KR102452287B1 - Abnormal transaction detecting method in the circulation of online cash assets - Google Patents

Abstract

The nodes constituting the blockchain network are initiated. The node constituting the block chain network includes a smart contract installed in the node and one or more other nodes constituting the block chain network, and the smart contract verifies the validity of the online cash asset distribution. It includes a financial transaction smart contract, an abnormal transaction detection smart contract for detecting an abnormal transaction for the distribution of the online cash equivalents, and a blacklist smart contract for managing the abnormal transaction level obtained based on the number of the abnormal transaction.

Description

Method of detecting abnormal transactions in the circulation of online cash equivalents {ABNORMAL TRANSACTION DETECTING METHOD IN THE CIRCULATION OF ONLINE CASH ASSETS}

The present invention relates to a method for detecting abnormal transactions in the circulation of online cash equivalents, which can detect and control abnormal transactions that occur during the distribution process of online cash equivalents in a block chain network.

A blockchain network is a horizontal distributed ledger network where all nodes store the same record.

And recently, local currency services using block chains are being developed. The assets of the local currency service generally have a 1:1 value with the fiat currency of the banking system, and when fiat money is deposited in the bank account, local currency, a virtual currency, is issued on the blockchain network based on this.

On the other hand, online cash equivalents such as local currencies have a so-called “gang” problem.

Specifically, referring to FIG. 1A , a case of converting local currency into legal currency and diverting it may occur under the agreement between the malicious user and the affiliated store. The most common local currency bullying scenarios are as follows.

First, a case in which an additional 10% of the purchase amount can be accumulated with the support of local governments is explained when purchasing local currency. In this case (1) First, the franchisee may register as a local currency affiliated store for the purpose of “Kang”. (2) Users can purchase local currency of KRW 1.1 million. Here, the amount of money spent by the user may be 1 million won in legal currency, and the subsidy of the local government may be 100,000 won in legal currency. (3) Users can pay 1.1 million won in local currency without purchasing goods at the affiliated store. (4) The franchisee may provide the negotiated amount (for example, 1,050 million won) to the user. In this case, since the user obtained 1,050 million won by spending 1 million won in legal currency, a profit of 50,000 won was generated to the user. (5) A franchisee may apply to the local government to exchange the received amount (1.1 million won). In this case, since the franchisee obtained 1.1 million won from the local government instead of providing 1.05 million won to the user, the franchisee had a profit of 50,000 won.

To explain another case, (1) An acquaintance or family member of the franchisee receives 1 million won in local currency from the local government in the form of a welfare allowance. (2) Acquaintances or family members of the franchisee owner pay 1 million won in local currency without purchasing goods at the affiliated store. (3) A franchisee may convert local currency into cash and divert it by requesting a local government to exchange the received amount (1 million won).

What makes the above two cases valid is that it is difficult to distinguish whether a transaction using local currency is a normal transaction or not.

On the other hand, as shown in Fig. 1b, when the FDS system for detecting abnormal transactions is operated separately from the block chain, data on abnormal transactions and financial transaction data are separated, and abnormal transactions are based on the data accumulated inside the FDS system. It is determined whether or not there is a possibility that data may be manipulated or lost by a malicious user. Therefore, since the reliability of the data is not guaranteed, the problem of non-repudiation may arise. For this reason, there was a problem in that it was impossible to quickly respond to the abnormal transaction because there was a lack of trust in making an ex post judgment that there was an abnormal transaction.

The present invention is to solve the above-mentioned problems, and an object of the present invention is to detect and control abnormal transactions occurring in the process of distribution of online cash equivalents in a block chain network, abnormal transactions for the distribution of online cash equivalents To provide a detection method.

A node constituting the block chain network according to the present invention includes a smart contract installed in the node and one or more other nodes constituting the block chain network, and the smart contract is A financial transaction smart contract that verifies the validity of the distribution, an abnormal transaction detection smart contract that detects an abnormal transaction for the distribution of the online cash equivalents, and a black that manages the abnormal transaction level obtained based on the number of the abnormal transaction List contains smart contracts.

In this case, the abnormal transaction detection smart contract manages the abnormal transaction rules generated based on the management policy of the online cash equivalents, and compares the information on the distribution of the abnormal transaction rules and the online cash equivalents to the online cash equivalents It can be determined that the distribution of

In this case, the abnormal transaction detection smart contract may transmit a registration request for the subject of the distribution to the blacklist smart contract when it is determined that the distribution of the online cash equivalents is an abnormal transaction.

In this case, the blacklist smart contract may count the number of abnormal transactions of the subject of the distribution, and record the abnormal transaction level calculated based on the number of abnormal transactions in the block chain database.

Meanwhile, the blacklist smart contract may read the authority control information corresponding to the abnormal transaction level from the block chain database and transmit it to the abnormal transaction detection smart contract.

In this case, the abnormal transaction detection smart contract may control the right of distribution of the online cash equivalent based on the authority control information.

In this case, the financial transaction smart contract first approves the distribution of the online cash equivalent by verifying the validity of the distribution of the online cash equivalent, and the abnormal transaction detection smart contract determines the user's The distribution of the online cash equivalents may be finally approved based on at least one of whether the blacklist is included and the authority control information.

On the other hand, the abnormal transaction detection method for the distribution of online cash equivalents of smart contracts installed in nodes constituting the block chain network, financial transaction smart contracts included in the smart contract, for the distribution of online cash equivalents The step of verifying the validity, the step of detecting, by the abnormal transaction detection smart contract included in the smart contract, the abnormal transaction for the distribution of the online cash equivalent assets, and the blacklist smart contract included in the smart contract, the abnormality and managing the acquired abnormal transaction level based on the number of transactions.

In this case, the step of detecting the abnormal transaction may include comparing the information on the circulation of the online cash equivalents with the abnormal transaction rules generated based on the management policy of the online cash equivalents, so that the distribution of the online cash equivalents is an abnormal transaction. It may include the step of determining that

In this case, the step of detecting the abnormal transaction may include, if it is determined that the distribution of the online cash equivalents is an abnormal transaction, transmitting a registration request for the subject of the distribution to the blacklist smart contract.

In this case, the step of managing the abnormal transaction level may include counting the number of abnormal transactions of the subject of the distribution, and recording the abnormal transaction level calculated based on the number of abnormal transactions in a block chain database.

Meanwhile, the step of managing the abnormal transaction level may include reading the authority control information corresponding to the abnormal transaction level from a block chain database and transmitting it to the abnormal transaction detection smart contract.

In this case, the method may further include controlling the rights of distribution of the online cash equivalents based on the authority control information.

In this case, the step of verifying the validity of the distribution of the online cash equivalents includes the step of first authorizing the distribution of the online cash equivalents by verifying the validity of the distribution of the online cash equivalents, The step of controlling the distribution authority may include the step of finally authorizing the distribution of the online cash equivalent based on at least one of the detection result of the abnormal transaction, whether the user's blacklist is included, and the authority control information.

On the other hand, the abnormal transaction detection system is an operating system that distributes abnormal transaction rules and rights control information for each abnormal transaction level generated based on the management policy of online cash equivalent assets, and the online cash properties through smart contracts installed in a plurality of nodes A blockchain network for performing asset distribution, wherein the smart contract includes a financial transaction smart contract that verifies the validity of the online cash equivalent asset distribution, and abnormal transaction detection for the online cash equivalent asset distribution It includes a detection smart contract, and a blacklist smart contract for managing the acquired abnormal transaction level based on the number of times of the abnormal transaction.

In this case, one node constituting the block chain network is a monitoring pattern registration system that manages the monitoring pattern received from the monitoring system, and the monitoring pattern registration system is It is possible to extract the distribution details corresponding to the monitoring pattern by comparing the distribution details and the monitoring pattern of the online cash equivalent assets, and transmit the extracted distribution details to the monitoring system.

On the other hand, the method further comprises a monitoring system that is an operating subject of the online cash equivalent, wherein the monitoring system generates a monitoring pattern based on the management policy of the online cash equivalent and transmits it to another monitoring system, or another online cash equivalent from another monitoring system. You can receive a monitoring pattern created based on the asset's operating policy.

According to the present invention, by registering abnormal transaction rules and blacklist in a smart contract, and performing detection and authority control of abnormal transactions through the smart contract when a request for distribution of online cash equivalents occurs, abnormal transactions such as “gang” It has the advantage of being able to prevent or perform prompt follow-up measures.

According to the present invention, an algorithm for detecting abnormal transactions and an algorithm for managing a blacklist are included in the smart contract and operated, unlike the case of detecting abnormal transactions in a separate system separated from the block chain network. It has the advantage of guaranteeing the reliability of the data related to it.

According to the present invention, there is an advantage that can solve the problem of non-repudiation of fraudulent traders by storing the abnormal transaction rules, the user's distribution history, the number of abnormal transactions, the abnormal transaction level, and the like in the block chain.

The present invention distributes and manages abnormal transaction rules, policies for each abnormal transaction level, and authority control information for each abnormal transaction level through a smart contract, so that management and updating are easily performed despite changes in the management policy of online cash equivalents There are advantages to doing.

According to the present invention, since abnormal transactions are detected by comprehensively considering not only the distribution of online cash equivalents using the financial system, but also the distribution of online cash equivalents between users and between users and merchants, it is possible to more accurately detect abnormal transactions. there are advantages to

According to the present invention, since past information to present information is synchronized through block synchronization, there is an advantage that nodes in the blockchain network can easily share abnormal transaction rules, blacklists, permission control information for each level, etc. .

In the present invention, by connecting and operating the monitoring system 130 with a block chain network when an external institution needs to monitor or monitor a separate abnormal transaction, several local governments share a monitoring pattern in the block chain network they operate. There are advantages to being applied.

According to the present invention, the detection of abnormal transactions is performed within the blockchain network, and when an abnormal transaction event occurs, the event is propagated in real time and information related to the abnormal transaction is easily shared and synchronized, so the monitoring system immediately detects the occurrence of the abnormal transaction. It has the advantage of being able to identify and respond quickly.

The monitoring system generates a monitoring pattern and registers it in the monitoring pattern registration system, thereby having the advantage of selectively identifying abnormal transaction details that the monitoring system wants to find.

1 is a view for explaining a problem that occurs in the distribution process of local currency.
2 is a view for explaining an abnormal transaction detection system for the circulation of online cash equivalents, according to the present invention.
FIG. 3 is a diagram for explaining the block chain network 120 of FIG. 2 .
4 is a block diagram illustrating the configuration of each node of FIG. 3 .
FIG. 5 is a block diagram illustrating the configuration of a smart contract (SC) 500 that is executed by each node of FIG. 3 to perform online cash asset distribution and abnormal transaction detection.
6 is a block diagram illustrating a detailed configuration of a smart contract (SC) 500 .
7 is a diagram for explaining the distribution procedure of the abnormal transaction level, the abnormal transaction rule, and authority control information for each level according to the present invention.
8 is a view for explaining a method of detecting abnormal transactions for the distribution of online cash equivalents of smart contracts according to the present invention.
9 is a view for explaining the monitoring pattern registration system 900 according to the present invention.
10 is a view for explaining an operation method of the monitoring pattern registration system 900 according to the present invention.

Hereinafter, an embodiment of the present invention will be described in more detail with reference to the accompanying drawings. Embodiments of the present invention may be modified in various forms, and the scope of the present invention should not be construed as being limited to the following embodiments. This embodiment is provided to more completely explain the present invention to those of ordinary skill in the art. In addition, although specific terms have been used in the drawings and the specification of the present invention, they are used only for the purpose of describing the present invention and are not used to limit the meaning or the scope of the present invention described in the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the appended claims.

On the other hand, in this specification, the singular also includes the plural unless otherwise specified in the phrase. As used herein, "comprises" and/or "comprising" refers to the presence of one or more other components, steps, operations and/or elements in a referenced element, step, operation and/or element. or addition is not excluded.

2 is a view for explaining an abnormal transaction detection system for the circulation of online cash equivalents, according to the present invention.

According to FIG. 2 , the abnormal transaction detection system for the distribution of online cash equivalents may include an operation system 110 , a block chain network 120 , and a monitoring system 130 .

In the present invention, the online cash equivalent may be a blockchain-based cryptocurrency. In addition, the online cash equivalent is a local currency used only in a specific area, and may be a currency issued by a local government. In addition, online cash equivalents include not only local currency, but also online gift certificates, points, coupons, public institution vouchers, policy allowances, book index allowances, stable coins linked to legal currency values, and central bank digital currency (CBDC: Central Bank-) Issued Digital Currencies, etc.) may include cash equivalents.

A subject operating the operating system 110 may be a local government that has issued online cash equivalents or a company entrusted with management from the local government.

In addition, the operating system 110 may generate a smart contract and distribute it to the blockchain network 120 , and may update the smart contract distributed in the blockchain network 120 .

In this case, the operating system 110 is a financial transaction smart contract that performs the distribution of online cash equivalents, an abnormal transaction detection smart contract that detects abnormal transactions for the distribution of online cash equivalents, and abnormal transactions obtained based on the number of abnormal transactions A smart contract including a blacklist smart contract that manages the level can be distributed to the blockchain network 120 .

In addition, the abnormal transaction detection smart contract can manage the abnormal transaction rules that are used as a criterion for determining whether or not there is an abnormal transaction. In this case, the operating system 110 may generate an abnormal transaction rule based on the management policy of the online cash equivalent of a local government, and distribute the smart contract including the generated abnormal transaction rule to the block chain network 120 . .

In addition, the blacklist smart contract may manage permission control information corresponding to an abnormal transaction level. In this case, the operating system 110 may generate permission control information for each abnormal transaction level and distribute the smart contract including the created permission control information for each level to the block chain network 120 .

In addition, the operating system 110 may monitor the distribution history and blacklist of online cash equivalents performed in the block chain network 120 .

Meanwhile, the monitoring system 130 may communicate with the monitoring pattern registration system, which is a node in the block chain network. Here, the subject of the monitoring system 130 may be a local government that has issued online cash equivalents or a company entrusted with monitoring tasks from the local government.

The monitoring system 130 may generate a monitoring pattern tying a single abnormal transaction or a combination of a plurality of abnormal transactions, and transmit the generated monitoring pattern to the monitoring pattern registration system. In this case, the monitoring pattern registration system compares the distribution details of the online cash equivalents generated in the block chain network 120 with the received monitoring pattern, and transmits the distribution details corresponding to the received monitoring pattern to the monitoring system 130 . . In this case, the monitoring system 130 stores the distribution details corresponding to the monitoring pattern, and when a request is received from the outside (local governments or other local governments, companies, organizations, etc., which are the issuing entities of online cash equivalents), distribution details can provide

In addition, the monitoring system 130 may generate a monitoring pattern based on the management policy of the online cash equivalent of the issuing entity. For example, if the city A is the issuing entity of the online cash equivalents, the monitoring system 130 may generate a monitoring pattern corresponding to the online cash equivalents management policy of the city A and transmit it to the monitoring pattern registration system.

In addition, the monitoring system 130 may transmit a monitoring pattern generated based on the management policy of the online cash equivalent to another monitoring system. For example, if the monitoring system 130 is a monitoring system of A city, the monitoring system 130 generates a monitoring pattern based on the management policy of online cash equivalents issued by A city, and uses the generated monitoring pattern to C city. can be sent to

In addition, the monitoring system 130 may receive a monitoring pattern generated based on the management policy of another online cash equivalent from another external monitoring system. For example, if the monitoring system 130 is the monitoring system of city A, the monitoring system 130 receives the monitoring pattern generated based on the management policy of online cash equivalents issued by the city B from the monitoring system of city B. can

Also, the monitoring system 130 may transmit a monitoring pattern received from another external monitoring system to the monitoring pattern registration system.

The communication network 150 includes, for example, a communication link using technologies such as Ethernet, 802.11, worldwide interoperability for microwave access (WiMAX), 3G, 4G, 5G, CDMA, digital subscriber line (DSL), and the like. Examples of networking protocols used for communication through the communication network 130 include multiprotocol label switching (MPLS), transmission control protocol/Internet protocol (TCP/IP), hypertext transport protocol (HTTP), simple mail transfer protocol (SMTP) and Includes file transfer protocol (FTP).

The blockchain network 120 configures a network by communicating with a plurality of participating nodes in a peer-to-peer (P2P) manner. Participating nodes in the block chain network 120 may perform approval of transactions recorded in the block chain, storage of transaction details using block chains, periodic block distribution agreements with other nodes, and proof of work. These participating nodes may be composed of a computer system such as a server or PC, and a smart contract may be installed.

In addition, the blockchain network 120 may distribute online cash equivalents through smart contracts installed in participating nodes. Here, the online cash equivalent distribution may include at least one of issuance of online cash equivalents using legal currency, transaction of online cash equivalents, payment using online cash equivalents, and settlement of online cash equivalents.

For example, the block chain network 120 links with the financial system constituting the nodes of the block chain network, and provides online cash equivalents having a value of 1:1 with fiat money deposited by users or supported by local governments. It can be issued and written to a block. In addition, the blockchain network 120 may interwork with the financial system constituting the nodes of the blockchain network to perform online cash asset settlement and record transactions in blocks.

For another example, the block chain network 120 works with a user terminal or a merchant terminal constituting a node of the block chain network to approve a transaction including a transaction of online cash equivalents, payment using online cash equivalents, etc. can be written to the block.

FIG. 3 is a diagram for explaining the block chain network 120 of FIG. 2 .

Referring to FIG. 3 , the blockchain network 120 may include a node 10 and a client 20 . According to an embodiment, the node 10 and the client 20 are terminals constituting the block chain system and may be implemented as smart terminals, PCs, servers, and the like. Here, the client 20 may also play the role of a node in the blockchain network.

On the other hand, a smart contract is installed in a plurality of nodes 10 constituting the blockchain system, and the distribution of online cash equivalents, detection of abnormal transactions, and permission control based on blacklists are This can be done by participation.

Here, the smart contract is programming code that operates on the blockchain, the code is executed on the blockchain, and the execution result of the code is recorded in the state database. Since the sequence of code execution is transparently disclosed by blockchain transactions, smart contracts are a technology that makes the operation process and operation result of the code reliable. By using these technologies, contracts can be concluded and executed easily and conveniently through P2P (Peer to Peer) without an intermediary. In addition, smart contracts can automatically process the distribution of online cash equivalents, detection of abnormal transactions, and permission control based on blacklists through a shared network by using the characteristics of blockchain's Distributed Ledger Technology (DLT). .

The client 20 may generate a transaction and transmit it to the blockchain network when the online cash equivalent asset distribution (specifically, the online cash equivalent asset distribution request) occurs. In addition, the client 20 may check the execution result of the smart contract executed in the plurality of nodes 10: 1, 2, 3, 4, 5, 6 according to the transfer of the transaction.

The client 20 according to an embodiment may include a financial system, a user terminal, and an affiliated store terminal, etc. as a transaction subject that generates and transmits a transaction to the block chain network. For example, if any node 10 participates in the blockchain network 120, the node 10 may generate a transaction related to the distribution of online cash equivalents and propagate it to the blockchain network. The node 10 may function as a client 20 .

On the other hand, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 execute a smart contract installed in each node, Validation of validity, detection of abnormal transactions, management of abnormal transaction levels, and permission control based on abnormal transaction levels can be performed.

Specifically, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 verifies and agrees on transactions for the distribution of online cash equivalents in a smart contract. Transactions that satisfy the set distribution conditions can be approved. In addition, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 may record transactions related to the distribution of online cash equivalents in a block.

In addition, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 are based on the abnormal transaction rules included in the smart contract installed in each node, It is possible to detect abnormal transactions in the circulation of online cash equivalents and record the abnormal transaction detection history in a block.

In addition, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 are blacklisted based on a blacklist included in a smart contract installed in each node. It is possible to restrict the online distribution of cash equivalents by users included in the list.

In addition, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 manages common synchronized state information and the client 12 in the process of online cash equivalent distribution. Transactions generated by . can be shared through the distributed consensus process.

In addition, a plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the blockchain network 120 execute a smart contract in response to a shared transaction, and the common changed according to the execution of the smart gun contract State information can be stored. In addition, the plurality of nodes (10: 1, 2, 3, 4, 5, 6) constituting the block chain network 120 includes a database for storing shared transactions, smart contracts, and common state information, and the database is It can be formed in a blockchain structure.

Meanwhile, one or more nodes in the blockchain network 120 may be a monitoring pattern registration system. Here, the monitoring pattern registration system may retain and manage the monitoring pattern received from the monitoring system 130 .

Meanwhile, when an abnormal transaction event occurs in a specific node, the abnormal transaction event may be propagated to the monitoring pattern registration system through the block chain network 120 . In this case, the monitoring pattern registration system can acquire the distribution history of online cash equivalents by reading the transaction generated in the node or the block in which the transaction is recorded.

And the monitoring pattern registration system can extract the distribution details matching the monitoring pattern by comparing the distribution details of the online cash equivalent to the monitoring pattern. And the monitoring pattern registration system may transmit the extracted distribution details to the monitoring system 130 through the communication network 150 .

4 is a block diagram illustrating the configuration of each node of FIG. 3 .

Referring to FIG. 4 , the node 10 may include a communication unit 11 , a control unit 13 , and a storage unit 15 .

The communication unit 11 may interconnect a plurality of nodes 10: 1, 2, 3, 4, 5, 6 and the client 20 constituting the block chain system. According to an embodiment, the communication unit 11 may receive a transaction related to the distribution of online cash equivalents, transmitted through the block chain system, and transmit it to the control unit 13 .

The controller 13 may execute a smart contract to control overall operation of the P2P system that approves the distribution of online cash equivalents. In addition, the controller 13 may store the state information changed according to the execution of the smart contract in the storage unit 15 .

The storage unit 15 may store transactions, smart contracts, and execution results of smart contracts, and may be implemented in a block chain structure according to an embodiment.

FIG. 5 is a block diagram illustrating the configuration of a smart contract (SC) 500 that is executed by each node of FIG. 3 to perform online cash asset distribution and abnormal transaction detection.

6 is a block diagram illustrating a detailed configuration of a smart contract (SC) 500 .

Referring to FIG. 5 , the smart contract (SC) is a financial transaction smart contract (financial transaction SC) 510, an abnormal transaction detection smart contract (abnormal transaction detection SC or Fraud Detection System (FDS) SC) 520, blacklist It may include a smart contract 530 and a state database 540 .

Here, the state database 540 may store online cash asset circulation, abnormal transaction rules, abnormal transaction policies for each level, blacklist, rights by abnormal transaction level, and the like. In addition, the state database 540 may be formed in a block chain structure, and information stored in the state database 540 may be recorded and stored in a block. Therefore, the term state database 540 can be used interchangeably with the term block chain database, and refers to an integral part of the database embedded in the block chain.

The financial transaction smart contract (financial transaction SC) 510 may perform circulation (at least one of issuance, transaction, settlement and settlement) of online cash equivalents.

Specifically, when a request for distribution of online cash equivalents is received, the smart contract (SC) uses the basic components of the block chain, such as Consensus, Membership, Ledger, and P2P Network, as well as the business logic of the smart contract, transaction policies stored in the state database, and abnormal commerce. By using information such as rules to verify the validity of online cash equivalent distribution, online cash equivalent distribution can be implemented according to the smart contract logic.

In this case, the financial transaction smart contract (financial transaction SC) 510 may approve a distribution request that satisfies the distribution conditions set in the smart contract, and distribute and store transactions corresponding to the approved distribution request.

On the other hand, the financial transaction smart contract (financial transaction SC) 510 is a mobile cash equivalent to issuance of online cash equivalents using legal currency (for example, if 100,000 won of legal currency is deposited in the financial system, 100,000 won of local currency is issued) Issuance unit 511, mobile cash asset transaction unit 512 that performs online cash equivalent transaction (for example, local currency 100,000 won to another person), payment using online cash equivalent assets (for example, local currency 30,000 won) Mobile cash asset settlement unit 513 that performs 30,000 won payment when purchasing goods with When transmitted to the system, it may include a mobile cashable asset settlement unit 514 that performs local currency exchange for legal currency 100,000 won).

In addition, the financial transaction smart contract (financial transaction SC) 510 may store the distribution details (transactions) of online cash equivalents in the financial transaction raw data database 541 .

On the other hand, the abnormal transaction detection smart contract 520 may detect an abnormal transaction with respect to the distribution of the online cash equivalents, and control the authority of the distribution of the online cash equivalents based on the authority control information.

Specifically, the abnormal transaction detection smart contract 520 may include an abnormal transaction policy registration unit 521 , an abnormal transaction policy verification unit 522 , an abnormal transaction level management unit 523 , and a financial transaction authority control unit 524 .

The abnormal transaction policy registration unit 521 may manage abnormal transaction rules. Specifically, the abnormal transaction policy registration unit 521 may register the abnormal transaction rule distributed by the operating system 110 and store it in the policy database 542 . Also, the abnormal transaction policy registration unit 521 may read the abnormal transaction rule stored in the policy database 542 and provide it to the abnormal transaction policy verification unit.

Here, the abnormal transaction rule stipulates the criteria for judging abnormal transactions. For example, (1) user A trades 5 or more gifts to user B, (2) a specific user receives more than 100,000 gifts per day, Or, the number of times a specific user received a gift from multiple people more than 5 times a day (3) When a specific user canceled payment after payment more than 3 times a week (4) When the merchant’s profit increased by 300% compared to the previous week, (5) The frequency of large payments is within the top 10%, (6) Small payments, but there are many payments to the same person in a short period of time, (7) When users pay all of their online cash equivalents, etc.

Meanwhile, the abnormal transaction rules may be updated according to the policy change of the issuing entity of online cash equivalents. For example, as the abnormal transaction rule is updated, a new abnormal transaction rule may be added, or a previously registered abnormal transaction rule may be deleted or changed. In this case, the operating system 110 may distribute a new abnormal transaction rule to the block chain network 120 , and the smart contract installed in the nodes in the block chain network 120 may update the new abnormal transaction rule.

Abnormal transaction policy verification unit 522 may detect abnormal transactions with respect to the distribution of online cash equivalents.

Specifically, the abnormal transaction policy verification unit 522 may determine that the circulation of the online cash equivalent is an abnormal transaction by comparing the registered abnormal transaction rules and information on the distribution of the online cash equivalent.

More specifically, when the smart contract 500 receives a request for distribution of online cash equivalents, the abnormal transaction policy verification unit 522 determines the contents of the request for distribution of online cash equivalents or the node where the request for distribution of online cash equivalents is generated. The distribution history can be compared with the registered abnormal transaction rules. And if the contents of the online cash equivalent asset distribution request or the distribution details at the node where the online cash equivalent asset distribution request is generated match the abnormal transaction rules, the abnormal transaction policy verification unit 522 determines that the online cash equivalent asset distribution is an abnormal transaction. it can be decided that

Also, when it is determined that the distribution of online cash equivalents is an abnormal transaction, the abnormal transaction policy verification unit 522 may transmit a registration request for the subject of distribution to the blacklist smart contract 530 .

For example, when the user A intentionally purchases a specific product in bulk at a specific affiliated store, the abnormal transaction policy verification unit 522 may determine that the distribution of such online cash equivalents is an abnormal transaction. In addition, the abnormal transaction policy verification unit 522 may transmit a registration request for user A to the blacklist smart contract 530 .

Meanwhile, the abnormal transaction level management unit 523 may manage the abnormal transaction policy for each level. Specifically, the abnormal transaction level management unit 523 may register the level-specific abnormal transaction policy distributed by the operating system 110 and store it in the level-specific policy database 543 . Also, the abnormal transaction level management unit 523 may share the level-specific abnormal transaction policy with the blacklist smart contract 530 .

Here, the abnormal transaction policy for each level may be a criterion for calculating the abnormal transaction level. For example, as for the abnormal transaction policy by level, a person whose number of abnormal transactions is 5 to 10 times a month is abnormal transaction level 1, a person whose number of abnormal transactions is from 10 to 30 times a month is abnormal transaction level 2, A person whose frequency is 30 or more per month may be defined as abnormal transaction level 3.

The above transaction policy by level may be updated according to the policy change of the issuing entity of online cash equivalents. For example, as the abnormal transaction policy for each level is updated, a person whose number of abnormal transactions is from 3 to 6 times a month is converted to abnormal transaction level 1, and a person whose number of abnormal transactions is from 6 to 15 times a month is changed to abnormal transaction level 2. , a person whose number of abnormal transactions is 15 or more per month may be defined as abnormal transaction level 3.

In this case, the operating system 110 can distribute a new level-specific abnormal transaction policy to the blockchain network 120, and the smart contract installed in the nodes in the blockchain network 120 can update the abnormal transaction policy for each new level. can

Meanwhile, the financial transaction authority control unit 524 may receive authority control information corresponding to the abnormal transaction level from the blacklist smart contract 530, and control the distribution of online cash equivalents based on the authority control information.

Specifically, the financial transaction right control unit 524, based on the authority control information, may finally approve the distribution of the online cash equivalent or not.

On the other hand, the blacklist smart contract 530 may manage the user's abnormal transaction level based on the number of abnormal transactions of the user, and may manage permission control information for each level.

Specifically, the blacklist smart contract 530 may include a user management unit 531 and a permission management unit 532 for each level.

The permission management unit 532 for each level may manage permission control information for each abnormal transaction level. In detail, the permission management unit 532 for each level may register permission control information for each level distributed by the operating system 110 and store it in the permission database 545 for each level.

In this case, the permission control information for each level may be defined as to limit the user's permission according to the abnormal transaction level.

An example of permission control information is as follows.

Rating Policies by level Permission control by level Level 1 Number of abnormal transactions 5 times a month ~ 10 times a month - One-time remittance and payment amount can be used less than 80% of the standard amount
- Limit up to 5 transfers per day
- When related to a specific person, do not send or receive gifts or make payments with that person Level 2 Number of abnormal transactions 10 times a month ~ 30 times a month - One-time remittance and payment amount can be used less than 50% of the standard amount
- Limit 2 transfers per day
- When related to a specific person, do not send or receive gifts or make payments with that person
- When related to a specific merchant, payment is prohibited at that merchant
- No refund of payment details made within the last 1 week Level 3 Number of abnormal transactions 30 or more per month - One-time remittance and payment amount can be used less than 30% of the standard amount
- Limit the number of remittances to a maximum of 1 per day
- When related to a specific person, do not send or receive gifts or make payments with that person
- When related to a specific merchant, payment is prohibited at that merchant
- No refund of payment details for the last month
- Requires authentication after notifying the system administrator when making a transaction
- No gift exchange with all users

Meanwhile, permission control information for each level may be updated according to the policy change of the issuing entity of online cash equivalents. In this case, the operating system 110 can distribute the new level-specific abnormal transaction policy to the block chain network 120, and the smart contract installed in the nodes in the block chain network 120 can update the authority control information for each new level. can

Meanwhile, the user management unit 531 may manage the blacklist. Here, the blacklist may be stored in the blacklist database 544 , and the blacklist may include one or more users on the blacklist and an abnormal transaction level corresponding to the user.

In addition, the user management unit 531 may store the number of abnormal transactions of the user (the subject of distribution of online cash equivalents) in the blacklist database 544 .

In addition, the user management unit 531 may receive a registration request for a user (a distribution subject of online cash equivalents) from the abnormal transaction policy verification unit 522 . In addition, the user management unit 531 may count the number of times of abnormal transaction of the user (distribution subject) and calculate the level of abnormal transaction based on the number of abnormal transactions. Also, the user management unit 531 may match the calculated abnormal transaction level to the user and record it in the blacklist. In this case, the calculated abnormal transaction level may be matched to the user to generate a recorded block.

In addition, the user management unit 531 may acquire the abnormal transaction level of the user (distribution subject of online cash equivalents) based on the blacklist. In addition, the user management unit 531 may acquire authority control information corresponding to the level of the abnormal transaction of the user (the distribution subject of online cash equivalents) based on the authority control information for each level. In addition, the user management unit 531 may transmit authority control information corresponding to the abnormal transaction level of the user (distribution subject of online cash equivalents) to the abnormal transaction detection smart contract 520 .

7 is a diagram for explaining the distribution procedure of the abnormal transaction level, the abnormal transaction rule, and authority control information for each level according to the present invention.

Distribution of abnormal transaction level, abnormal transaction rule, and permission control information for each level may include initial distribution or update.

The operation system 110 generates permission control information for each abnormal transaction level (eg, the number of levels), abnormal transaction rules, abnormal transaction policy by level, and abnormal transaction level based on the management policy of online cash equivalents to create a block chain network (120) can be distributed.

Specifically, the operating system 110 may transmit an abnormal transaction level to the smart contract 500 . In this case, the abnormal transaction level is transmitted to the blacklist smart contract 530 through the abnormal transaction detection smart contract 520, and the blacklist smart contract 530 stores the abnormal transaction level in the block chain database (specifically, the blacklist database 544). )) can be registered. In this case, a block in which the abnormal transaction level is recorded may be generated.

In addition, the operating system 110 may transmit the abnormal transaction rule and the abnormal transaction policy for each level to the smart contract 500 . In this case, the abnormal transaction detection smart contract 520 may register the abnormal transaction rule in the block chain database (specifically, the policy database 542). In addition, the abnormal transaction detection smart contract 520 may register the policy for each abnormal transaction level in the block chain database (specifically, the level-specific policy database 543). In this case, the block in which the abnormal transaction rule is recorded and the policy for each abnormal transaction level This written block can be created.

In addition, the operating system 110 may transmit authority control information for each abnormal transaction level to the smart contract 500 . In this case, the blacklist smart contract 530 may register permission control information for each abnormal transaction level in the block chain database (specifically, the permission database 545 for each level). In this case, a block in which authority control information for each abnormal transaction level is recorded may be generated.

8 is a view for explaining a method of detecting abnormal transactions for the distribution of online cash equivalents of smart contracts according to the present invention.

The client 20, which is one node constituting the blockchain network, may generate a request for distribution of online cash equivalents. Here, the client 20 may include a financial system, a user terminal, and an affiliated store terminal.

That is, the request for distribution of the online cash equivalent may include a request for issuance/settlement of the online cash equivalent generated by the financial system, as well as a request for transaction, settlement, and settlement generated in a user terminal or an affiliated store terminal.

On the other hand, the smart contract 500 executed in a plurality of nodes in the blockchain network 120 may receive a request for distribution of online cash equivalents.

And first, the financial transaction smart contract 510 may verify the validity of the distribution of online cash equivalents. And, the financial transaction smart contract 510 may approve or disapprove a transaction that satisfies the distribution conditions set in the smart contract by verifying and agreeing on the transaction for the distribution of online cash equivalents.

On the other hand, approval in the financial transaction smart contract 510 is the first approval, and even if the financial transaction smart contract 510 approves the distribution request of the online cash equivalent, the distribution of the online cash equivalent is not immediately performed. Therefore, the financial transaction smart contract 510 may transmit an abnormal transaction detection request to the abnormal transaction detection smart contract 520 after verifying the validity of the online cash equivalent distribution.

In this case, the financial transaction smart contract 510 may transmit an abnormal transaction detection request with respect to a request for distribution of all online cash equivalents, or may transmit an abnormal transaction detection request only with respect to a request for distribution of unapproved online cash equivalents.

On the other hand, when the abnormal transaction detection request is received, the abnormal transaction detection smart contract 520 may detect an abnormal transaction for the distribution of online cash equivalents. And when it is determined that the distribution of the online cash equivalents is an abnormal transaction, the abnormal transaction detection smart contract 520 may transmit a registration request for the user (the subject of distribution) to the blacklist smart contract 530 .

In this case, the blacklist smart contract 530 may count the number of abnormal transactions of the user (subject of distribution), and calculate the abnormal transaction level based on the number of abnormal transactions. In addition, the blacklist smart contract 530 may register the calculated abnormal transaction level in the block chain database (black list database 544), and receive a registration result from the block chain database. In this case, a block recorded by matching the calculated abnormal transaction level to the user (the subject of distribution) may be generated.

In addition, the blacklist smart contract 530 may receive permission control information corresponding to the abnormal transaction level by requesting the permission control information corresponding to the abnormal transaction level to the block chain database (the permission database 545 for each level).

In addition, the blacklist smart contract 530 may transmit the user registration result (the user's abnormal transaction level) and authority control information to the abnormal transaction detection smart contract 520 .

On the other hand, the abnormal transaction detection smart contract 520 may control the right of distribution of online cash equivalents based on the authority control information.

Specifically, when the distribution of online cash equivalents is first approved by the financial transaction smart contract 510, but the distribution of online cash equivalents corresponds to the authority control information, the abnormal transaction detection smart contract 520 controls the distribution of online cash equivalents. may not be approved.

For example, if the user requests the remittance of online cash equivalents for the sixth time in a day, and the user's abnormal transaction level is 1, the number of remittances per day is limited to a maximum of 5 times, the abnormal transaction detection smart contract 520 is The distribution of cash equivalents may not be approved. In this case, online cash equivalents are not distributed.

In this case, the abnormal transaction detection smart contract 520 may transmit the authority control result (for example, “the number of remittances of the customer is limited to a maximum of 5 times per day”) to the client 20 .

Meanwhile, the abnormal transaction detection smart contract 520 may finally approve the distribution of online cash equivalents based on at least one of the detection result of the abnormal transaction, whether the user's blacklist is included, and the authority control information.

Specifically, when it is determined that the distribution of online cash equivalents is not an abnormal transaction in the abnormal transaction detection smart contract 520, when the distribution of online cash equivalents is an abnormal transaction, but the user is not included in the blacklist (for example, the number of abnormal transactions is If it is more than 5 times a month, the abnormal transaction level becomes 1 and it is registered in the blacklist, but the number of abnormal transactions of the user is 3 times a month), if the user is included in the blacklist but is not subject to permission control (for example, The abnormal transaction level is 2, and the number of remittances per day is limited up to 2 times, but when the user applies for the first remittance), the abnormal transaction detection smart contract 520 may finally approve the distribution of online cash equivalents.

And when the final approval of the abnormal transaction detection smart contract 520 occurs following the first approval in the financial transaction smart contract 510, the distribution of online cash equivalents can be performed automatically.

9 is a view for explaining the monitoring pattern registration system 900 according to the present invention.

10 is a view for explaining an operation method of the monitoring pattern registration system 900 according to the present invention.

The monitoring pattern registration system 900 may include a pattern registration and detection module 910 and a blockchain listening module 920 .

The pattern registration and detection module 910 may receive a monitoring pattern from the monitoring system 130 . Here, the monitoring pattern may be generated by the monitoring system 130 or generated by another monitoring system interlocked with the monitoring system 130 . Also, the monitoring pattern may be a type of a single abnormal transaction or a combination of a plurality of abnormal transactions. In this case, the pattern registration and detection module 910 may store the received monitoring pattern in the storage unit.

The blockchain network 120 may propagate transaction information to the monitoring pattern registration system 900 in real time for all transaction events. In this case, the blockchain network 120 may propagate the information on the node where the abnormal transaction event has occurred to the monitoring pattern registration system 900 together.

Meanwhile, the block chain listening module 920 can receive all block chain events, and examples of events include transaction generation, block generation, and custom events written in code in a smart contract. When the blockchain listening module 920 receives such an event, it can receive block information, transaction information, smart contract execution information, etc., and in this information, the online cash asset distribution information that can be compared with the monitoring pattern is included. .

In this case, the pattern registration and detection module 910 compares the stored monitoring pattern with the distribution history at the node where the abnormal transaction occurred, and when there is a distribution history matching the monitoring pattern, an abnormal transaction alarm can be transmitted to the monitoring system 130 . have. Also, the pattern registration and detection module 910 may transmit distribution details matching the monitoring pattern to the monitoring system 130 .

In this case, the pattern registration and detection module 910 may transmit an abnormal transaction alarm through SMS or the monitoring web based on the abnormal transaction notification method requested by the monitoring system 130 .

As described above, according to the present invention, abnormal transactions such as “gang” are prevented or It has the advantage of being able to perform prompt follow-up actions.

In addition, according to the present invention, an algorithm for detecting abnormal transactions and an algorithm for managing blacklists are included in the smart contract and operated, so that, unlike the case of detecting abnormal transactions in a separate system from the block chain network, abnormal transactions are detected. It has the advantage of guaranteeing the reliability of data related to transactions.

In addition, according to the present invention, there is an advantage that can solve the problem of non-repudiation of fraudulent traders by storing the abnormal transaction rules, the user's distribution history, the number of abnormal transactions, the abnormal transaction level, etc. in the block chain.

In addition, the present invention distributes and manages abnormal transaction rules, policies for each abnormal transaction level, authority control information for each abnormal transaction level, etc. through a smart contract, so that it can be easily managed and updated despite changes in the management policy of online cash equivalents There are advantages to doing it.

In addition, according to the present invention, since abnormal transactions are detected by comprehensively considering not only the distribution of online cash equivalents using the financial system, but also the distribution of online cash equivalents between users and between users and merchants, abnormal transactions are detected more accurately. There are advantages to doing.

In addition, according to the present invention, since past information to present information is synchronized through block synchronization, nodes in the block chain network can easily share abnormal transaction rules, blacklists, and permission control information for each level. have.

In the present invention, by connecting and operating the monitoring system 130 with a block chain network when an external institution needs to monitor or monitor a separate abnormal transaction, several local governments share a monitoring pattern in the block chain network they operate. There are advantages to being applied.

In addition, according to the present invention, the detection of abnormal transactions is performed within the blockchain network, and when an abnormal transaction event occurs, the event is propagated in real time and information related to the abnormal transaction is easily shared and synchronized, so the monitoring system prevents the occurrence of abnormal transactions. It has the advantage of being able to immediately identify and respond quickly.

In addition, the monitoring system generates a monitoring pattern and registers it in the monitoring pattern registration system, thereby having the advantage of selectively identifying abnormal transaction details that the monitoring system wants to find.

While this specification contains many features, such features should not be construed as limiting the scope of the invention or the claims. In addition, features described in individual embodiments herein may be implemented in combination in a single embodiment. Conversely, various features described herein in a single embodiment may be implemented in various embodiments individually, or may be implemented in appropriate combination.

Although acts are described in a particular order in the drawings, it should not be understood that such acts are performed in the particular order as shown, or that all of the described acts are performed in a continuous order, or to obtain a desired result. . Multitasking and parallel processing may be advantageous in certain circumstances. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The program components and systems described above may generally be implemented as a package in a single software product or multiple software products.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable form in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.). Since this process can be easily performed by a person skilled in the art to which the present invention pertains, it will not be described in detail any longer.

The present invention described above, for those of ordinary skill in the art to which the present invention pertains, various substitutions, modifications and changes are possible without departing from the technical spirit of the present invention. It is not limited by the drawings.

500: smart contract
510: financial transaction smart contract
520: abnormal transaction detection smart contract
530: Blacklist smart contract

Claims (17)

In the nodes constituting the blockchain network,
The node is
A smart contract installed in the node and one or more other nodes constituting the blockchain network;
The smart contract is
a financial transaction smart contract that verifies the validity of the distribution of the online cash equivalent when a request for distribution of the online cash equivalent is received, and approves the request for distribution of the online cash equivalent that satisfies the distribution conditions set in the smart contract;
an abnormal transaction detection smart contract that manages the abnormal transaction rules and detects abnormal transactions for the distribution of the online cash equivalents based on the abnormal transaction rules; and
A blacklist smart contract that manages the acquired abnormal transaction level based on the number of times of the abnormal transaction;
The smart contract is
By interworking with the user terminal and the affiliated store terminal constituting the node of the block chain network, it detects abnormal transactions related to the distribution of online cash assets between the user and the affiliated store who have not purchased the product,
The abnormal transaction rules are:
Created according to the management policy of the issuing entity of the online cash equivalents and updated by the smart contract
node. The method of claim 1,
The abnormal transaction detection smart contract,
Comparing the abnormal transaction rules and information on the circulation of the online cash equivalents to determine that the distribution of the online cash equivalents is an abnormal transaction
node. 3. The method of claim 2,
The abnormal transaction detection smart contract,
If it is determined that the distribution of the online cash equivalents is an abnormal transaction, sending a registration request for the subject of the distribution to the blacklist smart contract
node. 4. The method of claim 3,
The blacklist smart contract is
Counting the number of abnormal transactions of the subject of the distribution, and recording the abnormal transaction level calculated based on the number of abnormal transactions in the block chain database
node. 4. The method of claim 3,
The blacklist smart contract is
Reading the authority control information corresponding to the abnormal transaction level from the block chain database and transmitting it to the abnormal transaction detection smart contract
node. 6. The method of claim 5,
The abnormal transaction detection smart contract,
Controlling the rights of distribution of the online cash equivalents based on the authority control information
node. 7. The method of claim 6,
The financial transaction smart contract,
First approval of the distribution of the online cash equivalents by verifying the validity of the distribution of the online cash equivalents;
The abnormal transaction detection smart contract,
Final approval of the distribution of the online cash equivalent based on at least one of the detection result of the abnormal transaction, whether the user's blacklist is included, and the authority control information
node. In a method for detecting abnormal transactions in the distribution of online cash equivalents of smart contracts installed in nodes constituting a block chain network,
When a request for distribution of the online cash equivalent is received, the financial transaction smart contract included in the smart contract verifies the validity of the online cash equivalent distribution and satisfies the distribution conditions set by the smart contract. approving the distribution request;
detecting, by the abnormal transaction detection smart contract, included in the smart contract, managing abnormal transaction rules, and detecting abnormal transactions with respect to the distribution of the online cash equivalents based on the abnormal transaction rules; and
Including, by the blacklist smart contract included in the smart contract, the acquired abnormal transaction level based on the number of times of the abnormal transaction;
The smart contract is
By interworking with the user terminal and the affiliated store terminal constituting the node of the block chain network, it detects abnormal transactions related to the distribution of online cash assets between the user and the affiliated store who have not purchased the product,
The abnormal transaction rules are:
Created according to the management policy of the issuing entity of the online cash equivalents and updated by the smart contract
A method of detecting abnormal transactions in the distribution of online cash equivalents. 9. The method of claim 8,
The step of detecting the abnormal transaction comprises:
Comparing the information on the circulation of the online cash equivalents with the abnormal transaction rules generated based on the management policy of the online cash equivalents, determining that the distribution of the online cash equivalents is an abnormal transaction;
A method of detecting abnormal transactions in the distribution of online cash equivalents. 10. The method of claim 9,
The step of detecting the abnormal transaction comprises:
When it is determined that the distribution of the online cash equivalents is an abnormal transaction, transmitting a registration request for the subject of the distribution to the blacklist smart contract; including
A method of detecting abnormal transactions in the distribution of online cash equivalents. 11. The method of claim 10,
The step of managing the abnormal transaction level is,
Counting the number of abnormal transactions of the subject of the distribution, and recording the abnormal transaction level calculated based on the number of abnormal transactions in a block chain database; including
A method of detecting abnormal transactions in the distribution of online cash equivalents. 11. The method of claim 10,
The step of managing the abnormal transaction level is,
Reading the authority control information corresponding to the abnormal transaction level from the block chain database and transmitting it to the abnormal transaction detection smart contract;
A method of detecting abnormal transactions in the distribution of online cash equivalents. 13. The method of claim 12,
Controlling the authority of the distribution of the online cash equivalents based on the authority control information; further comprising
A method of detecting abnormal transactions in the distribution of online cash equivalents. 14. The method of claim 13,
The step of verifying the validity of the distribution of the online cash equivalent is,
Including; verifying the validity of the circulation of the online cash equivalent to first approve the distribution of the online cash equivalent;
The step of controlling the right of distribution of the online cash equivalent is,
The step of finally approving the distribution of the online cash equivalent based on at least one of the detection result of the abnormal transaction, whether the user's blacklist is included, and the authority control information;
A method of detecting abnormal transactions in the distribution of online cash equivalents. In the abnormal transaction detection system,
an operating system that distributes abnormal transaction rules and authority control information for each level of abnormal transaction; and
A blockchain network that distributes online cash equivalents through smart contracts installed in a plurality of nodes;
The smart contract is
a financial transaction smart contract that verifies the validity of the distribution of the online cash equivalent when the request for distribution of the online cash equivalent is received, and approves the request for distribution of the online cash equivalent that satisfies the distribution conditions set in the smart contract;
an abnormal transaction detection smart contract that manages the abnormal transaction rules and detects abnormal transactions for the distribution of the online cash equivalents based on the abnormal transaction rules; and
A blacklist smart contract that manages the acquired abnormal transaction level based on the number of times of the abnormal transaction;
The smart contract is
By interworking with the user terminal and the affiliated store terminal constituting the node of the block chain network, it detects abnormal transactions related to the distribution of online cash assets between the user and the affiliated store who have not purchased the product,
The abnormal transaction rules are:
Created according to the management policy of the issuing entity of the online cash equivalents and updated by the smart contract
Anomalous transaction detection system. 16. The method of claim 15,
One node constituting the blockchain network is
It is a monitoring pattern registration system that manages the monitoring pattern received from the monitoring system,
The monitoring pattern registration system,
When a transaction event occurring in a specific node is propagated, the distribution history of the online cash equivalent in the specific node is compared with the monitoring pattern to extract the distribution details corresponding to the monitoring pattern, and the extracted distribution details are transmitted to the monitoring system to transmit
Anomalous transaction detection system. 16. The method of claim 15,
Further comprising a monitoring system that is an operating subject of the online cash equivalents,
The monitoring system is
Creating a monitoring pattern based on the management policy of the online cash equivalents and transmitting it to another monitoring system, or receiving a monitoring pattern generated based on the management policy of other online cash equivalents from another monitoring system
Anomalous transaction detection system.

Images