KR102311462B1 - Block chain did-based digital evidence management system and method - Google Patents

Abstract

Disclosed is a blockchain decentralized identifier (DID)-based digital evidence management system for digital evidence management apparatuses, which secures admissibility of digital evidences. According to the present invention, the method comprises the following steps: receiving first individual's verifiable credentials (VC) information associated with digital evidence data, wherein the VC information is information issued on the basis of DID; using a DID blockchain to verify validity of the received VC information, wherein the DID blockchain stores issuance information for the DID; collecting the digital evidence data from a user terminal of the first individual on the basis of a validation result of the VC information; and storing the digital evidence data in a database and recording collection history information in a digital evidence management blockchain.

Description

Blockchain DID-based digital evidence management system and method {BLOCK CHAIN DID-BASED DIGITAL EVIDENCE MANAGEMENT SYSTEM AND METHOD}

The present invention relates to a digital evidence management method, and more particularly, to a method for ensuring integrity and providing reliability in the process of registration and linked storage of digital evidence.

Evidence collection and management are important factors in case processing. Evidence for case processing due to digitization in modern society is also digitized data, so it is important to ensure that it is safe from forgery and falsification in the process of collecting, analyzing, and managing evidence, and that management is transparent and reliable.

Digital evidence collection refers to collecting data that can be evidenced by securing objectivity, integrity, reliability, and originality to have legal effect from digital data that is easy to reproduce and difficult to distinguish between originals and copies due to its characteristics.

Digital evidence collection is to create a copy including the same data by reading the digital data source itself and data from it. secure

Currently, when it is difficult to secure a storage medium corresponding to the original digital evidence or when collecting volatile data evidence, a method of storing hash values using timestamps and screen captures is used to secure the integrity of real-time evidence and data copies. technology is being used.

In particular, Korean Patent Application Laid-Open No. 2009-0079568 discloses a technology for securing evidence capability for data in which it is difficult to secure a storage medium, but the technology disclosed in this Korean Patent Publication No. At the time of collection, if a malicious evidence collector forges or modifies the data they want to collect, performs a procedure to prove the validity of the evidence, or creates digital evidence arbitrarily by using a malicious evidence collection device, it can be detected or blocked. There is a problem that it cannot.

An object according to an aspect of the present invention to solve the above-mentioned problems is to enable interlocking with the block chain for transparency and reliability of the collection and management of digital evidence, and to minimize personal information and use DID-based authentication for reliable authentication. It is to provide a blockchain DID-based digital evidence management system and method that applies identity authentication.

According to an aspect of the present invention for achieving the above object, a block chain-based digital evidence management method of a digital evidence management device receives first personal identification (VC: Verifiable Credentials) information associated with digital evidence data (The identity proof (VC) information is information issued based on Decentralized IDentifiers (DID)), verifying the validity of the received VC information using a DID blockchain; The DID block chain stores the issuance information for the DID. Based on the validation result of the VC information, collecting the digital evidence data from the user terminal of the first individual and storing the digital evidence data in a database and recording the collection history information in the digital evidence management blockchain.

The first individual may include at least one of a submitter and a collector of the digital evidence data.

The collection history information may include at least one of a collection date of the digital evidence data, a collector DID, a provider DID, a case number, a storage location, and hash information.

In response to the inquiry action for the digital evidence data, the validity of the DID of the second individual related to the inquiry action may be verified using the DID block chain.

In response to the second individual's DID being valid, the inquiry is allowed for the digital evidence data, and inquiry history information related to the inquiry behavior can be generated and recorded in the digital evidence management block chain.

The inquiry history information may include at least one of a case number of the digital evidence data, a DID of the second individual, an analysis date, and analysis result hash information.

The collection history information and the inquiry history information recorded in the digital evidence management block chain may be shared with a terminal device of a related institution through a block chain network.

The DID block chain may store a DID document including a public key infrastructure (PKI)-based key pair and DID of a person associated with the digital evidence data in a ledger.

According to another aspect of the present invention for achieving the above object, an apparatus for managing digital evidence based on a block chain is a first personal identification (VC: Verifiable Credentials) information associated with digital evidence data - the identification ( VC) information is information that is issued based on Decentralized IDentifiers (DID) - receives, and uses the DID blockchain - the DID blockchain stores information about the DID - Verifies the validity of the received VC information, collects the digital evidence data from the user terminal of the first individual based on the validity of the VC information, stores the digital evidence data in a database, and digitally stores the collection history information It may include a processor that records the evidence management block chain and a memory that stores instructions related to the operation of the processor.

According to another aspect of the present invention for achieving the above object, a user terminal device for registering or inquiring digital evidence in connection with a digital evidence management server includes a private key and a public key of a user of the user terminal device A DID document module for generating a key store for storing a key pair of A VC storage that receives and stores DID-based Verifiable Credentials (VC) information and a digital evidence registration/inquiry module that registers or inquires the digital evidence by linking with the digital evidence management server using the VC information may include.

The DID document is registered and managed in the DID blockchain, and the DID document may be used for verification for issuance of VC information.

The apparatus may further include an identification expression generator for generating a Verifiable Presentation (VP) by adding the user's signature to the VC information.

According to another aspect of the present invention for achieving the above object, a blockchain-based digital evidence management system is a first individual's distributed identifiers (DID: Decentralized IDentifiers) associated with digital evidence data from a user terminal. (VC: Verifiable Credentials) In response to a request, the identity verification server that issues the VC information for the first individual by checking the information on the DID through the DID blockchain and the VC information of the first individual from the user terminal Receive, verify the validity of the received VC information using the DID block chain, and collect the digital evidence data received from the user terminal based on the validity of the VC information while storing the digital evidence data in a database It may include a digital evidence management server that records in the digital evidence management blockchain.

According to the blockchain DID-based digital evidence management system and method of the present invention, there is an effect of ensuring integrity and enhancing reliability in the process of digital evidence registration and linked storage, thereby securing the evidence capability of digital evidence and the party's It also has the effect of gaining trust.

1 is a conceptual diagram schematically showing the overall configuration of a blockchain DID-based digital evidence management system according to an embodiment of the present invention;
2 is a flowchart showing the DID registration and identity certificate issuance process;
3 is a conceptual diagram for explaining the process of collecting and managing digital evidence;
4 is a conceptual diagram for explaining the connection of the digital evidence management system with the blockchain network;
5 is a detailed block diagram showing the configuration of a user terminal of a blockchain DID-based digital evidence management system according to an embodiment of the present invention;
6 is a detailed block diagram showing the configuration of a digital evidence management device of a blockchain DID-based digital evidence management system according to an embodiment of the present invention.

Since the present invention can have various changes and can have various embodiments, specific embodiments are illustrated in the drawings and described in detail.

However, this is not intended to limit the present invention to specific embodiments, and it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention.

Terms such as first, second, etc. may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may also be referred to as a first component. and/or includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being “connected” or “connected” to another component, it is understood that the other component may be directly connected or connected to the other component, but other components may exist in between. it should be On the other hand, when it is said that a certain element is "directly connected" or "directly connected" to another element, it should be understood that no other element is present in the middle.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It should be understood that this does not preclude the existence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. In describing the present invention, in order to facilitate the overall understanding, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted.

1 is a conceptual diagram schematically showing the overall configuration of a blockchain DID-based digital evidence management system according to an embodiment of the present invention. 1, the digital evidence management system according to an embodiment of the present invention is a submitter 110, a collector 112, an identity authentication server 120, a DID block chain 125, a digital evidence management server (not shown) and a digital evidence management blockchain 135 .

Referring to Figure 1, the digital evidence management system according to an embodiment of the present invention in order to minimize the transparent use and exposure of personal information, a distributed identifier (DID: Decentralized IDentifiers) based identity authentication (VC: Verifiable Credentials) It is issued, records related information in the DID block chain (125: DID block chain), and uses the recorded DID block chain to collect and use digital evidence. Since the information recorded in the block chain cannot be deleted, there may be difficulties in protecting personal information when recording personal information. To this end, by introducing DID, the individual keeps and manages personal information in the form of a credential, and confirms the identity by requiring that it be submitted when necessary.

More specifically, the DID is an identifier for a specific person, and a description of the person may be expressed as a DID document. A DID document may contain information related to the identity subject and how this information can be verified, the DID's set of public keys, a set of authentication protocols, and a set of service endpoints that can communicate or interact with the entity. have. One of the advantages of DID is that it can be managed so as not to include information that the individual decides to be unnecessary or does not want to disclose because DID is created and managed by the individual.

The submitter 110 is a person who submits digital evidence to an investigation agency, etc., and may provide the digital evidence possessed by him/her to the collector 112 . The collector 112 is a person belonging to the investigation agency, and obtains digital evidence from the submitter 110 and stores it in the digital evidence management device (not shown) and the digital evidence management block chain 135 . The submitter 110 may be a party related to the case or a person who has evidence related to the case, such as a witness, a reporter, or a general citizen.

The collector 112 may be a person belonging to an investigation agency that investigates the case, such as the prosecution and the Financial Supervisory Service. Both the submitter 110 and the collector 112 need to use a digital evidence management system to check how the evidence is collected and subsequently used. Accordingly, the digital evidence management system according to an embodiment of the present invention uses the identity authentication server 120 and the DID block chain 125 to provide the DID and the associated identity proof (VC: (also called "credentials" or "certification of credentials or identity").

The identity authentication server 120 is a device for registering a DID and issuing a VC accordingly. This may be referred to as an identity authentication device. The identity authentication server 120 works with the DID blockchain 125 . The identity authentication server 120 is a device installed in an investigation agency, and can operate as a server for separate personnel (person) management within the investigation agency, and includes a block chain interworking module. The identity authentication server 120 may be disposed for each investigation agency. The identity authentication server 120 receives the DID of the submitter 110 or the collector 112, and issues a credential (VC) that is a verifiable credential for the person concerned. The issued credential (VC) is used for the use of the digital evidence management system. That is, when a credential (VC) is submitted, it is verified using the DID blockchain 125 and only the verified person can use the digital evidence management system according to an embodiment of the present invention. Use of the system includes activities such as collection and registration of digital evidence, inquiry and analysis. That is, it is preferable that those who want to use the evidence also register the DID through the identity authentication server 120 , receive a VC, and use it in the verification procedure.

Through association with the identity authentication server 120, after the submitter 110 and the collector 112 obtain a VC, the digital evidence is stored in a digital evidence management server (not shown). At this time, the digital evidence management server receives the VC of the submitter 110 or the collector 112 and verifies the identity by interworking with the DID blockchain, and when the verification is legally completed, the digital evidence from the terminal of the collector 112 is Evidence data is received and stored in a separate storage of the server, and historical information related to collection is recorded in the digital evidence management block chain 125 . In this case, the collection history information includes at least one of a case number, a collection date and time, hash information of digital evidence, a storage location of the separate storage, a submitter DID, and a collector DID.

As described above, the management history of the collected digital evidence is shared with related organizations through the digital evidence management block chain 125 . Relevant institutions are not only an investigative institution that collects and manages digital evidence in the manner described above, but also an analytical institution that analyzes and confirms digital evidence, and uses the digital evidence stored and managed as described above to determine the authenticity of the content of digital evidence, and determine the content Includes judicial bodies that conduct actual trials by assuring them.

As such, the digital evidence management system according to an embodiment of the present invention improves reliability by utilizing identity authentication using DID, and minimizes exposure of personal information so that only authorized users can use it. In addition, by recording the user's DID in the block chain 135 that is linked with the digital evidence management server, it is possible to protect personal information by minimizing the exposure of personal information to the block chain 135, and transactions such as registration and deletion of evidence management DID-based signatures make the actions undeniable.

2 is a flowchart illustrating a DID registration and identity certificate issuance process.

Referring to FIG. 2 , a user generates a public key infrastructure (PKI)-based key pair using a terminal owned by the user, and generates a DID associated therewith. Then, as described above, a DID document including public key information is generated and registration is requested in the DID blockchain 125 . In the DID blockchain 125, the DID document requested by the user is recorded in the ledger and shared. Here, the user may include not only the submitter and the collectors 110 and 112, but also the analyst who wants to inquire and analyze the collected digital evidence.

When the registration of the DID document is completed, the user requests the issuance of an identity certificate with the corresponding DID. To this end, at least some of the DID information may be provided. When the identity authentication server 120 receives the identity certificate issuance request, the corresponding DID is verified using the DID block chain 125 . The identity authentication server 120 first checks the requestor's DID information in the DID block chain 125, and then issues the identity certificate (VC) by secondarily checking the identity information using the database it owns. The identity verification (VC) represents a statement made by the identity verification server 120 in a manner that is tamper-proof (cryptographically verifiable) and is important for protecting personal information. This may include identifiers and metadata that describe the properties of the proof, such as issuer, validity period, representative image, public key to be used for verification purposes, and revocation mechanism. For example, it may include an employee ID, a copy of resident registration, a training certificate, and the like.

At this time, the issuance history of the issued identity certificate is also recorded in the DID block chain 125 . The issued identity verification (VC) may be delivered to the user's terminal. In one example, the identification server 120 may provide a service for updating the identification. In addition, in some cases, the identity certificate may be revoked by cryptographic integrity (eg, when the signing key is compromised) or revoked by state change (eg, when entitlement is suspended).

After receiving the identity proof (VC), the user submits the issued identity certificate to the digital evidence management server 130 for use of the digital evidence management system. At this time, it is preferable that a Verifiable Presentation (VP) in which the user's signature (electronic signature) is added to the identity verification (VC) is submitted. A credential representation (VP) represents one or more proof-of-identity (VC) data, packaged in such a way that ownership of the data can be verified. If a proof of identity (VC) is directly provided, it can be a representation of a credential (VP). A data type derived from a proof of identity (VC) that can be cryptographically verifiable but does not contain a proof of identity (VC) can also be a credential representation (VP). The credential representation (VP) is preferably created in a form that discloses at least some of the characteristics of the identity (VC) or satisfies a derived predicate requested by the verifier.

The proof of identity (VC) and credential representation (VP) are preferably serialized into one or more machine readable data formats. The serialization and/or deserialization process may be deterministic, bidirectional, and lossless.

The server 130 verifies the validity of the identification (expression) by inquiring the DID information and the issuance information for the identification in the DID block chain 125 . At this time, a history related to validation may also be recorded in the DID blockchain 125 . A user who has completed verification in the digital evidence management server 130 may use the system according to the policy of the digital evidence management system. A policy may indicate when or to what extent digital evidence can be used depending on the user's level. That is, the user of the first position may not be able to use specific digital evidence, but the user of the second position higher than the first position may have a definition that the digital evidence is available. The digital evidence management server 130 may be referred to as a digital evidence management device.

3 is a conceptual diagram for explaining a process of collecting and managing digital evidence.

Referring to FIG. 3 , the digital evidence submitter 110 obtains the identity of the collector 112 (which may be, for example, an investigator), and the collector 112 obtains the identity of the presenter 110 as a DID-based identity certificate (VC). ) can be verified. Then, the digital evidence is submitted to the collector 112 . The collector 112 may collect digital evidence and issue a collection confirmation document recording hash information, collection date, collector DID, case number, etc. of the collected digital evidence data to the submitter.

The collected digital evidence is stored separately in a separate storage 132 (which may be an encrypted database) in the digital evidence management server 130 . Then, the collection history information (case number, collection date, hash information of digital evidence, storage location, submitter DID, collector DID, etc.) is recorded in the digital evidence management block chain 135 .

The digital evidence management history recorded in the digital evidence management blockchain 135 may be shared with related organizations through the blockchain network.

The digital evidence management is preferably stored in a separate storage 132 and managed so that only authorized parties can access it by encryption and access control. In addition, the access history is also recorded in the digital evidence management block chain 135 to enable transparent management.

Similarly, in the process of analyzing digital evidence, it is desirable to allow only an analyst who has completed verification to analyze digital evidence after first performing qualification verification through the user's VC (which may be a VP). Even at this time, analysis history information such as case number, analyst DID, analysis date, and analysis result hash information is managed so that it can be recorded in the digital evidence management block chain 135 .

When registering digital evidence, the collection history information is recorded and a registration key (evidence ID) can be issued. By recording the history of a series of digital evidence management such as evidence on the blockchain, the reliability of digital evidence management can be increased. In other words, by recording the management history during the analysis as well as the collection of digital evidence as described above, the evidence management can be maintained transparently and reliably, and the effect as evidence can be maintained.

4 is a conceptual diagram for explaining the connection of the digital evidence management system with the blockchain network.

Referring to FIG. 4 , access to the digital evidence management server 130 and the associated encrypted storage 132 may be made through DID-based identification. That is, other personnel other than the collector in the investigation agency 140-1, the analysts 140-2 of the analysis agency, the submitter, the collector, or the personnel 140-N of the judicial agency (prosecutors, judges, etc.) including) must also be judged whether access to the digital evidence is possible through DID-based identification. When the digital evidence management server 130 confirms access from the personnel 140-1 to 140-N, the validity of their identification is verified in connection with the DID block chain 125, and the accessibility is determined. . Access to digital evidence may be granted if the identity is valid and access is possible. Then, the history of access to digital evidence is recorded in the digital evidence management block chain 135 to maintain the transparency of evidence management.

In particular, when the digital evidence stored in the separate storage 132 loses its validity as evidence, the digital evidence may be deleted at the request of the institution that seized the evidence. In addition, if digital evidence is intentionally deleted by a specific institution, it can be confirmed that the digital evidence has been submitted using the data owned by the submitter of digital evidence, and if the submitted digital evidence and the data held are the same, It can be used by replacing data with evidence data.

That is, by managing the access of digital data stored in the separate storage 132 in this way so that only permitted users are allowed, and recording it in the access history or the block chain 135, even in the case of deletion, it is confirmed that it has been deleted due to a justifiable reason. It can improve the reliability of digital evidence management by recording it, and it is possible to prepare for unauthorized deletion.

5 is a detailed block diagram showing the configuration of a user terminal of a blockchain DID-based digital evidence management system according to an embodiment of the present invention. As shown in FIG. 5 , the user's user terminal includes a terminal application 510 , a DID document module 520 , a key store 530 , a credential store 540 , a credential expression generator 550 and a digital evidence registration. /lookup module 560 may be included.

The above components may be functional blocks operating on a microprocessor. The keystore may be implemented in memory. In addition, the terminal may include a memory storing instructions for executing the operation of each functional block of the processor. Additionally, it may include a communication processor for transmitting and receiving information with other terminals.

Referring to FIG. 5 , the terminal application 510 is related to the DID-based digital evidence management method according to an embodiment of the present invention, DID registration, VC issuance, and digital evidence registration and use in the system. Executes a program to execute an action.

The DID document module 520 performs a key pair generation request to the key storage 530 according to the user's request of the terminal application, and sends generation, read, and write requests for the DID document to the digital evidence management service module of the digital evidence management server. request.

The key storage 530 provides a function of generating a private key and a public key pair of a terminal application user and storing the public key and the private key.

Credential storage 540 stores a credential (VC) issued by a credential issuer (eg, an identity authentication server).

The credential representation generator 550 generates a credential representation (VP: Verifiable Presentation) by adding the credential owner's signature to the credential (VC) signed by the credential issuer.

The digital evidence registration/inquiry module 560 transmits a request for registration and inquiry of digital evidence history information to the digital evidence management service module.

6 is a detailed block diagram showing the configuration of a digital evidence management device of a blockchain DID-based digital evidence management system according to an embodiment of the present invention. As shown in Figure 6, digital evidence management service module 610, digital evidence list DB 612, credential issuer module 620, DID document module 630, digital evidence management block chain module 650, It may include a file system 660 and a blockchain event listener 670 . The modules 620 to 670 are implemented as API modules.

As in the terminal of FIG. 5 , the above components of the digital evidence management apparatus may also be functional blocks operating on a microprocessor. The digital evidence list DB may be implemented as a local memory, and the file system 660 may be implemented as a separate large-capacity database. In addition, the apparatus may include a memory storing instructions for executing the operations of the above-described functional blocks of the processor. Additionally, it may include a communication processor for transmitting and receiving information with other terminals.

Referring to FIG. 6 , the digital evidence management apparatus processes operations related to the collection, use and management of digital evidence on an application called the digital evidence management service module 610 . It interacts with the terminal application and provides a digital evidence management system service by calling the API module. The provided services provide credential issuance, DID document creation, read, write, and credential verification services. In addition, a service for registering and verifying digital evidence management history information is provided, and a service for storing evidence data in the file system 660 is provided. A search function is provided by storing the evidence history information registered in the block chain in the digital evidence list DB 612 .

The credential issuer module 620 stores a key pair required for credential issuance in response to a request for issuing a credential from the user terminal, generates a credential, and adds a digital signature to the generated credential.

The DID document module 630 has permission to access the blockchain node, and processes the request of the digital evidence management service module in connection with the blockchain node. Create, read, and write DID documents to the blockchain.

The credential verifier module 640 authenticates the user from the credential representation provided from the user terminal. The credential representation contains the credential, including the issuer's signature, and the credential holder's signature. Verifies the signature of the credential representation to verify the owner, and verifies the credential's signature to verify the issuer. When the two verifications are completed, the authentication of the application user is completed.

The digital evidence management block chain module 650 has the authority to access the block chain node, and processes the request of the digital evidence management service module 610 in connection with the block chain node. Provides registration and inquiry functions for digital evidence.

The block chain is composed of a plurality of nodes, and the nodes 680-1 to 680-N share the DID ledger and evidence management ledger with other nodes, and the creation, read, and write history information for digital evidence is stored in the ledger. Save. Once the history is saved, changes to the ledger are not allowed.

In FIG. 6, the digital evidence management device will be described as including some of the components of the identity authentication server device. That is, the identity authentication server and the digital evidence management device may be implemented as one device. On the other hand, it may be implemented as a separate device. When a separate device, the credential issuer module 620, the DID document module 630 are included in the identity authentication server, the credential verifier module 640, the digital evidence management blockchain module 650, the file system ( 660) (which may be implemented as a local memory of the digital evidence management device or as a separate large-capacity database) and a blockchain event listener 670 (which performs the function of receiving information related to the occurrence of an event in the blockchain) are digital evidence It may be implemented to be included in the management device.

Although described above with reference to the drawings and examples, it does not mean that the scope of protection of the present invention is limited by the drawings or examples, and those skilled in the art can appreciate the spirit of the present invention described in the claims below. And it will be understood that various modifications and variations of the present invention can be made without departing from the scope thereof.

Claims (13)

In the block chain-based digital evidence management method of the digital evidence management device,
Receiving first personal identification (VC) information associated with the digital evidence data, wherein the identification (VC) information is information issued based on Decentralized IDentifiers (DID);
verifying the validity of the received VC information using a DID blockchain, wherein the DID blockchain stores issuance information for the DID;
collecting the digital evidence data from the user terminal of the first individual based on the validation result of the VC information;
storing the digital evidence data in a database, and recording the collection history information in a digital evidence management block chain;
in response to the inquiry act on the digital evidence data, verifying the validity of the DID of a second individual related to the inquiry act using the DID block chain; and
Allowing inquiry or deletion of the digital evidence data in response to the fact that the DID of the second individual is valid, generating inquiry or deletion history information related to the inquiry or deletion act and recording it in the digital evidence management block chain including,
The collection history information includes a collector DID, a provider DID and a case number,
The inquiry history information includes at least one of a deletion DID, a deletion date, and a deletion basis of the digital evidence data, a block chain-based digital evidence management method. The method of claim 1,
The first individual includes at least one of a submitter and a collector of the digital evidence data, a blockchain-based digital evidence management method. The method of claim 1,
The collection history information includes at least one of a collection date of the digital evidence data, a collector DID, a provider DID, a case number, a storage location, and hash information. delete delete The method of claim 1,
The inquiry history information further includes at least one of the case number of the digital evidence data, the DID of the second individual, the date of analysis, and hash information of the analysis result, a block chain-based digital evidence management method. The method of claim 1,
The collection history information and the inquiry history information recorded in the digital evidence management block chain are shared with a terminal device of a related institution through a block chain network, a block chain-based digital evidence management method. The method of claim 1,
The DID block chain stores a DID document (DID document) including a public key infrastructure (PKI)-based key pair and DID of a person related to the digital evidence data in a ledger, a block chain-based digital evidence management method . In the device for blockchain-based digital evidence management,
Receive the first individual's Verifiable Credentials (VC) information associated with the digital evidence data - the VC information is information issued based on Decentralized IDentifiers (DID) - and DID blockchain (DID blockchain) - The DID block chain stores the information about the DID - to verify the validity of the received VC information, and based on the validity of the VC information, from the user terminal of the first individual a processor that collects the digital evidence data, stores the digital evidence data in a database, and records collection history information in a digital evidence management block chain; and
Including a memory for storing instructions related to the operation of the processor,
The collection history information includes a collector DID, a provider DID, and a case number, and when the digital evidence data is deleted, the deleted DID is linked to the case number and recorded in the block chain, a block chain-based digital evidence management device . A user terminal device for registering or inquiring digital evidence data in connection with a digital evidence management server,
a key storage for storing a key pair including a private key and a public key of a user of the user terminal device;
a DID document module for generating decentralized IDentifiers (DID) of the user and generating a DID document using the public key of the key pair stored in the key store;
VC storage for receiving and storing DID-based identification (VC: Verifiable Credentials) information; and
and a digital evidence registration/inquiry module for registering or inquiring the digital evidence data by linking with the digital evidence management server using the VC information,
When registering or inquiring the digital evidence data, the provider DID or the inquirer DID, which is provided as registration or inquiry history information, is linked with the case number and recorded in the block chain,
A user terminal device for registering or inquiring digital evidence data, wherein when the digital evidence data is deleted, the deletion DID is linked to the case number and recorded in the block chain. 11. The method of claim 10,
The DID document is registered and managed in the DID blockchain,
The DID document is used for verification for issuance of VC information, a user terminal device for registering or inquiring digital evidence. 11. The method of claim 10,
The user terminal device for registering or inquiring digital evidence, further comprising an identification expression generator for generating an identification expression (VP: Verifiable Presentation) by adding the user's signature to the VC information. In a blockchain-based digital evidence management system,
In response to a VC (Verifiable Credentials) request for a first individual's Decentralized IDentifiers (DID) associated with the digital evidence data from the first user terminal, the DID block chain is used to check the information about the DID. In response to a VC: Verifiable Credentials (VC) request for issuing the first VC information for the first individual, and from the second user terminal to the distributed identifiers (DID: Decentralized IDentifiers) of the second individual associated with the digital evidence data , an identity verification server that issues the second VC information for the second individual by verifying the information on the DID through the DID blockchain; and
Receive the first VC information of the first individual from the first user terminal, verify the validity of the received first VC information using the DID blockchain, and based on the validity of the first VC information, Recording the collection history information in a digital evidence management block chain while storing the digital evidence data received from the first user terminal in a database, and receiving the second VC information of the second individual from the second user terminal, Verifies the validity of the received second VC information using the DID block chain, and allows inquiry or deletion of the digital evidence data from the second user terminal based on the validity of the second VC information, A blockchain-based digital evidence management system, comprising a digital evidence management server that generates inquiry history information related to the inquiry or deletion behavior and records it in the digital evidence management blockchain.

Images