WO2020071650A1

WO2020071650A1 - Blockchain-based expense processing data management system and method and computer program therefor

Info

Publication number: WO2020071650A1
Application number: PCT/KR2019/011602
Authority: WO
Inventors: 석창규
Original assignee: 비즈플레이 주식회사
Priority date: 2018-10-05
Filing date: 2019-09-09
Publication date: 2020-04-09
Also published as: SG10201908436RA; KR101993293B1

Abstract

A blockchain-based expense processing data management system may comprise: a transmitting/receiving unit configured to receive expense processing information including card transaction information and expenditure proof information from an expense user's user device or an external server; a hash extracting unit configured to generate a hash value corresponding to the expense processing information; a data processing unit configured to divide the card transaction information into financial information, personal identification information, and general transaction information, and divide the financial information and the personal identification information into a plurality of partial data; a transmitting unit configured to upload the plurality of partial data and the hash value to a blockchain network; and a storing unit configured to store the general transaction information and the expenditure proof information. Using the expense processing data management system, it is possible to reduce the load and cost required to ensure security when providing expense processing data to a user by dividing the main information of the expense processing data into several data pieces, distributing and storing them on the blockchain network, and allowing the user to download corresponding information from the blockchain network.

Description

Blockchain based expense management data management system and method and computer program for the same

Embodiments relate to a blockchain-based expense processing data management system and method, and a computer program therefor. More specifically, the main information among the expense processing data is divided into several pieces of data on a blockchain network. It is a technology for reducing the load and cost required to secure security when providing the cost processing data to the user by distributing and storing the cost from the blockchain network when the user requests the cost processing data.

In the company, employees spend their money using corporate name card, personal name card, or cash, etc., and, after prepayment, submit the expenditure resolution with documentary evidence to the company's expense manager, and then proceed through the payment process To do. This expenditure process was usually done by handwriting a paper receipt on a document printed on paper, and after approval of the expenditure resolution was completed, the approved expenditure resolution was affixed and stored in a warehouse or scanned as an image and stored on a server. However, in the case of a physical receipt, storage is inconvenient, and in the case of a scanned image, there is a problem that the effect as a supporting document is not recognized.

As a technique derived to solve these problems, Patent Publication No. 10-1854393 discloses a technique of performing expense processing in a manner that approves expense expenditure by receiving the usage history of the card in the personal name from the company's management server. do. However, even in the case of the prior art disclosed in Korean Patent Publication No. 10-1854393, there is an inconvenience of storing and storing card transaction information and expense processing information which are massive and frequently generated in an in-house system.

In particular, card transaction information and expense processing information include financial information such as a card number and expiration date, as well as a personal identification number. To share this information between systems, through an agent system or an API (Application Programming Interface) Data specialized transmission is used. At this time, in order to prevent leakage of personal information and financial information, network security technologies such as Secure Socket Layer (SSL), Virtual Private Network (VPN), and leased lines are used, and multiple security technologies such as encrypting specific fields of data are applied. This has a problem that increases the cost for data transmission and acts as a factor to lower the transmission speed.

According to an aspect of the present invention, the main information among the expense processing data is divided into several pieces of data and distributedly stored on a blockchain network, and when a user needs data, at least a part of the data is a blockchain network Block-based security that prevents forgery and alteration of expense processing information and reduces and efficiently separates and transmits information at a low cost while reducing the hardware and service loads to secure security when transmitting the expense processing information. It is possible to provide a processing data management system and method and a computer program therefor.

A blockchain-based expense processing data management system according to an embodiment includes: a transceiver configured to receive expense processing information including card transaction information and expense proof information from a user device of an expense user or an external server; A hash extractor configured to generate a hash value corresponding to the expense processing information; A data processing unit configured to divide the card transaction information into financial information, personal identification information, and general transaction information, and to divide the financial information and the personal identification information into a plurality of partial data; A transmission unit configured to upload the plurality of partial data and the hash value to a blockchain network; And a storage unit configured to store the general transaction information and the expenditure proof information.

In one embodiment, when the data processing unit needs to be reconfigured for the previously stored expense processing information, the identification information of the plurality of partial data on the blockchain network is stored in the storage unit and is stored in the plurality of partial data. It is further configured to provide the corresponding general transaction information and the expenditure proof information to the user device.

The blockchain-based expense processing data management system according to an embodiment compares the hash value corresponding to the reconstituted expense processing information with the hash value shared on the blockchain network, and the financial information of the expense processing information reconstructed. And a verification unit configured to verify the personal identification information.

In one embodiment, the data processing unit is further configured to divide the financial information into a plurality of first partial data. In this case, the transmission unit is further configured to store the plurality of first partial data in different blocks on the blockchain network, respectively.

In one embodiment, the data processing unit is further configured to divide the personal identification information into a plurality of second partial data. In this case, the transmission unit is further configured to store the plurality of second partial data in different blocks on the blockchain network, respectively.

In one embodiment, before the data processing unit divides the financial information and the personal identification information into a plurality of partial data, whether the financial information and the personal identification information are already uploaded to the storage unit or the blockchain network. It is further configured to check whether or not.

In one embodiment, when the financial information and the personal identification information are already stored, the data processing unit matches the general transaction information and the expenditure proof information with the previously stored financial information and the personal identification information to It is further configured to store in the storage unit.

In one embodiment, the data processing unit is further configured to encrypt the plurality of partial data. At this time, the transmission unit is further configured to upload the encrypted plurality of partial data and the hash value to the blockchain network.

Blockchain-based expense processing data management method according to an embodiment, the expense processing data management system, receiving the expense processing information including the card transaction information and expense evidence from the user device or external server of the expense user; Dividing the card transaction information into financial information, personal identification information, and general transaction information by the expense processing data management system; Dividing the financial information and the personal identification information into a plurality of partial data by the expense processing data management system; Generating, by the expense processing data management system, a hash value corresponding to the expense processing information; Uploading, by the expense processing data management system, the plurality of partial data and the hash value to a blockchain network; And the expense processing data management system storing the general transaction information and the expenditure proof information in the expense processing data management system.

Blockchain-based security management data management method according to an embodiment, when the security management data management system is necessary to reconfigure the previously stored security processing information, identification information of the plurality of partial data on the blockchain network, And providing the general transaction information and the expenditure proof information to the user device that are stored in the expense processing data management system and correspond to the plurality of partial data.

In a method of managing blockchain-based expense processing data according to an embodiment, the expense processing data management system is reconstructed by comparing a hash value corresponding to the reconstructed expense processing information and a hash value shared on the blockchain network. The method further includes verifying the financial information and the personal identification information of the expense processing information.

In one embodiment, the step of dividing the plurality of partial data includes the step of dividing the financial information into a plurality of first partial data by the expense processing data management system. At this time, the step of uploading to the blockchain network includes storing the plurality of first partial data in different blocks on the blockchain network, respectively.

In one embodiment, the step of dividing the plurality of partial data includes the step of dividing the personal identification information into a plurality of second partial data by the expense processing data management system. At this time, the step of uploading to the blockchain network includes storing the plurality of second partial data in different blocks on the blockchain network, respectively.

According to an embodiment of the present invention, a blockchain-based expense processing data management method may include, before the step of dividing the data into a plurality of partial data, the expense processing data management system, the financial information, and the personal identification information by the expense processing data management system or And checking whether it is already stored in the blockchain network.

According to an embodiment of the block chain-based expense processing data management method, when the financial information and the personal identification information are already stored, the expense processing data management system may advance the general transaction information and the expenditure proof information in advance. And matching the stored financial information and the personal identification information and storing in the expense processing data management system.

The blockchain-based expense processing data management method according to an embodiment further includes the step of encrypting the plurality of partial data by the expense processing data management system. At this time, the step of uploading to the blockchain network includes the step of uploading the encrypted plurality of partial data and the hash value to the blockchain network by the expense processing data management system.

The computer program according to an embodiment may be stored in a computer-readable recording medium as a combination of hardware and for executing a blockchain-based security data management method according to the above-described embodiments.

According to a blockchain-based expense processing data management system and method according to an aspect of the present invention, the main information of the expense processing data is divided into several pieces of data, and the divided pieces of data are distributed on a blockchain network. Can be saved. In addition, when the user requests the expense processing data, it is possible to allow the user to download information stored in the blockchain network from the blockchain network.

In the related art, hardware and services such as multiple encryption and decryption, a virtual private network (VPN), and a dedicated line have been entailed in order to transmit security processing data including sensitive personal information to a user. However, using the blockchain-based expense processing data management system and method according to an aspect of the present invention, a user can download a portion of the expense processing data from the blockchain network to prevent forgery and alteration of the main information of the expense processing data. It has the advantage of being able to transmit information efficiently and safely at low cost while being able to do so.

1 is a schematic block diagram of a blockchain-based security data management system according to an embodiment.

2 is a flowchart of a method for managing cost-based data based on a blockchain according to an embodiment.

3A to 3F are conceptual diagrams illustrating a data processing process by a blockchain-based security data management method according to an embodiment.

4 is a flowchart of a method for managing security data based on a blockchain according to another embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

Referring to FIG. 1, the expense processing data management system 3 according to the present embodiment is configured to operate while communicating with the first user device 1 of the expense user and the second user device 2 of the cost handling person in charge of the company do. In addition, the expense processing data management system 3 operates by communicating with the blockchain network 4 maintained using a plurality of nodes 41-46. Furthermore, the expense processing data management system 3 may operate while communicating with one or more external servers 6 such as financial institution servers.

The above communication process is performed through a wired and / or wireless network. The communication method through the wired and / or wireless network may include an object and all communication methods through which the object can be networked, and is not limited to wired communication, wireless communication, 3G, 4G, or other methods. For example, wired and / or wireless networks include Local Area Network (LAN), Metropolitan Area Network (MAN), Global System for Mobile Network (GSM), Enhanced Data GSM Environment (EDGE), and High Speed Downlink Packet Access (HSDPA). , Wideband Code Division Multiple Access (W-CDMA), Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Bluetooth, Zigbee, Wi-Fi, VoIP (Voice) over Internet Protocol), LTE Advanced, IEEE802.16m, WirelessMAN-Advanced, HSPA +, 3GPP Long Term Evolution (LTE), Mobile WiMAX (IEEE 802.16e), UMB (formerly EV-DO Rev. C), Flash-OFDM, iBurst and MBWA (IEEE 802.20) systems, HIPERMAN, Beam-Division Multiple Access (BDMA), World Interoperability for Microwave Access (Wi-MAX), and ultrasonic communication refers to a communication network by one or more communication methods selected from the group consisting of communications. However, it is not limited thereto.

Systems, user equipment and servers according to embodiments may have aspects that are entirely hardware, or partially hardware and partially software. For example, the

user devices

1 and 2, the expense processing data management system 3 and the external server 6, and each unit included therein process data of a specific format and content and / or electronic communication. Hardware and software related thereto can be collectively referred to as a method. The terms "part", "module", "device", "terminal", "server" or "system" in this specification are intended to refer to a combination of hardware and software driven by the hardware. For example, the hardware can be a data processing device that includes a CPU or other processor. Also, software driven by hardware may refer to a running process, an object, an executable, a thread of execution, a program, or the like.

Each element constituting the expense processing data management system 3 according to the present embodiment is not intended to refer to separate devices that are physically separated from each other. That is, the transmission / reception unit 31, the hash extraction unit 32, the data processing unit 33, the transmission unit 34, the storage unit 35, and the verification unit 36 of FIG. 1 are an expense processing data management system 3 Hardware constituting is only functionally divided according to the operation performed by the hardware, and each part is not necessarily provided independently of each other. Of course, depending on the embodiment, one or more of the transmission / reception unit 31, the hash extraction unit 32, the data processing unit 33, the transmission unit 34, the storage unit 35, and the verification unit 36 are physically connected to each other. It is also possible to implement separate devices.

The first user device 1 is a device used by a security user. In the present specification, the expense user refers to the employees of the company who use corporate public cards, corporate individual cards, personal cards, welfare cards, overseas cards or cash, etc. for the purpose of expenditure of the company, and wish to submit a receipt for proof. do. In this case, the receipt in the present specification may be a receipt having an arbitrary form prescribed by the law as evidence for expenditure as a real paper receipt such as a credit card receipt, debit card receipt, cash receipt, simple tax receipt, and the like. Does not.

Also, the second user device 2 is a device used by the expense manager. In the present specification, the expense manager refers to an employee whose main task is to handle expenses within the company, such as approving or rejecting requests for expense recognition submitted by other employees by attaching a receipt.

The expense user may perform receipt of a receipt image for expense processing and inquiry of evidence processing results by communicating with the expense processing data management system 3 using the first user device 1. In addition, the expense manager confirms expense processing information stored on the blockchain network 4 and in the expense processing data management system 3 by communicating with the expense processing data management system 3 using the second user device 2. In addition, it can perform processing such as approving or rejecting the request for recognition of expenses of employees.

In one embodiment, the expense processing data management system 3 comprises an application server that enables at least partially performing application functions by communicating with an application (or an app) running on the

user device

1, 2. Perform a function. Or / and, in addition, the expense processing data management system 3 is a web server that provides a predetermined web page accessible at least partially through a web browser or the like executed on the

user devices

1, 2. You can also perform the function of (web server).

In FIG. 1, the first and

second user devices

1 and 2 are respectively illustrated in the form of a notebook computer. However, this is exemplary and does not limit the types of the first and

second user devices

1 and 2, and the first and

second user devices

1 and 2 are mobile communication terminals, such as a smart phone. It may be implemented in the form of any computing device, such as a personal computer, personal digital assistant (PDA), tablet, set-top box for Internet Protocol Television (IPTV), and the like.

For example, the first and

second user devices

1 and 2 may refer to an enterprise resource planning (ERP) of an enterprise to which the guard user and the guard administrator belong.

The external server 6 represents a financial institution server or the like that communicates with the expense processing data management system 3. For example, the financial institution described in the present specification may include, but is not limited to, a card company, a bank, an IRS, an electronic receipt business, and the like. In addition, although the drawings are shown as one device for convenience of description, the external server 6 may be a generic name for a plurality of different organizations.

The blockchain network 4 consists of a plurality of nodes 41-46 participating in it. Blockchain connects information in blocks and stores information in each node (41-46), not a central management server, in a peer-to-peer (P2P) network distributed environment, thereby jointly sharing information. Refers to a method of maintaining security by managing. The basic structure of information shared on the blockchain is in the form of a collection of chains of blocks, and after a certain time, more than half of the participants exchange and confirm the transaction history with each other, and then digitally sign it. Only the agreed financial transaction details are made into one block. Then, the newly created block is connected to the previous blockchain, and a copy is made and distributed to each node 41-46 and stored.

In embodiments of the present invention, the blockchain network 4 is implemented with nodes 41-46 as participants, and hash values and expenses of files constituting expense processing information in each of the plurality of nodes 41-46. A file or the like corresponding to partial data of the main information of the processing information may be stored. In this case, the file corresponding to the partial data may be a document file requiring security, but is not limited thereto, and may be implemented in various forms such as an image file and a video file. The hash value stored in each of the plurality of nodes 41-46 may always be kept up to date and shared on the blockchain network 4, and each block of information in the form of a blockchain is a plurality of nodes 41-46 ) May be stored in at least one node 41-46.

In FIG. 1, each of the plurality of nodes 41-46 is shown in the form of a server, but each of the plurality of nodes 41-46 is a mobile communication terminal such as a smartphone, a PDA, a tablet PC, a desktop PC, a set-top box for IPTV, and the like. Likewise, it may include any kind of computing device that can be connected to an external server through a wireless communication network. In addition, although FIG. 1 illustrates that the block chain network 4 is configured by 6 nodes 41-46, it is easy that the number of nodes participating in the block chain network 4 can be more or less. Will be understood.

In one embodiment, the expense processing data management system 3 includes a transmission / reception unit 31, a hash extraction unit 32, a data processing unit 33, a transmission unit 34, and a storage unit 35 .

The transmission / reception unit 31 receives expense processing information including card transaction information and expense proof information from an external server such as the first user device 1 or the card company server 6 of the expense user, and the expense processing information is processed by the expense It can be processed by other parts of the data management system 3. In one embodiment, the transmission / reception unit 31 stores authentication information (eg, card information, accredited certificate, password, etc.) corresponding to the expense user in order to receive expense processing information from the card company server 6 and the like. However, in another embodiment, the authentication process for receiving the expense processing information is performed by the first user device 1, and the transmitting and receiving unit 31 is the first user device without storing the separate authentication information. It can also be received from (1).

In addition, the transmission / reception unit 31 may receive a confirmation request for pre-stored expense processing information from the second user device 2 of the expense manager. In another embodiment, the transmission / reception unit 31 may receive a confirmation request for pre-stored expense processing information from the first user device 1 of the expense user. For example, the first and

second user devices

1 and 2 for checking the expense processing information may be an ERP system of a company using expenses, but are not limited thereto.

The hash extractor 32 is configured to generate a hash value corresponding to the expense processing information received by the transceiver 31. The hash value is generated corresponding to the original expense processing information, and if the original information is slightly different, the hash value changes, but since it is impossible to track the original information from the hash value, in embodiments, the hash value is used to store the expense processing information. Matching and authenticity checking can be performed.

The data processing unit 33 is configured to divide the card transaction information into financial information, personal identification information, and general transaction information. In addition, the data processing unit 33 is configured to divide the financial information and personal identification information into a plurality of partial data. For example, the data processing unit 33 may divide financial information into a plurality of first partial data and personal identification information into a plurality of second partial data.

The transmission unit 34 is configured to upload a plurality of partial data and hash values generated from financial information and personal identification information to the blockchain network 4. At this time, the transmission unit 34 may store a plurality of first partial data of financial information in different blocks of the blockchain, respectively. In addition, the Jeon Sungbu 34 may store a plurality of second partial data of personal identification information in different blocks of the blockchain, respectively.

Meanwhile, the storage unit 35 is configured to store the expense processing information. For example, the storage unit 35 accesses a function of a cloud storage that can access and download necessary data from the first user device 1 of the guard user and / or the second user device 2 of the guard administrator. Perform. At this time, the storage unit 35 is the first user device (1) only general transaction information and expenditure proof information excluding information that the user can obtain from the blockchain network (4) among information stored in the storage unit (35). And / or to the second user device 2.

The time point when the financial information and the personal identification information are uploaded on the blockchain network 4 by the hash extraction unit 32, the data processing unit 33, and the transmission unit 34 may be different according to embodiments. For example, as soon as the expense processing information is received by the expense processing data management system 3, data may be divided and data uploaded on the blockchain network 4 may be performed, or the expense processing information may be managed by the expense processing data management system ( At the time of reception at 3), the entire information is stored in the storage unit 35, but financial information and financial information are received when a request for expense processing information is received from the first user device 1 and / or the second user device 2 later. It is also possible to upload personally identifiable information on the blockchain network 4.

In one embodiment, the data processing unit 33, when there is a request to confirm the pre-stored expense processing information, the expense processing information using the data extracted from the blockchain network 4 and the data extracted from the storage unit 35 Can also be reconstructed. In one embodiment, information uploaded to the blockchain network 4 may be encrypted before uploading, and the data processing unit 33 may perform decryption of the encrypted information while reconstructing the expense processing information. However, in another embodiment, the above-described reconstruction of the expense processing information and / or decryption of the encrypted information may be performed in the first user device 1 and / or the second user device 2.

In one embodiment, the expense processing data management system 3 further includes a verification unit 36. The verification unit 36 is configured to verify whether the reconstructed expense processing information is authentic by comparing a hash value corresponding to the reconstructed expense processing information with a hash value shared on the blockchain network 4. In another embodiment, the above-described verification process of the expense processing information may be performed in the first user device 1 and / or the second user device 2.

In addition, in one embodiment, the verification unit 36 performs transaction of the expense processing information submitted by the expense user through communication with the financial institution server 6 such as a credit card company before storing the transaction information of the expense processing information in the storage unit 35 Expense processing information may be verified by checking whether the information is identically confirmed by the card company. The above verification process can be used when the expense user applies for payment of expenses on the corporate card expenditure, and in order to perform the above verification, the verification unit 36 records the usage history of the corporate card to the financial institution server 6 ).

In addition, in one embodiment, the data processing unit 33 checks whether financial information and personal identification information has already been uploaded to the blockchain network before dividing the financial information and personal identification information of the expense processing information into a plurality of partial data. can do. Since the personal identification information and financial information may be the same even if the usage history or expenditure history of the card is changed if the expense processing information submitted by the same employee is changed, the data processing unit 33 duplicates the same information in the blockchain network 4 Instead of saving, the general transaction information and expenditure proof information extracted from the corresponding expense processing information can be matched and stored with the financial information and personal identification information already uploaded on the blockchain network 4.

2 is a flowchart of a method for managing cost-based data based on a blockchain according to an embodiment. In addition, FIGS. 3A to 3F are conceptual diagrams illustrating a data processing process by a blockchain-based expense processing data management method according to an embodiment. For convenience of description, a method of managing blockchain-based expense processing data according to this embodiment will be described with reference to FIGS. 1 to 3F.

First, the transmission / reception unit 31 of the expense processing data management system 3 receives the expense processing information 300 including card transaction information and expense proof information from the first user device 1 as shown in FIG. 3A. It can be done (S11). The card transaction information refers to the details of card transactions corresponding to the expenditures of employees who are expenses users, requesting expenses. In addition, the proof of expenditure is proof of expenditure entered by the expense user in order to apply for payment of expenses for the expenditure, and may include a reason for expenditure, an account subject, and a scan file of expenditure receipt.

Next, the data processing unit 33 converts the card transaction information 301 of the expense processing information 300 into financial information 311, personal identification information 312, and general transaction information 313 as shown in FIG. 3B. It can be divided (S12). Among the divided information, the financial information includes a card number and an expiration date, and the personal identification information may include information such as a name, ID, social security number, mobile phone number, and email address for identifying an individual security user. In addition, the general transaction information may include a transaction date, transaction amount, merchant code, and general information related to the merchant (such as the name of the merchant, taxation classification, etc.) of the card usage history for which the expense user applies for payment.

Next, the data processing unit 33 may check whether financial information and personal identification information divided from the expense processing information are stored in advance (S13). For example, the data processing unit 33 may check whether financial information and personal identification information are stored in advance by querying the information stored in the storage unit 35. Alternatively, the data processing unit 33 may check whether the financial information and personal identification information are stored in advance by checking the distributed ledger on the blockchain network 4.

As a result of the verification, in the case of previously stored financial information and personal identification information, the data processing unit 33 matches the general transaction information and expenditure proof information with the previously stored financial information and personal identification information in the expense processing information to manage the cost processing data management system 3 ) Can be stored in the storage unit 35 (S19).

On the other hand, if the confirmation result is not financial information and personal identification information previously stored, this means that new expense processing information has been received, so the data processing unit 33 stores the new information in the storage unit 35 and also of the expense processing information. Distributing financial information and personal identification information on the blockchain network (4).

The timing of distribution of financial information and personal identification information on the blockchain network 4 may be different according to the policy of the operator of the expense processing data management system 3 or the company using the expense. For example, a company using expenses may wish to receive a document at the same time as an electronic payment, and in this case, in the expense processing data management system 3, as soon as the expense processing information is confirmed as new data, data separation and blockchain network ( 4) The distribution of the phase can be performed. However, in another embodiment, the expense processing data management system 3 may perform data separation and distribution on the blockchain network 4 at a later time determined according to a predetermined schedule or at the request of an expense-using company.

As a specific distribution process, the hash extracting unit 32 may first generate a hash value corresponding to the received expense processing information 300 (S14). The hash value may be generated using the entire expense processing information 300 or may be generated using data of a specific field previously defined among the expense processing information 300. As a result, the expense processing information is information including financial information 311, personal identification information 312, general transaction information 313, proof of expenditure 302, and hash value 303 as shown in FIG. 3C. Can be reconstructed as

Next, the data processing unit 33 may divide the financial information 311 and the personal identification information 312 divided from the expense processing information 300 into a plurality of partial data, respectively (S15). For example, as illustrated in FIG. 3D, the financial information 311 may be divided into three first partial data FI, and the personal identification information 312 may be divided into three second partial data PI. At this time, the first first partial data (FI # 1) includes the first and fourth 4 digits of the card number of 4 digits, and the second 1st partial data (FI # 2) is the 2nd and 3rd It includes four digits, and the third first partial data FI # 3 may include an expiration date. In addition, the first second partial data (PI # 1) includes the security user's resident registration number, the second second partial data (PI # 2) includes the security user's mobile phone number, and the third second partial data (PI # 3) may include the email address of the guard user.

However, the types of the first partial data and the second partial data described above are merely exemplary, and the number of partial data obtained by dividing the financial information 311 and the personal identification information 312 or the type of data included in each partial data. May be different from that shown herein.

In addition, the data processing unit 33 generates a plurality of first data blocks 401-403 by combining hash values 303 with a plurality of first partial data FI, respectively, as shown in FIG. , A hash value 303 may be combined with each of the plurality of second partial data PIs to generate a plurality of second data blocks 501-503. In one embodiment, the data processing unit 33 encrypts each piece of data (FI, PI) before being generated as the data blocks 401-403 and 501-503, and / or each generated data block 401-403 , 501-503) may be encrypted (S16). In the encryption, personal identification information of the guard user or identification information of the institution to perform the expense processing may be used as a key.

Next, the transmission unit 34 may upload each of the generated data blocks 401-403 and 501-503 on the blockchain network 4 (S17). Blocks shared on the blockchain network 4 are all connected in a chain, and each newly created block includes the hash value of all the blocks that are created and connected to the chain and data of the newly created block. Nodes 41-46 propagate the newly created block at one node to neighboring nodes, and at the neighboring nodes, chain generation is performed by verifying whether the propagated block conforms to the blockchain's consensus algorithm. Participate and share new blocks.

The transmitting unit 34, using the above characteristics of the blockchain, nodes (41-) constituting the block chain network (4) for each data block (401-403, 501-503) generated from the expense processing information 46), data blocks 401-403 and 501-503 are included in the newly created block of the blockchain to be stored in one or more nodes 41-46 on the blockchain network 4. At this time, the transmission unit generates the first data blocks 401-403 shown in FIG. 3E as respective blocks and distributes them to the blockchain network 4. In addition, the transmission unit 34 generates second data blocks 501-503 as respective blocks and distributes them to the blockchain network 4.

Data blocks (401-403, 501-503) included in the block are shared and distributed on the blockchain network (4) in such a way that they are stored in one or more nodes (41-46) of the blockchain network (4). It is possible to secure the integrity of the system while reducing the burden of storing the vast and infrequently generated expense processing information completely in the in-house system.

Next, as shown in FIG. 3F, general transaction information 313 and expense proof information 302 excluding the information uploaded to the blockchain network 4 from the expense processing information 300 is a hash value of the expense processing information. It can be stored in the storage unit 35 of the expense processing data management system 3 with (303) (S18). In addition, in the above step, the financial information 311 and the personal identification information 312 may be stored together in the storage unit 35. In FIG. 2, the data upload process (S14 to S17) on the blockchain network 4 is shown to precede the storage process (S18) for the storage unit 35, but this is exemplary, and in other embodiments, the expense processing information The data may be distributed on the blockchain network 4 after being first stored in the storage unit 35.

4 is a flowchart of a method for managing security data based on a blockchain according to another embodiment. Figure 4 shows the process of checking the expense processing information by reorganizing the distributed stored information by the expense user or the expense manager of the expense-using company while the expense processing information is previously stored in the blockchain network and the expense processing data management system.

1 and 4, the transmission / reception unit 31 of the expense processing data management system 3 is stored in advance from the first user device 1 of the expense user or the second user device 2 of the expense manager. A request for confirmation of processing information may be received (S21). Although FIG. 4 illustrates that a request for confirmation is received from the second user device 2, this is exemplary, and a request for confirmation of expense processing information may be received from the first user device 1. In addition, in another embodiment, the expense processing data management system 3 transmits information necessary for reconstruction of expense processing information to the first user device 1 and / or the second user device 2 without requiring a separate request from the company using the expense. In this case, the step S21 may be omitted.

Next, the data processing unit 33, the first user device (1) identification information for downloading the financial information and personal identification information of the security user corresponding to the expense processing information requested confirmation from the blockchain network (4) And / or to the second user device 2 (S22). For example, identification information for downloading financial information and personal identification information from the blockchain network 4 may be information of a data block in which the information is recorded or a hash value included in the data block.

In addition, the data processing unit 33 extracts general transaction information and expenditure proof information corresponding to financial information and personal identification information to be reconstructed from the storage unit 35 of the expense processing data management system 3 and provides the extracted information. It can be provided to one user device (1) and / or the second user device (2) (S23). That is, among the transaction processing information, general transaction information and expenditure proof information having relatively little need for security are directly from the storage unit 35 of the expense processing data management system 3, and the first user device 1 and / or the second user Device 2.

The first user device 1 or the second user device 2 may reconstruct expense processing information based on information received from the data processing unit 33. That is, the first user device 1 or the second user device 2 obtains financial information and personal identification information from data blocks extracted from the blockchain network 4 (S24), and the data processing unit 33 The expense processing information may be reconstructed by combining the received general transaction information and expenditure proof information (S26). Since the data blocks extracted from the blockchain network 4 are verified by the consensus algorithm on the blockchain network 4, the verified data blocks are received, but data blocks corresponding to the same expense processing information are identified using a hash value and By combining this, one expense processing information can be completed.

In one embodiment, when data extracted from the blockchain network 4 is encrypted, the first user device 1 or the second user device 2 may perform decryption processing of the encrypted data (S25) ). In one embodiment, the process of decrypting the encrypted data in the first user device 1 or the second user device 2 is at least partially a first user device 1 or a second user device 2 and a data processor With the communication between (33), the first user device (1) or the second user device (2) may decrypt the encrypted data using the key value received from the data processing unit (33).

In addition, in one embodiment, the verification unit 36 may perform verification of the authenticity of the reconstructed expense processing information (S27). For example, the verification unit 36 receives partial data from any one of a plurality of nodes 41-46 that define the blockchain network 4, extracts a hash value therefrom, and places it on the blockchain network 4 By comparing it with the hash value shared in, it is possible to check the authenticity of financial information and personal identification information received in the form of partial data. Also, the verification unit 36 extracts the hash value again from the expense processing information reconstructed by the data processing unit 33, and whether the extracted hash value is the same as the hash value shared on the blockchain network 4 By checking, it is also possible to confirm the authenticity of financial information and personally identifiable information.

According to the blockchain-based expense processing data management system and method according to the embodiments of the present invention described above, separation of data through the blockchain network 4 in transmitting expense processing data including sensitive personal information to a user Transmission is made. Therefore, it does not require hardware such as multiple encryption and decryption, a virtual private network (VPN), and a dedicated line to protect information from forgery or stealing as in the prior art. It has the advantage of being able to efficiently and safely separate transfers.

The operation by the blockchain-based security data management method according to the above-described embodiments may be at least partially implemented as a computer program and recorded in a computer-readable recording medium. A program for implementing an operation by a blockchain-based security data management method according to embodiments is recorded, and a computer-readable recording medium includes all types of recording devices in which data that can be read by a computer is stored. . Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, and optical data storage devices. The computer-readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. In addition, functional programs, codes, and code segments for implementing the present embodiment will be readily understood by those skilled in the art to which this embodiment belongs.

The present invention described above has been described with reference to the embodiments shown in the drawings, but this is only exemplary, and those skilled in the art will understand that various modifications and modifications of the embodiments are possible therefrom. However, it should be considered that such modifications are within the technical protection scope of the present invention. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the appended claims.

Claims

A transmitting / receiving unit configured to receive expense processing information including card transaction information and expense proof information from the user device of the expense user or an external server;

A hash extractor configured to generate a hash value corresponding to the expense processing information;

A data processing unit configured to divide the card transaction information into financial information, personal identification information, and general transaction information, and to divide the financial information and the personal identification information into a plurality of partial data;

A transmission unit configured to upload the plurality of partial data and the hash value to a blockchain network; And

A blockchain-based expense processing data management system including a storage unit configured to store the general transaction information and the expenditure proof information.
According to claim 1,

The data processing unit, when reconfiguration of the previously stored expense processing information is necessary, identification information of the plurality of partial data on the blockchain network, and the general transaction stored in the storage unit and corresponding to the plurality of partial data A blockchain-based expense processing data management system further configured to provide information and the expenditure proof information to the user device.
According to claim 2,

A block further comprising a verification unit configured to verify the financial information and the personal identification information of the reconstructed cost processing information by comparing a hash value corresponding to the reconstructed cost processing information and a hash value shared on the blockchain network. Chain-based security data management system.
According to claim 1,

The data processing unit is further configured to divide the financial information into a plurality of first partial data,

The transmitting unit is a blockchain-based security data management system further configured to store the plurality of first partial data in different blocks on a blockchain network.
According to claim 1,

The data processing unit is further configured to divide the personal identification information into a plurality of second partial data,

The transmission unit is a blockchain-based security data management system further configured to store the plurality of second partial data in different blocks on a blockchain network, respectively.
According to claim 1,

The data processing unit further checks whether the financial information and the personal identification information are already stored in the storage unit or the blockchain network before dividing the financial information and the personal identification information into a plurality of partial data. Blockchain based expense management data management system.
The method of claim 6,

When the financial information and the personal identification information are already stored, the data processing unit matches the general transaction information and the expenditure proof information with the financial information and the personal identification information stored in advance, and stores them in the storage unit. Blockchain-based security data management system.
According to claim 1,

The data processing unit is further configured to encrypt the plurality of partial data,

The transmission unit is a blockchain-based security data management system further configured to upload the encrypted partial data and the hash value to the blockchain network.
An expense processing data management system, receiving expense processing information including card transaction information and expense proof information from a user device of an expense user or an external server;

Dividing the card transaction information into financial information, personal identification information, and general transaction information by the expense processing data management system;

Generating, by the expense processing data management system, a hash value corresponding to the expense processing information;

Dividing the financial information and the personal identification information into a plurality of partial data by the expense processing data management system;

Uploading, by the expense processing data management system, the plurality of partial data and the hash value to a blockchain network; And

A method for managing expense processing data based on a blockchain, the method comprising storing the general transaction information and the expenditure proof information in the expense processing data management system.
The method of claim 9,

When the expense processing data management system requires reconfiguration of the previously stored expense processing information, identification information of the plurality of partial data on the blockchain network and the expense processing data management system is stored in the expense processing data management system And providing the general transaction information and the expenditure proof information corresponding to the user device to the user device.
The method of claim 10,

The expense processing data management system verifies the financial information and the personal identification information of the reorganized expense processing information by comparing a hash value corresponding to the restructured expense processing information and a hash value shared on the blockchain network. Blockchain-based security data management method further comprising the step of.
The method of claim 7,

The step of dividing the plurality of partial data includes the step of dividing the financial information into a plurality of first partial data by the expense processing data management system,

The step of uploading to the blockchain network includes storing the plurality of first partial data in different blocks on the blockchain network, respectively.
The method of claim 7,

The step of dividing the plurality of partial data includes the step of dividing the personal identification information into a plurality of second partial data by the expense processing data management system,

The step of uploading to the blockchain network includes storing the plurality of second partial data in different blocks on the blockchain network, respectively.
The method of claim 7,

Before the step of dividing into the plurality of partial data, the expense processing data management system checks whether the financial information and the personal identification information are already stored in the expense processing data management system or the blockchain network. Blockchain-based security management data management method that further includes.
The method of claim 14,

When the financial information and the personal identification information are already stored, the expense processing data management system matches the general transaction information and the expenditure proof information with the previously stored financial information and the personal identification information to process the expenses. Blockchain-based security data management method further comprising the step of storing in a data management system.
The method of claim 7,

The security data management system further comprises the step of encrypting the plurality of partial data,

The step of uploading to the blockchain network includes the step of uploading the encrypted plurality of partial data and the hash value to the blockchain network by the expense processing data management system.
A computer program stored in a computer-readable medium to execute a method for managing blockchain-based security data according to any one of claims 9 to 16 in combination with hardware.