WO2018194379A1 - Method for approving use of card by using token id on basis of blockchain and merkle tree structure associated therewith, and server using same - Google Patents

Abstract

The present invention relates to a method for approving the use of a card by using a token ID, wherein, in a state where a first and a second blockchain transaction ID are managed, when payment request information is acquired, a relay server: registers order data in a first blockchain database, and when a triggering condition is satisfied, registers a second representative hash value or a processed value thereof in a second blockchain database; and registers approval result information obtained from a financial server in the first blockchain database, and when a triggering condition is satisfied, registers a third representative hash value or a processed value thereof in the second blockchain database, manages a third, a fourth, a fifth, and a sixth blockchain transaction ID, and transmits the approval result information to at least one of a service providing terminal and a user terminal.

Description

How to approve card use by using block ID and token ID based on Merkle tree structure linked with server and server using same

The present invention relates to a method for authorizing card use using a blockchain and a Merkle Tree-based token ID linked thereto, and a server using the same. More specifically, a user included in payment request information obtained from a service providing terminal is provided. Obtaining a push token ID registered in the first blockchain database using the first blockchain transaction ID corresponding to the identification information, or obtaining a data message from the second blockchain database using the second blockchain transaction ID, Acquiring the push token ID registered in the first blockchain database from the Merkle tree information and the leaf node information stored in the first blockchain database in association with the first representative hash value included in the data message, and corresponding to the push token ID. Authentication of the order data to the user terminal Checks the validity of the user signature value signed by the user's private key with the order data obtained from the user terminal, and registers the order data in the first blockchain database and manages a corresponding third blockchain transaction ID. If the triggering condition is satisfied, the second block chain stores the second representative hash value calculated by applying a hash function to the order data and at least one neighboring hash value matching the second specific hash value. Register in the database and manage the corresponding fourth blockchain transaction ID, and transmit the approval request information to the financial server, the financial server to verify the order data, and transmit the approval result information corresponding to the verification result, If the approval result information is obtained from the financial server, the approval result information is transferred to the first blockchain data. Register in the base and manage the fifth blockchain transaction ID corresponding thereto, and when the triggering condition is satisfied, the third specific hash value generated by applying a hash function to the approval result information and at least one matched with the third specific hash value Registering the third representative hash value calculated the neighbor hash value in the second blockchain database, and manages the sixth blockchain transaction ID corresponding to the blockchain, and transmits the approval result information to at least one of the service providing terminal and the user terminal The present invention relates to a method and a server for approving card use using a token ID based on a Merkle tree structure.

With the increase of credit card users in online shopping malls and offline stores, credit cards are becoming an important payment method along with cash.

The general flow of payment using a credit card is as follows.

First, a user makes a purchase request to a service provider such as a shopping mall by purchasing a specific product or service, and inputs a card number to an online certification company.

Then, the online certification company requests the card company to authenticate the card number, and receives an authentication result of the card number from the card company. If the authentication result is successful, the online certification company passes the authentication number to the service provider, the shopping mall passes the encrypted card number and the authentication number to the payment gateway (PG company) and the payment agency passes it to the VAN company. And, the VAN is a serial delivery is made to pass it back to the card company. Then, the approval result from the card company is delivered to the VAN company, the VAN company to the payment agency, the payment agency from the payment provider to the service provider, and the user receives the final approval result.

Conventional payment method of the related art has been a method of making a payment by inputting a general payment password registered with a user's credit card number after performing separate user authentication and card authentication for online payment. It can be said to be a payment method by entering a card number of a credit card which is weak in verification. In addition, since the payment agency and VAN company stores and uses the user's card number, there is a disadvantage in that the risk of leaking card information is greatly exposed.

Accordingly, in order to maintain the conventional payment method, excessive cost and effort for obtaining information protection certification, qualified PG company, and PCI-DSS certification qualification are required, and abnormal transaction tracking system such as FDS (Abnormal State Awareness System) and While manpower management is necessary, there is a lack of specialized manpower for this.

The payment flow of the simple payment, which is a step further than the general payment method, is as follows.

First, when a user makes a purchase request to a service provider, the service provider requests a payment from a payment agency. Then, the payment agency sends an authentication request signal to the simple payment app provided to be installed on the user's mobile terminal by the payment agency, and the user takes an authentication confirmation action such as inputting a predetermined password as a response to the authentication request signal. . Then, the card number of the credit card is sent to the payment agency from the simple payment app, the payment agency authenticates itself, passes the encrypted card number to the VAN company, and the VAN company transfers it to the card company again. . Then, the approval result from the card company is delivered to the VAN company, the VAN company to the payment agency, the payment agency from the payment provider to the service provider, and the user receives the final approval result.

Such a simple payment is a service that allows a simple and complicated payment of the general payment method in the online payment simply by inputting the app password.

However, such a simple payment is a method of storing and using a user's card number through an app of a qualified payment agent who has qualified as a qualified PG company, and thus the card is still stored and used by the payment agent and the VAN company. There is a risk of information disclosure.

As with the shortcomings of the above-mentioned general payment method, the simple payment method requires excessive cost and effort to obtain information protection certification, qualified PG company, and PCI-DSS certification, and abnormal transactions such as FDS (Abnormal State Awareness System) While tracking systems and manpower operations are required, there is a shortage of specialist personnel.

In addition, in the situation where there is no absolute operator of the simple payment method, the user must register and use the card number of the credit card he uses a lot in various simple payment apps. In particular, in the presence of a variety of simple payment app, according to the service provider does not have a simple payment app mainly used by the user has a disadvantage that you need to repeatedly register the credit card information.

The present invention aims to solve all the above-mentioned problems.

In addition, another object of the present invention is to minimize the risk of exposing the information of the card in the approval process for the use of the card.

In addition, the present invention by the card information is not transmitted and received between the entities (entities) participating in the approval of the use of the card, the card information is not exposed so that personal information is protected, it is possible to authorize the use of the card with high reliability of identity authentication. To make another purpose.

It is another object of the present invention to register and manage a transaction relating to the approval of the use of a card in a blockchain database of virtual currency, so that forgery of the authorization information is impossible.

In addition, the present invention is another object of not only simplifying the system but also reducing the maintenance cost by using a blockchain database without using a VAN company or a PG company in the approval of the use of the card.

Representative configuration of the present invention for achieving the above object is as follows.

According to an embodiment of the present invention, in the method of authorizing the use of a card using a token ID, (a) a card token ID corresponding to the user's card information, user identification information for identifying the user, and the user's Register the push token ID corresponding to the app installed in the user terminal and the public key of the user in a first blockchain database, and manage the first blockchain transaction ID corresponding to the push token ID, the card token ID, the user identification information, A first representative hash value or the first representative hash value obtained by calculating a first specific hash value generated by applying a hash function to the push token ID and the public key and at least one neighboring hash value matching the first specific hash value Register the processed hash value to the second blockchain database and then correspond to the second blockchain transaction. In the state of managing the device, when the payment request information including the user identification information and order data corresponding to the user's card use is obtained from the service providing terminal, the mediation server (1) the Obtain the push token ID registered in the first blockchain database using the first blockchain transaction ID corresponding to user identification information, or (2) the second information corresponding to the user identification information of the payment request information; Acquire a data message from the second blockchain database using a second blockchain transaction ID, and relate to a value obtained by processing the first representative hash value or the first representative hash value included in the data message; Recalling Merkle tree information and leaf node information stored in the blockchain database Search in a first blockchain database, obtain the push token ID registered in the first blockchain database with reference to the found merkle tree information and leaf node information, and the user corresponding to the obtained push token ID Requesting an authentication for the order data from a terminal or supporting another device to make a request; (b) if the user signature value of signing the order data with the private key of the user is obtained from the user terminal in response to the authentication request for the order data, the intermediate server registers the registered data in the first blockchain database. Verifying whether the user signature value is valid using the public key of the user, and if the user signature value is valid, (1) registering the order data in the first blockchain database or allowing another device to register; Managing a third blockchain transaction ID corresponding thereto; and (2) a second specific generated by applying a hash function to the order data when a triggering condition for registering a predetermined hash value in the second blockchain database is satisfied. A second operation of calculating a hash value and at least one neighboring hash value matching the second specific hash value Further comprising: table hash value or register the first value by processing a second hash value representative of said second block chain database, or support to enable registration to other devices and managing the fourth block chain transaction ID corresponding thereto; And (c) the intermediary server, by (i) transmitting to the financial server authorization request information including the card token ID and the order data corresponding to the user identification information or allowing other devices to transmit the financial request. The server verifies the order data included in the authorization request information with reference to the order data registered in the first blockchain database in response to the card token ID included in the authorization request information, and corresponds to a verification result. And (ii) when the approval result information is obtained from the financial server, (1) registering the approval result information in the first blockchain database or allowing another device to register. And manage the fifth blockchain transaction ID corresponding thereto (2) the above When a triggering condition for registering a predetermined hash value in a blockchain database is satisfied, a third specific hash value generated by applying a hash function to the approval result information and at least one neighboring hash matching the third specific hash value Register a third representative hash value or a value obtained by processing the third representative hash value in the second blockchain database or allow another device to register and manage a sixth blockchain transaction ID corresponding thereto; And transmitting the authorization result information to at least one of the service providing terminal and the user terminal or supporting another device to transmit the authorization result information.

In addition, according to an embodiment of the present invention, in the intermediary server that authorizes the use of the card by using a token ID, the card token ID corresponding to the user's card information, user identification information for identifying the user, the user's Register the push token ID corresponding to the app installed in the user terminal and the public key of the user in a first blockchain database, and manage the first blockchain transaction ID corresponding to the push token ID, the card token ID, the user identification information, A first representative hash value or the first representative hash value obtained by calculating a first specific hash value generated by applying a hash function to the push token ID and the public key and at least one neighboring hash value matching the first specific hash value Register the processed hash value in the second blockchain database and the corresponding second blockchain trans A communication unit for obtaining payment request information including the user identification information and order data corresponding to the user's use of the card from a service providing terminal in a state of managing a transaction ID; And (1) obtaining the push token ID registered in the first blockchain database using the first blockchain transaction ID corresponding to the user identification information of the payment request information, or (2) the payment request information. Obtain a data message from the second blockchain database using the second blockchain transaction ID corresponding to the user identification information of the first representative hash value or the first representative hash value included in the data message; Search the first blockchain database for merkle tree information and leaf node information stored in the first blockchain database in relation to the processed value, and refer to the retrieved Merkle tree information and leaf node information for the first blockchain information. Obtain the push token ID registered in the blockchain database, A first process of requesting authentication of the order data to the user terminal corresponding to the obtained push token ID or of requesting another device to request the request from the user terminal in response to the authentication request for the order data; When a user signature value obtained by signing data with the private key of the user is obtained, the user signature value is checked using the public key of the user registered in the first blockchain database, and the user signature value is valid. (1) register the order data in the first blockchain database or allow other devices to register and manage a third blockchain transaction ID corresponding thereto, and (2) predetermined in the second blockchain database. If the triggering condition for registering the hash value of is satisfied, Processing a second representative hash value or the second representative hash value calculated by calculating a second specific hash value generated by applying a hash function to pre-order data and at least one neighboring hash value matching the second specific hash value A second process of registering a value in the second blockchain database or allowing another device to register and managing a fourth blockchain transaction ID corresponding thereto; and (i) the financial server corresponding to the user identification information; By transmitting the authorization request information including the card token ID and the order data or by supporting other devices, the financial server causes the financial server to correspond to the card token ID included in the authorization request information. The order data included in the approval request information with reference to the order data registered in The verification result, and transmits the approval result information corresponding to the verification result to the intermediary server, and (ii) when the approval result information is obtained from the financial server, (1) sending the approval result information to the first blockchain. Register in a database or allow other devices to register and manage a fifth blockchain transaction ID corresponding thereto; and (2) if a triggering condition for registering a predetermined hash value in the second blockchain database is satisfied, the approval. A third representative hash value calculated by applying a hash function to the result information and at least one neighboring hash value matching the third specific hash value, or a value obtained by processing the third representative hash value The 6th blockchain transaction corresponding to registering in the second blockchain database or allowing other devices to register And a processor configured to manage an ID and to transmit the approval result information to at least one of the service providing terminal and the user terminal or to perform a third process for supporting another device to transmit the authorization result information. .

In addition to this, a computer readable recording medium for recording a computer program for executing the method of the present invention is further provided.

According to the present invention, the following effects are obtained.

The present invention can minimize the risk of exposing the card information in the approval process for the card use by registering the card token ID corresponding to the card information in the blockchain database and performing the approval for the use of the card.

In addition, the present invention by the card information is not transmitted and received between the entities (entities) participating in the approval of the use of the card, the card information is not exposed so that personal information is protected, it is possible to authorize the use of the card with high reliability of identity authentication. It can be done.

In addition, the present invention can improve the reliability and security of the card use approval system because it is impossible to forgery the authorization information by registering and managing the transaction related to the approval of the card use in the blockchain database of the virtual currency.

In addition, the present invention can not only simplify the system but also reduce maintenance costs by using the blockchain database without using VAN or PG in the approval of the use of the card.

In addition, since the present invention does not require a complicated process through a conventional payment agency, VAN company, a service provider such as a shopping mall does not need to introduce a complex system such as simple payment, general payment, and secure payment. .

1 schematically illustrates a system for performing card authorization using a token ID according to an embodiment of the present invention.

2 schematically illustrates a process of registering a card according to an embodiment of the present invention,

3 and 4 schematically illustrate a process of triggering a transaction related to the use of a card to a second blockchain database according to an embodiment of the present invention,

FIG. 5 schematically illustrates a method for authorizing card use using a token ID according to an embodiment of the present invention.

6 schematically illustrates a process of purchasing in a method of authorizing card use using a token ID according to an embodiment of the present invention.

DETAILED DESCRIPTION The following detailed description of the invention refers to the accompanying drawings that show, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different but need not be mutually exclusive. For example, certain shapes, structures, and characteristics described herein may be embodied in other embodiments without departing from the spirit and scope of the invention with respect to one embodiment. In addition, it is to be understood that the location or arrangement of individual components within each disclosed embodiment may be changed without departing from the spirit and scope of the invention. The following detailed description, therefore, is not to be taken in a limiting sense, and the scope of the present invention, if properly described, is defined only by the appended claims, along with the full range of equivalents to which such claims are entitled. Like reference numerals in the drawings refer to the same or similar functions throughout the several aspects.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement the present invention.

1 schematically illustrates a system for performing authorization of card use using a token ID according to an embodiment of the present invention. The system includes a user terminal 10, a service providing terminal 20, and an intermediary server 100. ), And the financial server 200.

First, the user terminal 10 is a mobile device that receives information corresponding to the use of the card, and performs a user check on the received information, and includes a mobile computer, a PDA / EDA, a mobile phone, a smartphone, a tablet, and the like. can do. The user terminal 10 is not limited thereto, and may include all mobile devices such as a portable game machine having a wired / wireless communication function, a digital camera personal navigation, and the like. In addition, the user terminal 10 may include a communication unit that supports the transmission and reception of information and a processor that processes the information.

In addition, the user terminal 10 may include an application (APP), which is a user interface provided by an intermediary server.

In addition, the service providing terminal 20 may be a terminal that performs payment according to the user's use of a card, and may include a card payment terminal of an offline shopping mall or a payment server of an online shopping mall. In addition, the service providing terminal 20 may include any terminal that enables payment using a card for a cost corresponding to a service provision or a purchase of a product online or offline.

Next, the mediation server 100 may include a communication unit 110 and a processor 120. In addition, the intermediary server 100 may be configured with a plurality of servers that perform respective functions related to the approval of card use. In addition, the mediation server 200 may be a server corresponding to each node of the first blockchain database, or may be a server managing each node of the first blockchain database. The intermediate server 100 may be a server that registers a representative hash value of information related to the use of a card in the second blockchain database 400 when the triggering condition is satisfied. In this case, the first blockchain database may be a private blockchain database, and the second blockchain database 400 may be another private blockchain database or a public blockchain database linked to the first blockchain database. In addition, the intermediary server 100 may be a transaction server that manages transactions with other devices in connection with the card usage authorization.

Specifically, mediation server 100 is typically a computing device (eg, a device that may include components of a computer processor, memory, storage, input and output devices, other conventional computing devices; electronics such as routers, switches, etc.). A desired system using a combination of a communication device; an electronic information storage system such as network attached storage (NAS) and a storage area network (SAN) and computer software (ie, instructions that cause a computing device to function in a particular way). May be to achieve performance.

The communication unit 110 of such a computing device may transmit and receive a request and a response with another computing device to be interlocked. For example, the request and response may be made by the same TCP session, but are not limited thereto. For example, it may be transmitted and received as a UDP datagram.

In addition, the processor 120 of the computing device may include a hardware configuration such as a micro processing unit (MPU) or a central processing unit (CPU), a cache memory, a data bus, and the like. In addition, the operating system may further include a software configuration of an application performing a specific purpose.

Next, the financial server 200 may include a communication unit and a processor, and may provide a service for approval of a user's use of a card and a purchase of a service provider. The financial server 200 may be a card company server, but is not limited thereto. The financial server 200 may include all servers that provide an authorization service for card use, and the financial server 200 may provide a card service. It may be composed of a plurality of servers corresponding to the subject. In addition, the financial server 200 may include a first financial server 210 and a second financial server 220, the first financial server 210 is a mediation server 200, the first, blockchain database, And confirming a variety of information required for card use approval through communication with the second blockchain database 400, and the second financial server 220 communicates with the first financial server 210 in a first manner. The authorization operation may be performed on the card use confirmed by the financial server 210. In this case, the second financial server 220 may communicate with the first financial server 210 by using an open application interface (API).

Specifically, financial server 200 is typically a computing device (eg, a device that may include components of a computer processor, memory, storage, input and output devices, other conventional computing devices; electronics such as routers, switches, etc.). A desired system using a combination of a communication device; an electronic information storage system such as network attached storage (NAS) and a storage area network (SAN) and computer software (ie, instructions that cause a computing device to function in a particular way). May be to achieve performance.

Referring to the method for approving the use of the card using the token ID according to an embodiment of the present invention through the system configured as described above are as follows.

First, a method of registering a card according to an embodiment of the present invention will be described with reference to FIG. 2.

The user is connected to the intermediary server 100 through the user terminal 10 to register a card to be used, for example, the user runs an app installed in the user terminal 10 for card registration, and registers a card. Personal information for the user, user identification information, and card information are input (S101). In this case, the personal information may include a user's name, date of birth, etc. The user identification information is unique information given to each user for identification of the user, user ID, social security number, user terminal ID, IP address of the user terminal, user The terminal may include at least one of a MAC address and a telephone number. The card information may include a card number and a key number of a card, but is not limited thereto. The card information may include information about a card issuer, that is, a card company, an expiration date, card user information, and the like.

When the user inputs personal information, user identification information, and card information and requests card registration, the user terminal 10 registers a card including the user's personal information, user identification information, card information, and a push token ID. The request information is transmitted to the mediation server 100 or the other device supports the transmission (S102). In this case, the push token ID is a token ID corresponding to an app installed in the user terminal 10. The user terminal 10 may extract and transmit the user's personal information and the user identification information from the storage of the user terminal 10, unlike the user input.

Then, the mediation server 100 obtains the card registration request information including the user's personal information, user identification information, card information, and push token ID from the user terminal 10, the card obtained by the financial server 200 Request verification of the information or support the other device to request (S103).

In response to the card information verification request from the mediation server 100, the financial server 200 confirms the card information requested for verification, and if the card information for verification is found to be valid in accordance with the registered card information, the financial server ( 200 generates a card index key corresponding to the card information, and transmits the card information verification result including the card index key to the relay server 100 or supports other devices to transmit (S106).

In this case, when the financial server 200 includes the first financial server 210 and the second financial server 220, the first financial server 210 responds to the card information verification request received from the intermediary server 100. In response to the request for verification of the card information to the second financial server 220 or other devices to request (S104), the second financial server 220 in response to the card information verification to verify the card information requested When the card information is verified and verified to be valid in accordance with the registered card information, the second financial server 220 generates a card index key corresponding to the card information, and verifies the card information including the card index key. The result is transmitted to the first financial server 210 or the other device to support the transmission (S105), the first financial server 210 card containing the card index key received from the second financial server 220 Brokerage information verification results Jugeona and transmits it to 100 to cause the support to the other transmission device (S106).

Then, the mediation server 100 generates a card token ID corresponding to the card index key by referring to the card information verification result received from the financial server 200 (S107).

The mediation server 100 checks the user with reference to the card registration request information obtained from the user terminal 10. In this case, the user verification may use a public key infrastructure (PKI) certificate or user's personal information, but is not limited thereto. For example, a specific issuer can be verified through a public key-based certificate such as an accredited certificate or an OPSign certificate, or an individual, a bank, or an organization can verify the identity of an individual such as a social security number, a passport, a corporate registration number, a business registration number, and login information. User can be identified through personal information.

Then, when the user is confirmed, the mediation server 200 requests user authentication to the app corresponding to the push token ID included in the card registration request information, that is, the user terminal 100 installed in the corresponding application, or makes a request to another device. It is supported to (S108).

Then, the user terminal 100 generates a public key and a private key, which are authentication keys, in response to the user authentication request (S109), so that confirmation information for controlling user access to the private key is set by the user. In this case, the verification information is pass information for accessing the private key and may include at least one of a password, a PIN code, a fingerprint information of a user, and biometric information of a user. Alternatively, setting of confirmation information for access control on the private key may be omitted. In addition, the setting of the confirmation information may be performed before generating the authentication key of the user.

Thereafter, the user terminal 100 extracts the public key of the user from among the authentication keys, transmits authentication information including the extracted public key of the user to the intermediary server 100 or supports other devices to transmit ( S110).

In the above, the intermediary server 100 performs user verification and user authentication after generation of the card token ID. However, when the card registration request information is obtained from the user terminal 10, the mediation server 100 performs user verification and user authentication, and then the financial server ( 200, a verification request for card information may be performed.

Then, the mediation server 100 registers the card token ID, the user identification information, the push token ID, and the public key in the first blockchain database to which copying, forgery and forgery are impossible or supports other devices to register ( S111).

For example, the mediation server 100 registers card registration information including a card token ID, user identification information, a push token ID, and a public key in the first blockchain database, and the card token registered in the first blockchain database. A first blockchain transaction ID representing location information on a first blockchain database of card registration information including an ID, user identification information, a push token ID, and a public key may be obtained and managed.

When the triggering condition for registering the predetermined hash value in the second blockchain database 400 is satisfied, the mediation server 100 may apply a hash function to the card token ID, the user real information, the push token ID, and the public key. By calculating the first specific hash value generated and the at least one neighboring hash value matching the first specific hash value, the first representative hash value or the first representative hash value which is the Merkle root is generated (S112). ).

In addition, the mediation server 100 registers a value generated by processing the first representative hash value or the first representative hash value, which is the generated Merkle root, in the second blockchain database 400 or by allowing other devices to register (S113). ), A second blockchain transaction ID indicating position information on the second blockchain database 400 of Merkle Root, which is a value obtained by processing the first representative hash value or the first representative hash value registered in the second blockchain database 400. It may acquire or support other devices to obtain (S114).

Meanwhile, the mediation server 100 may store and manage the first specific hash value and at least one neighbor hash value in a predetermined data structure. Here, the data structure may vary, for example, may be a merkle tree structure.

That is, the mediation server 200 may support to generate or generate a merkle tree in which the first specific hash value is assigned to the specific leaf node, and if the triggering condition is satisfied, at least one matching the first specific hash value The first representative hash value or the processed first representative hash value, which is a merkle root generated by calculating a hash value assigned to one other leaf node, may be registered or registered in the second blockchain database 400. .

More specifically, the (x1) mediation server 100 may calculate or compute a hash value assigned to the sibling node of a node to which (i) the first specific hash value and (ii) the first specific hash value are assigned. And assign or assign a hash value for the computed value to the node's parent node. (x2) If the parent node is the root node of the Merkle tree, the hash value assigned to the parent node becomes the first representative hash value. (x3) On the other hand, if the parent node is not the root node of the Merkle tree, the mediation server 100 repeatedly performs (x1) to (x3) by using the hash value assigned to the parent node as the first specific hash value. .

The mediation server 200 finally registers the hash value allocated to the root node of the Merkle tree as the first representative hash value in the second blockchain database 400 or enables other devices to register. At this time, a value obtained by processing the first representative hash value may be registered. For example, a result value of performing a hex operation may be registered in the first representative hash value.

Meanwhile, when the mediation server 100 stores the first specific hash value and at least one neighboring hash value in a predetermined fifth data structure, and then stores and manages a sixth data structure having the same form as the fifth data structure. The fifth data structure and the sixth data structure may be connected in a chain form.

In particular, when the fifth data structure and the sixth data structure are Merkle trees as in the above-described example, a root value of the fifth data structure or a hash value of the root value may be assigned to the first leaf node of the sixth data structure. .

In addition, when the sixth data structure is generated, data integrity may be more guaranteed by verifying the fifth data structure. The verification of the sixth data structure will be described later.

In addition, in the case of the first Merkle tree of at least one Merkle tree connected in a chain form, the first leaf node of the first Merkle tree may be assigned a hash value or a processed value of predetermined message data consisting of text, numbers, or symbols. have. For example, a hash value of an input message initially given by the mediation server 100 may be assigned when generating the merkle tree.

3 and 4 show examples of merkle trees created according to one embodiment of the invention.

3 shows a Merkle tree with four leaf nodes. Since the illustrated Merkle tree is the first Merkle tree (tree_id = 0), it can be seen that a hash value (sha256 (coinplug_unique_message)) of predetermined message data is assigned to the h0 node which is the first leaf node. When there is a registration request for the historical data (that is, a transaction registration request relating to the use of a card), the mediation server 100 generates a next leaf node of the last leaf node of the Merkle tree that is currently being configured, so as to generate a first specific hash value or It supports to assign or assign a processed value of the first specific hash value. For example, when a new leaf node needs to be created while the value allocation is completed from the merkle tree of FIG. 3 to the second leaf node h1, a first specific hash value or a specific hash value is generated by creating a next leaf node h2. You can assign the processed value (sha256 (input2)). In addition, the mediation server 100 may support to calculate or calculate (i) the first specific hash value assigned to the h2 node and (ii) the hash value assigned to the h3 node that is the sibling node of the h2 node. The hash value for the operation value is assigned to the parent node (h23 node) of node h2 and node h3. Since the parent node (h23 node) is not the root node of the Merkle tree, the mediation server 100 may repeat the above process by using the hash value assigned to the h23 node as the first specific hash value. That is, the hash value assigned to the h23 node is used as the first specific hash value, and the hash value assigned to the h23 node and the hash value assigned to the h01 node are calculated and assigned to the parent node (h0123 node) of the h23 node and the h01 node. can do. At this time, since the h0123 node is the root node of the Merkle tree, the mediation server 100 registers a value (hex (h {node_index})) of the hash value assigned to the h0123 node in the second blockchain database 400 or Can assist other devices to register

Meanwhile, the aforementioned triggering conditions may include (i) a condition in which transactions related to card use are generated by a predetermined number, (ii) a condition in which a predetermined time elapses, (iii) a condition in which blocks are generated in the first blockchain database, (iv) may include at least one of conditions for service characteristics.

On the other hand, for example, if a transaction related to the use of the card is acquired by the number of leaf nodes of the Merkle tree, the Merkle tree is generated, and the root value of the Merkle tree is registered in the second blockchain database 400 or other devices are registered. Can support

In addition, the mediation server 100 may generate the root value of the aforementioned Merkle tree on a predetermined time basis (condition (ii) above). In this case, when a predetermined time elapses, the intermediary server 100 generates a Merkle tree using the input values up to that time and registers the root value of the Merkle tree in the second blockchain database 400 or allows other devices to register. Can support

In this case, however, a value may not be assigned to a sibling node of a node to which a specific hash value of the Merkle tree is assigned even after a predetermined time has elapsed. In this case, when the triggering condition is satisfied and the hash value is not assigned to the sibling node of the node to which the first specific hash value is assigned, the intermediary server 100 supports to assign or assign a predetermined hash value to the sibling node. In one way, the root value of the Merkle tree can be calculated. For example, the mediation server 100 may support to assign or assign a sibling node by replicating the first specific hash value.

The service characteristics include cost information provided by the issuer who issued the transaction related to the use of the card, time zone information where the transaction related to the use of the card is registered, area information where the transaction registration service related to the use of the card is performed, and transaction registration request related to the use of the card. It may be at least part of the company type information. However, the present invention is not limited to the above description and includes various condition information in which a generally accepted differential service can be provided.

On the other hand, when a new Merkle tree generation starts and the triggering condition is satisfied in the absence of a card use related transaction, the mediation server 100 generates a Merkle tree in which predetermined message data is assigned to the first leaf node and the second leaf node. Or to generate or register the root value of the Merkle tree or a processed value thereof in the second blockchain database 400. In this case, a two leaf node Merkle tree may be created.

In addition, as described above, the mediation server 100 stores the first specific hash value and the at least one neighboring hash value in a predetermined fifth data structure, and then stores the sixth data structure having the same form as the fifth data structure. When managing, the fifth data structure and the sixth data structure may be connected in a chain form. In particular, when the fifth data structure and the sixth data structure are Merkle trees, a root value of the fifth data structure or a hash value of the root value may be assigned to the first leaf node of the sixth data structure.

4 illustrates a Merkle tree generated as a sixth data structure according to an embodiment of the present invention.

Referring to FIG. 4, it can be seen that the root value hex (h0123) of the merkle tree (tree_id = 0) of FIG. 3 is allocated to the first leaf node (h4 node) of the new merkle tree (sha256 (input4)). The present invention has an advantage of improving data integrity by easily tracking even when data is tampered with by connecting a plurality of data structures generated when a transaction occurs.

In addition, the mediation server 100 transmits the card token ID and the card index key to the financial server 200 or supports the transmission of other devices (S115).

Then, the financial server 200 stores the card token ID received from the mediation server 100 (S116), and maps the card index key and the card token ID which is the card information (S117). That is, the financial server 200 checks the card index key transmitted as the card information verification result by referring to the card index key received from the mediation server 100 and maps the confirmed card index key and the card token ID. In this case, when the financial server 200 includes the first financial server 210 and the second financial server 220, the above operation may be performed by the first financial server 210.

In addition, the mediation server 100 transmits the result of registering the card registration information including the card token ID, the user identification information, the push token ID, and the public key to the first blockchain database to the user terminal 10 or to another device. The user may check the card registration result through the user terminal 10.

Referring to FIG. 5, a method of authorizing the use of a card by using a token ID according to an embodiment of the present invention in a state where a card is registered by such a method is as follows.

By using the method of FIG. 2, the card token ID corresponding to the user's card information, the user identification information for identifying the user, the push token ID corresponding to the app installed in the user terminal 10 of the user, and the user's public key are obtained. The first specific hash value generated by applying a hash function to the card token ID, the user identification information, the push token ID, and the public key, is registered in the blockchain database and manages the corresponding first blockchain transaction ID. Registering a first representative hash value for calculating at least one neighboring hash value matching the first specific hash value or a value for processing the first representative hash value in the second blockchain database 400 and corresponding second In order to manage the blockchain transaction ID, the user can order the service or purchase the product online or offline. In order to settle the cost according to the data using the card to enter or provide the user identification information corresponding to the user's card use to the service providing terminal 20 to proceed with the order for the order data (S201), the service providing terminal ( 20) stores the order data which is information about the service or products ordered by the user (S202), and transmits the payment request information including the user identification information and the order data to the intermediary server 100 or to let other devices Support to transmit (S203).

Then, the mediation server 100 corresponds to the user identification information of the payment request information obtained from the service providing terminal 20, that is, the first block using the first blockchain transaction ID obtained and managed in the card registration operation. Confirming the push token ID of the user registered in the chain database or obtaining a data message from the second blockchain database 400 using the second blockchain transaction ID corresponding to the user identification information, 1 The Merkle tree information and leaf node information stored in the first blockchain database are retrieved from the first blockchain database in relation to the representative hash value or the value of the first representative hash value. Check the push token ID registered in the first blockchain database by referring to the information, Acquire the confirmed push token ID (S204).

In addition, the mediation server 100 requests an authentication for the order data including the order data to the user terminal 10 in which the app corresponding to the push token ID, that is, the app corresponding to the push token ID is installed, or causes the other device to perform an operation. Support to request (S205).

Then, the user terminal 10 requests the user to confirm the order data and to authenticate the order data (S206). Then, after confirming that the user matches the contents of the order through the order data, the user terminal 10 inputs the identification information set by the user, including at least one of a password, a PIN code, a fingerprint, and biometric information. Check whether the confirmation information input by the user matches the confirmation information preset by the user (S207).

In addition, when the confirmation information input by the user matches the preset confirmation information, the user terminal 10 generates a user signature value for the order data and transmits it to the intermediate server 100 or supports other devices to transmit it. (S208). For example, the user terminal 10 is allowed to access the stored user's private key when the confirmation information input to the user matches the predetermined confirmation information, and thus the user signature value of signing the order data with the user's private key. It generates and transmits the generated user signature value to the intermediary server 100.

Then, the mediation server 100 checks whether the user signature value that signed the order data obtained from the user terminal 10 is valid (S209).

For example, the mediation server 100 checks the public key of the user registered in the first blockchain database using the first blockchain transaction ID managed in response to card registration, and removes the public key of the confirmed location. 1 Obtained from the blockchain database. In addition, the mediation server 100 checks a value of processing the first representative hash value or the first representative hash value included in the data message obtained from the second blockchain database 400 using the second blockchain transaction ID. And acquire a push token ID registered in the first blockchain database by referring to the merkle tree information and leaf node information stored in the first blockchain database searched using the identified first representative hash value or the first representative hash value. You may. Thereafter, the mediation server 100 checks whether the user signature value is valid using the obtained public key. At this time, the intermediary server 100 extracts the order data from the user signature value by using the public key, checks whether the order data extracted from the user signature value and the order data included in the payment request information are identical to each other. Determine validity.

If it is determined that the user signature value is valid, the mediation server 100 registers the order data obtained from the payment request information in the first blockchain database or enables other devices to register (S210). At this time, the mediation server 100 obtains and manages a third blockchain transaction ID corresponding to the order data indicating the position information of the order data registered in the first blockchain database.

In addition, when the triggering condition for registering a predetermined hash value in the second blockchain database 400 is satisfied, the mediation server 100 applies the second specific hash value and the second specific hash generated by applying a hash function to the order data. By calculating at least one neighboring hash value matching the hash value, a value obtained by processing the second representative hash value or the second representative hash value that is the Merkle root is generated (S211).

In addition, the mediation server 100 registers a value obtained by processing the second representative hash value or the second representative hash value, which is the generated Merkle root, in the second blockchain database 400 or supports other devices to register (S212). ), A fourth blockchain transaction ID representing position information on the second blockchain database 400 of Merkle Root, which is a value obtained by processing the second representative hash value or the second representative hash value registered in the second blockchain database 400. It may acquire or support the other device to obtain (S213).

Meanwhile, the mediation server 100 may store and manage the second specific hash value and the at least one neighbor hash value in a predetermined data structure. Here, the data structure may vary, for example, may be a merkle tree structure.

That is, the mediation server 200 may support to generate or generate a merkle tree in which the second specific hash value is assigned to the specific leaf node, and if the triggering condition is satisfied, at least the second specific hash value matches at least the second specific hash value. The second representative hash value or the processed second representative hash value, which is a Merkle root generated by calculating a hash value assigned to one other leaf node, may be registered or registered in the second blockchain database 400. .

More specifically, (x1) the mediation server 100 may calculate or calculate a hash value assigned to the sibling node of the node to which (i) the second specific hash value and (ii) the second specific hash value is assigned. And assign or assign a hash value for the computed value to the node's parent node. (x2) If the parent node is the root node of the Merkle tree, the hash value assigned to the parent node becomes the second representative hash value. (x3) On the other hand, if the parent node is not the root node of the Merkle tree, the mediation server 100 repeatedly performs (x1) to (x3) by using the hash value assigned to the parent node as the second specific hash value. .

The mediation server 200 finally registers the hash value assigned to the root node of the Merkle tree as the second representative hash value in the second blockchain database 400 or enables other devices to register. At this time, a value obtained by processing the second representative hash value may be registered. For example, a result value of performing a hex operation may be registered in the second representative hash value.

Meanwhile, when the mediation server 100 stores the second specific hash value and at least one neighboring hash value in a predetermined first data structure, and then stores and manages a second data structure having the same form as the first data structure. The first data structure and the second data structure may be connected in a chain form.

In particular, when the first data structure and the second data structure are Merkle trees as in the above-described example, a root value of the first data structure or a hash value of the root value may be allocated to the first leaf node of the second data structure. .

In addition, when the second data structure is generated, data integrity may be more guaranteed by verifying the first data structure.

In addition, in the case of the first Merkle tree of at least one Merkle tree connected in a chain form, the first leaf node of the first Merkle tree may be assigned a hash value or a processed value of predetermined message data consisting of text, numbers, or symbols. have. For example, a hash value of an input message initially given by the mediation server 100 may be assigned when generating the merkle tree.

Thereafter, the mediation server 100 transmits the authorization request information including the card token ID and the order data corresponding to the user identification information to the financial server 200 or supports other devices to transmit (S214). In this case, the approval request information may include a third blockchain transaction ID corresponding to the order data indicating the position information of the order data registered in the first blockchain database.

Then, the financial server 200 performs verification on the order data (S216).

For example, the financial server 200 verifies the order data included in the authorization request information by referring to the order data registered in the first blockchain database in response to the card token ID included in the authorization request information, and responds to the verification result. It transmits the approval result information to the mediation server 100 or supports the other device to transmit.

In this case, when the financial server 200 includes the first financial server 210 and the second financial server 220, the first financial server 210 is included in the approval request information obtained from the mediation server 100. The order data included in the authorization request information is verified with reference to the order data registered in the first blockchain database corresponding to the card token ID. That is, the first financial server 210 checks the order data registered in the first blockchain database using the third blockchain transaction ID corresponding to the order data, and confirms the order data and approval registered in the first blockchain database. The order data included in the request information is checked to determine whether the order data is valid. If it is determined that the check result is valid, the first financial server 210 stores the order data (S219), and requests the second financial server 220 to approve the order data (S217). In this case, the first financial server 210 requests the second financial server 220 to approve the order data using the card index key matched with the card token ID or supports the request from another device. Then, the second financial server 220 confirms the card information using the card index key requested for approval, approves the payment for the order data corresponding to the confirmed card information, and returns the approved result to the first financial server ( Or transmits to another device (S218).

In addition, the first financial server 210 transmits the approval result obtained from the second financial server 220 to the mediation server 100 or supports another device to transmit (S219).

Then, when the approval result information is obtained from the financial server 200, the mediation server 100 registers the approval result information on the order data in the first blockchain database or supports other devices to register (S220). Obtain and manage a fifth blockchain transaction ID corresponding to the result.

When the triggering condition for registering a predetermined hash value in the second blockchain database 400 is satisfied, the mediation server 100 generates a third specific hash value and a third generated hash value by applying a hash function to the approval result information. By calculating at least one neighboring hash value matching the specific hash value, a value obtained by processing the third representative hash value or the third representative hash value which is the Merkle root is generated (S221).

In addition, the mediation server 100 registers a value obtained by processing the third representative hash value or the third representative hash value, which is the generated Merkle root, in the second blockchain database 400 or supports other devices to register (S222). ), A sixth blockchain transaction ID representing position information on the second blockchain database 400 of Merkle Root, which is a value obtained by processing the third representative hash value or the third representative hash value registered in the second blockchain database 400. It may acquire or support other devices to obtain (S223).

Meanwhile, the mediation server 100 may store and manage the fifth specific hash value and at least one neighbor hash value in a predetermined data structure. Here, the data structure may vary, for example, may be a merkle tree structure.

That is, the mediation server 200 may support to generate or generate a merkle tree in which the third specific hash value is assigned to the specific leaf node, and if the triggering condition is satisfied, at least a match with the third specific hash value is performed. The third representative hash value or the processed third representative hash value, which is a Merkle root generated by calculating a hash value assigned to one other leaf node, may be registered or registered in the second blockchain database 400. .

More specifically, (x1) the mediation server 100 may calculate or calculate a hash value assigned to the sibling node of the node to which (i) the third specific hash value and (ii) the third specific hash value is assigned. And assign or assign a hash value for the computed value to the node's parent node. (x2) If the parent node is the root node of the Merkle tree, the hash value assigned to the parent node becomes the third representative hash value. (x3) On the other hand, if the parent node is not the root node of the Merkle tree, the mediation server 100 repeatedly performs (x1) to (x3) by using the hash value assigned to the parent node as the third specific hash value. .

The mediation server 200 finally registers the hash value assigned to the root node of the Merkle tree as the third representative hash value in the second blockchain database 400 or allows other devices to register. At this time, a value obtained by processing the third representative hash value may be registered. For example, a result value of performing a hex operation may be registered in the third representative hash value.

Meanwhile, when the mediation server 100 stores the third specific hash value and at least one neighboring hash value in a predetermined third data structure, and then stores and manages a fourth data structure having the same form as the third data structure. The third data structure and the fourth data structure may be connected in a chain form.

In particular, when the third data structure and the fourth data structure are Merkle trees as in the above-described example, a root value of the third data structure or a hash value of the root value may be allocated to the first leaf node of the fourth data structure. .

In addition, when the fourth data structure is generated, data integrity may be more guaranteed by verifying the third data structure.

In addition, in the case of the first Merkle tree of at least one Merkle tree connected in a chain form, the first leaf node of the first Merkle tree may be assigned a hash value or a processed value of predetermined message data consisting of text, numbers, or symbols. have. For example, a hash value of an input message initially given by the mediation server 100 may be assigned when generating the merkle tree.

In addition, the mediation server 100 transmits the approval result information to at least one of the service providing terminal 20 and the user terminal 10 or supports other devices to transmit the result. In this case, the approval result information may include a fifth blockchain transaction ID corresponding to the approval result information.

In addition, when the approval result information is received from the mediation server 100, the service providing terminal 20 may store the approval result information (S226).

A method of requesting the purchase of the approved order data by the service provider in the state where the approval for the use of the card is made by the above method will be described with reference to FIG. 6.

In the state of approving the use of the card by the user by the method of FIG. 5, and as a result, the information is registered in the first blockchain database and the second blockchain database 400, the service provider is authorized to purchase the stored order data. If proceeding (S301), the service providing terminal 20 stores the purchase request information (S302). For example, the service providing terminal 20 stores purchase data including at least one or more order data selected by a service provider among order data approved in response to a user's order and registered in the first blockchain database.

In addition, the service providing terminal 20 transmits the purchase request information including the purchase data to the intermediary server 100 or supports another device to transmit (S303).

Then, the mediation server 100 checks whether the purchase request information obtained from the service providing terminal 20 is valid (S304).

For example, the mediation server 100 checks the purchase data included in the purchase request information, and checks whether the order data included in the purchase data is valid. That is, the mediation server 100 checks the order data included in the purchase data, and the order data registered in the first blockchain database using the fifth blockchain transaction ID corresponding to the order data, that is, the approved order data. It checks whether the order data registered in the first blockchain database and the order data included in the purchase request information match to determine that the purchase data is valid.

In addition, the mediation server 100 requests for the authentication of the purchase data to the service providing terminal 20 or the other device for the requested purchase data (S305).

Then, the service providing terminal 20 requests the service provider to confirm the purchase data confirmed by the mediation server 100, and when a confirmation signal is input from the service provider, transmits the confirmation result of the authentication to the mediation server 100. Or to allow other devices to transmit (S306).

When the authentication confirmation result is obtained from the service providing terminal 20, the intermediation server 100 registers the authenticated purchase data in the first blockchain database or supports other devices to register (S307). The blockchain database 300 acquires and manages a seventh blockchain transaction ID corresponding to the purchase data which is the location information in which the purchase data is registered.

In addition, when the triggering condition for registering the predetermined hash value in the second blockchain database 400 is satisfied, the mediation server 100 may apply the fourth specific hash value and the fourth specific hash value generated by applying the hash function to the embedded data. By calculating at least one neighboring hash value matching the hash value, a value obtained by processing the fourth representative hash value or the fourth representative hash value that is the Merkle root is generated (S308).

In addition, the mediation server 100 registers a value obtained by processing the fourth representative hash value or the fourth representative hash value, which is the generated Merkle root, in the second blockchain database 400 or supports other devices to register (S309). ), An eighth blockchain transaction ID representing position information on the second blockchain database 400 of Merkle Root, which is a value obtained by processing the fourth representative hash value or the fourth representative hash value registered in the second blockchain database 400. It may acquire or support the other device to obtain (S310).

Meanwhile, the mediation server 100 may store and manage the fourth specific hash value and at least one neighbor hash value in a predetermined data structure. Here, the data structure may vary, for example, may be a merkle tree structure.

That is, the mediation server 200 may support to generate or generate a merkle tree in which the fourth specific hash value is assigned to the specific leaf node, and, if the triggering condition is satisfied, at least a match with the fourth specific hash value. The second blockchain database 400 may register or register a fourth representative hash value or a processed value of the fourth representative hash value, which is a Merkle root generated by calculating a hash value assigned to one other leaf node, in the second blockchain database 400. .

More specifically, (x1) the mediation server 100 may calculate or calculate a hash value assigned to the sibling node of the node to which (i) the fourth specific hash value and (ii) the fourth specific hash value are assigned. And assign or assign a hash value for the computed value to the node's parent node. (x2) If the parent node is the root node of the Merkle tree, the hash value assigned to the parent node becomes the fourth representative hash value. (x3) On the other hand, if the parent node is not the root node of the Merkle tree, the mediation server 100 repeats (x1) to (x3) by using the hash value assigned to the parent node as the fourth specific hash value. .

The mediation server 200 finally registers the hash value assigned to the root node of the Merkle tree as the fourth representative hash value in the second blockchain database 400 or enables other devices to register. At this time, a value obtained by processing the fourth representative hash value may be registered. For example, a result value of performing a hex operation may be registered in the fourth representative hash value.

Meanwhile, when the mediation server 100 stores the fourth specific hash value and at least one neighboring hash value in a predetermined seventh data structure, and then stores and manages an eighth data structure having the same form as the seventh data structure. The seventh data structure and the eighth data structure may be connected in a chain form.

In particular, when the seventh data structure and the eighth data structure are Merkle trees as in the above-described example, a root value of the seventh data structure or a hash value of the root value may be allocated to the first leaf node of the eighth data structure. .

In addition, when the eighth data structure is generated, data integrity may be more guaranteed by verifying the seventh data structure.

In addition, in the case of the first Merkle tree of at least one Merkle tree connected in a chain form, the first leaf node of the first Merkle tree may be assigned a hash value or a processed value of predetermined message data consisting of text, numbers, or symbols. have. For example, a hash value of an input message initially given by the mediation server 100 may be assigned when generating the merkle tree.

Thereafter, the mediation server 100 transmits the purchase request information including the purchase data to the financial server 200 or supports other devices to transmit (S311). In this case, the purchase request information may include a seventh blockchain transaction ID corresponding to the purchase data indicating the location information of the purchase data registered in the first blockchain database.

Then, the financial server 200 checks whether the purchase data included in the purchase request information is valid (S312).

For example, the financial server 200 verifies the purchase data included in the purchase request information by referring to the purchase data registered in the first blockchain database in response to the purchase data included in the purchase request information, and corresponds to the verification result. The purchase result information is transmitted to the mediation server 100 or the other device supports the transmission (S316).

In this case, when the financial server 200 includes the first financial server 210 and the second financial server 220, the first financial server 210 is included in the purchase request information obtained from the mediation server 100. The order data included in the purchase request information is verified with reference to the purchase data registered in the first blockchain database corresponding to the purchase data. That is, the first financial server 210 confirms the purchase data registered in the first blockchain database by using the seventh blockchain transaction ID corresponding to the purchase data, and purchases and purchases registered in the first blockchain database. The purchase data included in the request information is checked to determine whether the purchase data is valid. If it is determined that the result is valid, the first financial server 210 requests the second financial server 220 to purchase the purchased data (S313). At this time, the first financial server 210 requests the purchase of the purchase data to the second financial server 220 using the card index key matched with the card token ID, or supports other devices to make a request. Then, the second financial server 220 confirms the card information by using the requested card index key, approves the payment for the purchase data corresponding to the confirmed card information, and stores the approved purchase result information in the first finance. The server 210 transmits or supports other devices to transmit (S314).

In addition, the first financial server 210 transmits the purchase result information obtained from the second financial server 220 to the mediation server 100 or supports other devices to transmit (S316). In this case, the first financial server 210 may store purchase result information obtained from the second financial server 220 (S315).

Then, the mediation server 100 registers the purchase result information on the purchase data obtained from the financial server 200 in the first blockchain database or supports another device to register (S317), and the agent corresponding to the purchase result is registered. 9 Obtain and manage blockchain transaction IDs.

When the triggering condition for registering the predetermined hash value in the second blockchain database 400 is satisfied, the mediation server 100 generates the fifth specific hash value and fifth generated by applying a hash function to the purchase result information. By calculating at least one neighboring hash value matching the specific hash value, a value obtained by processing the fifth representative hash value or the fifth representative hash value that is the Merkle root is generated (S318).

In addition, the mediation server 100 registers a value obtained by processing the fifth representative hash value or the fifth representative hash value, which is the generated Merkle root, in the second blockchain database 400 or supports other devices to register (S319). ), A tenth blockchain transaction ID representing position information on the second blockchain database 400 of Merkle Root, which is a value obtained by processing the fifth representative hash value or the fifth representative hash value registered in the second blockchain database 400. It may acquire or support other devices to obtain (S320).

Meanwhile, the mediation server 100 may store and manage the fifth specific hash value and at least one neighbor hash value in a predetermined data structure. Here, the data structure may vary, for example, may be a merkle tree structure.

That is, the mediation server 200 may support to generate or generate a merkle tree in which the fifth specific hash value is assigned to the specific leaf node, and if the triggering condition is satisfied, at least the fifth specific hash value matches at least the fifth specific hash value. It is possible to register or support a fifth representative hash value or a processed value of the fifth representative hash value, which is a Merkle root generated by calculating a hash value assigned to one other leaf node, in the second blockchain database 400. .

More specifically, (x1) the mediation server 100 may calculate or calculate a hash value assigned to the sibling node of the node to which (i) the fifth specific hash value and (ii) the fifth specific hash value are assigned. And assign or assign a hash value for the computed value to the node's parent node. (x2) If the parent node is the root node of the Merkle tree, the hash value assigned to the parent node becomes the fifth representative hash value. (x3) On the other hand, if the parent node is not the root node of the Merkle tree, the mediation server 100 repeats (x1) to (x3) by using the hash value assigned to the parent node as the fifth specific hash value. .

The mediation server 200 finally registers the hash value allocated to the root node of the Merkle tree as the fifth representative hash value in the second blockchain database 400 or supports other devices to register. At this time, a value obtained by processing the fifth representative hash value may be registered. For example, a result value of performing a hex operation may be registered in the fifth representative hash value.

Meanwhile, when the mediation server 100 stores the fifth specific hash value and at least one neighboring hash value in a predetermined ninth data structure, and then stores and manages a tenth data structure having the same form as the ninth data structure. The ninth data structure and the tenth data structure may be connected in a chain form.

In particular, when the ninth data structure and the tenth data structure are Merkle trees as in the above-described example, a root value of the ninth data structure or a hash value of the root value may be allocated to the first leaf node of the tenth data structure. .

In addition, when the tenth data structure is generated, the integrity of the ninth data structure may be verified to further ensure data integrity.

In addition, in the case of the first Merkle tree of at least one Merkle tree connected in a chain form, the first leaf node of the first Merkle tree may be assigned a hash value or a processed value of predetermined message data consisting of text, numbers, or symbols. have. For example, a hash value of an input message initially given by the mediation server 100 may be assigned when generating the merkle tree.

The mediation server 100 transmits the purchase result information to the service providing terminal 20 or supports other devices to transmit the result. In this case, the purchase result information may include a ninth blockchain transaction ID corresponding to the purchase result.

In addition, when the purchase result information is received from the mediation server 100, the service providing terminal 20 may store the approval result information.

In addition, the embodiments according to the present invention described above may be implemented in the form of program instructions that may be executed by various computer components, and may be recorded in a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the computer-readable recording medium may be those specially designed and configured for the present invention, or may be known and available to those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs, DVDs, and magneto-optical media such as floptical disks. media), and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform the process according to the invention, and vice versa.

Although the present invention has been described by specific embodiments such as specific components and the like, but the embodiments and the drawings are provided to assist in a more general understanding of the present invention, the present invention is not limited to the above embodiments. For those skilled in the art, various modifications and variations can be made from these descriptions.

Accordingly, the spirit of the present invention should not be limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the appended claims, fall within the scope of the spirit of the present invention. I will say.

Claims (35)

1. In a method of authorizing the use of a card using a token ID,

   (a) a first blockchain comprising a card token ID corresponding to a user's card information, user identification information for identifying the user, a push token ID corresponding to an app installed in the user's user terminal, and the user's public key; A first specific hash value generated by applying a hash function to the card token ID, the user identification information, the push token ID, and the public key; Registering a first representative hash value for calculating at least one neighboring hash value matching the first specific hash value or a value for processing the first representative hash value in a second blockchain database and corresponding second blockchain In the state of managing a transaction ID, corresponding to the user's card use from the service providing terminal When the payment request information including the user identification information and the order data is obtained, an intermediary server (1) the first block using the first blockchain transaction ID corresponding to the user identification information of the payment request information. Obtaining the push token ID registered in the chain database, or (2) obtaining a data message from the second blockchain database using the second blockchain transaction ID corresponding to the user identification information of the payment request information; The first blockchain may include merkle tree information and leaf node information stored in the first blockchain database in association with the first representative hash value included in the data message or a value obtained by processing the first representative hash value. Search in a database, and refer to the found Merkle tree information and leaf node information Obtaining the push token ID registered in the first blockchain database, and requesting authentication of the order data to the user terminal corresponding to the obtained push token ID, or supporting another device to make a request; step;

   (b) if the user signature value of signing the order data with the private key of the user is obtained from the user terminal in response to the authentication request for the order data, the intermediate server registers the registered data in the first blockchain database. Verifying whether the user signature value is valid using the public key of the user, and if the user signature value is valid, (1) registering the order data in the first blockchain database or allowing another device to register; Managing a third blockchain transaction ID corresponding thereto; and (2) a second specific generated by applying a hash function to the order data when a triggering condition for registering a predetermined hash value in the second blockchain database is satisfied. A second operation of calculating a hash value and at least one neighboring hash value matching the second specific hash value Further comprising: table hash value or register the first value by processing a second hash value representative of said second block chain database, or support to enable registration to other devices and managing the fourth block chain transaction ID corresponding thereto; And

   (c) the intermediary server, by (i) transmitting to the financial server authorization request information including the card token ID and the order data corresponding to the user identification information or by allowing another device to transmit; Verifying the order data included in the authorization request information with reference to the order data registered in the first blockchain database in response to the card token ID included in the authorization request information, and corresponding to a verification result. Send the approval result information to the intermediary server; (ii) if the approval result information is obtained from the financial server, (1) register the approval result information in the first blockchain database or allow other devices to register. Support and manage a fifth blockchain transaction ID corresponding thereto, and (2) the second When a triggering condition for registering a predetermined hash value in the lockchain database is satisfied, a third specific hash value generated by applying a hash function to the approval result information and at least one neighboring hash value matching the third specific hash value Register a third representative hash value or a value obtained by processing the third representative hash value in the second blockchain database or allow another device to register and manage a sixth blockchain transaction ID corresponding thereto; Transmitting the approval result information to at least one of the service providing terminal and the user terminal or supporting another device to transmit the approval result information;

   Card use approval method comprising a.
2. The method of claim 1,

   The triggering condition is,

   (i) a condition under which a transaction associated with the use of the card is generated by a predetermined number, (ii) a condition over which a predetermined time elapses, (iii) a condition under which a block is generated in the first blockchain database, (iv) a service characteristic Card use authorization method comprising at least one of the conditions for.
3. The method of claim 1,

   In step (b),

   The mediation server supports generating or creating a merkle tree in which the second specific hash value is assigned to a leaf node,

   When the triggering condition is satisfied, the second representative hash value or the value obtained by processing the second representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the second specific hash value is calculated. Card registration method, characterized in that registered in the second blockchain database or to allow other devices to register.
4. The method of claim 1,

   In the step (c),

   The mediation server supports generating or creating a merkle tree in which the third specific hash value is assigned to a leaf node,

   When the triggering condition is satisfied, the third representative hash value or the third representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the third specific hash value is calculated. Card registration method, characterized in that registered in the second blockchain database or to allow other devices to register.
5. The method according to claim 3 or 4,

   When the Merkle tree is a first tree of at least one Merkle tree connected in a chain form, the first leaf node of the Merkle tree is assigned a hash value or a processed value of predetermined message data composed of text, numbers, or symbols. Featured card usage authorization method.
6. The method of claim 3,

   If the triggering condition is satisfied,

   (x1) the intermediary server supports (i) calculating or calculating a hash value assigned to a sibling node of a node to which the second specific hash value and (ii) the second specific hash value is assigned; Supports assigning or assigning a hash value to the parent node of the node,

   (x2) if the parent node is the root node of the Merkle tree, register a hash value assigned to the parent node as the second representative hash value in the second blockchain database or allow another device to register;

   (x3) if the parent node is not the root node of the Merkle tree, repeating the steps (x1) to (x2) by using the hash value assigned to the parent node as the second specific hash value; How to approve card use.
7. The method of claim 6,

   In (x1) above,

   If a hash value is not assigned to a sibling node of a node to which the second specific hash value is allocated even though the triggering condition is satisfied, the intermediary server supports allocating or allocating a predetermined hash value to the sibling node. and (x1) to (x3). A card use approval method.
8. The method of claim 4, wherein

   If the triggering condition is satisfied,

   (x1) the intermediary server supports (i) calculating or calculating a hash value assigned to a sibling node of a node to which the third specific hash value and (ii) the third specific hash value is assigned; Supports assigning or assigning a hash value to the parent node of the node,

   (x2) if the parent node is the root node of the Merkle tree, register a hash value assigned to the parent node as the third representative hash value in the second blockchain database or allow another device to register;

   (x3) if the parent node is not the root node of the Merkle tree, repeating (x1) to (x2) by using the hash value assigned to the parent node as the third specific hash value How to approve card use.
9. The method of claim 8,

   In (x1) above,

   If a hash value is not assigned to a sibling node of a node to which the third specific hash value is allocated even though the triggering condition is satisfied, the intermediary server supports allocating or allocating a predetermined hash value to the sibling node. and (x1) to (x3). A card use approval method.
10. The method of claim 1,

    In step (b),

    When the intermediate server stores the second specific hash value and the at least one neighboring hash value in a predetermined first data structure, and then stores and manages a second data structure having the same form as the first data structure, And the first data structure and the second data structure are connected in a chain form.
11. The method of claim 10,

    And wherein if the first data structure and the second data structure are Merkle Trees, a root value of the first data structure or a hash value of the root value is assigned to the first leaf node of the second data structure. How to approve use.
12. The method of claim 1,

    In the step (c),

    When the mediation server stores the third specific hash value and the at least one neighboring hash value in a predetermined third data structure, and then stores and manages a fourth data structure having the same form as the third data structure, And the third data structure and the fourth data structure are connected in a chain form.
13. The method of claim 12,

    And wherein if the third data structure and the fourth data structure are Merkle trees, a root value of the third data structure or a hash value of the root value is assigned to the first leaf node of the fourth data structure. How to approve use.
14. The method of claim 1,

    The financial server includes a first financial server and a second financial server,

    In the step (c),

    (i) the intermediary server transmits the authorization request information so that the first financial server sends the order data registered in the first blockchain database in response to the card token ID included in the authorization request information. By reference to assist in verifying the order data included in the approval request information, and if it is determined that the order data is valid, supports requesting approval for the order data to the second financial server, and (ii) the And when the approval result is transmitted from the second financial server to the first financial server, the mediation server receives the approval result information from the first financial server or from another device.
15. The method of claim 1,

    Before step (a) above,

    (a01) When the card registration request information including the user's personal information, the user identification information, the card information, and the push token ID is obtained from the user terminal, the intermediary server transmits the card information to the financial server. Requesting verification for the request;

    (a02) When the verification result including the card index key corresponding to the card information is obtained from the financial server, the mediation server generates a card token ID corresponding to the card index key and corresponds to the push token ID. Requesting user authentication to the user terminal or supporting another device to request the user terminal; And

    (a03) When the public key of the user corresponding to the user authentication is obtained from the user terminal, the intermediary server (i) (1) the token ID, the user identification information, the push token ID, and the public. Register a key in the first blockchain database or allow other devices to register and obtain the first blockchain transaction ID corresponding thereto, and (2) register a predetermined hash value in the second blockchain database. At least one matching the first specific hash value generated by applying a hash function to the card token ID, the user identification information, the push token ID, and the public key when the triggering condition is satisfied A first representative hash value for calculating a neighbor hash value of or a value obtained by processing the first representative hash value in the second block chain; Register in the database or allow other devices to register and obtain a second blockchain transaction ID corresponding thereto; and (ii) transmit the card token ID and the card index key to the financial server or allow other devices to send. Assisting the financial server to map the card information and the card token ID;

    Card use approval method characterized in that it further comprises.
16. The method of claim 15,

    In the step (a03),

    The mediation server supports generating or generating a merkle tree in which the first specific hash value is assigned to a leaf node,

    When the triggering condition is satisfied, the first representative hash value or the value obtained by processing the first representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the first specific hash value is calculated. Card registration method, characterized in that registered in the second blockchain database or to allow other devices to register.
17. The method of claim 15,

    In the step (a03),

    When the intermediate server stores the first specific hash value and the at least one neighboring hash value in a predetermined fifth data structure, and then stores and manages a sixth data structure having the same form as the fifth data structure, And the fifth data structure and the sixth data structure are connected in a chain form.
18. The method of claim 15,

    In the step (a03),

    The intermediary server requests the user authentication to support the user terminal to generate a private key and the public key in response to the user authentication request, and to request the user to set confirmation information. And storing the confirmation information obtained from the user, and receiving the public key from the user terminal or receiving from the other device.
19. The method of claim 15,

    The financial server includes a first financial server and a second financial server,

    In the step (a02),

    (i) the intermediary server requests verification of the card information to support the first financial server to request verification of the card information to a second financial server, and (ii) the second financial server. When the verification result including the card index key corresponding to the card information is transmitted from the first financial server, the mediation server receives the verification result from the first financial server or from another device,

    In the step (a03),

    And the mediation server transmits the card token ID and the card index key to support the first financial server to map the card information and the card token ID.
20. The method of claim 1,

    (d) purchase data from the service providing terminal-the purchase data is at least one or more requested from the service providing terminal for purchase among the order data approved in the step (c) and registered in the first blockchain database; When the purchase request information including the order data is obtained, the mediation server (i) confirms whether the purchase data is valid and transmits the result to the service providing terminal or supports the other device to transmit. If acquiring confirmation information about the result is obtained from the service providing terminal, (1) a seventh blockchain transaction ID corresponding to registering the purchase data in the first blockchain database or allowing another device to register; (2) a predetermined value in the second blockchain database A fourth representative hash value for calculating a fourth specific hash value generated by applying a hash function to the embedded data and at least one neighboring hash value matching the fourth specific hash value when a triggering condition for registering a hash value is satisfied; Or register the processed value of the fourth representative hash value in the second blockchain database or allow another device to register, obtain an eighth blockchain transaction ID corresponding thereto, and (ii) include the embedded data. Transmitting the purchase request information to the financial server to enable the financial server to confirm that the purchase data is valid and to transmit the purchase result information to the intermediary server, and (iii) the purchase result information from the financial server is If obtained, (1) register the purchase result information in the first blockchain database or other Support the device to register and obtain a ninth blockchain transaction ID corresponding thereto, and (2) match the fifth specific hash value generated by applying a hash function to the purchase result information and the fifth specific hash value. Registering a fifth representative hash value for calculating at least one neighboring hash value or the processed fifth representative hash value in the second blockchain database or allowing another device to register and corresponding tenth blockchain Acquiring a transaction ID and transmitting the purchase result information to the service providing terminal or allowing another device to transmit the transaction ID;

    Card use approval method characterized in that it further comprises.
21. The method of claim 20,

    The mediation server,

    (i) support generating or creating a merkle tree in which the fourth specific hash value is assigned to a leaf node;

    When the triggering condition is satisfied, the fourth representative hash value or the fourth representative hash value generated by calculating a hash value assigned to at least one other leaf node that matches the fourth specific hash value is calculated. Register to the second blockchain database or allow other devices to register;

    (ii) support or create a merkle tree in which the fifth specific hash value is assigned to a leaf node;

    When the triggering condition is satisfied, the fifth representative hash value or the fifth representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the fifth specific hash value is calculated. Card registration method, characterized in that registered in the second blockchain database or to allow other devices to register.
22. The method of claim 20,

    (i) the intermediate server stores the fourth specific hash value and the at least one neighboring hash value in a predetermined seventh data structure, and then stores and manages an eighth data structure having the same form as the seventh data structure. The seventh data structure and the eighth data structure are connected in a chain form.

    (ii) the intermediate server stores the fifth specific hash value and the at least one neighboring hash value in a predetermined ninth data structure, and then stores and manages a tenth data structure having the same form as the ninth data structure. And the ninth data structure and the tenth data structure are connected in a chain form.
23. The method of claim 20,

    The mediation server transmits the purchase request information to support the financial server to confirm whether the purchase data included in the purchase request information is registered in the first blockchain database, and if it is confirmed to be registered And determining that the purchase data is valid.
24. The method of claim 20,

    The financial server includes a first financial server and a second financial server,

    (i) the intermediary server transmits the purchase request information to support the first financial server to confirm whether the purchase data included in the purchase request information is registered in the first blockchain database. Support to confirm whether the purchase data is valid, and if the purchase data is valid, to support the purchase of the purchase data to the second financial server,

    (ii) when the purchase result information is transmitted from the second financial server to the first financial server, the mediation server receives the purchase result information from the first financial server or is transmitted from another device. How to approve card use.
25. In an intermediary server that authorizes the use of a card using a token ID,

    Register the card token ID corresponding to the card information of the user, the user identification information for identifying the user, the push token ID corresponding to the app installed on the user terminal of the user, and the user's public key in the first blockchain database And managing a first blockchain transaction ID corresponding thereto, wherein the first specific hash value and the first specific hash value generated by applying a hash function to the card token ID, the user identification information, the push token ID, and the public key. Registering the first representative hash value calculated from at least one neighboring hash value matching the specific hash value or the processed value of the first representative hash value in the second blockchain database, and registering the corresponding second blockchain transaction ID. In the state of management, the image corresponding to the use of the card of the user from the service providing terminal Communication unit for acquiring the payment request information including the user identification information and the order data; And

    (1) obtaining the push token ID registered in the first blockchain database using the first blockchain transaction ID corresponding to the user identification information of the payment request information, or (2) Acquire a data message from the second blockchain database by using the second blockchain transaction ID corresponding to the user identification information, and obtain the first representative hash value or the first representative hash value included in the data message. The first blockchain database retrieves merkle tree information and leaf node information stored in the first blockchain database in relation to the processed value, and refers to the first blockchain information and leaf node information. Obtain the push token ID registered in the chain database, and A first process of requesting authentication of the order data to the user terminal corresponding to the obtained push token ID or of requesting another device to request the request data from the user terminal in response to an authentication request for the order data; If a user signature value signed with the private key of the user is obtained, the user signature value is checked using the public key of the user registered in the first blockchain database, and if the user signature value is valid, (1) registering the order data in the first blockchain database or allowing other devices to register and managing a third blockchain transaction ID corresponding thereto; and (2) a predetermined number in the second blockchain database. If the triggering condition for registering the hash value is satisfied, A second representative hash value calculated by applying a hash function to order data and at least one neighboring hash value matching the second specific hash value or a value obtained by processing the second representative hash value A second process for registering a second blockchain database in the second blockchain database or allowing another device to register and managing a fourth blockchain transaction ID corresponding thereto; and (i) the card corresponding to the user identification information to a financial server. By sending the authorization request information including the token ID and the order data or by supporting other devices to transmit, the financial server sends a request to the first blockchain database in response to the card token ID included in the authorization request information. The order data included in the approval request information with reference to the registered order data Verify, and transmit the approval result information corresponding to the verification result to the intermediary server; (ii) if the approval result information is obtained from the financial server, (1) the approval result information is sent to the first blockchain database. Register or support another device to register and manage a fifth blockchain transaction ID corresponding thereto; and (2) if the triggering condition for registering a predetermined hash value in the second blockchain database is satisfied, the approval result information. A third representative hash value generated by applying a hash function to at least one neighboring hash value matching the third specific hash value, or a value obtained by processing the third representative hash value; The sixth blockchain transaction eye corresponding to registering with the second blockchain database or allowing other devices to register A processor configured to manage a digital device and to transmit the approval result information to at least one of the service providing terminal and the user terminal or to allow another device to transmit the authorization result information;

    Card use approval intermediation server comprising a.
26. The method of claim 25,

    The triggering condition is,

    (i) a condition under which a transaction associated with the use of the card is generated by a predetermined number, (ii) a condition over which a predetermined time elapses, (iii) a condition under which a block is generated in the first blockchain database, (iv) a service characteristic Card use authorization mediation server comprising at least one of the conditions for.
27. The method of claim 25,

    The processor,

    In the second process,

    Support generating or generating a merkle tree assigned the second specific hash value to a leaf node,

    When the triggering condition is satisfied, the second representative hash value or the value obtained by processing the second representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the second specific hash value is calculated. Card registration approval intermediation server, characterized in that to register in the second blockchain database or to allow other devices to register.
28. The method of claim 25,

    The processor,

    In the third process,

    Support generating or generating a merkle tree in which the third specific hash value is assigned to a leaf node,

    When the triggering condition is satisfied, the third representative hash value or the third representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the third specific hash value is calculated. Card registration approval intermediation server, characterized in that to register in the second blockchain database or to allow other devices to register.
29. The method of claim 25,

    The financial server includes a first financial server and a second financial server,

    The processor,

    In the third process,

    The authorization request information is transmitted, and the first financial server is included in the authorization request information with reference to the order data registered in the first blockchain database corresponding to the card token ID included in the authorization request information. And verifying that the order data has been validated, and if it is determined that the order data is valid, requesting approval of the order data from the second financial server; And when the approval result is transmitted to the financial server, the mediation server receives the approval result information from the first financial server or is transmitted from another device.
30. The method of claim 25,

    The processor,

    Prior to the first process,

    When the communication unit obtains card registration request information including the user's personal information, the user identification information, the card information, and the push token ID from the user terminal, request the verification of the card information to the financial server; ,

    When a verification result including a card index key corresponding to the card information is obtained from the financial server, a card token ID corresponding to the card index key is generated, and user authentication is performed to the user terminal corresponding to the push token ID. Request or allow other devices to make a request,

    When the public key of the user corresponding to the user authentication is obtained from the user terminal, (i) (1) the token ID, the user identification information, the push token ID, and the public key are stored in the first blockchain database. The second blockchain transaction ID or the second blockchain transaction ID; and (2) if a triggering condition for registering a predetermined hash value in the second blockchain database is satisfied. Calculating a first specific hash value generated by applying a hash function to the token ID, the user identification information, the push token ID, and the public key and at least one neighboring hash value matching the first specific hash value; 1 Register a representative hash value or a value obtained by processing the first representative hash value in the second blockchain database. Assist the other device to register and obtain a second blockchain transaction ID corresponding thereto, and (ii) transmit the card token ID and the card index key to the financial server or allow the other device to transmit the Card use approval brokerage server, characterized in that for the financial server to map the card information and the card token ID.
31. The method of claim 30,

    The processor,

    Support generating or generating a merkle tree assigned the first specific hash value to a leaf node,

    When the triggering condition is satisfied, the first representative hash value or the value obtained by processing the first representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the first specific hash value is calculated. Card registration approval intermediation server, characterized in that to register in the second blockchain database or to allow other devices to register.
32. The method of claim 30,

    The financial server includes a first financial server and a second financial server,

    The processor,

    Request verification of the card information, thereby supporting the first financial server to request verification of the card information to a second financial server, and (ii) the second financial server to the first financial server. When the verification result including the card index key corresponding to the card information is transmitted, the mediation server receives the verification result from the first financial server or from another device,

    And transmitting the card token ID and the card index key to allow the first financial server to map the card information and the card token ID.
33. The method of claim 25,

    The processor,

    Purchase data from the service providing terminal-The purchase data includes at least one order data requested by the service providing terminal from among the order data approved in the third process and registered in the first blockchain database. When the purchase request information including-is obtained, the mediation server (i) confirms whether the purchase data is valid and transmits the result to the service providing terminal or supports the other device to transmit the service. When the confirmation information about the result is obtained from the providing terminal, (1) register the purchase data in the first blockchain database or allow another device to register and obtain a seventh blockchain transaction ID corresponding thereto; (2) prescribed in the second blockchain database When the triggering condition for registering the hash value is satisfied, a fourth representative hash value calculated by calculating a fourth specific hash value generated by applying a hash function to the embedded data and at least one neighboring hash value matching the fourth specific hash value Register a value or a value obtained by processing the fourth representative hash value in the second blockchain database or allow another device to register, obtain an eighth blockchain transaction ID corresponding thereto, and (ii) store the purchased data. By sending purchase request information including the purchase request information to the financial server to enable the financial server to confirm that the purchase data is valid and to transmit the purchase result information to the mediation server, (iii) the purchase result information from the financial server. Is obtained, (1) the purchase result information is registered in the first blockchain database, or Support the device to register and obtain a ninth blockchain transaction ID corresponding thereto, and (2) match the fifth specific hash value generated by applying a hash function to the purchase result information and the fifth specific hash value. Registering a fifth representative hash value for calculating at least one neighboring hash value or the processed fifth representative hash value in the second blockchain database or allowing another device to register and corresponding tenth blockchain And obtaining a transaction ID, and performing a fourth process of transmitting the purchase result information to the service providing terminal or supporting another device to transmit the transaction result information.
34. The method of claim 33, wherein

    The processor,

    (i) support generating or creating a merkle tree in which the fourth specific hash value is assigned to a leaf node;

    When the triggering condition is satisfied, the fourth representative hash value or the fourth representative hash value generated by calculating a hash value assigned to at least one other leaf node that matches the fourth specific hash value is calculated. Register to the second blockchain database or allow other devices to register;

    (ii) support or create a merkle tree in which the fifth specific hash value is assigned to a leaf node;

    When the triggering condition is satisfied, the fifth representative hash value or the fifth representative hash value generated by calculating a hash value assigned to at least one other leaf node matching the fifth specific hash value is calculated. Card registration approval intermediation server, characterized in that to register in the second blockchain database or to allow other devices to register.
35. The method of claim 33, wherein

    The financial server includes a first financial server and a second financial server,

    The processor,

    (i) transmitting the purchase request information to assist the first financial server to check whether the purchase data included in the purchase request information is registered in the first blockchain database to determine whether the purchase data is valid. Support to confirm, and if the purchase data is valid, support the purchase of the purchase data to the second financial server;

    (ii) when the purchase result information is transmitted from the second financial server to the first financial server, the purchase result information is received from the first financial server or received from another device. .

Images