KR20190120559A - System and Method for Security Provisioning based on Blockchain - Google Patents

Abstract

The present invention relates to an apparatus and method for distributing security credentials based on a blockchain to securely distribute security credentials such as secret keys and passwords through a series of blockchain based programs. According to the present invention, the apparatus for distributing security credentials comprises: a security credential management unit for creating, storing, and removing security credentials; a security credential distribution unit for transmitting and receiving the security credentials; a security credential verification unit which functions to sign, verify, and destroy the security credential; an entity management unit which functions to create, remove, and update a credential entity; and a distributed ledger management unit for managing the security credentials and distributed programs through a distributed ledger.

Description

System and Method for Security Provisioning based on Blockchain}

The present invention relates to a system and method for distributing security credentials, and more particularly, to a blockchain-based security credential that enables secure distribution of security credentials such as secret keys and passwords through a series of blockchain-based programs. An apparatus and method for distribution.

Blockchain is a constantly growing list of data records as a form of distributed database. The data record is called a block and is composed of a block header, a timestamp, transaction data, and the like. Blocks are securely connected through cryptographic techniques and are designed to prevent arbitrary manipulation by the operators of distributed nodes.

The smart contract is a concept proposed by Nick Szabo in 1996 and includes a protocol for recording a series of actions in digital form and performing them.

In a blockchain, a smart contract is a method of executing code and sending events by calling the smart contract's application programming interface (API) through the smart contract address registered in the block. Transactions occur through the API.

Smart contracts can be any kind of computer program, as well as general calculations that occur in blockchains and distributed ledgers, and with detailed access control functions that can only be accessed by authorized users with the help of obfuscation and hardware security modules. Equipped with.

Security credentials are elements used for identification and authentication of devices, services, etc., and may be symmetric keys or passwords.

In general, in the IoT environment, security credentials are injected in advance during manufacturing and installation of devices and services, or remotely deployed using a reliable centralized server.

For example, the IoT standard oneM2M distributes security credentials between Enrolee and Enrolement Target using MEF (M2M Enrolment Function), a trusted server, and this is called Remote Security Provisioning Framework.

However, these techniques for distributing security credentials of the prior art are vulnerable to overall network paralysis due to central credential distribution server failure, and are vulnerable to hacking of servers or gateways and key takeover through DDoS attacks, thus making it robust decentralization and decentralization. Development of new technologies for distributing secure credentials is required.

Republic of Korea Patent Publication No. 10-2018-0014534 Republic of Korea Patent No. 10-1780636 Republic of Korea Patent No. 10-1799343

The present invention is to solve such a problem of the security credential distribution technology of the prior art, a blockchain-based blockchain that allows secure distribution of security credentials such as secret keys, passwords through a series of blockchain-based programs Its purpose is to provide an apparatus and method for distributing security credentials.

The present invention is based on the decentralized, decentralized blockchain based on robust network distribution due to central credential distribution server failure, hacking on server or gateway, and key takeover through DDoS attack by distributing security credentials through distributed ledger. The purpose of the present invention is to provide a device and method for distributing security credentials.

An object of the present invention is to provide an apparatus and method for distributing a security credential based on a blockchain, which enables to distribute security credibility with excellent security, scalability, and reliability in a decentralized and decentralized manner. There is this.

The objects of the present invention are not limited to the above-mentioned objects, and other objects that are not mentioned will be clearly understood by those skilled in the art from the following description.

Apparatus for distributing blockchain-based security credentials according to the present invention for achieving the above object is a security credential management unit for the function of generating, storing, and removing security credentials; Security credential distribution unit; Security credential verification unit that functions to sign, verify and destroy security credentials; Credential management unit that functions to create, remove, and update credential objects; Security credential management through distributed ledger, And a distributed ledger management unit for managing a distribution program.

The security credential management and distribution may be based on a blockchain in which blocks including block headers, timestamps, and transaction data are connected.

The security credential manager may be configured to generate a security credential that does not overlap with an existing security credential according to a request for generating a security credential, and to set an expiration date of the security credential and an excess of verification times. Security credential removal unit that performs security credential removal according to the condition, request for removal of security credential, and security credential removal unit that is generated through security credential generation unit or received through security credential distribution unit. Security credential storage unit for storing security credentials, security credential distribution unit, security credential verification unit, security credential distribution interlocking unit for interworking with the object management unit, security credential verification interlocking unit, object management interworking unit It is characterized by including.

The security credential is created through interworking with the object management interlocking unit. If the removal of the security credential occurs, the credential object is removed through interworking with the object management interlocking unit. Credentials destruction through the name breaker is characterized in that included in the list of destruction.

And the security credential distribution unit, so that only the authorized subject to the security credential has access rights, when the subject having access to a specific security credential accesses the security credential to the subject credential Security credential transmitter for transmitting the name, Security credential receiver for receiving security credential information by an object having authority to create, store and access security credential, Security credential manager, Security credential verifier Security credential management linkage for interworking with the management unit, security credentials verification interlocking unit, characterized in that it comprises an object management interlocking unit.

The security credential verification unit may include a security credential signature unit for generating a signature that guarantees the reliability of the security credential through a cryptographic algorithm, and validates a signature connected to the security credential. Security credential signature verification unit that outputs the result of invalid signature, security credential destruction unit that destroys and removes security credential upon request, manages destroyed credential and prevents reuse, and security credential management unit , A security credential distribution unit, a security credential management linkage unit for interworking with the object management unit, a security credential distribution linkage unit, and an object management linkage unit.

The destroyed security credential is managed to prevent reuse, and when the security credential signature and verification occurs, the security credential information is updated through the security credential management linkage and the object management linkage. The signed credentials are distributed through the interlocking unit or provide a verification result for the security credentials.

And the object management unit, a credential object generation unit for generating an object according to the security credential generation, a credential object removal unit for removing the credential object according to the removal of security credentials, revocation, and a target having administrator rights , Modifying, updating, modifying, and updating the information of the security credential by the subject who generated the security credential, the subject authorized to modify the subject by generating the security credential, and the subject of the distribution of the security credential that satisfies a specific condition. Credential object updater for storing security credentials, security credential management unit, security credential distribution unit, security credential management linkage for interworking with security credential verification unit, security credential distribution linking unit, security credential It characterized in that it comprises a name verification interlock.

The credential entity generating unit may generate a new credential entity when a security credential generation request from the security credential management unit and a new security credential are received from the security credential distribution unit.

A method for distributing a blockchain-based security credential according to the present invention for achieving another object includes a security credential management step of creating, removing, and storing a security credential; deploying a security credential for transmitting and receiving the security credential. Security Credential Verification step for signing, verifying, and destroying Security Credentials; Managing Objects for creating, removing, and updating Security Credentials; Distributed Ledger Management for performing distributed credential management and program management. And, wherein the management and distribution of the security credentials is based on a blockchain to which blocks including block headers, timestamps, and transaction data are connected. It is done.

The security credential management step may include generating a security credential that is not duplicated with a previously existing security credential according to a request for generating a security credential; Removing the security credential according to the request of the object having the authority to remove the security credential, and removing the security credential according to the request of the object having the authority to remove the security credential. Characterized in that it comprises a step.

The security credential distribution step may include delivering a security credential to the subject when the subject having access to a specific security credential approaches the security credential, and the authority to create, store, and access the credential. Receiving the security credential information by a subject having a.

The security credential verification step includes generating a signature that can guarantee the reliability of the security credential through a cryptographic algorithm, validating the signature linked to the security credential, and verifying that the signature is valid or invalid. Outputting a signature recognition result, and discarding the security credential upon request, managing the destroyed security credential, and preventing reuse.

The object management step includes the steps of creating an object according to the creation of a security credential, removing the credential object according to the removal of the security credential, and discarding the credential object. Modifying and updating the information of the security credential by the subject, the subject authorized to modify the subject by generating the security credential, and the subject of the security credential that satisfies a specific condition; And storing the same.

The distributed ledger management step may include managing security credential information, managing security credential distribution target, managing security credential access right, and managing programs for distributing security credential through distributed ledger.

Such an apparatus and method for distributing security credentials based on blockchain according to the present invention have the following effects.

First, it securely distributes security credentials such as secret keys and passwords through a series of blockchain-based programs.

Second, by distributing security credentials through distributed ledgers, it is possible to provide services that are robust against security weaknesses such as centralized security server failure, total network paralysis due to DDoS attacks, and key takeover through central server hacking.

Third, it is possible to distribute security credentials with excellent security, scalability, and reliability in a decentralized and decentralized manner to various services and devices.

1 is a block diagram of an apparatus for distributing security credentials based on blockchain according to the present invention;
2 is a detailed configuration of the security credential management unit according to the present invention
3 is a detailed configuration of the security credential distribution unit according to the present invention
4 is a detailed configuration of the security credential verification unit according to the present invention
5 is a detailed configuration diagram of the object management unit according to the present invention
6 is a flowchart illustrating a method for distributing security credentials based on blockchain according to the present invention.
7A to 7D are flowcharts illustrating a detailed method for distributing security credentials based on a blockchain according to the present invention.

Hereinafter, a preferred embodiment of an apparatus and method for distributing blockchain based security credentials according to the present invention will be described in detail.

Features and advantages of the apparatus and method for blockchain-based security credential distribution according to the present invention will become apparent from the following detailed description of each embodiment.

1 is a block diagram of an apparatus for distributing security credentials based on a blockchain according to the present invention.

Apparatus and method for distributing blockchain-based security credentials in accordance with the present invention relate to the distribution of security credentials based on distributed ledger, and securely secures security credentials such as secret keys and passwords through a series of programs based on distributed ledger. It is intended to be distributed.

The apparatus 100 for distributing a blockchain-based security credential according to the present invention for this purpose is, as shown in FIG. 1, the security credential management unit 200, the security credential distribution unit 300, and the security credential verification unit ( 400, the entity manager 500, and the distributed ledger manager 600.

The apparatus 100 for distributing security credentials based on the blockchain according to the present invention facilitates distributing security credentials for various services and terminals by using distributed ledger technology having decentralized and decentralized features. will be.

Specifically, the security credential management unit 200 that functions to generate, store, and remove the security credential, the security credential distribution unit 300 that functions to send and receive the security credential, and the signature and signature of the security credential. Security credential verification unit 400 that functions to verify and destroy, a credential object management unit 500 that functions to create, remove, update, and distributed ledger management unit 600 for distributed ledger management do.

Here, the distributed ledger management unit 600 provides functions such as security credential management and distribution program management through the distributed ledger.

The detailed configuration of the security credential management unit 200 is as follows.

2 is a detailed configuration diagram of a security credential management unit according to the present invention.

The security credential management unit 200 provides functions of generating, removing, and storing security credentials, and includes a security credential generation unit 201, a security credential removal unit 202, a security credential storage unit 203, and a security credential. Name distribution interlocking unit 310, security credential verification interlocking unit 410, and object management interlocking unit 510.

Specifically, as shown in FIG. 2, the security credential management unit 200 generates a security credential for generating a security credential that does not overlap with an existing security credential through a cryptographic algorithm according to the security credential generation request. A security credential system for performing the removal of a security credential according to a request of an object having the authority to remove the security credential according to a set condition such as the expiration of the validity of the security credential and exceeding the verification number. Security credential storage unit 203 for storing the security credential generated by the rejection 202, the security credential generator 201 or received through the security credential distribution unit 300, and security credential distribution. Part 300, security credential verification unit 400, security credential distribution interlocking unit 310 for interworking with the object management unit 500, security credential verification interlocking unit 410, object management connection And a unit (510).

The security credential generator 201 provides a function of generating a security credential such as a secret key and a password. The security credential generates an object through interworking with the object management linkage unit 510.

The generated security credentials are managed by the security credential storage unit 203 and are removed by the security credential removal unit 202 when the validity period expires or needs to be removed by request.

When the security credential removal occurs, the credential object is removed by interworking with the object management interworking unit 510, and credential destruction is performed through the security credential verification interlocking unit 410 and the security credential destruction unit 403. Are included in the destruction list.

In addition, when security credential distribution interworking is required, the security credential in the security credential storage unit 203 is transmitted to the distribution interlocking unit 310, and a signature for the security credential existing in the security credential storage unit 203 is provided. When verification is required, the verification is performed through interworking with the security credential verification interlocking unit 410.

The detailed configuration of the security credential distribution unit 300 is as follows.

3 is a detailed configuration of the security credential distribution unit according to the present invention.

Security credential distribution unit 300 provides a transmission and reception function for the distribution of security credentials, security credential transmitter 301, security credential receiver 302, security credential management interworking unit 210, security The credential verification interworking unit 410 and the object management interworking unit 510 are included.

Specifically, as shown in FIG. 3, the security credential distribution unit 300 allows only a target authorized for the security credential to have access, and a target having access to a specific security credential corresponds to the corresponding security credential. Security credential transmitter 301 that securely delivers security credentials while ensuring confidentiality and integrity to the subject when accessing the subject, and ensuring confidentiality and integrity by the subject having authority to create, store, and access the security credentials. Security credential management unit for receiving secure credential information 302, security credential management unit 200, security credential verification unit 400, security credential management interworking unit for interworking with the object management unit 500 ( 210, a security credential verification linkage unit 410, and an object management linkage unit 510.

The security credential transmitter 301 and the security credential receiver 302 may receive the security credential information to be transmitted through the security credential management interworking unit 210 or receive the received security credential information from the security credential manager 200. To pass.

In addition, the signed security credential information or the security credential verification result may be transmitted through interworking with the security credential verification linkage unit 410.

Then, the object management for the security credentials transmitted and received through the interworking with the object management interworking unit 510 is performed.

The detailed configuration of the security credential verification unit 400 is as follows.

4 is a detailed configuration diagram of a security credential verification unit according to the present invention.

The security credential verification unit 400 provides security credential signing, verification and destruction functions, and includes a security credential signing unit 401, a security credential signature verification unit 402, a security credential destruction unit 403, and a security credential. Name management interlocking unit 210, security credential distribution interlocking unit 310, and object management interlocking unit 510.

Specifically, as shown in Figure 4, the security credential verification unit 400 is connected to the security credential signing unit 401 for generating a signature that can ensure the reliability of the security credentials through a cryptographic algorithm, and the security credentials The security credential signature verification unit 402 outputs the result of valid signature or invalid signature by validating a valid signature, and manages security credentials that are destroyed, removed, and destroyed upon request. Security credential destruction unit 403 to prevent reuse, security credential management unit 200, security credential distribution unit 300, security credential management interlocking unit 210 for interworking with the object management unit 500, Security credential distribution interlocking unit 310, and object management interlocking unit 510.

The security credential signing unit 401 may provide a signature function for providing a validity of the security credential, and may verify the signed security credential through the security credential verification unit 402.

The security credential may be destroyed through the security credential destruction unit 403 according to the condition.

Destroyed security credentials are cataloged to prevent reuse.

When the security credential signature and verification occurs, the security credential information is updated through the security credential management interlocking unit 210 and the object management interlocking unit 510 and is signed by the security credential distribution interlocking unit 310 as requested. Licensed credentials can be distributed or provide verification results for security credentials.

The detailed configuration of the object management unit 500 is as follows.

5 is a detailed configuration diagram of the entity management unit according to the present invention.

The object manager 500 provides a function of creating, removing, and updating a security credential object, and includes a credential object generating unit 501, a credential object removing unit 502, a credential object updating unit 503, and a security credential. The management interlock unit 210, the security credential distribution interlocking unit 310, and the security credential verification interlocking unit 410 are included.

Specifically, as shown in Figure 5, the object management unit 500 is a credential object generating unit 501 for generating an object according to the security credential generation, and a credential for removing the credential object according to the removal of security credentials, revocation Command object removal unit 502, a target having administrator rights, a target for generating a security credential, a target authorized for modification by a target for generating a security credential, and a target for distributing a security credential that satisfies a specific condition. The credential object updating unit 503, the security credential management unit 200, and the security credential distribution unit 300 to modify, update, modify, and update the security credential information by storing the updated security credential while ensuring integrity. , A security credential management linking unit 210, a security credential distribution linking unit 310, and a security credential verification linking unit 410 for interworking with the security credential verification unit 400.

The credential object generation unit 501 generates a new credential object when a security credential generation request of the security credential management unit 200 and a new security credential are received from the security credential distribution unit 300.

The credential object removing unit 502 removes the credential object according to the security credential removal request of the security credential management unit 200 and the discard request of the security credential verification unit 400.

The credential entity update unit 503 performs an entity information update function according to generation, removal, and information change of a security credential.

The security credential distribution operation of the apparatus for distributing the security credential based on the blockchain according to the present invention having the above configuration will be described in detail as follows.

6 is a flowchart illustrating a method for distributing security credentials based on a blockchain according to the present invention, and FIGS. 7A to 7D are flowcharts illustrating a detailed method for distributing security credentials based on a blockchain according to the present invention. to be.

In the blockchain-based security credential distribution method according to the present invention, as shown in Figure 6, the security credential management step (S601) that functions to create, remove, store the security credential, and the security credential transmission, reception Security credential distribution step (S602) that functions as, the security credential verification step (S603) functions as a signature, verification, and destruction of the security credentials, and an object that functions to create, remove, and update the security credential object. The management step (S604), and distributed ledger management step (S605) for performing the credential management, program management through the distributed ledger.

Specifically, in operation S601, the security credential management step generates a security credential that is not duplicated with an existing security credential through a cryptographic algorithm according to the security credential generation request.

Subsequently, the security credential is removed according to a set condition such as expiration of the validity period of the security credential and the number of times of verification.

The security credential is generated through the security credential generation unit 201 or stored through the security credential distribution unit 300.

The security credential distribution step (S602) securely delivers the security credentials while ensuring confidentiality and integrity to the subject when the subject having access to the specific security credentials approaches the corresponding security credentials, as shown in FIG. 7B. (S711)

Subsequently, the security credential information is safely received while ensuring confidentiality and integrity by a subject having authority to generate, store, and access the security credential (S712).

The security credential verification step (S603) generates a signature that can guarantee the reliability of the security credential through a cryptographic algorithm, as shown in FIG. 7C.

Subsequently, the signature connected to the security credential is validated to output a result indicating whether the signature is a valid signature or an invalid signature (S722).

In response to the request, the security credential is destroyed, removed, managed security credentials are destroyed and prevent reuse.

In the object management step (S604), as shown in Figure 7d, generates the object according to the security credential generation (S731).

Removes credential object due to security credential removal and revocation (S732).

Then, the information of the security credential is modified by the object having administrator authority, the object that generated the security credential, the object authorized to modify by the object that generated the security credential, and the target of distributing the security credential that satisfies a specific condition. , Update. (S733)

The modified and updated security credentials are stored while ensuring integrity (S734).

In addition, the distributed ledger management step (S605) includes functions of managing security credentials information, managing security credential distribution targets, managing security credential access rights, and managing programs for distributing security credentials through distributed ledgers.

The apparatus and method for distributing blockchain-based security credentials according to the present invention described above are to securely distribute security credentials such as secret keys and passwords through a series of blockchain-based programs. Centralized Credential Distribution by Distributing Security Credentials Decentralized, decentralized blockchain-based security credentials for robust network failures due to server failures, hacking to servers or gateways, and key takeovers via DDoS attacks To make it possible.

It will be understood that the present invention is implemented in a modified form without departing from the essential features of the present invention as described above.

Therefore, the described embodiments should be considered in descriptive sense only and not for purposes of limitation, and the scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the equivalent scope are included in the present invention. It should be interpreted.

200. Security Credential Manager
300. Security Credential Distribution
400. Security credential verification unit
500. Object Management Department
600. Distributed Ledger Management Department

Claims (15)

A security credential management unit for creating, storing, and removing security credentials;
Security credential distribution unit for transmitting and receiving security credentials;
A security credential verification unit that functions to sign, verify, and destroy the security credential;
An entity management unit that functions to create, remove, and update a credential entity;
Security credential management through a distributed ledger, distributed ledger management unit for managing the distribution program; Apparatus for the distribution of security credentials based on blockchain, comprising a. The method of claim 1, wherein security credential management and distribution is
Apparatus for distributing security credentials based on a blockchain, characterized in that the blockchain includes a block header, a timestamp, and transaction data, based on a blockchain connected to the blockchain. . The method of claim 1, wherein the security credential management unit,
A security credential generator for generating a security credential that does not overlap with an existing security credential upon request for generating a security credential;
A security credential removal unit that performs security credential removal according to a set condition regarding expiration of validity of security credential, excess number of verifications, and removal of a security credential according to a request of an object having the authority to remove a security credential;
A security credential storage unit for storing the security credentials generated by the security credential generator or received through the security credential distribution unit;
Blockchain-based security credentials, including security credential distribution unit, security credential verification unit, security credential distribution interlocking unit for interworking with the object management unit, security credential verification interlocking unit, object management interlocking unit Device for deployment. The method of claim 3, wherein the security credential is an object is created through interworking with the object management linkage,
When the removal of security credentials occurs, the removal of the credential object is performed by interworking with the object management interlocking unit, and the credential destruction is performed through the security credential verification interlocking unit and the security credential destruction unit, and is included in the destruction list. Device for distributing security credentials based on blockchain. The method of claim 1, wherein the security credential distribution unit,
Security credential transmitter that ensures that only authorized subjects have access to security credentials, and delivers the security credentials to the subjects when the subjects with access to specific security credentials have access to the security credentials. Wow,
A security credential receiver for receiving security credential information by an object having authority to generate, store, and access the security credential;
Distribution of blockchain-based security credentials, comprising a security credential management unit, a security credential verification unit, a security credential management linkage unit for interworking with the object management unit, a security credential verification linkage unit, and an object management linkage unit. Device for. The method of claim 1, wherein the security credential verification unit,
A security credential signature unit for generating a signature that guarantees the reliability of the security credentials through a cryptographic algorithm,
A security credential signature verification unit for validating a signature connected to the security credential and outputting a result indicating whether the signature is valid or invalid;
A security credential destruction unit that destroys and removes security credential upon request, manages the destroyed credential, and prevents reuse;
Security credential management based on blockchain, comprising security credential management unit, security credential distribution unit, security credential management linking unit for interworking with object management unit, security credential distribution linking unit, and object management linking unit Device for. 7. The method of claim 6, wherein the destroyed security credentials are cataloged to prevent reuse.
When the security credential signature and verification occurs, the security credential information is updated through the security credential management interlocking unit and the object management interlocking unit. Upon request, the signed credential is distributed through the security credential distribution interlocking unit or the security credential is verified. Device for distributing security credentials based on blockchain, which provides results. The method of claim 1, wherein the individual management unit,
A credential object generating unit for generating an object according to security credential generation;
A credential object removing unit which performs credential object removal and removal of a credential object;
Modify and update the information of the security credential by the object having administrator privileges, the object that generated the security credential, the object authorized to modify by the security credential generating object, and the target of distributing the security credential that satisfies certain conditions. A credential object updating unit for storing and modifying and updating security credentials;
Blockchain based on the security credential management unit, security credential distribution unit, security credential management interlocking unit for interworking with security credential verification unit, security credential distribution interlocking unit, security credential verification interlocking unit Device for distribution of security credentials. The method of claim 8, wherein the credential entity generating unit,
Apparatus for block chain based security credential distribution, characterized in that for generating a credential creation request of the security credential management unit and a new credential received from the security credential distribution unit. Security credential management step of creating, removing, and storing security credentials;
Security credential distribution step of transmitting and receiving security credentials;
Security credential verification step of signing, verifying, and destroying the security credential;
An entity management step of creating, removing, and updating a security credential entity;
Includes distributed ledger management step of performing credential management, program management through a distributed ledger,
The management and distribution of security credentials is based on a blockchain, which is based on a blockchain in which blocks including block headers, timestamps, and transaction data are connected. Method for distributing security credentials. The method of claim 10, wherein the security credential management step,
Generating a security credential that does not overlap with a previously existing security credential according to a request for generating a security credential;
Removing the security credential according to a set condition such as expiration of the validity of the security credential and exceeding the number of verifications;
And storing the security credentials generated by the security credential generation unit or received through the security credential distribution unit. The method of claim 10, wherein the security credential distribution step,
Delivering a security credential to the subject when the subject has access to that security credential;
Receiving security credential information by a subject having authority to create, store, and access security credentials. The method of claim 10, wherein the verifying security credentials comprises:
Generating a signature that ensures the authenticity of security credentials through a cryptographic algorithm,
Validating the signature associated with the security credential and outputting a valid or invalid signature result;
A method for distributing blockchain based security credentials, the method comprising destroying and removing the security credentials upon request, managing the destroyed security credentials, and preventing reuse. The method according to claim 10, wherein the individual management step,
Creating an object according to the generation of security credentials;
Performing the removal of a security credential and the removal of a credential object upon revocation;
Modify and update the information of the security credential by the object having administrator privileges, the object that generated the security credential, the object authorized to modify by the security credential generating object, and the target of distributing the security credential that satisfies certain conditions. To do that,
A method for distributing blockchain based security credentials, the method comprising storing modified and updated security credentials. The method of claim 10, wherein the distributed ledger management step,
Decentralized ledger for distributed blockchain-based security credential management, which includes security credential information management, security credential distribution target management, security credential access authority management, and program management for security credential distribution. Way.

Images