WO2017104899A1 - Block chain-based certificate authentication system and authentication method using same - Google Patents

Abstract

Provided are a certificate authentication system and an authentication method using the same. In the case of a public key for a certificate which requires maintenance, the present invention uses a means stored and managed in a block chain of electronic wallets embedded on block chain retention servers via a peer-to-peer network (P2P)-based distributed database, rather than a server operated by a certificate authority (CA), and thus the cost of constructing a certificate authentication system, with which a high level security system is linked in order to maximally block the occurrence of hacking, and the operation and maintenance costs for the constructed certificate authentication system are not generated, while it is also possible to surveil whether a user, who requests authentication, is fraudulent or not, and maintain a degree of PC security at a level desired by a user through a means which successfully guides an authentication process even if ActiveX is not installed. Thus, the present invention provides a block chain-based certificate authentication system which is not only strong in a risk environment such as hacking but also has a simple certificate authentication performance process and is compatible with various web browsers, and an authentication method using the same.

Description

Authorized certificate authentication system based on blockchain and authentication method using the same

In the present invention, in the case of a public key for a public certificate requiring maintenance, the blockchain is held through a peer-to-peer network (P2P) based distributed database, not a server operated by a CA. Expenses for establishing an accredited certificate authentication system that is equipped with a high security system to prevent hacking as much as possible by means of storage management in the blockchain of the electronic wallet mounted on the servers, and operation of the established accredited certificate authentication system It is possible to monitor the illegality of the user who requested the certification without incurring maintenance and maintenance costs, and the user wants the PC security level through the means that guides the certification process even if ActiveX is not installed. It can be maintained at a high level, so it is not only resistant to dangerous environments such as hacking, but also has a simplified certification process. The present invention relates to an accredited certificate authentication system based on a blockchain compatible with various web browsers and an authentication method using the same.

With the development of IT technology, anyone of all ages can use various services based on the Internet regardless of place.

In other words, it sells civil services and goods such as financial services such as bank transfer or stock trading by accessing a server operated by a bank or a securities company, and obtains various documents such as resident registration copies by accessing a server operated by a government agency. It is possible to receive services in various industries such as electronic commerce services such as purchasing goods by connecting to a server in real time through the Internet.

On the other hand, when using services in a variety of industries, the user as a customer must perform authentication to prove that they are, in this case, the used is an official certificate.

Here, the accredited certificate is electronic information issued by a certification authority (CA) for the purpose of verifying the user's identity when using services in various industries, and for preventing the forgery and tampering of documents or the denial of transaction facts. It shows the seal certificate for cyber transaction. These certificates include certificate version, certificate serial number, certificate validity period, issuer, user digital signature verification information, user name, identity verification information, digital signature method.

These certificates are used in public key infrastructure (PKI), a security standard.

The public key infrastructure refers to a user authentication system that encrypts transmission and reception data using a public key composed of encryption and decryption keys, and verifies the identity of a trader using a password possessed by an Internet user.

However, in the public key infrastructure, the user's private key exists as a file in a standardized storage location due to soft token-based storage method, so it is easy to duplicate and automate the collection of the private key, resulting in financial damage and user There is also a risk of information theft.

For this reason, the certification authority (CA) should establish an accredited certificate issuing system in which a highly secure system is interlocked to block the hacking as much as possible, and perform the operation and maintenance of the constructed accredited certificate issuing system. As a result, a large amount of issuance costs are incurred when issuing an accredited certificate.

In addition, an accredited certificate must be installed in advance for the purpose of additional security when performing the user authentication process through a web browser.

As such, ActiveX, forcibly installed during the user authentication process, is a technology used to develop reusable, object-oriented software components developed by Microsoft, and applied to the World Wide Web by applying the component object model and object connection insertion (OLE). The content downloaded from the WWW). Most of the time, ActiveX is used to create plug-ins for Internet Explorer (IE).

However, ActiveX can be installed only by lowering the security level of the PC so that it can access resources such as files and registry of personal computers (hereinafter referred to as PCs). Due to the required ActiveX installed rather than lowering the user's PC security level, there is a problem that not only vulnerable to a dangerous environment such as hacking, but also complicated authentication process.

For this reason, the Republic of Korea is pursuing an abolition policy on the government level, such as the head of state, which pointed to ActiveX as a representative old financial regulation at the 2015 New Year's press conference.

Furthermore, accredited certificates, which are required for the installation of ActiveX, are required for security during the accreditation process, and are only available in Internet Explorer (IE) provided by Microsoft among various types of web browsers (Chrome, Safari). , Firefox, etc.) has a problem that the user itself is impossible.

That is, a user connects to a server operated by a bank or a securities company through an internet-based web browser, and issues various certificates such as a resident registration copy by accessing a server operated by a financial institution such as bank transfer or stock trading or a government operated institution. If you want to use an accredited certificate for user authentication while using services in various industries, such as e-commerce services such as purchasing goods by connecting to a server that sells goods and civil services such as receiving, etc. The service can be used because it is supported, but other web browsers do not support ActiveX.

[Preceding technical literature]

[Patent Documents]

(Patent Document 1) Patent Document 1: Korean Patent Office Publication No. 10-0411448 (December 03, 2003), Issuing method and system for issuing an optical recording medium storing a private key and certificate of a public key infrastructure.

[Non-Patent Documents]

(Non-Patent Literature 1) Non-Patent Literature 1: Active X-related content in Wikipedia (https://en.wikipedia.org/wiki/%EC%95%A1%ED%8B%B0%EB%B8% 8CX)

(Non-Patent Literature 2) Non-Patent Literature 2: Media IT (Internet Newspaper) article contents related to ActiveX abolition policy (http://www.it.co.kr/news/article.html?no=2793878&sec_no=)

The purpose of the present invention is to provide a public key for a public certificate that requires maintenance, not through a server operated by a CA, but through a peer-to-peer network (P2P) based distributed database. The electronic wallet mounted on the chain holding servers is controlled to be stored and managed, so that a high degree of security system is interlocked to prevent the hacking as much as possible. It is to provide an authorized certificate authentication system and authentication method based on a blockchain that can be monitored whether the user who requested authentication is illegal.

Another object of the present invention is to maintain the PC security level to the level desired by the user through the means for guiding the authentication process is performed even if ActiveX is not installed, it is not only strong against dangerous environments such as hacking, but also performs authentication. The process is also simple and provides a certificate authentication system based on a blockchain compatible with various web browsers and a method of authenticating a certificate based on a blockchain using the same.

In accordance with the spirit of the present invention, an authentication certificate authentication system based on a blockchain includes a user terminal for requesting blockchain-based authentication; A blockchain-based authorized certificate authentication request server which transmits designated user identification information of the corresponding user who operates the user terminal according to a blockchain-based authorized authentication request of the user terminal and relays a request for blockchain-based authorized authentication; Downloading public key recording transaction information and user verification transaction information by transmitting transaction ID information for public key recording and transaction ID information for user verification matching the designated user identification information transmitted from the blockchain-based public certificate authentication request server. Blockchain-based authorized certificate management server for requesting; When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted transaction information for the bitcoin payment and records the transaction information for the bitcoin payment according to the authentication is mounted. However, the electronic wallet also records the transaction information for the user verification including the public key recording transaction information including the public key for the public certificate and the user verification hash information, which is transmitted from the blockchain-based public certificate management server Matching the public key recording transaction ID information and the user verification transaction ID information with the electronic wallet, the block chain for transmitting the matching public key recording transaction information and user verification transaction information to the blockchain-based authorized certificate management server Server; consisting of, the blockchain-based public certificate management server is the Public key for public certificate and user verification hash information are extracted from public key recording transaction information and user verification transaction information transmitted from lockchain holding server, and the extracted public key for public certificate and user verification hash information and The certificate validation signal including the transaction ID information for recording the public key is transmitted to the blockchain-based public certificate authentication request server, and the blockchain-based public certificate authentication request server identifies the user in the user identification information DB for each member. Extracts the information, hashes the extracted user's identification information, and processes it into contrast user identification hash information, and transmits the processed contrast user identification hash information and the blockchain-based authorized certificate management server. Hashing the transaction ID information for public key recording among the information included in the certificate validation signal Compute and process the user verification hash information for preparation, and the hash value of the user verification hash information among the information included in the certificate validation signal transmitted from the blockchain-based certificate management server and the verification user verification hash for the preparation. If both hash values are calculated by calculating the hash value of the information, the public key for the public certificate among the information included in the certificate validation signal is transmitted to the user terminal, and the user terminal publicly transmits the public certificate for the public certificate. Perform public certification based on key.

In the process of authenticating authentication using an authentication certificate authentication system based on a blockchain according to the first embodiment, a step of requesting blockchain-based authentication by accessing a blockchain-based authentication certificate request server from a user terminal is performed. Wow; In the blockchain-based public certificate authentication request server, extracts the designated user identification information of the user operating the user terminal from the user identification information DB for each member according to the blockchain-based public authentication request, and manages the blockchain-based public certificate Transmitting to a server; The public key recording transaction ID information and user verification transaction ID information matched by matching the designated user identification information transmitted from the blockchain-based authorized certificate management server with the transaction search keyword information DB for each user are transmitted to the blockchain holding server. Requesting download of public key recording transaction information and user verification transaction information; In the blockchain holding server, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet, and the matching public key recording transaction information and user verification transaction information are based on the blockchain. Transmitting to a certificate management server; Operating a transaction processing engine in the blockchain based public certificate management server to extract public certificate public key and user verification hash information from the transmitted public key recording transaction information and user verification transaction information; In the blockchain-based public certificate management server, the certificate validation signal including the public certificate for public certificate and the user verification hash information extracted from the transaction information and the public key record transaction ID information stored in the user-specific transaction search keyword information DB Transmitting to the blockchain-based authorized certificate authentication request server; In the blockchain-based public certificate authentication request server, the identification information of the user is extracted from the user identification information DB for each member, and a hash processing operation is performed by hashing the extracted user identification information to operate the hash processing engine. Hashing the public ID record transaction ID information among the processed user identification hash information and the information contained in the certificate validation signal transmitted from the blockchain-based accredited certificate request server. Processing to prepare the user verification hash information for the preparation; In the hash processing engine of the blockchain-based public certificate authentication request server, the hash value of the user verification hash information among the information included in the certificate validation signal transmitted from the blockchain-based public certificate management server and the user verification for the preparation Computing hash values of the time information, respectively, and checking whether the calculated hash values are the same; The hash value of the user verification hash information and the hash value of the prepared user verification hash information are respectively calculated among the information included in the certificate validation signal transmitted from the blockchain-based authorized certificate management server, and the hash values of both sides are the same. If the blockchain-based public certificate authentication request server, transmitting a public key for public certificate among the information included in the certificate validation signal to the user terminal; In the user terminal, performing the public authentication based on the transmitted public key for the public certificate.

A certificate authentication system based on a blockchain according to a second embodiment includes a user terminal for requesting blockchain-based certificate authentication; According to the blockchain-based authorized authentication request of the user terminal, extract the identification information of the corresponding user from the user identification information DB for each member, hash processing the extracted identification information of the user and process it into the user identification hash information for preparation. A blockchain-based authorized certificate authentication request server for transmitting the processed contrast user identification hash information and the designated user identification information of the user; The public key is received by matching the user identification hash information and the designated user identification information for the preparation from the blockchain-based authorized certificate authentication request server and matching the user identification information of the transmitted information with the transaction search keyword information DB for each user. A blockchain-based authorized certificate management server for transmitting the transaction ID information for recording and the transaction ID information for user verification and requesting the download of the public key recording transaction information and the user verification transaction information; When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted transaction information for the bitcoin payment and records the transaction information for the bitcoin payment according to the authentication is mounted. However, the electronic wallet also records the transaction information for the user verification including the public key recording transaction information including the public key for the public certificate and the user verification hash information, which is transmitted from the blockchain-based public certificate management server Matching the public key recording transaction ID information and the user verification transaction ID information with the electronic wallet, the block chain for transmitting the matching public key recording transaction information and user verification transaction information to the blockchain-based authorized certificate management server Server; consisting of, the blockchain-based public certificate management server is the The public key for public authentication and the user verification hash information are extracted from the public key recording transaction information and the user verification transaction information transmitted from the lockchain holding server, and the prepared contrast user identification hash information and the transaction for each user are extracted. Hashing the transaction ID information for public key recording stored in the search keyword information DB and processing it into contrast user verification hash information, and hashing the extracted user verification hash information and verifying the processed user for contrast processing. If both hash values are calculated by calculating the hash value of the time information, the extracted public key for the public certificate and the designated user identification information of the corresponding user are transmitted to the blockchain-based public certificate authentication request server, and the blockchain Based on the certificate, the authentication request server transmits the reference with reference to the designated user identification information among the transmitted information. The public key for the public certificate is transmitted to the user terminal, and the user terminal performs public authentication based on the public key for public certificate.

In the process of authenticating authentication using an authentication certificate authentication system based on a blockchain according to a second embodiment, a step of requesting blockchain-based authentication from a user terminal is connected to a blockchain-based authentication certificate request server. Wow; In the blockchain-based public certificate authentication request server, extract the identification information of the user from the user identification information DB for each member according to the blockchain-based public authentication request, and hash the extracted user identification information by operating a hash processing engine. Calculating and processing the prepared contrast user identification hash information, and transmitting the processed contrast user identification hash information and the designated user identification information of the corresponding user to a blockchain-based authorized certificate management server; The public key that receives the prepared user identification hash information and the designated user identification information from the blockchain-based authorized certificate management server and matches the designated user identification information among the transmitted information with the transaction search keyword information DB for each user. Transmitting recording transaction ID information and user verification transaction ID information to the blockchain holding server to request the download of the public key recording transaction information and the user verification transaction information; In the blockchain holding server, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet, and the matching public key recording transaction information and user verification transaction information are based on the blockchain. Transmitting to a certificate management server; Operating a transaction processing engine in the blockchain based public certificate management server to extract public certificate public key and user verification hash information from the transmitted public key recording transaction information and user verification transaction information; By operating a hash processing engine in the blockchain-based authorized certificate management server, hashing operation of the transmitted prepared user identification hash information and the transaction ID information for public key recording stored in the transaction search keyword information DB for each user Processing the user verification hash information; In the hash processing engine of the blockchain-based authorized certificate management server, a hash value of the extracted user verification hash information and a hash value of the processed comparison user verification hash information are respectively calculated, and the calculated both are calculated. Checking that hash values are the same; When the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information are the same, the extracted public key for the public certificate and the corresponding user are extracted from the blockchain-based public certificate management server. Transmitting the designated user identification information to the blockchain-based authorized certificate authentication request server; Transmitting, at the blockchain-based public certificate authentication request server, the public key for the public certificate to the user terminal with reference to designated user identification information among the transmitted information; In the user terminal, performing the public authentication based on the transmitted public key for the public certificate.

In the present invention, in the case of a public key for a public certificate requiring maintenance, the blockchain is held through a peer-to-peer network (P2P) based distributed database, not a server operated by a CA. Expenses for establishing an accredited certificate authentication system that is equipped with a high security system to prevent hacking as much as possible by means of storage management in the blockchain of the electronic wallet mounted on the servers, and operation of the established accredited certificate authentication system And even without maintenance costs, there is an effect that can be monitored even if the user's request for accredited certification.

In addition, the present invention can maintain the PC security level to the level desired by the user through the means for guiding the authentication process is performed even if ActiveX is not installed is not only resistant to dangerous environments, such as hacking, but also certified authentication process It also has a simple and compatible effect on various web browsers.

1 is a block diagram showing a system for issuing an accredited certificate based on the blockchain of the present invention;

2 is a block diagram showing the detailed configuration of the user terminal of the configuration constituting the certificate issue system based on the blockchain of the present invention,

Figure 3 is a block diagram showing the detailed configuration of the blockchain-based authorized certificate issuing request server of the configuration constituting the system for issuing a public certificate based on the blockchain of the present invention,

Figure 4 is a block diagram showing the detailed configuration of the blockchain-based official certificate management server constituting the public certificate issuance system based on the blockchain of the present invention,

FIG. 5 is a diagram illustrating a key generation guide screen showing an issuance process of a public key for a public certificate and a private key for a public certificate using a public certificate issuing system based on the blockchain of the present invention; FIG.

6 is a view schematically showing a data structure of various transaction information divided into input data and output data;

7 is a flowchart illustrating a process for issuing a blockchain-based public certificate using a public certificate issuing system based on the blockchain of the present invention;

8 is a block diagram showing a certificate authentication system based on the blockchain of the present invention;

Figure 9 is a block diagram showing the detailed configuration of the blockchain-based public certificate authentication request server of the configuration constituting the public certificate authentication system based on the blockchain of the present invention,

10 is a block diagram showing the detailed configuration of the user terminal of the configuration constituting the certificate authentication system based on the blockchain of the present invention,

FIG. 11 is a view illustrating a user authentication screen unit displaying a process of selecting a password and an image designated by a user in a user terminal using a certificate authentication system based on a blockchain of the present invention; FIG.

12 to 14 are flowcharts illustrating a process of authenticating a blockchain-based accredited certificate using an accredited certificate authentication system based on the blockchain of the present invention.

15 to 17 are flowcharts illustrating a method for authenticating a certificate based on a blockchain according to another embodiment.

Hereinafter, with reference to the accompanying drawings with respect to the configuration and operation of the embodiment of the present invention will be described in detail, the reference numerals of the configuration used in the same name in various embodiments will use the same reference numerals.

The present invention is largely divided into the issuance part of the public certificate based on the blockchain and the authentication part of the public certificate based on the blockchain.

1 to 7 relate to a system and a method for issuing an accredited certificate based on the blockchain, which is an issuing part of the accredited certificate based on the blockchain.

As shown in the figure, the blockchain-based authorized certificate issuing system is largely a user terminal 100, a blockchain-based authorized certificate issuing request server 200, blockchain-based official certificate management server 300 And blockchain holding server 400.

First, the user terminal 100 generates a public key for the public certificate and a private key for the public certificate, and a blockchain consisting of the public key for the public certificate and the identification information of the user for issuing the blockchain-based public certificate among the generated keys. It is a terminal member that transmits the personal information for issuing the certificate-based public certificate to the blockchain-based public certificate issuing request server 200 to be described later. Here, the personal information for issuing a blockchain-based public certificate is information including a user name, a user's date of birth, a user's telephone number, and a user's email.

In order to perform such a function, the user terminal 100 includes an information output unit 101 for outputting information, an information storage unit 102 for storing data or application programs, and an information input unit for generating an input signal of a user. And a control unit (not shown) for performing overall operation control of the user terminal 100 and a key generation engine 110 and an encryption / decryption engine 120.

Here, the key generation engine 110, encryption and decryption engine 120 and the key generation guide screen to be described later is mounted in the form of an application program when the user terminal 100 is a desktop form such as a personal computer (PC), When the user terminal 100 is a mobile device such as a smart phone capable of accessing the Internet, it is provided to be installed in the form of a mobile-only app.

In addition, before the user terminal 100 generates the public key for the public certificate and the private key for the public certificate, the user operating the user terminal 100 may identify the user with the blockchain-based public certificate issue request server 200. First, check the registration process.

To this end, the DB block 210 is mounted on the blockchain-based authorized certificate issuing request server 200 to be described later, and the identification information of the user who operates the user terminal 100 is mounted on the DB unit 210. It is stored, the user identification information DB 211 for each member is stored, the same user identification information is stored as the blockchain-based authorized certificate issuing personal information.

The user terminal 100 transmits the personal information for issuing the blockchain-based public certificate to the blockchain-based public certificate issuing request server 200 to request a blockchain-based public certificate, and requests for issuing a blockchain-based public certificate. If the matching information exists by matching the personal information for issuing the blockchain-based public certificate issuance with the user identification information DB 211 for each member (200), the public key for the public certificate and the private key for the public certificate are generated. A key generation guide signal for guiding is generated and transmitted to the user terminal 100.

When the user terminal 100 transmits a key generation guide signal from the blockchain-based authorized certificate issuing request server 200, the user terminal 100 operates the key generation engine 110 to generate a public key for the public certificate and a private key for the public certificate. In addition, the user terminal 100 controls the generation of the public key for the public certificate and the private key for the public certificate in a state where the network is blocked, thereby preventing external leakage of each key that may occur even in advance.

In addition, the user terminal 100 operates the encryption / decryption engine 120 to encrypt the private key for the public certificate based on a password and a picture image specified by the user and process the information storage unit in the state processed by the private key for the public certificate. 102 to be stored in.

Through this, even if a private key for a user's public certificate is leaked, it is difficult to infer a user-specified password and photo image, thereby minimizing the risk of information theft.

In addition, the information storage unit 102 of the user terminal 100 is stored in the user terminal 100, the key generation guide screen that displays the process of issuing the public key for the public certificate and the private key for the public certificate.

As such, the stored key generation guide screen unit is a user name input box 141a to input the user's name, the user's date of birth input box 141b, the user's phone number input box 141c, and the user's phone number is input, and Blocks the network connected to the user terminal 100 before generating the user identification information input screen 141, including the user's email input box 141d, the public key for the public certificate and the private key for the public certificate. Network blocking guide screen 142 for guiding this, a network block display screen 143 indicating that the network of the user terminal 100 is blocked, and a password input box for inputting a password required for issuing a blockchain-based authorized certificate ( Password input screen 144, including a 144a, and a plurality of images are displayed, the image line to be displayed selectively The screen 145, the key generation guide screen 146 for guiding that the public key for the public certificate and the private key for the public certificate are generated, and the network blocked after the public key for the public certificate and the private key for the public certificate are generated. Network connection display screen 147 indicating that is connected again, and issuance completion guide screen 148 indicating that the issuance of the blockchain-based authorized certificate is completed.

The blockchain-based official certificate issuing request server 200 receives a public key for a public certificate and personal information for issuing a blockchain-based public certificate from the user terminal 100 and hashes the personal information for issuing a blockchain-based public certificate. Designated user corresponding to the predetermined user's identification information among the user's identification information that is processed into the user identification hash information, and constitutes the user identification hash information, the public key for the accredited certificate, and the personal information for issuing the blockchain-based accredited certificate. It collects the identification information is processed into a transaction creation request signal for public key recording, and transmits it to the block chain based public certificate management server 300 to be described later to transmit the server member. Here, the designated user identification information may use a telephone number of the user, in particular, a telephone number of the mobile communication terminal.

In order to perform such a function, the blockchain-based public certificate issuing request server 200 is equipped with a hash processing engine 220.

As such, the hash processing engine 220 mounted on the blockchain-based official certificate issuing request server 200 performs a function of hashing the blockchain-based official certificate issuing personal information and processing the user information into hash information.

The blockchain-based public certificate management server 300 records a public key including a public key for public certificate among information collected in a transaction creation request signal for public key recording transaction transmitted from the blockchain-based public certificate issuance request server 200. Transaction information for public key recording used for retrieving the transaction information for the public key and the transaction information for the public key recording, and the transaction information for the public key recording among the generated information is transmitted for recording, and the public key recording. The transaction ID information is stored and managed, and the user identification hash information and the transaction ID information for public key recording are hashed among the information collected in the transaction creation request signal for public key recording, and processed into user verification hash information. User verification transaction information including processed user verification hash information and the user verification transaction information Generates transaction ID information for user verification, which is used as a key value for searching, transmits user verification transaction information for recording, stores and manages transaction ID information for user verification, and generates a transaction for public key recording. The designated user identification information among the information collected in the request signal is a member for storing and managing.

In order to perform such a function, the blockchain-based public certificate management server 300 includes a DB unit 310 having a transaction search keyword information DB 311 for each user, a transaction processing engine 320, and a hash processing engine 330. Include.

First, the transaction processing engine 320 stores designated user identification information in the transaction search keyword information DB 311 for each user, and public key recording transaction information including the public key for the public certificate and the public key recording transaction. Generates transaction ID information for public key recording that is used as a key value to retrieve information.

The hash processing engine 330 hashes the user identification hash information and the public key recording transaction ID information among the information collected in the public key recording transaction generation request signal, and processes the user identification hash information.

In addition, the transaction processing engine 320 transmits the transaction information for the public key recording to the blockchain holding server 400 for recording, and the transaction search keyword information DB 311 for each user in the case of the transaction ID information for the public key recording. ), And generate user verification transaction information including user verification hash information and transaction identification information for user verification used as a key value for retrieving transaction verification information for the user verification, and for user verification among the generated information. The transaction information is transmitted to the blockchain holding server 400 for recording, and the transaction ID information for user verification is stored and managed in the user-specific transaction search keyword information DB 311.

The blockchain-based official certificate management server 300 performing such a function performs a public certification when using a service such as a server operated by a bank or a securities company, a server operated by a government agency, and a server operated by a shopping mall performing Internet commerce. The vendor's server may be applied.

On the other hand, the bitcoin payment transaction information recorded in the blockchain provided in the electronic wallet of the blockchain holding server 400 to be described later with reference to Figure 6a, which the sender holds through the previous bitcoin payment transaction information Bitcoin necessary to determine the validity of previous Bitcoin payment transaction ID information, remitter's Bitcoin usage right information, and Bitcoin usage right information used to identify the Bitcoin storage location The data includes a public key for payment, OP_DUP information for guiding a transaction for Bitcoin transactions, bitcoin amount remitted, and recipient identification information for identifying a recipient.

Here, the previous bitcoin payment transaction ID information is information used as a key value to retrieve the previous bitcoin payment transaction information. The sender's bitcoin usage authority information is the sender's digital signature information, and the sender corresponds to a user who remits bitcoin from previous transaction information for Bitcoin payment.

In addition, the bitcoin payment transaction information data structure is divided into input data (ID) and output data (OD), the input data (ID), the previous bitcoin payment transaction ID information, the remitter's bitcoin usage rights information And the public key for bitcoin payment is stored separately, and the OP_DUP information, the bitcoin amount and the recipient identification information are stored separately in the output data (OD).

For the transaction information for public key recording, referring to FIG. 6B, the transaction information for the previously used bitcoin to be used among the amount of Bitcoin held by the remitter through the previous transaction information for bitcoin payment is used. Bitcoin payment transaction ID information, bitcoin use authority information of the remitter, bitcoin payment public key required to determine the validity of the bitcoin use authority information, the public key of the public certificate for the certificate required for issuing a blockchain-based public certificate Public key registration cost information, which is a cost required for registration, OP_RETURN information for guiding that it is a transaction for information recording, not a transaction for bitcoin transactions, and data including the public key for the public certificate.

In this case, the public key recording transaction information is divided into input data ID1 and output data OD1. The input data ID1 includes the previous bitcoin payment transaction ID information and the remitter's authority to use Bitcoin. The information and the bitcoin payment public key and public key registration cost information are stored separately, and the output data OD1 stores the OP_RETURN information and the public certificate public key.

Here, the public key registration cost information is a cost that is paid to the miner involved in registering the public key recording transaction information in the blockchain provided in the electronic wallet of the blockchain holding servers 400, and requires approximately 0.0001 bitcoins. do. In addition, the user verification hash registration cost information to be described later is a cost that is paid to the miner involved in enabling the user verification transaction information to be registered in the blockchain provided in the electronic wallet of the blockchain holding server 400.

In addition, as of July 2015, 0.0001 Bitcoin costs as low as 40 won, and the total cost of issuing a Bitcoin-based accredited certificate is less than 100 won.

In addition, the transaction information for user verification is described with reference to FIG. 6C, and used to identify a storage location of the scheduled bitcoin to be used among the amount of Bitcoin held by the remitter through the previous transaction information for Bitcoin payment. Registration of transaction ID information for Bitcoin payment, Bitcoin permission information of remitter, Bitcoin payment public key for determining validity of Bitcoin permission information, and user verification hash information for issuing blockchain-based public certificate User verification hash registration cost information, which is the cost required to block, blockchain-based authorized certificate destruction cost information, which is the cost to be used to destroy the blockchain-based authentication information, which is a transaction for information recording, not a transaction for bitcoin transactions OP_RETURN information, transaction information for the user verification is blockchain When recorded in the blockchain of the server 400, the blockchain-based authorized certificate discard reserve cost corresponding to the blockchain-based authorized certificate destruction reserve cost information is transferred to the designated bitcoin address, bitcoin address for the reserve compared to the destruction and the corresponding blockchain The data includes the blockchain-based certification certificate destruction information and user verification hash information including the information on the transfer of the destruction storage cost, which indicates the amount of the destruction cost of the foundation certification certificate.

Through this, the blockchain holding server 400 records the transaction verification information for the user and at the same time refers to the blockchain-based accredited certificate confirmation information, and reserves the blockchain-based accredited certificate at the bitcoin address for the reserve compared to the designated discard. It records the information that the cost information has been transferred and charged and provides it as data to confirm the destruction of the blockchain-based accredited certificate later.

In addition, the transaction information for user verification has a data structure divided into input data ID2 and output data OD2. The input data ID2 includes previous transaction ID information for bitcoin payment, bitcoin usage right information of a remitter, and Bitcoin payment public key, blockchain-based accredited certificate destruction cost information and user verification hash registration cost information is stored separately, the output data (OD2) OP_RETURN information, blockchain-based accredited certificate destruction information and user verification Hash information is stored separately.

The blockchain holding servers 400 are devices forming a bitcoin network that performs bitcoin payment through authentication and recording of the bitcoin payment when the bitcoin payment is made.

Here, the bitcoin will be briefly described. Bitcoin is a digital currency that can be paid for in kind created by Satoshi Nakamoto in 2009, and has no structure for issuing and managing currency. Instead, Bitcoin's transactions are made through a peer-to-peer network (P2P) based distributed database, which performs transactions based on public key cryptography.

As such, Bitcoin having a payment method can be used without information such as a card number or expiration date and CCV number required for credit card payment, and there is an advantage in using a low fee. In addition, Bitcoin is stored in an electronic wallet, which is a file, and each electronic wallet is given a unique address (public address), and trading of Bitcoin is performed based on the address.

In order to use such a bitcoin having a payment characteristic, first, a bitcoin user subscribes to a bitcoin exchange (eg, www.coinplug.com) and charges KRW corresponding to the won while opening an electronic wallet.

Thereafter, after checking the current price of Bitcoin being traded on the Bitcoin Exchange, and entering the quantity and unit price of Bitcoin to be purchased, the purchase is made through the sales order that meets the trading conditions, the user purchases the goods. Payment can be made through Bitcoin.

As described above, the blockchain holding server 400 may be a server operated by the bitcoin exchange side as one member.

To this end, an electronic wallet having a blockchain must be mounted on each blockchain holding server 400, and a bitcoin payment generated in accordance with general bitcoin payment on a blockchain by an electronic wallet of the blockchain holding server 400. When the transaction information is received, the bitcoin payment is authenticated by verifying the received transaction information of the bitcoin, and the transaction information for the bitcoin payment is recorded according to the authentication, and the blockchain holding server of the next stage designated ( 400 to propagate transaction information for Bitcoin payment.

That is, the propagation of the transaction information for Bitcoin payment is promised by the communication protocol, and when the occurrence of the transaction information for Bitcoin payment, one node (here referred to as a blockchain holding server) is propagated to eight nodes designated. All blockchains equipped with an electronic wallet with a blockchain necessary to perform Bitcoin payments through pyramid propagation are repeatedly propagated to each of the eight designated nodes for each of the eight nodes receiving the transaction information for the Bitcoin payment. By propagating to the holding server 400, it is completed.

As such, all transaction information including the aforementioned public key recording transaction information and user verification transaction information as well as bitcoin payment transaction information recorded in the blockchain cannot be forged later.

On the other hand, the blockchain holding server 400 is equipped with an electronic wallet having a blockchain, a server (or terminal) operated by a miner for mining Bitcoin, or a user terminal (for example, a PC for Bitcoin payment) Or smartphone) can also be made up of one member.

In addition, in the case of Bitcoin payment, payment is basically performed based on an electronic wallet equipped with a blockchain.In this way, payments based on an electronic wallet equipped with a blockchain include Litecoin, Dark Coin, Namecoin, and Ceramic Coin. And ripple, etc., which may also be used as a substitute for performing a function such as bitcoin in the forgery verification of a certificate of a financial institution.

In addition, in the blockchain of the blockchain holding server 400, in addition to the transaction information for Bitcoin payment for general Bitcoin payment, as described above, personal information can also be recorded. That is, public key recording transaction information and user verification transaction information including public key for public certificate and user verification hash information required for performing Bitcoin-based public authentication can also be recorded.

In other words, if the transaction information that is generated during bitcoin payment includes OP_RETURN (Operation Code RETURN) information and transmits it, the electronic wallet of each blockchain holding server 400 is treated as private information instead of general bitcoin payment. The OP return information is recorded in the transaction information for verifying the certificate, and used as an important configuration for determining the forgery prevention of digital content.

Here, the OP_RETURN information reads the OP return message on the Bitcoin payment transaction information during the Bitcoin payment authentication in the electronic wallet of the blockchain holding server 400, the information that the OP return message is recorded Bitcoin transaction information It is used to inform that it is used as information to inform that it is an arbitrary 40 byte data value.

As described above, the process of issuing a blockchain-based accredited certificate using the accredited certificate issuing system based on the blockchain of the present invention is as follows.

When the user executes a mobile-only app (or a dedicated program) for guiding the issuance of the bitcoin-based official certificate installed in the user terminal 100, and accesses the blockchain-based official certificate issuing request server 200, the user terminal 100 The mobile-only app (hereinafter, described as being controlled by the user terminal for convenience of description) is operated by extracting the user identification information input screen 141 stored in the information storage unit 102 and outputting it to the information output unit 101. do.

The user inputs the user's name input box 141a to input the user's name on the output user identification information input screen 141, the user's date of birth input box 141b to input the user's birth date, and the user's telephone number input box to input the user's phone number. 141c and the user's e-mail input box 141d into which the user's e-mail is input, input information according to an input form and request transmission.

The user terminal 100 collects the input information such as the user name, the date of birth of the user, the user's telephone number, and the user's e-mail to process the personal information for issuing the blockchain-based certificate, and then processes the personal information for issuing the processed blockchain-based certificate. Transmits the blockchain-based official certificate issuance request server 200 to request a blockchain-based official certificate issuance (S100).

The blockchain-based authorized certificate issuing request server 200 matches the personal information for issuing the blockchain-based authorized certificate with the user identification information DB 211 for each member and checks whether there is matching information (S110), which is matched. If there is no information, a message (S111) for issuing a blockchain-based authorized certificate is transmitted to the user terminal 100.

The blockchain-based public certificate issuing request server 200 generates a key generation guide signal for guiding the generation of the public key for the public certificate and the private key for the public certificate when the matching information exists, and transmits it to the user terminal 100. (S120).

When the key generation guide signal is transmitted, the user terminal 100 extracts the network blocking guide screen 142 from the information storage unit 102 and outputs it to the information output unit 101.

When the user clicks a menu requesting network setting after viewing the output blocking guide screen 142, the user terminal 100 extracts the network blocking display screen 143 stored in the information storage unit 102 and outputs the information. Output to the unit 101. Thereafter, the user blocks the connected network such as Wi-Fi on the output network block display screen 143.

Thereafter, when the user terminal 100 extracts the password input screen 144 stored in the information storage unit 102 and outputs the password input screen 144 to the information output unit 101, the user enters the password input box 144a of the password input screen 144. Enter the password and click the OK menu.

Thereafter, the user terminal 100 extracts an image selection screen 145 stored in the information storage unit 102 and outputs the image selection screen 145 to the information output unit 101. Thereafter, the user selects a desired image among a plurality of images displayed on the output image selection screen 145.

Thereafter, the user terminal 100 operates the key generation engine 110 to control the public key for the public certificate and the private key for the public certificate to be generated. In this case, the key generation guide screen 146 stored in the information storage unit is output. It guides the user to recognize that the public key for public certificate and private key for public certificate are generated.

Thereafter, when the user terminal 100 generates the public key for the public certificate and the private key for the public certificate, the encryption / decryption engine 120 is operated to encrypt and encrypt the private key for the public certificate based on a password and a picture image specified by the user. The data is stored in the information storage unit 102 in a state of processing with a private key for a public certificate.

Thereafter, when the user terminal 100 stores the private key for encryption authentication certificate, the user terminal outputs a message to connect the network again, and the user connects the network.

Thereafter, the user terminal 100 outputs a network connection guide screen 147 stored in the information storage unit 102 to guide that the network is connected again.

Thereafter, the user terminal 100 transmits the public key for the public certificate to the blockchain-based public certificate issue request server 200 (S130).

When the blockchain-based public certificate issuance request server 200 receives the public key for the public certificate, it operates a hash processing engine 220 to hash the personal information for issuing the blockchain-based public certificate to process the user identification hash information. The public key record is collected by collecting the specified user identification information corresponding to the predetermined user identification information among the user identification information that forms the user identification hash information, the public key for the certificate, and the personal information for issuing the blockchain-based certificate. Process the transaction creation request signal for the blockchain-based official certificate management server 300 and transmits (S140).

In addition, the blockchain-based authorized certificate management server 300 operates the transaction processing engine 320 to search the user-specific transaction search keyword information DB (user-specific information) among the information collected in the transaction creation request signal for public key recording transmitted. 311) and generate public key recording transaction information including the public key for the public certificate and public key recording transaction ID information used as a key value to retrieve the public key recording transaction information (S150).

Thereafter, the blockchain-based authorized certificate management server 300 operates the hash processing engine 330 to hash user identification hash information and transaction ID information for public key recording among information collected in the transaction creation request signal for public key recording. Compute and process the user verification hash information (S160).

Thereafter, the blockchain-based authorized certificate management server 300 operates the transaction processing engine 320 to transmit the transaction information for the public key recording to the blockchain holding server 400 for recording, and transmits the public key recording transaction. In the case of ID information, the user-specific transaction search keyword information DB 311 is stored in the user verification transaction ID including the user verification hash information and the user verification transaction ID used as a key value for searching the user verification transaction information. Generates information and transmits the user verification transaction information to the blockchain holding server 400 for recording, and the transaction identification information for user verification is stored in the user-specific transaction search keyword information DB 311. Management (S170).

The blockchain holding server 400 completes the issuance of the blockchain-based authorized certificate by recording the transmitted public key recording transaction information and user verification transaction information in the blockchain (S180).

When the blockchain-based official certificate management server 300 completes the issuance of the blockchain-based official certificate (S180), the blockchain-based official certificate issuance completion notification is notified to the user terminal 100 (S190).

The user terminal 100 outputs the issue completion guide screen 148 stored in the information storage unit 102 through the information output unit 101 so that the user can recognize it.

8 to 14 relate to an authentication certificate authentication system and method based on a block chain which is an authentication part of an authentication certificate based on a block chain. Prior to describing the drawings, if there is a duplicate of the content mentioned in the issuance of the certificate, it will be omitted.

As shown in the figure, the blockchain-based public certificate authentication system of the present invention includes a user terminal 100, a blockchain-based public certificate authentication request server 500, a blockchain-based public certificate management server 300, It consists of a blockchain holding server (400).

First, the user terminal 100 is a terminal member for requesting blockchain based authentication.

The blockchain-based authorized certificate authentication request server 500 transmits the designated user identification information of the corresponding user who operates the user terminal 100 according to the blockchain-based authorized authentication request of the user terminal 100 to blockchain-based authorized authentication. The server member relays the request.

To this end, the blockchain-based public certificate authentication request server 500 includes a DB unit 510, and the included DB unit 510 stores identification information of a user who operates the user terminal 100. The user identification information that is identical to the personal information for issuing the blockchain-based public certificate that is used when issuing the blockchain-based public certificate and the user identification information corresponding to the predetermined user identification information among the user information It has a member-specific user identification information DB (511) stored.

Based on this, the blockchain-based authorized certificate authentication request server 500 designates a corresponding user who operates the user terminal 100 in the user identification information DB 511 according to the blockchain-based authorized authentication request of the user terminal 100. Extracts user identification information and transmits it to the blockchain-based authorized certificate management server 300.

The blockchain-based official certificate management server 300 transmits transaction ID information for public key recording and transaction ID information for user verification matching with the designated user identification information transmitted from the blockchain-based official certificate authentication request server 500. Server member for requesting the download of the transaction information for public key recording and transaction information for user verification.

To this end, the blockchain-based official certificate management server 300, the DB unit 310 is mounted, the mounted DB unit 310 is a blockchain consisting of the user identification information used when issuing a blockchain-based official certificate Among the identification information of the same user as the personal information for issuing the public certificate, the designated user identification information corresponding to the predetermined user identification information, the transaction ID information for the public key recording used as a key value for retrieving the transaction information for the public key recording, and the user It has a user-specific transaction search keyword information DB 311 that stores transaction verification ID information used as a key value for retrieving verification transaction information.

Here, in the transaction information for user verification, if the blockchain-based official certificate destruction cost information and the corresponding user verification transaction information, which is the cost to be used to destroy the blockchain-based authorized certificate is recorded in the blockchain of the blockchain holding server 400 The amount of the bitcoin address for stockpile and the corresponding blockchain-based accredited certificate stockpile expenditure cost are displayed so that the blockchain-based accredited certificate discard stock cost corresponding to the blockchain-based accredited certificate discard stock cost information is transferred to the designated bitcoin address. Includes information on transfer of waste reserves.

Through this, the transaction processing engine 320 of the blockchain-based certificate management server 300 extracts the bitcoin address for stockpile compared to the discarded stocking cost transfer information among the information included in the user verification transaction information, Generates a blockchain-based accredited certificate confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost has been transferred to the bitcoin amount charged to the bitcoin address for stockpile compared to the extracted discarded data. The blockchain holding server 400 is transmitted. Here, the blockchain-based official certificate destruction confirmation request signal may be sent to a plurality of blockchain holding server 400 or to a predetermined blockchain holding server 400 in advance.

The blockchain holding server 400 charges the bitcoin address for the stockpile in comparison with the blockchain by matching the blockchain with the discarded bitcoin address included in the transmitted blockchain-based authorized certificate confirmation request signal. The blockchain-based authorized certificate destruction guide signal for guiding whether or not the transfer of the blockchain-based accredited certificate storage reserve costs is transmitted to the blockchain-based accredited certificate management server (300).

The transaction processing engine 320 of the blockchain-based certificate management server 300 transfers the blockchain-based certificate certificate storage cost charged to the bitcoin address for stockpiling compared to destruction by referring to the blockchain-based certificate destruction guide signal. If it is, it performs a function of controlling to be notified to the user terminal 100 a message that the blockchain-based authentication process has been rejected.

The blockchain-based authorized certificate management server 300 matches the designated user identification information with the transaction search keyword information DB 311 for each user, extracts the transaction ID information for the public key recording and the transaction ID information for the user verification, and transmits the transaction. By operating the processing engine 320, the public key recording transaction information and the user verification transaction information to perform the function of controlling to extract the public key for authentication certificate and the user verification hash information.

The blockchain holding server 400 authenticates Bitcoin payment by verifying the transmitted Bitcoin payment transaction information when the transaction information for bitcoin payment is transmitted, and records the transaction information for Bitcoin payment according to the authentication An electronic wallet having a block chain is mounted, and the electronic wallet also records transaction information for user verification including public key recording transaction information including a public key for public certificate and user verification hash information. The public key recording transaction ID information and the user verification transaction ID information transmitted from the chain-based public certificate management server 300 are matched with the electronic wallet to match the public key recording transaction information and the user verification transaction information with the block. It is a member transmitting the chain-based official certificate management server 300.

In particular, as a main feature of the present invention, the blockchain-based public certificate management server 300 is publicly available for public certificates in the public key record transaction information and user verification transaction information transmitted from the blockchain-based public certificate management server 300 Block chain-based certificate authentication request server extracts the key and user verification hash information, and the certificate validation signal including the extracted public key for public certificate and user verification hash information and transaction ID information for public key recording. Send to 500.

In addition, the blockchain-based public certificate authentication request server 500 extracts the identification information of the user from the user identification information DB 511 for each member, and operates the hash processing engine 520, the identification information of the extracted user Hashing to process and process the user identification hash information for the preparation, and the processed user identification hash information of the processed and the information contained in the certificate validation signal transmitted from the block chain-based public certificate management server 300 Hashing the transaction ID information for the public key recording and processing it into the user verification hash information for preparation, and user verification hash information among the information included in the certificate validation signal transmitted from the blockchain-based certificate management server 300 If the hash value of the user and the hash value of the user verification hash information for the preparation are respectively calculated and both hash values are the same, the information stored in the certificate validation signal And it transmits the public key for the certificate to the user terminal 100.

And the user terminal 100 performs the public authentication based on the public key for the public certificate transmitted.

To this end, the user terminal 100 has an information storage unit 102 and an encryption / decryption engine 120 stored in a private key state for encryption authentication certificate encrypted based on a password and a picture image set by the user for the authentication certificate. Include.

In addition, the blockchain-based public certificate authentication request server 500 transmits the public key for the public certificate for the encrypted public certificate for the encrypted public certificate based on a user confirmation request message requiring input of a password and a picture image set by the user. do.

When the user terminal 100 transmits the public key for encryption certification, the user extracts the password input screen 151 for performing authentication stored in the information storage unit 102 and outputs the information through the information output unit 101. Enter the registered password in the password input box (151a).

Subsequently, the user terminal 100 extracts the image selection screen 152 for authentication performance stored in the information storage unit 102 and outputs the image through the information output unit 101. Choose.

Subsequently, the user terminal 100 decrypts the private key for the encrypted public certificate stored in the information storage unit 102 by referring to the public key for the encrypted public certificate transmitted by operating the encryption / decryption engine 120, and the user inputs it. If a password and a picture image is correct, the user verification authentication signal performs a function of controlling to be transmitted to the blockchain-based official certificate authentication request server 500.

On the other hand, the user can block the blockchain-based official certificate management server 300 corresponding to the remitter is issued blockchain-based official certificate.

To this end, when a certificate destruction signal for requesting the destruction of the blockchain-based certificate is generated in the blockchain-based authorized certificate management server 300, the transaction processing engine 320 is operated to perform a transaction search keyword information DB 311 for each user. Extract the transaction ID information for user verification, and transmit it to the blockchain holding server (400).

The blockchain holding server 400 transmits the user verification transaction information extracted by matching the transmitted user verification transaction ID information with the blockchain of the electronic wallet to the blockchain-based authorized certificate management server 300.

The transaction processing engine 320 of the blockchain-based authorized certificate management server 300 receives transaction information for user verification, and transaction information for user verification is recorded when the transaction information for destroying the corresponding certificate is recorded in the blockchain holding server 400. Blockchain-based accredited certificate charged to the Bitcoin address for stockpiling for destruction, referring to the output data of OD2. Input data including the Bitcoin payment public key required to determine the validity of the multi-bitcoin usage rights information, including the right to use the blockchain-based authorized certificate destruction cost charged in the ( Blockchain-based accredited certificate charged to ID3) and Bitcoin address for stockpiling Generate the transaction information for destroying the certificate, which is divided into the output data (OD3) including the bitcoin address of the depositor to which the savings cost is remitted and the discarding cost collector identification information identifying the payee, and the blockchain holding server 400 To send).

The blockchain holding server 400 records the transaction information for destroying the transmitted public certificate on the blockchain to destroy the user's blockchain-based public certificate.

On the other hand, the blockchain-based public certificate management server 300 requests a digital signature by transmitting the generated transaction information for the public certificate destruction to the user terminal 100, if a certificate destruction signal is generated in the user terminal 100.

The user terminal 100 operates the transaction signature engine 130 to transmit the electronic signature to the transaction information for discarding the public certificate to be transmitted to the blockchain-based public certificate management server 300.

Thereafter, the blockchain-based official certificate management server 300 performs a function of controlling the transaction information for destroying the electronic certificate signed by the user transmitted from the user terminal 100 to the blockchain holding server 400. do.

If the blockchain-based official certificate management server 300 generates a certificate destruction signal by itself, the electronic signature of the remitter corresponding to the blockchain-based official certificate management server 300 is operated by operating the transaction processing engine 320. It performs the function of controlling the discarded transaction information, so that the transaction information for discarding the authorized certificate digitally signed by the remitter is transmitted to the blockchain holding server 400.

The authentication process of the blockchain-based accredited certificate using the accredited certificate authentication system based on the blockchain of the present invention is as follows.

The user terminal 100 accesses the blockchain-based official certificate authentication request server 500 and requests a blockchain-based official authentication (S300).

The blockchain-based authorized certificate authentication request server 500 identifies the designated user of the corresponding user who operates the user terminal 100 in the user identification information DB 511 for each member according to the blockchain-based authorized authentication request of the user terminal 100. Extract the information, and transmits it to the blockchain-based public certificate management server 300 (S310).

The blockchain-based public certificate management server 300 matches the designated user identification information transmitted with the user-specific transaction search keyword information DB 311 to match the transaction ID information for public key recording and the transaction ID information for user verification. Transmission to the holding server 400 requests the download of the public key recording transaction information and user verification transaction information (S320).

The blockchain holding server 400 matches the transmitted public ID recording transaction ID information and the user verification transaction ID information with the electronic wallet, thereby matching the public key recording transaction information and the user verification transaction information with blockchain-based authentication. The certificate management server 300 transmits (S330).

The blockchain-based authorized certificate management server 300 operates a transaction processing engine 320 to extract bitcoin addresses for stockpiling versus discarding from discarding stock cost transfer information included in the transmitted user verification transaction information, and Generates a blockchain-based accredited certificate confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost has been transferred to the bitcoin amount charged to the reserved bitcoin address compared to the extracted discarded block. It transmits to the chain holding server 400 (S340).

The blockchain holding server 400 matches a blockchain with a bitcoin address for discarding stock stored in the blockchain-based accredited certificate request confirmation signal transmitted to the blockchain corresponding to the corresponding bitcoin stockpile for discarding. The blockchain-based official certificate destruction information guide signal that guides the transfer of the chain-based official certificate destruction reserve cost is transmitted to the blockchain-based official certificate management server 300 (S350).

The transaction processing engine 320 of the blockchain-based official certificate management server 300 refers to a blockchain-based official certificate destruction guide signal sent to blockchain-based official certificate discarding cost charged for storing the bitcoin address for disposal. Check whether the transfer is carried out (S360). First, if the blockchain-based accredited certificate discard cost stored in the Bitcoin address for the reserve compared to the destruction, the message that the blockchain-based accredited authentication process is denied to the user terminal 100 is rejected. Public information recording and transaction information for the public key transmitted by operating the transaction processing engine 320 when the control to be notified (S361), and the blockchain-based authorized certificate discard cost stored in the bitcoin address for the reserve compared to the destruction is not transferred. The public key for the public certificate and the user verification hash information are extracted from the transaction information for verification (S370).

The blockchain-based public certificate management server 300 includes a certificate validity including the extracted public key for public certificate and user verification hash information and transaction ID information for public key recording stored in the user-specific transaction search keyword information DB 311. The confirmation signal is transmitted to the blockchain-based official certificate authentication request server 500 (S380).

In the blockchain-based public certificate authentication request server 500, the identification information of the user is extracted from the user identification information DB 511 for each member, and the hash processing engine 520 is operated to hash the extracted user identification information. Calculate and process the processed user identification hash information, and disclose the processed user identification hash information and the information included in the certificate validation signal transmitted from the blockchain-based authorized certificate authentication request server 500. Hashing the transaction ID information for key recording to process the user verification hash information for preparation (S390).

Thereafter, the hash processing engine 520 of the blockchain-based certificate authentication request server 500 hashes the user verification hash information among the information included in the certificate validation signal transmitted from the blockchain-based certificate management server 300. Compute the hash value of the user verification hash information for the value and contrast, respectively, and check whether the hash values of both sides are the same (S400). First, if the hash values of both sides are not the same, the authentication of the block chain based on the user terminal 100 A message indicating that the execution process is denied is controlled (S401).

The blockchain-based public certificate authentication request server 500 calculates the hash value of the user verification hash information and the hash value of the contrasting user verification hash information, respectively, and the certificate validity when both of the calculated hash values are the same. The public key for the public certificate among the information included in the confirmation signal is transmitted to the user terminal 100 (S410).

Thereafter, the user terminal 100 is performed in step S420 of performing public certification based on the public certificate public key transmitted.

On the other hand, it is checked whether a certificate destruction signal for requesting the destruction of the blockchain-based certificate is generated (S430). When a certificate destruction signal for requesting the destruction of the blockchain-based certificate is generated, the user terminal 100 and the blockchain-based public certificate Where in the management server 300 is checked (S440).

First, when a certificate destruction signal requesting the destruction of a blockchain-based certificate is generated in the user terminal 100, the user terminal 100 transmits the generated certificate destruction signal to the blockchain-based authorized certificate management server 300 (S450). )do.

The blockchain-based authorized certificate management server 300 extracts transaction ID information for user verification by matching the certificate destruction signal transmitted by operating the transaction processing engine 320 with the transaction search keyword information DB 311 for each user. The blockchain holding server 400 is transmitted (S460).

The blockchain holding server 400 transmits the user verification transaction information extracted by matching the transmitted user verification transaction ID information with the blockchain of the electronic wallet to the blockchain-based authorized certificate management server 300 (S470).

Thereafter, the transaction processing engine 320 of the blockchain-based certificate management server 300 receives the transaction information for user verification, and the transaction information for destroying the certificate is recorded in the blockchain holding server 400 for user verification. Blockchain-based accredited certificate charged to the Bitcoin address for stockpiling for destruction by referring to the output data (OD2) of transaction information. Input containing multi-bitcoin authorization information including the right to use the blockchain-based authorized certificate destruction cost charged in the coin address, and the public key for bitcoin payment required to determine the validity of the multi-bitcoin usage authorization information Blockchain-based accredited person charged with data (ID3) and Bitcoin address for stocks to destroy Proof of destroying the certificate generates transaction information for destroying the certificate, which is divided into the output data (OD3) including the bitcoin address of the payee to which the remittance and remittance cost of the payee are identified, and the user terminal 100 Request the digital signature by transmitting to (S480).

The user terminal 100 operates the transaction signature engine 130 and transmits the electronic signature to the transaction information for destroying the certificate, which is transmitted to the blockchain-based certificate management server 300 (S490).

The blockchain-based authorized certificate management server 300 transmits 500 transaction information for destroying the electronic certificate signed by the user to be transmitted to the blockchain holding server 400.

The blockchain holding server 400 records the transaction information for destroying the electronic certificate signed by the transmitted user in the blockchain (S510) and destroys the user's blockchain-based authorized certificate.

On the other hand, when a certificate destruction signal is generated requesting the destruction of the blockchain-based certificate is generated in the process of checking whether the user terminal 100 and the blockchain-based public certificate management server 300 is generated in (S440), When the certificate destruction signal requesting the destruction of the base certificate is generated in the blockchain-based certificate management server 300, the blockchain-based certificate management server 300 operates a transaction processing engine 320 to perform transaction information for user verification. Is received, and the corresponding transaction information for destroying the certificate is recorded in the blockchain holding server 400, referring to the output data (OD2) of the transaction information for user verification, the blockchain-based authentication charged in the bitcoin address for stockpiling for destruction Destruction reserve cost to guide the transfer of certificate disposal reserve costs Transfer information, reserves for retirement by remitter or user Input containing multi-bitcoin authorization information including the right to use the blockchain-based authorized certificate destruction cost charged in the coin address, and the public key for bitcoin payment required to determine the validity of the multi-bitcoin usage authorization information Output data (OD3) containing the data (ID3) and the bitcoin address of the payee to which the blockchain-based certificate of trust is charged at the bitcoin address for the reserve compared to the discard, and the destroyer's identification information identifying the recipient. Generate the transaction information for destroying the public certificate, which is divided into the digital certificate of the sender corresponding to the blockchain-based public certificate management server 300, and generate the electronic certificate of the public certificate. The transaction information for discarding the public certificate is transmitted to the blockchain holding server 400 (S441).

The blockchain holding server 400 records the transaction information for destroying the electronic certificate signed by the remitter transmitted (S442) in the blockchain to destroy the user's blockchain-based authorized certificate.

Finally, Figures 15 to 17 is a view showing a method of authenticating a certificate based on a blockchain according to another embodiment, which is different from the operation relationship with the certificate certification system based on the aforementioned blockchain. Since the same is true, the drawings related to the authentication system are omitted.

In addition, the difference between the certificate system and the method based on the blockchain according to another embodiment is different from the certificate system and the method based on the above-mentioned blockchain. Whether to perform the calculation and determination of each hash value of the user verification hash information for the information and the contrast in the blockchain-based public certificate authentication request server 500 or in the blockchain-based public certificate management server 300 to be dumped.

That is, in accordance with another embodiment of the blockchain-based certificate authentication system, a user terminal 100 requesting a blockchain-based certificate authentication and a user for each member according to a blockchain-based certificate request of the user terminal 100 Identification information of the corresponding user is extracted from the identification information DB 511, and the extracted identification information of the user is hashed to be processed into contrast user identification hash information, and the processed contrast user identification hash information. And receiving the user identification hash information and the designated user identification information for the preparation from the blockchain-based official certificate authentication request server 500 and the blockchain-based official certificate authentication request server 500 for transmitting the user identification information of the corresponding user. A transaction for recording the public key that matches the designated user identification information among the transmitted information with the user-specific transaction search keyword information DB 311. When the blockchain-based authorized certificate management server 300 and the bitcoin payment transaction information are transmitted by transmitting the ID information and the transaction ID information for user verification by requesting the download of the transaction information for the public key recording and the transaction information for the user verification. The Bitcoin payment is authenticated by verifying the transmitted bitcoin payment transaction information, and an electronic wallet having a blockchain in which the transaction information for bitcoin payment is recorded is mounted, and the electronic wallet is used for a certificate. Public key recording transaction information including the public key and user verification transaction information including the user verification hash information are also recorded. The transaction ID information for the public key recording transmitted from the blockchain-based certificate management server 300 is also recorded. Matching public key recording transaction by matching the transaction ID information for user verification with the electronic wallet Block chain holding server 400 for transmitting the option information and transaction verification information for the user verification to the block chain-based authorized certificate management server 300; but the block chain-based authorized certificate management server 300 is a block chain holding server ( Extract the public key for public certificate and user verification hash from the public key recording transaction information and user verification transaction information transmitted from 400), and transmit the prepared user identification hash information and transaction search keyword information by user DB. Hashing the transaction ID information for public key recording stored in 311 to process the processed user verification hash information, and to compare the hash value of the extracted user verification hash information with the processed user verification hash information. If the hash value is calculated by calculating each hash value, the extracted public key for the public certificate and the designated user identification information of the user are based on blockchain. The authentication certificate authentication request server 500 is transmitted, and the blockchain-based certificate authentication request server 500 transmits the public key for the authentication certificate transmitted by referring to the designated user identification information among the transmitted information to the user terminal 100. And, the user terminal 100 is made of a configuration for performing the public certification based on the public key for the public certificate transmitted.

As such, through the configuration, the authentication method authentication method based on the blockchain according to another embodiment is connected to the blockchain-based authorized certificate authentication request server 500 in the user terminal 100 to request a blockchain-based authorized authentication In step (S600), the blockchain-based public certificate authentication request server 500, in accordance with the blockchain-based public authentication request extracts the identification information of the user from the user identification information DB 511 for each member, the hash processing engine Operation 520 to process the extracted user identification information by hashing and processing the prepared user identification hash information, and block the processed user identification hash information for the processed comparison and the designated user identification information of the corresponding user. The step of transmitting to the chain-based official certificate management server 300 (S610), the blockchain-based official certificate management server 300 in preparation for user identification hash information and the designated user expression Receiving the information, and matching the designated user identification information among the transmitted information with the user-specific transaction search keyword information DB 311, and matching the transaction ID information for public key recording and the transaction ID information for user verification with the blockchain holding server ( Requesting the download of the public key recording transaction information and the user verification transaction information (S620), and the blockchain holding server 400, the transaction ID information for the public key recording and the user verification that are transmitted. Matching the transaction ID information with the electronic wallet, transmitting the matching public key recording transaction information and user verification transaction information to the blockchain-based authorized certificate management server 300 (S630), and blockchain-based authorized certificate management Operating the transaction processing engine 320 in the server 300, from the transmitted transaction information for public key recording and user verification transaction information Extracting the public key for the certificate and the user verification hash information (S670), and operating the hash processing engine 330 in the blockchain-based certificate management server 300, the prepared user identification hash information transmitted And hashing the transaction ID information for the public key recording stored in the transaction search keyword information DB 311 by the user and processing the prepared user verification hash information for preparation (S680), and the blockchain-based authorized certificate management server 300. In the hash processing engine 330 of the), the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information are respectively calculated, and the hash values of the calculated both are the same. If the step (S690) and the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information is the same, in the blockchain-based public certificate management server 300, the extracted public certificate Transmitting the public key and the designated user identification information of the user to the blockchain-based authorized certificate authentication request server 500 (S700), and the blockchain-based authorized certificate authentication request server 500, the designated user from the information sent Transmitting the public key for the public certificate transmitted by referring to the identification information to the user terminal 100 (S710), and in the user terminal 100, performing the public authentication based on the public key for public certificate transmitted Step S720 is made.

[Description of the code]

100: user terminal 101: information output unit

102: information storage unit 110: key generation engine

120: encryption and decryption engine 130: transaction signature engine

141: user identification information input screen 141a: user name input field

141b: User's date of birth input box 141c: User's phone number input box

141d: User Email Entry Box 142: Network Blocking Guide Screen

143: Network block screen 144: Password input screen

144a, 151a: Password input field 145: Image selection screen

146: Key generation guide screen 147: Network connection display screen

148: Issuance completion screen

151: Password input screen for authentication

152: Image selection screen for authentication

200: blockchain-based public certificate issuance request server

210,310,510: DB part

211,511: User identification information for each member DB 220,330,520: Hash processing engine

300: Blockchain based certificate management server

311: Transaction search keyword information DB by user

400: blockchain holding server

500: Blockchain-based public certificate authentication request server

Claims (30)

1. A user terminal 100 for requesting blockchain-based authorized authentication;

   In accordance with the blockchain-based authorized authentication request of the user terminal 100, the blockchain-based authorized certificate authentication relaying a request for the blockchain-based authorized authentication by transmitting designated user identification information of the corresponding user who operates the user terminal 100. A request server 500;

   Public key recording transaction information and user verification transaction by transmitting transaction ID information for public key recording and transaction ID information for user verification matching the designated user identification information transmitted from the blockchain-based authorized certificate authentication request server 500 A blockchain-based authorized certificate management server 300 for requesting the download of information;

   When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted transaction information for the bitcoin payment and records the transaction information for the bitcoin payment according to the authentication is mounted. However, the electronic wallet has also recorded the transaction information for the user verification including the public key recording transaction information and the user verification hash information including the public key for the public certificate, the blockchain-based public certificate management server 300 The blockchain-based authorized certificate management server 300 matches the public key recording transaction ID information and the user verification transaction ID information transmitted from the electronic wallet with matching electronic key wallet transaction information. Blockchain holding server 400 to transmit to; consisting of,

   The blockchain-based public certificate management server 300 extracts public certificate public key and user verification hash information from the public key recording transaction information and the user verification transaction information transmitted from the blockchain holding server 400. Transmits the certificate validation signal including the extracted public key for public certificate and user verification hash information and transaction ID information for public key recording to the blockchain-based public certificate authentication request server 500,

   The blockchain-based authorized certificate authentication request server 500 extracts identification information of the corresponding user from the user identification information DB 511 for each member, and hashes the extracted identification information of the user to prepare for user identification hash information. Hashing operation of the public ID recording transaction ID information among the processed user identification hash information and the information included in the certificate validation signal transmitted from the blockchain-based certificate management server 300. Hash value of the user verification hash information of the information contained in the certificate validation signal transmitted from the blockchain-based authorized certificate management server 300 and the user verification for the contrast If each hash value is the same by calculating the hash value of the hash information, the public certificate public information is disclosed among the information included in the certificate validation signal. Transmits a key to the user terminal 100,

   The user terminal 100 is an authentication certificate authentication system based on a block chain, characterized in that for performing the authentication based on the transmitted public key for the public certificate.
2. The method of claim 1,

   The blockchain-based public certificate authentication request server 500, DB unit 510; And a hash processing engine 520;

   The DB unit 510 stores the identification information of the user who operates the user terminal 100, and the personal information for issuing the blockchain-based official certificate, which is composed of the identification information of the user used when issuing the blockchain-based official certificate. Has a user identification information DB 511 for each member in which identification information of the same user and designated user identification information corresponding to predetermined user identification information among the identification information of the user are stored;

   The blockchain-based authorized certificate authentication request server 500, the user of the corresponding user operating the user terminal 100 in the user identification information DB 511 in accordance with the blockchain-based authorized authentication request of the user terminal 100. Extract the designated user identification information, and transmit it to the blockchain-based authorized certificate management server 300,

   The hash processing engine 520 hashes the identification information of the user and processes the identification information into contrast user identification hash information, and the processed contrast user identification hash information and the public key recording transaction ID information. Hash processing to process the user verification hash information for contrast, and calculates the hash value of the user verification hash information and the hash value of the verification user verification hash information, respectively, and determines whether the hash values of both sides are the same. Certified certificate authentication system based on the blockchain, characterized in that.
3. The method of claim 1,

   The blockchain-based authorized certificate management server 300, DB unit 310; And a transaction processing engine 320;

   In the DB unit 310, a designated user corresponding to the predetermined user identification information among the identification information of the same user as the personal information for issuing the blockchain-based authorized certificate consisting of the identification information of the user used when issuing the blockchain-based official certificate User-specific transaction search keyword that stores identification information, transaction ID information for public key recording used as a key value for retrieving transaction information for public key recording, and transaction ID information for user verification used as a key value for retrieving transaction information for user verification. Has information DB 311,

   The blockchain-based authorized certificate management server 300 matches the designated user identification information with the transaction search keyword information DB 311 for each user, and displays the public ID recording transaction ID information and the user verification transaction ID information. Extract,

   The transaction processing engine 320 is authorized based on the block chain, characterized in that the public key for recording the public information and the transaction verification information for the user authentication public key and the user verification hash information is controlled to be extracted. Certificate Authentication System.
4. The method of claim 3,

   In the transaction verification information for the user, the blockchain-based authorized certificate destruction cost information, which is the cost to be used to destroy the blockchain-based authorized certificate, and the corresponding transaction verification information for the user verification are recorded in the blockchain of the blockchain holding server 400. Blockchain-based certified certificate discard cost information The cost of the blockchain-based certified certificate discard stock cost is compared to the bitcoin address for stockpile and the corresponding blockchain-based certified certificate discard stock cost in order to be transferred to the designated bitcoin address. Include storage cost escalation information,

   The transaction processing engine 320 of the blockchain-based authorized certificate management server 300 extracts a bitcoin address for stockpiling compared to discarded stock cost transfer information among information included in the user verification transaction information, and Generates a blockchain-based accredited certificate destruction confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost is transferred to the bitcoin amount charged to the reserve bitcoin address compared to the extracted discarded; Send to blockchain holding server 400,

   The blockchain holding server 400 matches a bitcoin address for stockpiling against the discard included in the transmitted blockchain-based official certificate destruction request signal and matches the blockchain with a corresponding bitcoin address for stocking against the discard. Sending a blockchain-based official certificate destruction guide signal that guides whether the charge of the blockchain-based official certificate destruction reserve cost transfer to the blockchain-based official certificate management server 300,

   The transaction processing engine 320 of the blockchain-based official certificate management server 300 has a blockchain-based official certificate discard cost stored in a bitcoin address for stockpiling compared to destruction by referring to a blockchain-based official certificate destruction guide signal. If it is transferred, the block chain-based authentication certificate authentication system based on the block chain, characterized in that the control to be notified to the user terminal (100) a message that the process of performing the blockchain-based authentication.
5. The method of claim 1,

   The transaction information for public key recording is a previous bitcoin payment transaction used to identify a storage location of a scheduled bitcoin to be used among the amount of bitcoins held by the remitter through the transaction information for bitcoin payment. Expenses required for registration of the Bitcoin usage authority information of the remitter, the Bitcoin payment public key required to determine the validity of the Bitcoin usage authority information, the public key for the public certificate required for issuing a blockchain-based public certificate Public key registration cost information, OP_RETURN information to guide the transaction for information recording, not a transaction for Bitcoin transactions, and the public certificate for the public certificate, characterized in that it comprises a block chain.
6. The method of claim 1,

   The user terminal 100, the information storage unit 102 is stored in the state of the encryption private certificate private key encrypted on the basis of a password and a picture image set by the user private certificate; And encryption and decryption engine 120;

   The blockchain-based public certificate authentication request server 500 transmits the public certificate public key as an encrypted public certificate public key for encryption based on a user confirmation request message requiring input of a password and a picture image set by the user. ,

   The encryption / decryption engine 120 of the user terminal 100 refers to the encrypted public certificate public key to be transmitted, and decrypts the private public key for the encrypted public certificate stored in the information storage unit 102 and inputs the user. If the password and the photo image is correct, the user authentication authentication signal based on the block chain, characterized in that the control to be transmitted to the block chain-based authorized certificate authentication request server 500.
7. The method of claim 6,

   In the information storage unit 102 of the user terminal 100, a user authentication screen unit;

   The stored user authentication screen unit,

   A password input screen 151 for performing authentication including a password input box 151a for inputting a password set by a user when issuing a blockchain-based authorized certificate;

   A plurality of images are displayed, the authentication screen image based on the block chain, characterized in that it comprises a; image selection screen 152 for performing a selectable display of the image specified by the user when issuing a block chain-based official certificate Authentication system.
8. The method of claim 1,

   The user verification transaction information is divided into input data ID2 and output data OD2, and the input data ID2 is included in the bitcoin amount held by the remitter through the previous transaction information for bitcoin payment. Bitcoin payment public key required to determine the validity of the previous Bitcoin payment transaction ID information, the remitter's Bitcoin permission information, and Bitcoin permission information used to identify the storage location of the expected Bitcoin to be used. Information on the cost of registering the user verification hash information required for issuing the blockchain-based public certificate, and information on the cost of destroying the blockchain-based public certificate, which is the cost to destroy the blockchain-based public certificate. The output data OD2 includes information for recording information that is not a transaction for bitcoin transactions. When the OP_RETURN information, the user verification hash information (OD21), and the corresponding user verification transaction information are recorded in the blockchain of the blockchain holding server 400, the block corresponding to the blockchain-based accredited certificate destruction cost information is provided. Blockchain-based certification certificate destruction, including the bitcoin address for stockpiling versus the blockchain-based certification certificate destruction reserve cost, which indicates the chain-based certification certificate destruction reserve cost is transferred to the designated bitcoin address. Check whether information (OD22) is included,

   The blockchain-based public certificate management server 300 includes a DB unit 310 having transaction search keyword information DB 311 for each user, which stores transaction ID information for public key recording and transaction ID information for user verification; And a transaction processing engine 320;

   When the blockchain-based authorized certificate management server 300 generates a certificate destruction signal for requesting the destruction of the blockchain-based certificate, the transaction processing engine 320 is operated to perform the transaction search keyword information DB 311 for each user. Extract transaction ID information for user verification, and transmit it to the blockchain holding server 400,

   The blockchain holding server 400 transmits the user verification transaction information extracted by matching the transmitted user verification transaction ID information with the blockchain of the electronic wallet to the blockchain-based authorized certificate management server 300,

   The transaction processing engine 320 of the blockchain-based authorized certificate management server 300 receives the transaction information for verifying the user, and when the transaction information for destroying the certificate is recorded on the blockchain holding server 400, the user. Blockchain-based accredited certificate charged to the Bitcoin address for stockpiling for destruction by referring to the output data of verification transaction information (OD2) The multi-bitcoin authorization information including the right to use the blockchain-based authorized certificate destruction cost charged in the Bitcoin address, and the public key for the bitcoin payment required to determine the validity of the multi-bitcoin usage authorization information. Input data (ID3) containing and charged to the bitcoin address for the reserve compared to the discard Blockchain-based accredited certificate destruction The transaction information for destroying the accredited certificate is divided into output data (OD3) that includes the bitcoin address of the recipient to whom the remittance cost is remitted, and the revocation cost remitter identification information identifying the recipient. Transferring to the chain holding server 400,

   The blockchain holding server (400) is an authentication certificate authentication system based on the blockchain, characterized in that for recording the transmitted transaction information for destroying the authentication certificate on the blockchain to destroy the user's blockchain-based authentication certificate.
9. The method of claim 8,

   The user terminal 100, and includes a transaction signature engine 130,

   The blockchain-based public certificate management server 300 requests the digital signature by transmitting the generated public certificate information for transaction destruction to the user terminal 100, if the certificate destruction signal is generated in the user terminal 100. ,

   The user terminal 100 operates the transaction signature engine 130, electronically signs the transmitted certificate information for transaction destruction, and transmits the electronic signature to the blockchain-based authorized certificate management server 300.

   The blockchain-based official certificate management server 300 controls such that the transaction information for destroying the electronic certificate signed by the user transmitted from the user terminal 100 is transmitted to the blockchain holding server 400. Authorized certificate authentication system based on blockchain.
10. The method of claim 8,

    The blockchain-based authorized certificate management server 300 operates the transaction processing engine 320 when the certificate destruction signal is generated by itself, the electronic signature of the remitter corresponding to the blockchain-based authorized certificate management server 300. To the transaction information for destroying the official certificate, and the transaction information for destroying the electronic certificate signed electronically by the remitter is transmitted to the blockchain holding server 400. Authentication system.
11. Step S300 of accessing the blockchain-based authorized certificate authentication request server 500 from the user terminal 100 to request blockchain-based official authentication;

    From the blockchain-based official certificate authentication request server 500, extracts the designated user identification information of the corresponding user operating the user terminal 100 from the user identification information DB 511 for each member according to the blockchain-based official authentication request. And, and transmitting it to the blockchain-based authorized certificate management server 300 (S310);

    The public key recording transaction ID information and the user verification transaction ID information are matched by matching the designated user identification information transmitted from the blockchain-based authorized certificate management server 300 with the transaction search keyword information DB 311 for each user. Transmitting to the blockchain holding server 400 to request downloading of public key recording transaction information and user verification transaction information (S320);

    In the blockchain holding server 400, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet to match the public key recording transaction information and user verification transaction information. Transmitting to the blockchain-based authorized certificate management server 300 (S330);

    Operating the transaction processing engine 320 in the blockchain-based public certificate management server 300, the public key for public certificate and user verification hash information from the transmitted public key recording transaction information and user verification transaction information Extracting (S370);

    Including the extracted public key and user verification hash information for the public certificate extracted from the blockchain-based public certificate management server 300 and the transaction ID information for public key recording stored in the transaction search keyword information DB 311 for each user. Transmitting the made certificate validation signal to the blockchain-based authorized certificate authentication request server 500 (S380);

    In the blockchain-based public certificate authentication request server 500, the identification information of the user is extracted from the user identification information DB 511 for each member, and the hash processing engine 520 is operated to extract the identification information of the extracted user. Hashing to process the user identification hash information for processing, and the processed user identification hash information for the processed and included in the certificate validation signal transmitted from the blockchain-based public certificate authentication request server 500 Hashing the transaction ID information for public key recording among the information and processing the transaction ID information into the user verification hash information for preparation (S390);

    In the hash processing engine 520 of the blockchain-based certificate authentication request server 500, the user verification hash information of the information contained in the certificate validation signal transmitted from the blockchain-based certificate management server 300 Calculating a hash value and a hash value of the prepared user verification hash information, respectively, and checking whether the calculated hash values are the same (S400);

    The hash value of the user verification hash information and the hash value of the verification user verification hash information of the information included in the certificate validation signal transmitted from the blockchain-based authorized certificate management server 300 are respectively calculated. Transmitting the public key for the public certificate from the information included in the certificate validation signal to the user terminal (100) in the blockchain-based public certificate authentication request server (500) when the values are the same;

     In the user terminal (100), performing a public certification based on the transmitted public certificate public key (S420); public certificate authentication method based on the block chain, characterized in that consisting of.
12. The method of claim 11,

    In the blockchain holding server 400, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet to match the public key recording transaction information and user verification transaction information. After the S330 step of transmitting to the blockchain-based authorized certificate management server 300,

    By operating the transaction processing engine 320 in the blockchain-based authorized certificate management server 300, and extracts the bitcoin address for the stock compared to the discard from the discard stock cost transfer information included in the transmitted user verification transaction information, Generates a blockchain-based accredited certificate confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost has been transferred to the bitcoin amount charged to the bitcoin address for stockpile compared to the extracted discarded data. Transmitting to the blockchain holding server 400 (S340);

    In the blockchain holding server 400, the bitcoin address for stockpile vs. discarded by matching the blockchain with the bitcoin address for stockpile compared to the discarded block included in the transmitted blockchain-based authorized certificate confirmation request signal. Transmitting a blockchain-based official certificate destruction guide signal for guiding whether the blockchain-based official certificate destruction cost is charged to the blockchain-based official certificate management server 300 (S350);

    In the transaction processing engine 320 of the blockchain-based official certificate management server 300, the blockchain-based official certificate charged to the bitcoin address for stockpiling for disposal with reference to the transmitted blockchain-based official certificate destruction or not guide signal Confirming whether the discard stocking cost is transferred (S360);

    When the blockchain-based authorized certificate charged to the bitcoin address for the stockpile for disposal is transferred, the blockchain-based official authentication process from the blockchain-based official certificate management server 300 to the user terminal 100 is performed. And controlling the message to be notified that the message has been rejected (S361).
13. The method of claim 12,

    In the transaction processing engine 320 of the blockchain-based official certificate management server 300, the blockchain-based official certificate charged to the bitcoin address for stockpiling for disposal with reference to the transmitted blockchain-based official certificate destruction or not guide signal In step S360 to check whether the discard stock costs are transferred,

    If it is confirmed that the blockchain-based accredited certificate disposal cost stored in the bitcoin address for the reserve is not transferred, operating the transaction processing engine 320 in the blockchain-based accredited certificate management server 300, the transmitted A method for authenticating a certificate based on a block chain, comprising entering a step S370 of extracting public key and user verification hash information from a public key recording transaction information and user verification transaction information.
14. The method of claim 11,

    In the hash processing engine 520 of the blockchain-based public certificate authentication request server 500, user verification hash information among information included in a certificate validation signal transmitted from the blockchain-based public certificate authentication request server 500. In step S400 of calculating a hash value of the hash value and the hash value of the verification user verification hash information for each, and checking whether the calculated hash value is the same,

    Computing the hash value of the user verification hash information and the hash value of the user verification hash information for the preparation of the information included in the certificate validation signal transmitted from the blockchain-based public certificate authentication request server 500, and If both hash values are not the same, the blockchain-based official certificate management server 300 controls the user terminal 100 to be notified of a message indicating that the blockchain-based official authentication process is denied (S401). Authorized certificate authentication method based on the blockchain, characterized in that it comprises a.
15. The method of claim 11,

    Checking whether a certificate destruction signal for requesting destruction of the blockchain-based certificate is generated (S430);

    Checking whether the user terminal 100 and the blockchain-based authorized certificate management server 300 are generated when a certificate destruction signal is generated requesting the destruction of the blockchain-based certificate (S440);

    Transmitting a certificate destruction signal generated by the user terminal 100 to the blockchain-based authorized certificate management server 300 when a certificate destruction signal for requesting the destruction of the blockchain-based certificate is generated in the user terminal 100. (S450);

    The transaction management engine 320 is operated in the blockchain-based authorized certificate management server 300 to extract transaction ID information for user verification by matching the transmitted certificate destruction signal with transaction search keyword information DB 311 for each user. And transmitting it to the blockchain holding server (400) (S460);

    The blockchain holding server 400 transmits the user verification transaction information extracted by matching the transmitted user verification transaction ID information with the blockchain of the electronic wallet to the blockchain-based authorized certificate management server 300. Step S470;

    When the transaction processing engine 320 of the blockchain-based certificate management server 300 receives the transaction information for verifying the user, and the transaction information for destroying the certificate is recorded in the blockchain holding server 400, the user. Blockchain-based accredited certificate charged to the Bitcoin address for stockpiling for destruction by referring to the output data of verification transaction information (OD2) The multi-bitcoin authorization information including the right to use the blockchain-based authorized certificate destruction cost charged in the Bitcoin address, and the public key for the bitcoin payment required to determine the validity of the multi-bitcoin usage authorization information. Input data (ID3) containing and charge bitcoin address for the reserve compared to the discard Blockchain-based accredited certificate destruction The transaction information for destroying the accredited certificate is divided into output data (OD3) including the bitcoin address of the recipient to whom the remittance cost is transferred and the revocation cost recipient identification information identifying the recipient. Requesting an electronic signature by transmitting to the terminal 100 (S480);

    In the user terminal (100), operating a transaction signature engine (130) to digitally sign the transmitted transaction information for the certificate destruction sent to the block chain-based official certificate management server (300) (S490);

    Transmitting (500) the blockchain-based authorized certificate management server (300) to the blockchain holding server (400) for transaction information for destroying the electronic certificate signed by the user to be transmitted;

    In the blockchain holding server 400, recording the transaction information for destroying the electronic certificate signed by the user to be transmitted to the blockchain (S510); including, the blockchain-based authorized certificate of the user Certified certificate authentication method based on the block chain, characterized in that the destruction.
16. The method of claim 15,

    In step S440 of checking whether the user terminal 100 and the blockchain-based public certificate management server 300 is generated when a certificate destruction signal is generated requesting the destruction of the blockchain-based certificate,

    When the certificate destruction signal requesting the destruction of the blockchain-based certificate is generated in the blockchain-based certificate management server 300, the blockchain-based certificate management server 300 operates the transaction processing engine 320. Receiving the transaction information for user verification, when the transaction information for destroying the authorized certificate is recorded in the block chain holding server 400, referring to the output data (OD2) of the transaction information for user verification Bitcoin address for the reserve compared to the discard Blockchain-based Accredited Certificates Charged to Destructive Disclosure Costs That Instruct the Transfer of Costs Transfer Information, Remitters or users to use blockchain-based accredited certificates destroyed in Bitcoin addresses for stockpiling compared to destruction Multi bitcoin usage rights information, including the multi-bitcoin use rights information Bitcoin address and the recipient of the remittee where the input data (ID3) including the bitcoin payment public key required to determine the filial piety and the blockchain-based authorized certificate discarded reserve cost charged to the reserve bitcoin address for retirement are remitted. The transaction information for destroying the certificate is divided into output data (OD3) including the discarding cost collector identification information for identifying, and the blockchain-based certificate management server 300 in the generated transaction information for certificate destruction Transmitting the electronic signature of the remitter corresponding to the sender, and transmitting transaction information for destroying the electronic certificate signed by the remitter to the blockchain holding server 400 (S441);

    In the blockchain holding server 400, recording the transaction information for the electronic certificate discarded by the transmitted remitter to the blockchain (S442); including, blockchain-based authorized certificate of the user Certified certificate authentication method based on the block chain, characterized in that the destruction.
17. A user terminal 100 for requesting blockchain-based authorized authentication;

    According to the blockchain-based authorized authentication request of the user terminal 100, the identification information of the corresponding user is extracted from the user identification information DB 511 for each member, and the prepared user identification information is prepared by hashing the extracted user identification information. A blockchain-based authorized certificate authentication request server 500 which processes the time information and transmits the processed user contrast information and the designated user identification information of the corresponding user;

    Receive the user identification hash information and the designated user identification information for the preparation from the blockchain-based authorized certificate authentication request server 500, and the designated user identification information among the transmitted information by the transaction search keyword information DB 311 for each user and A blockchain-based authorized certificate management server 300 which transmits matching transaction ID information for matching and matching transaction ID information for user verification and requests downloading of public key recording transaction information and user verification transaction information;

    When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted transaction information for the bitcoin payment and records the transaction information for the bitcoin payment according to the authentication is mounted. However, the electronic wallet has also recorded the transaction information for the user verification including the public key recording transaction information and the user verification hash information including the public key for the public certificate, the blockchain-based public certificate management server 300 The blockchain-based authorized certificate management server 300 matches the public key recording transaction ID information and the user verification transaction ID information transmitted from the electronic wallet with matching electronic key wallet transaction information. Blockchain holding server 400 to transmit to; consisting of,

    The blockchain-based public certificate management server 300 extracts public certificate public key and user verification hash information from the public key recording transaction information and the user verification transaction information transmitted from the blockchain holding server 400. Hashing the transmitted contrast user identification hash information and the transaction ID information for the public key stored in the transaction search keyword information DB 311 for each user, and processing the extracted verification information into contrast user verification hash information; If the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information for each process is calculated to be the same, the extracted public key for the public certificate and the designated user of the user The identification information is transmitted to the blockchain-based authorized certificate authentication request server 500,

    The blockchain-based public certificate authentication request server 500 transmits the transmitted public certificate public key to the user terminal 100 with reference to designated user identification information among the transmitted information.

    The user terminal 100 is an authentication certificate authentication system based on a block chain, characterized in that for performing the authentication based on the transmitted public key for the public certificate.
18. The method of claim 17,

    The blockchain-based public certificate authentication request server 500 includes a hash processing engine 520,

    In the user identification information DB 511 for each member, identification information of a user who operates the user terminal 100 is stored, and a block chain-based authentication certificate consisting of identification information of a user used when issuing a blockchain-based authentication certificate is issued. The identification information of the user which is identical to the personal information for the user and the designated user identification information corresponding to the identification information of the predetermined user among the identification information of the user is stored,

    The hash processing engine (520), based on the block chain, characterized in that the hashing operation of the identification information of the user to process the processing to the user identification hash information for preparation.
19. The method of claim 17,

    The blockchain-based authorized certificate management server 300, a transaction processing engine 320; And hash processing engine 330 is mounted,

    In the transaction search keyword information DB 311 for each user, predetermined user identification information among the identification information of the same user as the personal information for issuing the blockchain-based authorized certificate, which is composed of the identification information of the user used when the blockchain-based authorized certificate is issued. It stores the specified user identification information, public ID record transaction ID information used as a key value for retrieving transaction information for public key recording, and user verification transaction ID information used as a key value for retrieving transaction information for user verification. ,

    The transaction processing engine 320 extracts a public key for public certificate and user verification hash information from the transaction information for recording the public key and the transaction information for user verification,

    The hash processing engine 330 hashes the prepared contrasting user identification hash information and the transaction ID information for public key recording stored in the transaction search keyword information DB 311 for each user to prepare for the verification user verification hash information. And processing a hash value of the extracted user verification hash information and a hash value of the processed user verification hash information, respectively, to determine whether the hash values of both are equal to each other. A certificate based certification system based on chain.
20. The method of claim 19,

    In the transaction verification information for the user, the blockchain-based authorized certificate destruction cost information, which is the cost to be used to destroy the blockchain-based authorized certificate, and the corresponding transaction verification information for the user verification are recorded in the blockchain of the blockchain holding server 400. Blockchain-based certified certificate discard cost information The cost of the blockchain-based certified certificate discard stock cost is compared to the bitcoin address for stockpile and the corresponding blockchain-based certified certificate discard stock cost in order to be transferred to the designated bitcoin address. Include storage cost escalation information,

    The transaction processing engine 320 of the blockchain-based authorized certificate management server 300 extracts a bitcoin address for stockpiling compared to discarded stock cost transfer information among information included in the user verification transaction information, and Generates a blockchain-based accredited certificate destruction confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost is transferred to the bitcoin amount charged to the reserve bitcoin address compared to the extracted discarded; Send to blockchain holding server 400,

    The blockchain holding server 400 matches a bitcoin address for stockpiling against the discard included in the transmitted blockchain-based official certificate destruction request signal and matches the blockchain with a corresponding bitcoin address for stocking against the discard. Sending a blockchain-based official certificate destruction guide signal that guides whether the charge of the blockchain-based official certificate destruction reserve cost transfer to the blockchain-based official certificate management server 300,

    The transaction processing engine 320 of the blockchain-based official certificate management server 300 has a blockchain-based official certificate discard cost stored in a bitcoin address for stockpiling compared to destruction by referring to a blockchain-based official certificate destruction guide signal. If it is transferred, the block chain-based authentication certificate authentication system based on the block chain, characterized in that the control to be notified to the user terminal (100) a message that the process of performing the blockchain-based authentication.
21. The method of claim 17,

    The transaction information for public key recording is a previous bitcoin payment transaction used to identify a storage location of a scheduled bitcoin to be used among the amount of bitcoins held by the remitter through the transaction information for bitcoin payment. Expenses required for registration of the Bitcoin usage authority information of the remitter, the Bitcoin payment public key required to determine the validity of the Bitcoin usage authority information, the public key for the public certificate required for issuing a blockchain-based public certificate Public key registration cost information, OP_RETURN information to guide the transaction for information recording, not a transaction for Bitcoin transactions, and the public certificate for the public certificate, characterized in that it comprises a block chain.
22. The method of claim 17,

    The user terminal 100, the information storage unit 102 is stored in the state of the encryption private certificate private key encrypted on the basis of a password and a picture image set by the user private certificate; And encryption and decryption engine 120;

    The blockchain-based public certificate authentication request server 500 transmits the public certificate public key as an encrypted public certificate public key for encryption based on a user confirmation request message requiring input of a password and a picture image set by the user. ,

    The encryption / decryption engine 120 of the user terminal 100 refers to the encrypted public certificate public key to be transmitted, and decrypts the private public key for the encrypted public certificate stored in the information storage unit 102 and inputs the user. If the password and the photo image is correct, the user authentication authentication signal based on the block chain, characterized in that the control to be transmitted to the block chain-based authorized certificate authentication request server 500.
23. The method of claim 22,

    In the information storage unit 102 of the user terminal 100, a user authentication screen unit;

    The stored user authentication screen unit,

    A password input screen 151 for performing authentication including a password input box 151a for inputting a password set by a user when issuing a blockchain-based authorized certificate;

    A plurality of images are displayed, the authentication screen image based on the block chain, characterized in that it comprises a; image selection screen 152 for performing a selectable display of the image specified by the user when issuing a block chain-based official certificate Authentication system.
24. The method of claim 17,

    The user verification transaction information is divided into input data ID2 and output data OD2, and the input data ID2 is included in the bitcoin amount held by the remitter through the previous transaction information for bitcoin payment. Bitcoin payment public key required to determine the validity of the previous Bitcoin payment transaction ID information, the remitter's Bitcoin permission information, and Bitcoin permission information used to identify the storage location of the expected Bitcoin to be used. Information on the cost of registering the user verification hash information required for issuing the blockchain-based public certificate, and information on the cost of destroying the blockchain-based public certificate, which is the cost to destroy the blockchain-based public certificate. The output data OD2 includes information for recording information that is not a transaction for bitcoin transactions. When the OP_RETURN information, the user verification hash information (OD21), and the corresponding user verification transaction information are recorded in the blockchain of the blockchain holding server 400, the block corresponding to the blockchain-based accredited certificate destruction cost information is provided. Blockchain-based certification certificate destruction, including the bitcoin address for stockpiling versus the blockchain-based certification certificate destruction reserve cost, which indicates the chain-based certification certificate destruction reserve cost is transferred to the designated bitcoin address. Check whether information (OD22) is included,

    The blockchain-based public certificate management server 300 includes a DB unit 310 having transaction search keyword information DB 311 for each user, which stores transaction ID information for public key recording and transaction ID information for user verification; And a transaction processing engine 320;

    When the blockchain-based authorized certificate management server 300 generates a certificate destruction signal for requesting the destruction of the blockchain-based certificate, the transaction processing engine 320 is operated to perform the transaction search keyword information DB 311 for each user. Extract transaction ID information for user verification, and transmit it to the blockchain holding server 400,

    The blockchain holding server 400 transmits the user verification transaction information extracted by matching the transmitted user verification transaction ID information with the blockchain of the electronic wallet to the blockchain-based authorized certificate management server 300,

    The transaction processing engine 320 of the blockchain-based authorized certificate management server 300 receives the transaction information for verifying the user, and when the transaction information for destroying the certificate is recorded on the blockchain holding server 400, the user. Blockchain-based accredited certificate charged to the Bitcoin address for stockpiling for destruction by referring to the output data of verification transaction information (OD2) The multi-bitcoin authorization information including the right to use the blockchain-based authorized certificate destruction cost charged in the Bitcoin address, and the public key for the bitcoin payment required to determine the validity of the multi-bitcoin usage authorization information. Input data (ID3) containing and charged to the bitcoin address for the reserve compared to the discard Blockchain-based accredited certificate destruction The transaction information for destroying the accredited certificate is divided into output data (OD3) including the bitcoin address of the recipient to which the remittance cost is transferred and the revocation cost recipient identification information identifying the recipient. Send to blockchain holding server 400,

    The blockchain holding server 400 writes the transaction information for destroying the authorized certificate in the blockchain to destroy the blockchain-based authorized certificate of the user.
25. The method of claim 24,

    The user terminal 100, and includes a transaction signature engine 130,

    The blockchain-based public certificate management server 300 requests the digital signature by transmitting the generated public certificate information for transaction destruction to the user terminal 100, if the certificate destruction signal is generated in the user terminal 100. ,

    The user terminal 100 operates the transaction signature engine 130, electronically signs the transmitted certificate information for transaction destruction, and transmits the electronic signature to the blockchain-based authorized certificate management server 300.

    The blockchain-based official certificate management server 300 controls such that the transaction information for destroying the electronic certificate signed by the user transmitted from the user terminal 100 is transmitted to the blockchain holding server 400. Authorized certificate authentication system based on blockchain.
26. The method of claim 24,

    The blockchain-based authorized certificate management server 300 operates the transaction processing engine 320 when the certificate destruction signal is generated by itself, the electronic signature of the remitter corresponding to the blockchain-based authorized certificate management server 300. To the transaction information for destroying the official certificate, and the transaction information for destroying the electronic certificate signed electronically by the remitter is transmitted to the blockchain holding server 400. Authentication system.
27. Step S600 of accessing the blockchain-based official certificate authentication request server 500 from the user terminal 100 to request blockchain-based official authentication;

    In the blockchain-based official certificate authentication request server 500, the identification information of the corresponding user is extracted from the user identification information DB 511 for each member according to the blockchain-based official authentication request, and the hash processing engine 520 is operated. Hashing the extracted user's identification information and processing it into contrast user identification hash information, and the processed contrast user identification hash information and the designated user identification information of the user are the blockchain-based authorized certificate management server. Transmitting to S300 (S610);

    The blockchain-based authorized certificate management server 300 receives the prepared user identification hash information and the designated user identification information, and the designated user identification information among the transmitted user-specific transaction search keyword information DB 311 and Transmitting the matching public ID recording transaction ID information and the user verification transaction ID information by matching to the blockchain holding server 400 to request the download of the public key recording transaction information and the user verification transaction information (S620). Wow;

    In the blockchain holding server 400, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet to match the public key recording transaction information and user verification transaction information. Transmitting to the blockchain-based authorized certificate management server 300 (S630);

    Operating the transaction processing engine 320 in the blockchain-based public certificate management server 300, the public key for public certificate and user verification hash information from the transmitted public key recording transaction information and user verification transaction information Extracting (S670);

    By operating the hash processing engine 330 in the blockchain-based authorized certificate management server 300, for recording the public key stored in the prepared contrasting user identification hash information and the user-specific transaction search keyword information DB 311 Hashing the transaction ID information and processing the transaction ID information into the verification user verification hash information (S680);

    In the hash processing engine 330 of the blockchain-based authorized certificate management server 300, the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information are respectively calculated. Checking whether the calculated hash values are the same (S690);

    If the hash value of the extracted user verification hash information is the same as the hash value of the processed user verification hash information, the block chain-based public certificate management server 300 extracts the public key for the public certificate. And transmitting the designated user identification information of the corresponding user to the blockchain-based authorized certificate authentication request server 500 (S700).

    Transmitting, at the blockchain-based public certificate authentication request server (500), the public key for the public certificate to the user terminal (100) by referring to designated user identification information among the transmitted information (S710);

    In the user terminal (100), performing a public certification based on the transmitted public certificate public key (S720); public certificate authentication method based on the block chain, characterized in that consisting of.
28. The method of claim 27,

    In the blockchain holding server 400, the transmitted public key recording transaction ID information and user verification transaction ID information are matched with an electronic wallet to match the public key recording transaction information and user verification transaction information. After the S630 step of transmitting to the blockchain-based official certificate management server 300,

    By operating the transaction processing engine 320 in the blockchain-based authorized certificate management server 300, and extracts the bitcoin address for the stock compared to the discard from the discard stock cost transfer information included in the transmitted user verification transaction information, Generates a blockchain-based accredited certificate confirmation request signal that inquires whether the blockchain-based accredited certificate destruction cost has been transferred to the bitcoin amount charged to the bitcoin address for stockpile compared to the extracted discarded data. Transmitting to the blockchain holding server 400 (S640);

    In the blockchain holding server 400, the bitcoin address for stockpile vs. discarded by matching the blockchain with the bitcoin address for stockpile compared to the discarded block included in the transmitted blockchain-based authorized certificate confirmation request signal. Transmitting a blockchain-based authorized certificate destruction guide signal for guiding whether the blockchain-based authorized certificate destruction cost is charged to the blockchain-based official certificate management server 300 (S650);

    In the transaction processing engine 320 of the blockchain-based official certificate management server 300, the blockchain-based official certificate charged to the bitcoin address for stockpiling for disposal with reference to the transmitted blockchain-based official certificate destruction or not guide signal Checking whether the discard stocking cost is transferred (S660);

    When the blockchain-based authorized certificate charged to the bitcoin address for the stockpile for disposal is transferred, the blockchain-based official authentication process from the blockchain-based official certificate management server 300 to the user terminal 100 is performed. And controlling the message to be notified that the message has been rejected (S661).
29. The method of claim 28,

    In the transaction processing engine 320 of the blockchain-based official certificate management server 300, the blockchain-based official certificate charged to the bitcoin address for stockpiling for disposal with reference to the transmitted blockchain-based official certificate destruction or not guide signal In step S660 to check whether the reserve storage costs are transferred,

    If it is confirmed that the blockchain-based accredited certificate disposal cost stored in the bitcoin address for the reserve is not transferred, operating the transaction processing engine 320 in the blockchain-based accredited certificate management server 300, the transmitted A method for authenticating a certificate based on a block chain, comprising entering a step S670 of extracting a public key for public authentication and user verification hash information from transaction information for public key recording and transaction information for user verification.
30. The method of claim 27,

    In the hash processing engine 330 of the blockchain-based authorized certificate management server 300, the hash value of the extracted user verification hash information and the hash value of the processed user verification hash information are respectively calculated. In step S690 of checking whether the calculated hash values are the same,

    If both of the calculated hash values are not the same, the blockchain-based official certificate management server 300 controls the user terminal 100 to be notified of a message indicating that the blockchain-based official authentication process is denied (S691). Certified method authentication method based on the block chain, characterized in that it comprises a.

Images