WO2019009492A1 - E-mail delivery/receipt verification method, recording medium in which program for implementing same is stored and program for implementing same, stored in recording medium - Google Patents

Abstract

The present invention provides: an e-mail delivery/receipt verification method for storing, in a block chain, a transaction including a hash value of a corresponding e-mail such that forgery/falsification thereof is impossible, when an e-mail is delivered/received in a user terminal, and reliably verifying e-mail delivery/receipt by means of the corresponding hash value as necessary; a recording medium in which a program for implementing the same is stored; and a program for implementing the same, stored in the recording medium.

Description

An electronic mail receiving and calling method, a recording medium storing a program for implementing the same, and a program stored in a recording medium

More particularly, the present invention relates to a method and a system for storing a transaction containing a hash value of an e-mail in a block chain in a non-fake manner when an e-mail reception / And a program stored in a recording medium for implementing the method. [0002] The present invention relates to an electronic mail receiving /

Generally, when a user terminal sends or receives an e-mail, the e-mail is received or transmitted by the mail server, and the received or outgoing e-mail is stored and stored in the e-mail storage device.

Businesses frequently send and receive e-mails related to business, and in the event of legal liability issues with respect to e-mail receipt and transmission, it is necessary to prove the e-mail receipt to the other party.

Conventionally, when it is desired to prove an e-mail reception / reception, the e-mail stored in the e-mail storage device is searched for and the e-mail is output to the other party.

However, such an e-mail sending and receiving method is merely a method of retrieving e-mail contents stored in an e-mail storage device and providing the e-mail contents to the other party. It is impossible to verify whether the e-mail has been falsified or not, The reliability of the e-mail withdrawal verification is deteriorated.

Disclosure of the Invention The present invention has been proposed in order to solve the problems of the prior art as described above, and it is an object of the present invention to provide a method and apparatus for storing a transaction including a hash value of an e- And a program stored in a recording medium for implementing the method. The present invention also provides a recording medium storing a program for implementing the method.

According to a first aspect of the present invention for achieving the above object, a user terminal generates a transaction of a send / receive e-mail by means of a mail send / receive transaction generation agent at the time of sending and receiving of e-mail, Acquires a hash value by encrypting the corresponding non-encrypted hash value with its own private key, and generates a transaction including the current time, the corresponding encrypted and non-encrypted hash value, Transmitting to the server; The e-mail reception / transmission server collects transactions of the send / receive e-mails transmitted from the user terminal, performs a verification operation on the transactions according to the generation policy cycle, generates blocks and records the collected transactions in the corresponding blocks Storing a transaction including a current time, an encrypted and a non-encrypted hash value transmitted from a user terminal in a block chain; And a step of verifying whether the non-encrypted hash value equal to the hash value of the send / receive proof e-mail exists in the transaction of the block chain when the e-mail reception / delivery server receives the e-mail send / The method includes the steps of:

The present invention according to the first embodiment is characterized in that the e-mail reception / resection authentication server transmits a key use delegation request e-mail to the user terminal for receiving the private key and the public key to delegate use of the private key and the public key, Receiving the private key and the public key of the private key and the public key, and storing the private key and the public key of the private key and the public key.

The present invention according to the first embodiment is characterized in that the e-mail reception / reception proof server retrieves a non-encrypted hash value equal to the hash value of the send / receive verification target e-mail from the transactions in the block chain, The hash value obtained by decrypting the encrypted hash value by the public key of the user terminal, the hash value of the retrieved non-encrypted hash value, and the hash value of the returned and received proof e-mail are all the same, Confirming the authenticity of the send / receive proof e-mail by confirming that the send / receive e-mail is present at the current time included in the transaction, and that the send / receive e-mail is received and not tampered.

In the first embodiment of the present invention, the e-mail reception / resection certificate server obtains a non-encrypted hash value by converting the entire e-mail requesting e-mail request e-mail to a hash value, and encrypts the corresponding non- Obtaining a hash value, creating a transaction including the current time, the encrypted and the non-encrypted hash value, and storing the generated transaction in a block chain; When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged or falsified; And an unencrypted hash value that is the same as a hash value of the send / receive subscriber key delegation request e-mail from transactions in the block chain, and the corresponding non-encrypted hash value is stored in the encrypted hash By confirming whether the hash value obtained by decrypting the value with the self-public key, the hash value obtained by the retrieval and the unencrypted hash value both match with the hash value of the request-to-send key delegation request e-mail, And confirming the authenticity of the call originating key use request delegation request e-mail by confirming that the call origin delegate key request delegation request e-mail is present at the current time included, and that the call is delegated and not tampered.

According to another aspect of the present invention, an e-mail security apparatus generates a transaction of a send / receive e-mail by a mail send / receive transaction generation agent at the time of sending / Encrypted hash value is obtained by encrypting the corresponding non-encrypted hash value with the private key of the delegated user terminal, and the encrypted hash value is obtained by using the current time, the encrypted and the non- Generating a transaction and transmitting the transaction to an e-mail receipt authentication server; The e-mail reception / transmission server collects transactions of the send / receive e-mails transmitted from the e-mail security apparatus, performs a verification operation on the transactions according to the generation policy cycle, generates blocks, records the collected transactions in the corresponding blocks, Storing in a block chain a transaction that includes a current time, encrypted and unencrypted hash values generated from the email security appliance by generating a block chain by iterating; And a step of verifying whether the non-encrypted hash value equal to the hash value of the send / receive proof e-mail exists in the transaction of the block chain when the e-mail reception / delivery server receives the e-mail send / The method includes the steps of:

The e-mail security device of the second embodiment may transmit a key use delegation request e-mail to the e-mail security device for delegating the use of the private key and the public key to the user terminal so that the key use delegation permission including the private key and the public key Receiving the e-mail, storing the e-mail, storing the e-mail in the e-mail receiving and authentication server, and storing the e-mail received and transmitted to the e-mail reception and authentication server.

The present invention according to the second embodiment is characterized in that the above-mentioned e-mail reception / reception proof server retrieves a non-encrypted hash value equal to the hash value of the send / receive proof e-mail from the transactions in the block chain, The hash value obtained by decrypting the encrypted hash value by the public key of the user terminal, the hash value of the retrieved non-encrypted hash value, and the hash value of the returned and received proof e-mail are all the same, Confirming the authenticity of the send / receive proof e-mail by confirming that the send / receive e-mail is present at the current time included in the transaction, and that the send / receive e-mail is received and not tampered.

In the second embodiment of the present invention, the e-mail security apparatus obtains a non-encrypted hash value by converting the entire e-mail requesting key request e-mail to a hash value, And encrypts the encrypted hash value to obtain an encrypted hash value, generates a transaction including the current time, the encrypted and the unencrypted hash value, and provides the generated transaction to the email send and receive authentication server to store the transaction in the block chain by the email send and receive authentication server step; When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged; And an unencrypted hash value that is the same as a hash value of the send / receive subscriber key delegation request e-mail from transactions in the block chain, and the corresponding non-encrypted hash value is stored in the encrypted hash A hash value obtained by decrypting the hash value with the public key of the corresponding user terminal generated by the e-mail security device, the hash value of the retrieved non-encrypted hash value, , It is confirmed that there is an e-mail for requesting the use of a call originating key to be used at the current time included in the transaction in which the e-mail is searched, and the fact that the e-mail has been received and not tampered is verified to confirm the authenticity of the call request delegation request e-mail Further comprising:

According to a third aspect of the present invention for achieving the above object, there is provided a method of generating a transaction by converting an e-mail received and sent by a mail generating and sending transaction agent into a hash value and generating a transaction, Encrypted hash value with the private key of the user terminal and obtains the encrypted hash value to obtain the current time and the corresponding encrypted and non-encrypted hash value as the hash value Generating a transaction comprising; The e-mail reception / delivery server collects the transaction of the generated sending / receiving e-mail, performs a verification operation on the transaction according to the generation policy period, generates a block, and records the collected transaction in the corresponding block and repeats the processing. Storing a transaction in a block chain, the transaction including a current time, an encrypted and a non-encrypted hash value; And a step of verifying whether the non-encrypted hash value equal to the hash value of the send / receive proof e-mail exists in the transaction of the block chain when the e-mail reception / delivery server receives the e-mail send / The method includes the steps of:

In the third embodiment of the present invention, the e-mail reception / distribution server transmits the key usage delegation request e-mail to the user terminal for receiving the private key and the public key, and receives the key use authorization e-mail from the user terminal, Receiving the private key and the public key of the private key and the public key, and storing the private key and the public key of the private key and the public key.

The present invention according to the third embodiment is characterized in that the above-mentioned e-mail reception / reception proof server retrieves a non-encrypted hash value equal to the hash value of the send / receive proof e-mail from the transactions in the block chain, The hash value obtained by decrypting the encrypted hash value by the public key of the user terminal, the hash value of the retrieved non-encrypted hash value, and the hash value of the returned and received proof e-mail are all the same, Confirming the authenticity of the send / receive proof e-mail by confirming that the send / receive e-mail is present at the current time included in the transaction, and that the send / receive e-mail is received and not tampered.

In the third embodiment of the present invention, the e-mail reception / resection authentication server obtains a non-encrypted hash value by converting the whole e-mail request delegation request e-mail to a hash value, Acquiring an encrypted hash value by encrypting the hash value, creating a transaction including the current time, the encrypted and the unencrypted hash value, and storing the generated transaction in a block chain; When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged or falsified; And an unencrypted hash value that is the same as a hash value of the send / receive subscriber key delegation request e-mail from transactions in the block chain, and the corresponding non-encrypted hash value is stored in the encrypted hash By confirming whether or not the hash value obtained by decrypting the hash value by decrypting with the public key of the corresponding user terminal that has generated the hash value and the hash value of the returned call authentication delegation request e-mail both match the un- And confirming the fact that the call originating delegate key request delegation request e-mail is present at the present time included in the transaction in which the e-mail is searched, .

On the other hand, the present invention provides a computer-readable recording medium storing a program for implementing the e-mail withdrawal verification method according to any one of the first to third embodiments.

In addition, the present invention provides a program stored in a computer-readable recording medium for implementing the e-mail withdrawal verification method described in any one of the first to third embodiments.

According to the present invention, when an e-mail reception / reception for a user terminal occurs, a transaction including a hash value of the e-mail is stored in a block chain so as not to be falsified, and if necessary, the e-mail reception / Can be proved reliably.

Brief Description of the Drawings Fig. 1 is a diagram illustrating a system for processing e-mail reception and reception according to a first embodiment of the present invention.

FIG. 2 is a diagram illustrating one example of a block in which a transaction of a send / receive e-mail is recorded in the present invention.

3 is a block diagram illustrating a block chain in which a plurality of blocks in which transactions of send and receive e-mails are recorded are concatenated in the present invention.

FIG. 4 is a flowchart for explaining a procedure of the present invention.

5 is a diagram illustrating a system for processing e-mail receipt verification according to a second embodiment of the present invention.

FIG. 6 is a flowchart for explaining the procedure of the present invention.

7 is a diagram illustrating a system for processing e-mail reception / reception verification according to a third embodiment of the present invention.

FIG. 8 is a flowchart for explaining the procedure of the present invention according to the third embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Hereinafter, detailed description of known related art will be omitted if it is determined that the gist of the present invention may be unnecessarily blurred. In addition, numerals used in the description of the present invention are merely an identifier for distinguishing one component from another.

In addition, the terms used in the specification and claims should not be construed in a dictionary meaning, and the inventor may, on the principle that the inventor can properly define the concept of a term in order to explain its invention in the best way, And should be construed in light of the meanings and concepts consistent with the technical idea of the present invention.

Therefore, the embodiments described in the present specification and the drawings are only exemplary embodiments of the present invention, and not all of the technical ideas of the present invention are presented. Accordingly, various equivalents It should be understood that water and variations may exist.

The preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, in which the technical parts already given are omitted or compressed for simplicity of explanation.

A system for processing email receipt verification according to the first embodiment of the present invention is implemented as illustrated in FIG.

A plurality of user terminals 10 are connected to the mail server 30 via the local network 20 and receive and receive e-mails through the mail server 30. The user terminal 10 may be a conventional personal computer (PC), which is driven by a program and has a function of processing data or sending and receiving e-mail.

 The mail server 30 is connected to the Internet via the e-mail security device 40 and transmits the e-mail sent from the user terminal 10 to the receiver side via the Internet via the e-mail security device 40, Via the e-mail security device 40, and transmits the e-mail to the user terminal 10. [ The mail server 30 also performs a function of transmitting and receiving e-mail received and received between the user terminals 10 accommodated in the local network 20. [

The e-mail security apparatus 40 monitors e-mails received from the Internet to the e-mail server 30 to block malicious e-mails or monitors e-mails sent from the e-mail server 30 to the Internet to prevent leakage of important information do. The e-mail storage device 60 stores and stores the e-mail received and transmitted through the e-mail server 30.

The e-mail reception / delivery server 50 performs various processing for e-mail withdrawal verification based on a program built in itself.

The user terminal 10 is provided with a mail reception / transmission transaction generation agent corresponding to a program for generating a transaction at the time of sending / receiving of e-mail. The user reception terminal 10 may be loaded from the e-mail reception and authentication server 50 or installed from the storage medium.

The e-mail reception / delivery server 50 receives a key use delegation request mail from the user terminal 10 by transmitting a key use delegation request mail for delegating use of the private key and the public key.

When the user terminal 10 receives the key use delegation request mail from the email send and receive proof server 50, the user terminal 10 sends a key use delegation permission email to the email send and receive proof server 50 in accordance with the user's instruction, The e-mail send / receive server 50 receives a key use authorization e-mail from the user terminal 10, receives a private key and a public key, stores the private key and the public key, And the use of the public key.

The user terminal 10 generates a transaction of the send / receive mail by the mail send / receive transaction creation agent at the time of sending and receiving of e-mail, converts a received mail into a hash value, and transmits a transaction including the current time, And transmits it to the e-mail reception / At this time, the user terminal 10 acquires a hash value by converting the current time based on a time stamp or a system current time of the terminal, a received and received mail into a hash value to obtain a non-encrypted hash value, Encrypts the corresponding non-encrypted hash value to obtain a hash value encrypted, and generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the generated transaction to the e-mail receipt authentication server 50. When a transaction of a send / receive mail is generated, the user terminal 10 converts the entire send / receive e-mail into a hash value by a conventional hash algorithm, and then encrypts the hash value with a private key to obtain an encrypted hash value.

When the transaction of the send / receive e-mail is received from the user terminal 10 due to the e-mail reception / reception of the user terminal 10, the e-mail send / receive proof server 50 stores the transaction itself, A block chain is generated by repeatedly generating the block generation at every policy cycle by generating a block by performing a verification operation on the generated block and storing the transaction in the block chain in the block chain. In this way, when the e-mail reception / delivery server 50 writes and stores a transaction in the block chain in accordance with the transmitted / received e-mail, the transaction including the current time, the encrypted and the non- encrypted hash value received from the user terminal 10, .

In the case where the e-mail reception / delivery server 50 records and records the transaction of the send / receive mail in the block, the block 70 records the hash value of the current block, (HD) including a hash value of the block, a mucktree root hash value, a nonce value, and a block creation difficulty level adjustment bit, and a body (BD) including a transaction for the send / . Such a block 70 is repeatedly generated for each generation policy period to constitute a block chain as illustrated in FIG. 3. A plurality of blocks 70-1, 70-2, 70-3,... .) Are connected.

When the e-mail send and receive verification server 50 performs a verification operation on the transactions of the received and received e-mails collected from the user terminal 10 during the generation policy period to generate one block, the hash value of the current block, Combine the hash value and the nonce value to verify the transaction of the incoming and outgoing e-mails collected during the generation policy cycle by finding a hash value with more than '0' at the beginning of the hash called target. Thereby generating one block. The e-mail reception / delivery server 50 generates blocks repeatedly in each generation policy cycle in this manner to form a block chain. Transactions of incoming and outgoing e-mails generated in a time series are recorded and stored in the block chain.

The e-mail send and receive verification server 50 receives the e-mail send and receive proof requests from the user terminal 10, the e-mail send and receive verifying server manager and the third party, To generate a hash value of the e-mail sending and receiving subject e-mail, or to receive a hash value of the e-mail sending and receiving subject e-mail along with the reception of the e-mail sending and receiving proof request, Identify the authenticity of the email by verifying that the hash value of the email is present. In the case where the e-mail receiving and proving server 50 performs the e-mail authentication processing, the transaction recorded in the block chain is searched to check whether a non-encrypted hash value of the e-mail to be sent and received is present, Identify and identify e-mail receipts at high speed. Also, the e-mail reception / delivery server 50 can identify the authenticity of the e-mail receiving and sending out e-mail. The hash value of the e-mail receiving e-mail to be presented from the user terminal 10, Authenticity of the e-mail to be sent and received can be verified by checking whether the encrypted and non-encrypted hash value of the transaction recorded in the chain matches the hash value. At this time, the e-mail reception / delivery server 50 retrieves unencrypted hash values that are the same as the hash value of the send / receive verification target e-mail from the transactions in the block chain, and the corresponding non-encrypted hash values are retrieved from the encrypted hash value Is verified by the public key of the user terminal 10, the hash value obtained by the retrieval, the non-encrypted hash value obtained by the retrieval, and the hash value of the recipient identification subject e-mail are all identical to each other, The authenticity of the e-mail to be verified is verified by confirming that the e-mail to be verified is present at the current time included, and that it has been received and not tampered with.

In addition, in the case of transmitting the key use delegation request e-mail to the user terminal 10 in order to delegate the use of the private key and the public key from the user terminal 10 as described above, A transaction for the delegation request e-mail is generated and stored in the transaction itself. Since the state is before the private key and the public key are generated by the user terminal 10, the whole e-mail for key use delegation request is converted into a hash value, A transaction including the encrypted and unencrypted hash values is generated and stored in the block chain to verify receipt of the received key usage delegation request e-mail before generating the private key and the public key by the user terminal 10. [ At this time, the e-mail reception / delivery server 50 acquires a non-encrypted hash value by converting the e-mail request delegation request e-mail to a hash value, and acquires the encrypted hash value by encrypting the corresponding non- , A transaction including the corresponding encrypted and non-encrypted hash values is generated and stored in the block chain to store the private key and the public key in a state where the user has not generated the private key and the public key. Likewise, it is possible to prove the receipt later.

The system according to the first embodiment of the present invention having the above-described functions performs as illustrated in Fig. 4 when performing e-mail withdrawal verification.

First, the e-mail send / receive server 50 transmits a key use delegation request e-mail to the user terminal 10 for delegation of use of the private key and the public key, receives a key use delegate permission e-mail from the user terminal 10, The private key and the public key are received together and stored in the private key and the public key, thereby receiving the use of the private key and the public key (S10).

Thereafter, the user terminal 10 generates a transaction of the incoming and outgoing e-mail by the mail send / receive transaction creation agent at the time of sending and receiving e-mail, but converts the incoming and outgoing mail to a hash value and includes the current time, And transmits the generated transaction to the e-mail reception / delivery server 50 (S20). At this time, the user terminal 10 obtains a non-encrypted hash value by converting the received and received mail into a hash value, and obtains a hash value by encrypting the corresponding non-encrypted hash value with the private key of the user terminal 10 And generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the transaction to the e-mail receipt authentication server 50.

Thus, the e-mail reception / delivery server 50 collects transactions of the send / receive e-mails transmitted from the user terminal 10, stores the transactions therein, confirms whether the generation policy period has elapsed (S30), confirms that the generation policy period has passed A block is generated by performing a verification operation on the collected transactions in the meantime, and the collected transactions are recorded in the corresponding block and stored (S40).

In the case where the e-mail reception / delivery server 50 performs the verification operation on the transaction of the received e-mail collected from the user terminal 10 during the generation policy period to generate one block, the hash value of the current block, A hash value and a nonce value of the hash value of the hash value and the nonce value are found to find a hash value having a value greater than the number of '0' at the beginning of the hash called the target, Block is created and the collected transaction is recorded in the corresponding block and stored.

The e-mail reception / delivery server 50 repeatedly performs the processing of repeatedly performing the steps S20, S30 and S40 to generate a block for each generation policy cycle and to record the transaction of the collected sending / And the transactions of the incoming and outgoing e-mails generated in a time series in the corresponding block chain are recorded and stored.

In addition, the e-mail reception / delivery server 50 confirms whether e-mail send / receive authentication requests from the user terminal 10, the e-mail transmission / reception e-mail server manager and the third party are received (S50) A hash value of the send / receive verification target e-mail is generated by converting the send / receive verification target e-mail retrieved from the e-mail storage device 60 into a hash value, In step S60, it is confirmed whether or not there is a hash value of the send / receive proof e-mail in the transaction recorded in the block chain. In this way, when the e-mail reception / delivery server 50 performs the e-mail reception / reception proof processing, it searches the transactions in the block chain to check whether there is a non-encrypted hash value equal to the hash value of the e-mail to be sent / If the hash value of the e-mail to be sent and received is present in the transaction in the block chain, it is determined that the e-mail has been sent and received. If the hash value of the e-mail to be sent and received is not present in the transaction in the block chain, No judgment is made. In addition, the email send and receive proof server 50 can authenticate the authenticated send and receive email according to a request from the user terminal 10, the email send and receive proof server manager, and a third party. The email send and receive proof server 50 includes a user terminal 10, It is possible to identify the authenticity of the send / receive proof e-mail by confirming whether the hash value of the send / receive proof e-mail presented from the send / receive proof server manager and the third party matches the encrypted and non-encrypted hash value of the transaction recorded in the block chain . At this time, the e-mail reception / delivery server 50 retrieves unencrypted hash values that are the same as the hash value of the send / receive verification target e-mail from the transactions in the block chain, and the corresponding non-encrypted hash values are retrieved from the encrypted hash value The hash value obtained by decrypting the received e-mail with the public key of the user, the hash value obtained by the retrieval, the non-encrypted hash value, And the fact that the e-mail to be sent and received is present, and that it has been received and not altered, is confirmed.

Meanwhile, if it is determined in S30 that the generation policy period has not elapsed, S50 is performed. If it is determined in S50 that the request for e-mail withdrawal authentication has not been received, the e-mail send / do. The e-mail reception / delivery server 50 confirms whether the drive end instruction is input from the system operator at step S70. When it is confirmed that the drive end instruction is not input, the e-mail reception / If it is confirmed that the input is completed, the operation is terminated.

In addition, in the case where the e-mail reception / resistration authentication server 50 transmits the key use delegation request e-mail to the user terminal 10 in order to delegate the use of the private key and the public key from the user terminal 10 in the above- You can also create a transaction for the delegation request email and save it to itself. In this case, since the state before the generation of the private key and the public key by the user terminal 10, the e-mail receiving / proving server 50 converts the whole e-mail request for key use into the hash value, And a non-encrypted hash value is recorded in the block chain and stored. By storing the private key and the public key in a state where the user does not generate the private key and the public key, Enables proof.

According to the above-described first embodiment of the present invention, when an e-mail reception / reception for the user terminal 10 occurs, the e-mail reception / resection authentication server 50 transmits the hash value of the corresponding e-mail generated by the user terminal 10 And stores the transaction in a block so as to repeatedly store the transaction of the send / receive e-mail in the block chain so as not to be falsified. If necessary, the hash value of the send / receive e-mail is recorded in the block chain By verifying that it exists in the transaction, it is possible to prove the fact that the e-mail has been received, and to prove that the e-mail has not been tampered with. Thus, the first embodiment of the present invention can reliably demonstrate e-mail reception and reception.

In the above description of the first embodiment, it has been described that one email send and receive proof server 50 generates a block chain by performing a verification operation on a transaction of sending and receiving emails every generation policy cycle, When a plurality of e-mail sending / receiving servers 50 accommodated in respective local networks are interconnected and interconnected, a verification operation on the transaction of sending / receiving e-mails is performed per policy cycle generated by a plurality of e-mail sending / And perform processing to generate a block.

On the other hand, a system for processing the e-mail reception / reception proof according to the second embodiment of the present invention is performed as illustrated in Fig.

A plurality of user terminals 110 are connected to the mail server 130 via the local network 120 and receive and receive e-mails through the mail server 130. The user terminal 110 may be a conventional PC or the like, which is driven by a program and has a function of processing data, receiving and sending out e-mails, and the like.

 The mail server 130 is connected to the Internet via the e-mail security device 140 and transmits an e-mail originating from the user terminal 110 to the recipient side via the Internet via the e-mail security device 140, Via the e-mail security device 140, and transmits the e-mail to the user terminal 110. The mail server 130 also performs a function of transmitting and receiving e-mail received and received between the user terminals 110 accommodated in the local network 120.

The e-mail security apparatus 140 monitors e-mail received from the Internet to the e-mail server 130 to block malicious e-mails or monitors the e-mail sent from the e-mail server 130 to the Internet to prevent leakage of important information do. The e-mail storage device 160 stores and stores e-mail received and transmitted through the mail server 130.

The e-mail reception / delivery server 150 performs various processing for e-mail withdrawal verification based on a program built in itself.

In the email security equipment 140, a mail receiving and sending transaction generating agent corresponding to a program for generating a transaction at the time of sending and receiving an email is installed. The mail receiving and receiving transaction generating server 150 may receive the mail receiving and sending transaction generating agent 150, .

The e-mail security apparatus 140 receives a key use delegation request mail from the user terminal 110 by transmitting a key use delegation request e-mail to the user terminal 110 in order to delegate use of the private key and the public key.

When receiving the key use delegation request e-mail from the e-mail security device 140, the user terminal 110 transmits a key use delegation permission message to the e-mail security apparatus 140 in accordance with the user's instruction, And the public key to the e-mail security apparatus 140. The e-mail security apparatus 140 receives the key use authorization message, the private key, and the public key from the user terminal 110 and stores the received message in the e-mail security apparatus 140, (150) and stores the private key and the public key.

The e-mail security device 140 generates a transaction of the send / receive e-mail by the mail send / receive transaction creation agent at the time of the e-mail reception of the user terminal 110, converts the send and receive mails into a hash value, Generates a transaction including the hash value, and transmits the generated transaction to the e-mail reception / At this time, the e-mail security apparatus 140 acquires a hash value by converting the present time based on the time stamp or the system current time of the e-mail security apparatus 140 and the received and received mail into a hash value, Encrypted hash value to obtain a hash value encrypted and generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the generated transaction to the e-mail reception / When the transaction of the send and receive e-mails is generated, the e-mail security apparatus 140 converts the entire received and received e-mails into hash values by a conventional hash algorithm, and then encrypts the hash values with the private key to obtain the encrypted hash values.

When the transaction of the send / receive e-mail is received from the e-mail security apparatus 140 due to the e-mail reception / reception of the user terminal 110, the e-mail send / receive certificate server 150 stores the transaction itself, A block chain is generated by repeatedly generating the block generation at every policy cycle by generating a block by performing a verification operation on the generated block and storing the transaction in the block chain in the block chain. In the case where the e-mail reception and authentication server 150 records and stores a transaction in accordance with the received and received e-mail in the block chain, the transaction including the current time, the encrypted and the non-encrypted hash value received from the e-mail security apparatus 140, Store in chain.

In the case where the e-mail reception / delivery server 150 writes and stores a transaction of the send / receive mail in the block 70 as described in Fig. 2, one block 70 records the hash value of the current block, A header (HD) including a nonce value and a block generation difficulty adjustment bit, and a body (BD) including a transaction for a send / receive email generated during a generation policy period. Such a block 70 is repeatedly generated for each generation policy period to constitute a block chain as illustrated in FIG. 3. A plurality of blocks 70-1, 70-2, 70-3,... .) Are connected.

When the e-mail send and receive verification server 150 performs a verification operation on the transactions of the received and received e-mails collected from the e-mail security apparatus 140 during the generation policy period to generate one block, the hash value of the current block, To find a hash value that has more '0' than the number of '0's at the beginning of the hash called the target by combining the hash value and the nonce value of the received hash value To generate one block. In this manner, the email send and receive server 150 repeatedly generates blocks to form a block chain in each set policy period, and transactions of the send and receive emails generated in a time series are recorded and stored in the corresponding block chain.

The e-mail reception / delivery server 150 transmits the e-mail receipt authentication e-mail retrieved from the e-mail storage device 160 to the e-mail reception / To generate a hash value of the e-mail sending and receiving subject e-mail, or to receive a hash value of the e-mail sending and receiving subject e-mail along with the reception of the e-mail sending and receiving proof request, It verifies the authenticity of the email by confirming the existence of a hash value of the email. In the case where the e-mail reception / delivery server 150 performs the authentication processing for the authenticity of the e-mail, the transaction recorded in the block chain is searched to check whether the non-encrypted hash value of the e-mail to be sent / Identify and identify e-mail receipts at high speed. In addition, the email send and receive proof server 150 can identify the authenticity of the send and receive emails according to a request from the user terminal 110, the email send and receive proof server manager, and a third party. 110), the authenticity of the e-mail to be authenticated is verified by confirming whether the hash value of the e-mail to be sent / received from the e-mail send / receive server manager and the third party coincides with the encrypted and non-encrypted hash value of the transaction recorded in the block chain You may. At this time, the e-mail reception / resupply certificate server 150 retrieves unencrypted hash values that are the same as the hash value of the send / receive verification target e-mail from the transactions in the block chain, and determines whether the corresponding non-encrypted hash value is an encrypted hash value Is verified by the public key of the user terminal 110, the hash value obtained by the retrieval, the unencrypted hash value obtained by the retrieval, and the hash value of the recipient identification subject e-mail are all identical to each other, The authenticity of the e-mail to be verified is verified by confirming that the e-mail to be verified is present at the current time included, and that it has been received and not tampered with.

When the e-mail security device 140 transmits the key use delegation request e-mail to the user terminal 110 in order to delegate the use of the private key and the public key from the user terminal 110 as described above, Since the transaction for the requested e-mail is generated and stored in the e-mail reception and authentication server 150 but before the private key and the public key are generated by the user terminal 110, the entire e-mail for requesting key use is converted into a hash value And generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the generated transaction to the email send and receive proof server 150 and stores it in the block chain by the email send and receive proof server 150 It enables verification of receipt of the received key usage delegation request e-mail before generating the private key and the public key. At this time, the e-mail security device 140 obtains a non-encrypted hash value by converting the e-mail request for key use delegation into a hash value, and encrypts the corresponding non-encrypted hash value with the private key of the self- And generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the generated transaction to the email send and receive authentication server 150 so that the corresponding transaction is blocked by the email send and receive authentication server 150 Chain so as to allow the user to verify the receipt of the key using delegation request e-mail in the same manner as described above without generating the private key and the public key by the user.

The system according to the second embodiment of the present invention having the above-described functions performs as illustrated in Fig. 6 when performing e-mail withdrawal verification.

First, the e-mail security device 140 transmits a key use delegation request e-mail to the user terminal 110 for delegating the use of the private key and the public key to the user terminal 110, (S110). In this case, the user is requested to use the private key and the public key in step S110.

Thereafter, the email security appliance 140 generates a transaction of the send and receive email by the mail send and receive transaction creation agent at the time of the email reception of the user terminal 110, converts the send and receive mail to a hash value, And generates a transaction including the unencrypted hash value and transmits the generated transaction to the e-mail receipt authentication server 150 (S120). At this time, the e-mail security apparatus 140 acquires a non-encrypted hash value by converting the received and received mail into a hash value and encrypts the corresponding non-encrypted hash value with the private key of the self-stored corresponding user terminal 110, Value, and generates a transaction including the current time, the encrypted and the non-encrypted hash value, and transmits the generated transaction to the e-mail receipt authentication server 150. [

Then, the e-mail send / receive server 150 collects transactions of the send / receive e-mails transmitted from the e-mail security apparatus 140, stores the transactions, and checks whether the generation policy period has passed (S130) If it is confirmed, the verification process of the collected transaction is performed to generate a block, and the collected transaction is recorded in the corresponding block and stored (S140).

In the case where the e-mail reception / delivery server 150 performs the verification operation on the transaction of the received e-mail collected from the e-mail security apparatus 140 during the generated policy period to generate one block, the hash value of the current block, Combining the hash value and the nonce value of the transaction to find a hash value with a number of zeroes greater than the number of '0's at the beginning of the hash called the target, One block is created and the collected transactions are recorded in the corresponding block and stored.

The e-mail reception / delivery server 150 repeatedly performs S120, S130 and S140 so as to generate a block for each generation policy cycle, and to repeatedly record and store transactions of the collected send / And the transactions of the incoming and outgoing e-mails generated in a time series in the corresponding block chain are recorded and stored.

In addition, the e-mail send / receive server 150 checks whether an e-mail send / receive proof request is received from the user terminal 110, the e-mail exchange / delivery server administrator and a third party (S150) A hash value of the send / receive verification target e-mail is generated by converting the e-mail receipt verification target e-mail retrieved from the storage device 160 into a hash value, The receipt of the e-mail is verified (S160) by confirming whether or not the hash value of the sender's e-mail is included in the transaction recorded in the chain. In this way, when the e-mail reception / delivery server 150 performs the e-mail reception / reception proof processing, the transaction in the block chain is searched to check whether there is a non-encrypted hash value equal to the hash value of the e- If the hash value of the e-mail to be sent and received is present in the transaction in the block chain, it is determined that the e-mail has been sent and received. If the hash value of the e-mail to be sent and received is not present in the transaction in the block chain, No judgment is made. In addition, the email send and receive proof server 150 can authenticate the send and receive proof e-mail according to a request from the user terminal 110, the email send and receive proof server manager, and a third party. The email send and receive proof server 150 includes a user terminal 110, It is possible to identify the authenticity of the send / receive proof e-mail by confirming whether the hash value of the send / receive proof e-mail presented from the send / receive proof server manager and the third party matches the encrypted and non-encrypted hash value of the transaction recorded in the block chain. At this time, the e-mail reception / resupply certificate server 150 retrieves unencrypted hash values that are the same as the hash value of the send / receive verification target e-mail from the transactions in the block chain, and determines whether the corresponding non-encrypted hash value is an encrypted hash value The hash value obtained by decrypting the received e-mail with the public key of the user, the hash value obtained by the retrieval, the non-encrypted hash value, And the fact that the e-mail to be sent and received is present, and that it has been received and not altered, is confirmed.

If it is determined in S130 that the generation policy period has not elapsed, S150 is performed. If it is determined in S150 that the request for e-mail withdrawal authentication has not been received, the e-mail acceptance and authentication server 150 performs S170 do. In step S170, the e-mail reception and reception server 150 confirms whether the drive end instruction is input from the system operator. If the drive end instruction is not input, the e-mail reception and reception server 150 returns to step S120 to repeat the process. If it is confirmed that the input is completed, the operation is terminated.

In addition, in the case where the email security apparatus 140 transmits the key use delegation request email to the user terminal 110 in order to delegate the use of the private key and the public key from the user terminal 110 in the above-described S110, A transaction for the request e-mail may be generated and stored in the e-mail receipt authentication server 150. In this case, since the state before the generation of the private key and the public key by the user terminal 110, the e-mail security apparatus 140 converts the whole key use request e-mail to a hash value, A transaction including the unencrypted hash value is generated and transmitted to the e-mail reception and authentication server 150, and the transaction is stored in the block chain by the e-mail reception and authentication server 150 and stored, And also for the received key usage delegation request e-mail in the state that the public key is not generated, as described above.

According to the second embodiment of the present invention as described above, when an e-mail reception / reception for the user terminal 110 occurs, the e-mail receiving / proving server 150 transmits a hash of the corresponding e-mail generated by the e-mail security apparatus 140 And stores the transaction in a block so as to store the transaction of the send / receive e-mail in a block chain so that it can not be falsified. If necessary, the hash value of the send / receive e-mail is recorded in the block chain By verifying that the incoming and outgoing e-mail is not tampered with, by proving that the incoming and outgoing e-mail exists in the transaction. Thus, the second embodiment of the present invention can reliably demonstrate e-mail reception and reception.

In the above description of the second embodiment, it has been described that one e-mail sending / receiving server 150 generates a block chain by performing a verification operation on the transaction of the send / receive e-mail at each generation policy period, When a plurality of email send and receive proof servers 150 that are accommodated in respective local networks are interconnected and linked, a plurality of email send and receive proof servers 150 may perform a verification operation on a transaction of send and receive emails every policy cycle And perform processing to generate a block.

On the other hand, a system for processing e-mail reception / reception verification according to the third embodiment of the present invention is performed as illustrated in Fig.

A plurality of user terminals 210 are connected to the mail server 230 via the local network 220 and receive and receive e-mails through the mail server 230. The user terminal 210 may be a conventional PC or the like, which is driven by a program and has a function of processing data or receiving and sending out e-mails.

 The mail server 230 is connected to the Internet through the e-mail security apparatus 240 and transmits an e-mail sent from the user terminal 210 to the recipient side via the Internet via the e-mail security apparatus 240, To the user terminal 210 via the e-mail security device 240. The e-mail security device 240 receives e-mails transmitted through the Internet from the e- The mail server 230 also functions to send and receive e-mails that are exchanged between the user terminals 210 stored in the local network 220.

The e-mail security apparatus 240 monitors e-mail received from the Internet to the e-mail server 230 to block malicious e-mails or monitors the e-mail sent from the e-mail server 230 to the Internet to prevent leakage of important information do. The e-mail storage device 260 stores and stores the e-mail sent and received through the e-mail server 230.

The e-mail reception / delivery server 250 performs various processing for e-mail withdrawal verification based on its own built-in program.

The e-mail send / receive certificate server 250 generates a transaction for the e-mail send / receive certificate server 250 by its built-in mail send / receive transaction creation agent at the time of sending / receiving e-mail by the user terminal 210, stores it in a block chain, Is performed.

The e-mail reception / delivery server 250 receives a delegation request for a key from the user terminal 210 by transmitting a key use delegation request e-mail to delegate use of the private key and the public key to the user terminal 210.

When the user terminal 210 receives the key use delegation request mail from the email send and receive proof server 250, the user terminal 210 transmits a key use delegation permission message to the email send and receive proof server 250 according to the user's instruction, And transmits the private key and the public key to the e-mail sending and receiving server 250. The e-mail sending and receiving server 250 receives the private key and the public key from the user terminal 210, And receives a delegation of use of the private key and the public key by performing the process of storing the private key and the public key.

The e-mail reception / delivery server 250 generates a transaction of the send / receive e-mail when the e-mail of the user terminal 210 is received and stores the e-mail. In this way, when generating a transaction of the send / receive e-mail, the e-mail send / receive server 250 converts the entire send / receive e-mail into a hash value by a conventional hash algorithm to generate a transaction, It creates a transaction that contains encrypted and non-encrypted hash values and stores it in itself. At this time, the e-mail reception / delivery server 250 obtains the hash value by converting the present time based on the time stamp or the current time of the system itself, and the received and received e-mail to the hash value, ) To obtain the encrypted hash value, and generates a transaction including the current time, the encrypted and the unencrypted hash value, and stores the generated transaction in itself. When generating the transaction of the send / receive e-mail, the e-mail send / receive server 250 converts the entire send / receive e-mail into a hash value by a conventional hash algorithm and then encrypts the hash value with the private key to obtain the encrypted hash value.

In this way, the e-mail reception / delivery server 250 generates a transaction of the send / receive e-mail due to the e-mail reception / reception of the user terminal 210 and stores the e-mail transaction in itself. Block generation is performed repeatedly at every policy cycle by generating a block chain, and the transaction corresponding to the incoming and outgoing e-mail is recorded and stored in the block chain. In this way, when the e-mail reception / delivery server 250 records and records a transaction according to the send / receive e-mail in the block chain, the transaction storing the current time, the encrypted and the non-encrypted hash value is stored in the block chain.

In this way, when the email receipt proving server 250 writes and stores a transaction of the sending and receiving email in the block 70 as illustrated in FIG. 2, one block 70 records the hash value of the current block, A header (HD) including a nonce value and a block generation difficulty level adjustment bit, and a body (BD) including a transaction for a send / receive e-mail generated during a generation policy period. Such a block 70 is repeatedly generated for each generation policy period to constitute a block chain as illustrated in FIG. 3. A plurality of blocks 70-1, 70-2, 70-3,... .) Are connected.

When the e-mail reception / delivery server 250 performs a verification operation on the transaction of the created / received e-mail generated during the generation policy period to generate one block, the hash value of the current block, the hash value and the non- And a hash value having a number of '0' that is greater than the number of '0's at the beginning of the hash called the target (target) is generated, thereby verifying the transaction of the received and received e-mails collected during the generation policy period to generate one block do. The e-mail reception / delivery server 250 repeatedly generates blocks to generate block chains in each generation policy cycle in this manner, and transactions of incoming and outgoing e-mails generated in a time series are recorded and stored in the corresponding block chain.

The email send and receive proof server 250 transmits the send and receive proof e-mails retrieved from the e-mail storage device 260 when a request for e-mail send and receive is received from the user terminal 210, the e- To generate a hash value of the e-mail sending and receiving subject e-mail, or to receive a hash value of the e-mail sending and receiving subject e-mail along with the reception of the e-mail sending and receiving proof request, And verifies that the hash value of the e-mail is present. In the case where the e-mail reception / delivery server 250 performs e-mail reception / reception / authentication processing, the transaction recorded in the block chain is searched to check whether a non-encrypted hash value of the e-mail to be sent / Confirm at high speed and verify. In addition, the e-mail reception / delivery server 250 can identify the authenticity of the e-mail to be sent / received according to a request from the user terminal 210, the e-mail reception / 210), the authenticity of the e-mail to be authenticated is confirmed by confirming whether the hash value of the e-mail to be sent / received from the e-mail sending / receiving server manager and the third party coincides with the encrypted and unencrypted hash value of the transaction recorded in the block chain You may. At this time, the e-mail reception / delivery server 250 searches the transactions in the block chain for a non-encrypted hash value equal to the hash value of the send / receive verification target e-mail, The hash value obtained by decrypting the received e-mail with the public key of the user, the hash value obtained by the retrieval, the non-encrypted hash value, And the authenticity of the e-mail to be sent and received is confirmed by confirming that the e-mail to be sent and received is present and is not transmitted and modulated.

In addition, in the case where the e-mail receiving / receiving server 250 transmits the key use delegation request e-mail to the user terminal 210 in order to delegate use of the private key and the public key from the user terminal 210 as described above, A transaction for the delegation request e-mail is generated and stored in the transaction itself. Since the state is before the private key and the public key are generated by the user terminal 210, the whole of the key use delegation request e-mail is converted into a hash value, A transaction containing the encrypted and unencrypted hash values is generated and stored in the block chain, thereby enabling the proof of receipt of the received key usage delegation request e-mail before generating the private key and the public key by the user terminal 210 . At this time, the e-mail send / receive server 250 obtains a non-encrypted hash value by converting the e-mail request delegation request e-mail into a hash value, and acquires the corresponding non-encrypted hash value with the private key of the corresponding user terminal 210 A hash value that is encrypted and encrypted is obtained, a transaction including the current time, the encrypted and the non-encrypted hash value is generated, and the transaction is recorded in the block chain and stored. In this state, the private key and the public key are not generated by the user As for the e-mail request for delegation of the use of the key, it is also possible to prove the receipt of the e-mail later.

The system according to the third embodiment of the present invention having the above-described functions performs as illustrated in FIG. 8 when performing the e-mail withdrawal proof.

First, the e-mail send / receive server 250 sends a key use delegation request e-mail to the user terminal 210 for delegating the use of the private key and the public key to the user terminal 210, Receives the public key, and stores it in itself to receive the use of the private key and the public key (S210).

Thereafter, the e-mail send / receive server 250 converts the send / receive e-mail to a hash value at the time of sending / receiving e-mail of the user terminal 210 to generate a transaction, converts the send / receive mail to a hash value, A transaction including the encrypted hash value is generated and stored in the transaction itself (S220). At this time, the e-mail reception / delivery server 250 obtains a non-encrypted hash value by converting the received and received e-mail into a hash value, and encrypts the corresponding non-encrypted hash value with the private key of the corresponding stored user terminal 210 Obtains a hash value, generates a transaction including the current time, the corresponding encrypted and non-encrypted hash value, and stores the transaction in itself.

If the generation policy period has elapsed (S230), the e-mail send / receive certificate server 250 stores a transaction of the generated send / receive mail and confirms whether the generation policy period has elapsed A transaction is generated to generate a block, and the collected transaction is recorded in the corresponding block and stored (S240).

As described above, when the e-mail reception / delivery server 250 performs a verification operation on the transaction of the generated e-mail generated during the generation policy period to generate one block, the hash value of the current block, the hash value of the send / 0 "in the first part of the hash called the target, thereby generating a block by performing a verification of the transaction of the generated and generated e-mail generated during the generation policy period, The generated transaction is recorded in the corresponding block and stored.

The e-mail reception / delivery server 250 repeatedly performs the processing of repeatedly performing S220, S230, and S240 to generate a block for each generation policy cycle, and to record the transaction of the generated sending / receiving mail in the corresponding block in the meantime And transactions of the incoming and outgoing e-mails generated in a time-series manner are recorded and stored in the corresponding block chain.

In addition, the e-mail send / receive server 250 checks whether an e-mail send / receive proof request is received from the user terminal 210, the e-mail send / receive e-mail server manager and a third party (S250) A hash value of the send / receive verification target e-mail is generated by converting the e-mail receipt verification target e-mail retrieved from the storage device 260 into a hash value to generate a hash value of the send / It is verified whether or not there is a hash value of the send / receive proof e-mail in the transaction recorded in the chain (S260). In this way, when the e-mail reception / delivery server 250 performs the e-mail reception / reception proof processing, the transaction recorded in the block chain is searched to check whether a non-encrypted hash value of the e- At a high speed. In addition, the e-mail reception / delivery server 250 can identify the authenticity of the e-mail to be sent / received according to a request from the user terminal 210, the e-mail reception / 210), the authenticity of the sender authentication subject e-mail is confirmed by confirming whether the hash value of the sender's authentication subject e-mail presented from the e-mail sender authentication server manager and the third party coincides with the encrypted and non-encrypted hash value of the transaction recorded in the block chain It can also be identified. At this time, the e-mail reception / delivery server 250 searches the transactions in the block chain for a non-encrypted hash value equal to the hash value of the send / receive verification target e-mail, The hash value obtained by decrypting the received e-mail with the public key of the user, the hash value obtained by the retrieval, the non-encrypted hash value, And the authenticity of the e-mail to be sent and received is confirmed by confirming that the e-mail to be sent and received is present and is not transmitted and modulated.

Meanwhile, if it is determined in S230 that the generated policy period has not elapsed, S250 is performed. If it is determined in S250 that the request for e-mail sending / receiving of mail has not been received, the e-mail send / do. In step S270, the e-mail reception / delivery server 250 confirms whether the drive end instruction is input from the system operator. If the drive end instruction is not input, the e-mail send and receive server 250 returns to step S220 to repeat the process. If it is confirmed that the input is completed, the operation is terminated.

In addition, in the case where the e-mail receiving / receiving server 250 transmits the key use delegation request e-mail to the user terminal 210 in order to delegate use of the private key and the public key from the user terminal 210 in S210 described above, You can also create a transaction for the delegation request email and save it to itself. In this case, since the state before the generation of the private key and the public key by the user terminal 210, the e-mail sending / receiving server 250 converts the entire e-mail request for key use into the hash value, And a non-encrypted hash value, and stores the generated transaction in the block chain, so that the key usage delegation request e-mail received before the generation of the private key and the public key by the user terminal 210, Enables verification of receipt.

According to the third embodiment of the present invention, when an e-mail reception / reception for the user terminal 210 occurs, the e-mail reception / delivery server 250 generates a transaction including the hash value of the e- It is possible to prove that the sender and receiver are not tampered by storing the message in a non-forgery-inhibited manner and checking if the corresponding hash value of the sender's mail is present in the corresponding block chain when necessary. Thus, the third embodiment of the present invention can reliably demonstrate the e-mail reception / reception.

In the above description of the third embodiment, it has been described that one email send and receive proof server 250 generates a block chain by performing a verification operation on a transaction of a send and receive email every generation policy period, When a plurality of email send and receive proof servers 250 accommodated in respective local networks are interconnected and linked, a plurality of email send and receive proof servers 250 perform a verification operation on the transactions of the send and receive emails every policy cycle And perform processing to generate a block.

The present invention can be embodied as computer-readable codes on a computer-readable recording medium. The computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner.

Although the preferred embodiments of the present invention have been described for illustrative purposes, those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims. And the scope of the present invention should be understood as the scope of the following claims and their equivalents.

The present invention may be very usefully applied to the case where the user terminal is proved to send and receive e-mail. The present invention stores a transaction including a hash value of a corresponding e-mail in a block chain in a non-falsifiable manner when an e-mail reception / reception for the user terminal occurs, and proves the e-mail reception / I can prove it.

<Explanation of Symbols>

10, 110, 210; User terminal

20, 120, 220; Local network

30, 130, 230; Mail server

40, 140, 240; Email security equipment

50, 150, 250; Email send / receive server

60, 160, 260; Email Storage Equipment

Claims (14)

1. A transaction of the send / receive e-mail is generated by the send / receive transaction generation agent when the user terminal sends / receives the e-mail, and the send / receive mail is converted into a hash value to acquire a non-encrypted hash value, Obtaining a hash value encrypted by encrypting the value and generating a transaction including the current time, the encrypted and the non-encrypted hash value, and transmitting the generated transaction to the e-mail receipt authentication server;

   The e-mail reception / transmission server collects transactions of the send / receive e-mails transmitted from the user terminal, performs a verification operation on the transactions according to the generation policy cycle, generates blocks and records the collected transactions in the corresponding blocks Storing a transaction including a current time, an encrypted and a non-encrypted hash value transmitted from a user terminal in a block chain; And

   Verifying whether an e-mail has been received and forged or not by checking whether an unencrypted hash value equal to a hash value of the e-mail sending and receiving e-mail exists in the transaction of the block chain when the e-mail sending and receiving server receives the e-mail sending and receiving certificate request; And an authentication server for authenticating the user.
2. The method according to claim 1,

   The e-mail reception / distribution server transmits to the user terminal a key use delegation request e-mail request for delegating use of the private key and the public key to receive the key use delegation permission e-mail from the user terminal and receives the private key and the public key of the user terminal And receiving the delegation of use of the private key and the public key by performing the process of storing the private key and the public key in the private key.
3. The method according to claim 1,

   The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value equal to the hash value of the send and receive e-mail, and transmits the encrypted hash value existing in the retrieved transaction to the user terminal It is confirmed whether or not the hash value obtained by decrypting by the public key of the received e-mail is identical to the hash value of the returned and received e-mail, Further comprising confirming the fact that the e-mail to be verified is present and verified that the e-mail to be verified has not been altered and has not been tampered with.
4. 3. The method of claim 2,

   The e-mail reception / rescue certificate server obtains a non-encrypted hash value by converting the entire e-mail requesting e-mail request e-mail to a hash value and acquires an encrypted hash value by encrypting the corresponding non-encrypted hash value with its own private key, Generating a transaction including a time, a corresponding encrypted and a non-encrypted hash value, and storing the generated transaction in a block chain;

   When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged or falsified; And

   The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value that is the same as the hash value of the send / receive target key use request e-mail, and the corresponding non-encrypted hash value is the encrypted hash value By confirming whether the hash value obtained by decrypting the received e-mail by using the self-public key, the hash value of the retrieved non-encrypted hash value, and the hash value of the withdrawal verification target key use request e-mail are all included in the retrieved transaction And confirming the authenticity of the caller ID key request delegation request e-mail by confirming the fact that the call agent delegation request e-mail is present at the present time, Method of proof of receipt.
5. The e-mail security apparatus generates a transaction of the send / receive e-mail by the mail send / receive transaction generation agent at the time of e-mail reception of the user terminal, converts the send and receive mails into a hash value to obtain a non-encrypted hash value, Encrypting the corresponding non-encrypted hash value to obtain a hash value encrypted and generating a transaction including the current time, the encrypted and the non-encrypted hash value, and transmitting the generated transaction to the e-mail receipt authentication server;

   The e-mail reception / transmission server collects transactions of the send / receive e-mails transmitted from the e-mail security apparatus, performs a verification operation on the transactions according to the generation policy cycle, generates blocks, records the collected transactions in the corresponding blocks, Storing in a block chain a transaction that includes a current time, encrypted and unencrypted hash values generated from the email security appliance by generating a block chain by iterating; And

   Verifying whether an e-mail has been received and forged or not by checking whether an unencrypted hash value equal to a hash value of the e-mail sending and receiving e-mail exists in the transaction of the block chain when the e-mail sending and receiving server receives the e-mail sending and receiving certificate request; And an authentication server for authenticating the user.
6. 6. The method of claim 5,

   The e-mail security apparatus transmits a key use delegation request e-mail request for delegating use of the private key and the public key to the user terminal, receives the key use delegation permission e-mail including the private key and the public key from the user terminal, Further comprising the step of receiving and delegating the use of the private key and the public key by performing a process of providing the e-mail message to the e-mail receiving and delivering server and storing the e-mail message.
7. 6. The method of claim 5,

   The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value equal to the hash value of the send and receive e-mail, and transmits the encrypted hash value existing in the retrieved transaction to the user terminal It is confirmed whether or not the hash value obtained by decrypting by the public key of the received e-mail is identical to the hash value of the returned and received e-mail, Further comprising confirming the fact that the e-mail to be verified is present and verified that the e-mail to be verified has not been altered and has not been tampered with.
8. The method according to claim 6,

   The e-mail security apparatus converts the whole key use delegation request e-mail into a hash value to obtain a non-encrypted hash value, and encrypts the corresponding non-encrypted hash value with a self- Generating a transaction including the current time, the encrypted and the non-encrypted hash value, and providing the transaction to the e-mail receipt authentication server to store the transaction in the block chain by the e-mail receipt authentication server;

   When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged; And

   The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value that is the same as the hash value of the send / receive target key use request e-mail, and the corresponding non-encrypted hash value is the encrypted hash value The hash value obtained by decrypting the hash value obtained by decrypting the hash value with the public key of the corresponding user terminal generated by the e-mail security device, the hash value of the retrieved non-encrypted hash value, Identification of the authenticity of the caller ID key request delegation request e-mail by verifying that the call key request delegation request e-mail is present at the current time included in the transaction in which the e-mail was found, Further comprising: &lt; RTI ID = 0.0 &gt; Subalsin way proved.
9. When the e-mail reception and delivery server generates and transmits e-mail to and from the user terminal, converts the received and received e-mails into hash values by the mails send and receive transaction generation agent to generate transactions and acquires non-encrypted hash values by converting received mails into hash values Encrypting the corresponding non-encrypted hash value with a private key of the user terminal to obtain an encrypted hash value, and generating a transaction including the current time, the encrypted and the non-encrypted hash value;

   The e-mail reception / delivery server collects the transaction of the generated sending / receiving e-mail, performs a verification operation on the transaction according to the generation policy period, generates a block, and records the collected transaction in the corresponding block and repeats the processing. Storing a transaction in a block chain, the transaction including a current time, an encrypted and a non-encrypted hash value; And

   Verifying whether an e-mail has been received and forged or not by checking whether an unencrypted hash value equal to a hash value of the e-mail sending and receiving e-mail exists in the transaction of the block chain when the e-mail sending and receiving server receives the e-mail sending and receiving certificate request; And an authentication server for authenticating the user.
10. 10. The method of claim 9,

    The e-mail reception / distribution server transmits to the user terminal a key use delegation request e-mail request for delegating use of the private key and the public key to receive the key use delegation permission e-mail from the user terminal and receives the private key and the public key of the user terminal And receiving the delegation of use of the private key and the public key by performing the process of storing the private key and the public key in the private key.
11. 10. The method of claim 9,

    The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value equal to the hash value of the send and receive e-mail, and transmits the encrypted hash value existing in the retrieved transaction to the user terminal It is confirmed whether or not the hash value obtained by decrypting by the public key of the received e-mail is identical to the hash value of the returned and received e-mail, Further comprising confirming the fact that the e-mail to be verified is present and verified that the e-mail to be verified has not been altered and has not been tampered with.
12. 11. The method of claim 10,

    The e-mail reception / rescue authentication server obtains a non-encrypted hash value by converting the whole e-mail requesting e-mail request to a hash value, and encrypts the corresponding non-encrypted hash value with a self- And generating a transaction including the current time, the encrypted and the non-encrypted hash value, and storing the transaction in a block chain;

    When the e-mail reception / delivery server receives the request for call origination of the key use delegation request e-mail, it checks whether a non-encrypted hash value equal to the hash value of the call origination request key use request e-mail exists in the transaction of the block chain Verifying whether the key use delegation request e-mail is received and forged or falsified; And

    The e-mail reception and delivery server retrieves from the transactions in the block chain an unencrypted hash value that is the same as the hash value of the send / receive target key use request e-mail, and the corresponding non-encrypted hash value is the encrypted hash value By confirming whether or not the hash value obtained by decrypting the hash value obtained by decrypting by using the public key of the corresponding user terminal that has been generated by itself, the hash value of the retrieved non-encrypted hash value, And confirming the fact that the call originating delegate key request delegation request e-mail is present at the current time included in the transaction in which the e-mail is searched and that the call is delegated and not tampered, thereby identifying the authenticity of the call key delegation request e-mail Wherein the e-mail receiving /
13. A computer-readable recording medium having stored thereon a program for implementing the e-mail withdrawal method according to any one of claims 1 to 12.
14. A program stored in a computer-readable recording medium for implementing the method for verifying email receipt according to any one of claims 1 to 12.

Images