (VC) in a distributed storage, storing the encrypted content original EM in IPFS, and transmitting the NFT License (VC) to the copyright holder terminal. A DID-based verification method for strengthening the sovereignty of copyright holders, characterized by including ; According to clause 8,
In step (H),
The issuer server further includes the step of calculating H(M) = DpubHolder(EHM) using the public key of the copyright holder terminal, obtaining a hash value, and generating an NFT License (VC) by minting the original content. Characterized by a DID-based verification method to strengthen the sovereignty of copyright holders. In the method of requesting, verifying and using digital content to prevent the issuance of NFTs for digital content without permission of the copyright holder,
(a) the user terminal requests the copyright holder terminal to use digital content and then pays a certain amount of money;
(b) the copyright holder terminal processes VC into VP form and then transmits it to submit an NFT License (VP) to the user terminal;
(c) The user terminal uses distributed storage to verify whether it is the NFT of the copyright holder terminal using the proof value in the VP, and when NFT verification is completed, requesting a master key (MK) from the copyright holder terminal. and;
(d) the copyright holder terminal generates E(MK) = EpubUser(MK) using the public key of the user terminal and then transmits it to the user terminal;
(ㅁ) The user terminal obtains MK = DpriUser(EMK) using the private key, requests and obtains EM stored in IPFS using the off-chain link stored in the VP, and calculates Data = DMK(EM). obtaining and using digital content;
(f) the copyright holder terminal requests an NFT update from the issuer server along with the transaction details after completing the transaction;
(s) the issuer server updates the NFT, generates UnNFT, registers it in the distributed storage, transmits the updated UnNFT to the copyright holder terminal, and then terminates the transaction; DID-based verification method for reinforcement.