KR20200004229A - Method for protecting personal information in block chain environment and apparatus therefor - Google Patents

Abstract

The present invention relates to a method for protecting personal information in a block chain environment and to an apparatus therefor. According to an embodiment of the present invention, the method for protecting personal information in a block chain environment from a personal information management server comprises the steps of: extracting a plurality of protected transactions from the block chain; checking the salt and public data included in each extracted protected transaction; generating secret data for each protected transaction using the salt and personal information of a user; and performing zero-knowledge proof based on the generated secret data for each protected transaction and public data for each protected transaction, and selecting a protected transaction in which the zero-knowledge proof is true among the extracted plurality of protected transactions into a protected transaction associated with the user.

Description

Method for protecting personal information in block chain environment and apparatus therefor}

The present invention relates to a technology for protecting personal information, and more particularly, to a method and apparatus for protecting personal information in a blockchain environment.

Blockchain technology is a form in which a block containing a transaction is stored in a blockchain, and a plurality of nodes share the blockchain with each other. In comparison with a conventional centralized data storage method, the blockchain technology improves security against forgery of data. There is an advantage. Such blockchains are becoming more diverse in form, and researches for storing power data and user information in the blockchain are being conducted. The following patent document discloses a prepaid power sale and power usage method using a blockchain.

However, if the user information is stored in the blockchain, the user information may be exposed to others. In other words, blockchain is a kind of open database that can be accessed by an unspecified number, and there is a problem that an unspecified number can access a blockchain to obtain user information. For example, in the existing blockchain, the virtual currency can also track the transaction of the individual through the transaction query of the block, thereby inferring the individual's balance.

Therefore, there is a demand for a method of improving security of personal information in the blockchain.

Korea Patent Registration No. 10-1848896 (2018.04.09)

The present invention has been proposed to solve the above problems, and provides a personal information protection method and apparatus for allowing personal information to be provided to a user through interworking of a plurality of nodes without storing personal information in the blockchain. There is this.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

A method of protecting personal information in a blockchain environment in a personal information management server according to the first aspect of the present invention for achieving the above object comprises: extracting a plurality of protected transactions from the blockchain; Checking the salt and public data included in each extracted protection transaction; Generating secret data for each protected transaction by using the salt and personal information of a user; And performing zero-knowledge proof based on the generated secret data for each protected transaction and public data for each protected transaction, and converting a protected transaction in which the zero-knowledge proof is true among the extracted plurality of protected transactions into a protected transaction associated with the user. Screening.

The generating of the secret data may include: decrypting the checked salt with a private key and obtaining personal information of the user; And calculating a hash value by hashing the decrypted salt and the personal information, and setting the hash value as the secret data.

The sorting may include generating public data for each protected transaction based on the generated secret data for each protected transaction, comparing the generated public data with public data included in the protected transaction, and comparing the generated public data for each protected transaction. Prove zero knowledge.

The extracting step may include: checking group identification information of the user; And extracting a plurality of protected transactions related to the group identification information of the user from the blockchain.

The checking of the group identification information may include identifying the user's personal information, hashing the symmetric key with the personal information, and extracting group identification information associated with the hashed value from the blockchain.

According to a second aspect of the present invention for achieving the above object, a personal information management device for protecting personal information in a blockchain environment, the blockchain interlocking unit for extracting a plurality of protected transactions in the blockchain; A secret data generator for generating secret data for each protected transaction by using a user's personal information and a salt included in the protected transaction; A zero-knowledge proof unit for checking public data included in each extracted protected transaction and performing zero-knowledge proof based on the generated secret data for each protected transaction and public data for each protected transaction; And an information providing unit for selecting a protection transaction in which zero-knowledge proof is true among the extracted plurality of protection transactions as a protection transaction associated with the user.

According to a third aspect of the present invention, there is provided a method for protecting personal information in a blockchain environment in a management server, the method comprising: generating an arbitrary salt when user data is obtained; Obtaining personal information of the user and generating public data based on the personal information of the user and the salt; Generating a protected transaction comprised of the public data, the salt and the user data; And propagating the protected transaction to the blockchain network, and storing the protected transaction on the blockchain.

The generating of the public data may include hashing the personal information of the user and the salt to generate the public data using the hashed result.

The generating of the public data may generate the public data by applying a result of the hash operation to a public key generation algorithm.

The generating of the protected transaction may encrypt the salt and the public data with a private key, and include the encrypted salt and the public data in the protected transaction.

In the generating of the protected transaction, the group identification information assigned to the user may be checked, and the group identification information may be included in the protected transaction to generate the protected transaction.

The present invention has an advantage of protecting personal privacy by preventing personal information from being exposed to the blockchain by allowing personal information to be obtained through interworking of a plurality of nodes without storing personal information in the blockchain.

In addition, the present invention stores a protected transaction containing encrypted public data, salt values and transactions in the blockchain, and through the zero-knowledge proof of the data stored in the blockchain, by selecting the protected transaction associated with the user to the blockchain There is an advantage to strengthen the security and integrity of the stored data.

In addition, the present invention has the advantage that if the use of the data stored in the blockchain is requested, by discarding the personal information stored in the personal information management server, to stop using the specific blocks stored in the blockchain.

The following drawings attached to this specification are illustrative of the preferred embodiments of the present invention, and together with the specific details for carrying out the invention serve to further understand the technical spirit of the present invention, the present invention described in such drawings It should not be construed as limited to matters.
1 is a view showing a system for protecting personal information in a blockchain environment according to an embodiment of the present invention.
2 is a diagram illustrating a personal information management server according to an embodiment of the present invention.
3 is a flowchart illustrating a method of generating a protection transaction in a personal information management server and storing the same in a blockchain according to an embodiment of the present invention.
4 is a flowchart illustrating a method of querying data stored in a blockchain and providing the data to a client in a personal information management server according to an exemplary embodiment of the present invention.
5 is a flowchart illustrating a method of deleting personal information from a personal information management server according to an embodiment of the present invention.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view showing a system for protecting personal information in a blockchain environment according to an embodiment of the present invention.

As shown in FIG. 1, the personal information protection system according to an embodiment of the present invention includes a personal information management server 100, a database 200, a client 400, and a blockchain network 300. The components communicate with each other via the network 500. Here, the network 500 includes a mobile communication network and a wired communication network.

The database 200 stores personal information of the user. That is, the database 200 stores the user's personal information such as the user's name, ID, phone number, address, and the like for each user. In addition, the database 200 may store group identification information allocated for each user.

The personal information management server 100 is a server owned by a company that holds and manages personal information. When specific data is requested from the client 400, the personal information management server 100 obtains a plurality of protection transactions from the blockchain network 300, The zero-knowledge proof identifies the true protected transactions. In addition, the personal information management server 100 may provide user data included in each of the selected protection transactions to the client 400 or provide information processed based on the user data to the client 400.

The personal information management server 100 may allocate group identification information for each user. The personal information management server 100 manages data in which one or more user identification information and group identification information are mapped. In other words, one or more users may belong to a particular group. Alternatively, the personal information management server 100 may store and manage group identification information allocated for each service type or region in the database 200. That is, group identification information may be assigned and managed according to a user, a service type, and a region. Meanwhile, a plurality of group identification information may be allocated to correspond to one user identification information.

When the personal information management server 100 acquires the user data, the personal information of the user is not stored and a protection transaction including the user data is generated and propagated to the blockchain network 300. Here, the user data is data related to the user, and includes, for example, roaming data, call data, content purchase data, point usage data, location data, and the like. The protection transaction does not record information for identifying a user, such as a telephone number, an international mobile station identity (IMSI), an IP address, a login ID, a social security number, and the like. That is, in the protection transaction according to the present invention, user data excluding personal information of the user is recorded. For example, when roaming data is included in a protected transaction, the protected transaction may exclude identification information of the mobile terminal, and only roaming data including identification information of a home network or visiting network, date and time of data generation, etc. may be recorded. .

In order to generate a protection transaction, the personal information management server 100 first checks the personal information of the user, and then generates an arbitrary salt. Here, the salt is an arbitrary string or a string of numbers or a combination of letters and numbers, and has a one-time property, and is dynamically generated by the personal information management server 100. The personal information management server 100 may generate a one-time salt by using a current date, time, random number, and the like.

In addition, the personal information management server 100 hash-calculates the generated salt and personal information, calculates a hash value, sets the hash value as secret data, and uses the set secret data as a seed for public data. Create At this time, the personal information management server 100 may use the result value derived by applying the secret data as a seed to the public key generation algorithm currently used as the public data. The public data is one-time, and the personal information management server 100 generates public data each time having a different value.

In addition, the personal information management server 100 encrypts the public data and the salt with its private key, and then blocks a group transaction assigned to the user, the encrypted salt and public data, and a protected transaction including the transaction. Store in the chain.

The client 400 is a terminal of a third party vendor or a user terminal for receiving a service, and may query specific data through a smart contract. When the client 400 inquires data of the blockchain, the client 400 may receive data corresponding to a necessary condition. If the group needs personal information, the client requests the personal information to the personal information management server 100 using the client 400, and the personal information management server 100 checks whether the customer agrees to provide the third party personal information. Encrypted data including can be provided to the organization.

The blockchain network 300 is connected to a plurality of nodes and performs verification of a protection transaction. That is, each node belonging to the blockchain network 300 performs a verification on this protection transaction when a protection transaction occurs. At this time, nodes belonging to the blockchain network 300 may perform verification of the authenticity of the electronic signature. In addition, each node included in the blockchain network 300 shares a blockchain that includes a protection transaction and has a connection structure between blocks.

The blocks that make up the blockchain are composed of block headers and protected transactions. The block header contains the previous block hash value, Markle Root, Nonce, and timestamp. The previous block hash represents a hash reference value for the previous block (ie, the parent block) in the blockchain structure. Mercut is the hash to the Merkle tree root. The time stamp records the generation time of the block. The protection transaction is data generated by the personal information management server 100. The personal information of the user is not recorded, and user data such as roaming data, currency data, cryptocurrency transactions, content purchases, location data, and the like are recorded. In the blockchain according to the present invention, the personal information of the user is not stored, but instead, reference data (that is, public data and salt) which can prove that a transaction is data related to a specific user is stored.

Meanwhile, the blockchain may be dualized into a blockchain that stores group identification information and a blockchain that stores data. In this case, the group identification information is not stored in the database 200, and the hash value and the group identification information for the symmetric key of the personal information and the personal information management server 100 may be stored together in the blockchain.

2 is a diagram illustrating a personal information management server according to an embodiment of the present invention.

As shown in FIG. 2, the personal information management server 100 includes a data acquisition unit 110, a secret data generation unit 120, a public data generation unit 130, a personal information management unit 140, and a blockchain interworking unit. 150, the zero-knowledge proof unit 160, and the information providing unit 170, which may be implemented in hardware or software or through a combination of hardware and software.

In addition, the personal information management server 100 may include one or more processors and a memory, and the data obtaining unit 110, the secret data generating unit 120, the public data generating unit 130, and the personal information managing unit 140. The blockchain interworking unit 150, the zero-knowledge proof unit 160, and the information providing unit 170 may be mounted (stored) in the memory in the form of a program executed by the processor.

The data acquisition unit 110 performs a function of acquiring user data stored in the blockchain. The data acquisition unit 110 may acquire user data in cooperation with an external server, or may receive user data from a user terminal.

The secret data generation unit 120 generates secret data that is based on the generation of public data. In detail, the secret data generation unit 120 generates secret data using the personal information of the user stored in the database 200. At this time, the secret data generating unit 120 generates an arbitrary salt, hashes the generated salt and the user's personal information, calculates a hash value, and sets the hash value as secret data, thereby secreting the user's secret data. Can be generated. The secret data generator 120 may generate secret data by hashing all of the user's personal information stored in the database 200 together with the salt, or by hashing a part of the personal information together with the salt. You can create secret data.

The public data generator 130 performs a function of generating public data of a user. In detail, the public data generator 130 generates public data of a user by using the seed as secret data. In this case, the public data generator 130 may use the result value derived by applying the secret data as a seed to the public key generation algorithm as the public data.

The personal information manager 140 performs a function of managing personal information of a user stored in the database 200. That is, the personal information manager 140 stores the personal information of the user who agreed to the personal information management in the database 200, and deletes the personal information of the user who does not agree to the extension of the personal information retention from the database 200.

The blockchain interworking unit 150 interworks with the blockchain network 300 to propagate a protection transaction to the blockchain network 300 or to acquire a plurality of protection transactions corresponding to the group identification information in the blockchain. do. Specifically, the blockchain interworking unit 150 checks the group identification information of the user, generates a protection transaction including the group identification information, the encrypted salt and the public data, and the user data, and transmits the protection transaction to the blockchain network. May propagate to 300. In this case, the blockchain interworking unit 150 may encrypt the salt and the public data by using the private key of the personal information management server 100 as an encryption key, and additionally encrypt the user data to generate the protected transaction. can do. In addition, the blockchain interworking unit 150 may extract a plurality of protected transactions related to the group identification information from the blockchain.

The zero-knowledge proof unit 160 performs zero-knowledge proof for each of the plurality of protected transactions extracted by the blockchain interworking unit 150, and selects a protected transaction related to the user from the plurality of protected transactions. Specifically, the zero-knowledge proof unit 160 decrypts the public data and the salt included in each extracted protection transaction by using the private key of the personal information management server 100, and decrypts the secret data generator 120. It creates secret data for each protected transaction. In addition, the zero-knowledge proof unit 160 substitutes the decrypted public data and the generated secret data into zero-knowledge proof based on the same protected transaction, and determines that the protected transaction is a transaction related to the user if the proof value is true. Otherwise, it determines that the protected transaction is a transaction that is not associated with the user. In this case, the zero-knowledge proof unit 160 generates the public data using the generated secret data as a seed, and checks whether the generated public data and the decrypted public data match with each other to protect the corresponding transaction. Determine that this is a protected transaction (i.e. true) associated with this user.

The information provider 170 selects one or more protected transactions that are determined to be true by the zero-knowledge proof unit 160, and transmits user data included in the selected protected transactions to the client 400 or transmits the user data. After processing, the processed information is transmitted to the client 400.

3 is a flowchart illustrating a method of generating a protection transaction in a personal information management server and storing the same in a blockchain according to an embodiment of the present invention.

Referring to FIG. 3, the data acquisition unit 110 acquires user data to be stored in the blockchain (S301). The data acquisition unit 110 may acquire roaming data or currency data as user data in cooperation with a mobile communication system (not shown in the figure), and encrypt the data in conjunction with a cryptocurrency trading system (not shown in the figure). Currency transaction data may be obtained as user data. As another example, the data acquirer 110 may acquire content purchase data as user data in cooperation with a content streaming system (not shown), or may receive the user data directly from a client 400. It may be.

Then, the secret data generation unit 120 identifies the user by confirming the identification information of the user from the obtained user data or by checking the login ID of the client 400 generating the user data. Subsequently, the secret data generating unit 120 checks the personal information of the identified user in the database 200 and generates secret data using the personal information (S303). At this time, the secret data generating unit 120 generates an arbitrary salt, generates a hash value by hashing the generated salt and the personal information, and sets the hash value as the secret data to generate secret data. can do.

Next, the public data generation unit 130 generates public data using the generated secret data as a seed (S305). In this case, the public data generation unit 130 may apply the secret data as a seed to the public key generation algorithm, derive a result value, and use the result value as the public data.

When the creation of the secret data and the public data is completed, the blockchain interworking unit 150 performs a process for storing a protection transaction in the blockchain. First, the blockchain interworking unit 150 confirms the private key held by the personal information management server 100, and encrypts the public data and the salt using the private key as an encryption key (S307).

Meanwhile, the blockchain interworking unit 150 may remove the personal information from the data when the user data to be stored in the blockchain is included in the user data. In addition, the blockchain interworking unit 150 may additionally encrypt the user data using the private key.

Next, the blockchain interworking unit 150 checks group identification information assigned to the identified user (S309). In this case, the blockchain interworking unit 150 may check the group identification information corresponding to the identification information of the user in the database 200 to confirm the group identification information assigned to the user. On the other hand, when the blockchain is dualized into a blockchain for storing group identification information and a blockchain for storing data, the blockchain interworking unit 150 has its own symmetric key (that is, the symmetric key of the personal information management server) and The hash value is calculated by hashing the personal information of the user, and the group identification information recorded corresponding to the hash value can be extracted from the blockchain.

Subsequently, the blockchain interworking unit 150 generates a protected transaction including the encrypted salt, public data, group identification information, and user data (S311). The blockchain interworking unit 150 propagates the electronic signature signed with the private key of the personal information management server 100 and the generated protection transaction to the blockchain network 300 so that the new block including the protection transaction is blocked. To be stored in the chain (S313). Each node of the blockchain network 300 having received the protected transaction and the electronic signature verifies the authenticity of the electronic signature and, upon successful verification, creates a new block including the protected transaction and converts the new block into an existing block. By connecting, the protection transaction is stored in the blockchain.

According to this procedure, the blockchain stores a protected transaction that excludes the user's personal information. Although the user data is recorded in the protected transaction, it is not possible to specify whether the user data recorded in the protected transaction is data related to which user only by the data of the blockchain itself.

4 is a flowchart illustrating a method of inquiring data stored in a blockchain from a personal information management server and providing the same to a client according to an embodiment of the present invention.

Referring to FIG. 4, the client 400 transmits a data request message related to a protection transaction of the user to the personal information management server 100. In this case, the client 400 may transmit user identification information to the personal information management server 100.

Then, the data acquisition unit 110 of the personal information management server 100 receives the data request message from the client 400 (S401), the blockchain interworking unit 150 is the user identification included in the data request message The group identification information of the user is checked based on the information (S403). As an embodiment, the blockchain interworking unit 150 may check group identification information assigned to the user by checking group identification information corresponding to the user identification information in the database 200. As another embodiment, when the blockchain is dualized into a blockchain for storing group identification information and a blockchain for storing data, the blockchain interworking unit 150 stores a user's personal information based on the user identification information. 200), hashing the symmetric key (i.e., the symmetric key of the personal information management server) and the personal information of the user to calculate a hash value, and block the group identification information recorded corresponding to the hash value. By extracting from the chain, the user's group identification information can be confirmed.

Next, the blockchain interworking unit 150 extracts a plurality of protected transactions including the group identification information from the blockchain (S405). In this case, the blockchain interworking unit 150 transmits a data request message corresponding to the group identification information to the blockchain network 300, and transmits a plurality of protection transactions for recording the group identification information from the blockchain network 300. Can be received.

When the blockchain interworking unit 150 acquires a plurality of protection transactions related to the group identification information, the zero-knowledge proof unit 160 uses the private key of the personal information management server 100 to perform each protection transaction. The included public data and the salt are decoded (S407). In this case, when the user data included in the protection transaction is encrypted, the zero knowledge authentication unit 160 may decrypt the user data using the private key.

Next, the zero knowledge proof unit 160 requests the secret data generation unit 120 to generate the secret data, and the secret data generation unit 120 based on the user identification information received from the client 400, the database ( Check the user's personal information stored in 200). The secret data generating unit 120 calculates hash values of the checked personal information and the decrypted salt and generates the hash values as secret data, thereby generating secret data for each protected transaction obtained in the blockchain ( S409).

Next, the zero knowledge proof unit 160 determines whether each protected transaction is data related to a user based on the public data decrypted in each protected transaction and the secret data generated based on each protected transaction. Proof of knowledge is performed (S411). That is, if the proof value is true by substituting zero knowledge proof for the secret data generated based on the open data decrypted in the protected transaction and the salt decrypted in the protected transaction, the protected transaction is a corresponding user. A zero knowledge proof for each protected transaction is performed by determining that the transaction associated with is determined to be a transaction that is not associated with the user. In this case, the zero-knowledge proof unit 160 generates the public data using the generated secret data as a seed, and checks whether the generated public data and the decrypted public data match with each other to protect the corresponding transaction. Determine that this is a protected transaction (i.e. true) associated with this user.

When each protection transaction is determined to be true or false, the information providing unit 170 selects one or more protection transactions that become true from the plurality of protection transactions extracted from the blockchain (S413). The information providing unit 170 processes user data included in the selected protected transaction to generate information (eg, roaming list, call list, etc.) (S415). Next, the information providing unit 170 transmits the processed information to the client 400 (S417). In some embodiments, the information provider 170 may transmit one or more user data included in the selected protected transaction to the client 400 without processing the selected protected transaction.

As described above, since the blockchain stores public data that is disposable and non-personal information and corresponding data when storing data, it is not possible to infer whose data is a third party. In addition, the personal information management server 100 may determine and use only the protection transaction that becomes true through zero-knowledge proof as the transaction of the corresponding user.

5 is a flowchart illustrating a method of deleting personal information from a personal information management server according to an embodiment of the present invention.

Referring to FIG. 5, the personal information manager 140 of the personal information management server 100 checks a personal information holding period for each user, and confirms a user whose personal information holding period is scheduled to expire (S501).

Subsequently, the personal information manager 140 notifies the user who is scheduled to expire the personal information through mail or text (S503), and receives a response message from the user.

Next, if the user agrees to extend the retention period, the personal information manager 140 continuously stores the personal information of the user in the database 200 (S505 and S507). In this case, the personal information manager 140 may allocate new group identification information to the user who agrees to extend the retention period of the personal information, and store the allocated group identification information in the database 200. In this case, the group identification information of the user may include two pieces of old group identification information and new group identification information. Accordingly, when the blockchain interworking unit 150 inquires data in the blockchain, each of the plurality of group identification information may be used. The protection transaction related to the transaction may be obtained from the blockchain, or the protection transaction related to the past group identification information or the current group identification information may be extracted from the blockchain according to the data search range.

On the other hand, if the user does not agree to extend the retention period, the personal information management unit 140 discards the user's personal information by deleting the user's personal information from the database 200 (S509). Accordingly, the personal information of the user is not recorded in the blockchain at all, and as the personal information of the user is deleted from the database 200, it is impossible to generate accurate secret data. It is not possible to specify whether or not it is user data. In addition, since the user does not hold the private key of the personal information management server 100, the user cannot use the data stored in the block chain without decrypting the salt encrypted and stored in the block chain. That is, the data of the blockchain stored as public data for proof of existing knowledge can not be solved without the private key of the personal information management server 100 and the personal information of the corresponding customer, so that the data of the blockchain cannot be used normally by anyone. .

While this specification contains many features, such features should not be construed as limiting the scope of the invention or the claims. Also, the features described in the individual embodiments herein can be implemented in combination in a single embodiment. Conversely, various features described in a single embodiment herein can be implemented individually in various embodiments or in combination as appropriate.

Although the operations have been described in a particular order in the drawings, they should not be understood as being performed in a particular order as shown, or in a sequence of successive orders, or all of the described actions being performed to achieve a desired result. . Multitasking and parallel processing may be advantageous in certain circumstances. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The program components and systems described above may generally be packaged in a single software product or multiple software products.

The method of the present invention as described above may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

100: personal information management server 200: database
300: blockchain network 400: client
500: network 110: data acquisition unit
120: secret data generation unit 130: public data generation unit
140: personal information management unit 150: blockchain interworking unit
160: English knowledge proof unit 170: Cheonbo provider

Claims (18)

As a method of protecting personal information in a blockchain environment in a personal information management server,
Extracting a plurality of protected transactions from the blockchain;
Checking the salt and public data included in each extracted protection transaction;
Generating secret data for each protected transaction using the salt and personal information of a user; And
The zero-knowledge proof is performed based on the generated secret data for each protected transaction and the open data for each protected transaction, and a protected transaction associated with the user is selected as a protected transaction related to the user from among the extracted plurality of protected transactions. Personal information protection method comprising the. The method of claim 1,
Generating the secret data,
Decrypting the checked salt with a private key and obtaining personal information of the user; And
Hashing the decoded salt and the personal information to calculate a hash value and setting the hash value as the secret data. The method of claim 2,
The sorting step,
Producing zero-knowledge proof for each protected transaction by generating public data for each protected transaction based on the generated secret data for each protected transaction, comparing the generated public data with the public data included in the protected transaction. Personal information protection method characterized in that. The method of claim 1,
After the screening step,
Identifying the user data included in the selected protection transaction, and transmitting the user data to the client. The method of claim 1,
After the screening step,
Identifying user data included in the selected protection transaction, processing the user data, and transmitting the processed user data to the client; The method of claim 1,
The extracting step,
Checking group identification information of the user; And
Extracting a plurality of protected transactions related to the group identification information of the user from the blockchain. The method of claim 6,
Confirming the group identification information,
Verifying the user's personal information, hashing the symmetric key with the personal information, and extracting group identification information related to the hashed hash value from the blockchain. In the personal information management device that protects personal information in a blockchain environment,
A blockchain interworking unit extracting a plurality of protected transactions from the blockchain;
A secret data generator for generating secret data for each protected transaction by using a user's personal information and a salt included in the protected transaction;
A zero-knowledge proof unit that checks public data included in each extracted protection transaction and performs zero-knowledge proof based on the generated secret data for each protection transaction and public data for each protection transaction; And
And an information providing unit for selecting a protection transaction in which zero-knowledge proof is true among the extracted plurality of protection transactions as a protection transaction associated with the user. The method of claim 8,
The zero knowledge authentication unit decrypts the salt with a private key,
And the secret data generating unit calculates a hash value by hashing the decoded salt and the personal information, and sets the hash value as the secret data. The method of claim 9,
The zero knowledge proof unit,
The public data for each protected transaction is generated based on the secret data for each protected transaction, and the zero-knowledge proof for each protected transaction is performed by comparing the generated open data with the matched public data included in the protected transaction. Personal information management device. The method of claim 8,
The information providing unit,
Personal information management device, characterized in that to check the user data included in the selected protection transaction, to provide information to the client based on the user data. The method of claim 8,
The blockchain interworking unit,
Confirming the group identification information of the user, and extracting a plurality of protected transactions related to the group identification information of the user from the blockchain. The method of claim 8,
And a personal information manager configured to store or delete the user's personal information in a database based on a user's consent. As a method of protecting personal information in a blockchain environment on a management server,
Generating a salt if user data is obtained;
Obtaining personal information of the user and generating public data based on the personal information of the user and the salt;
Generating a protected transaction comprised of the public data, the salt and the user data; And
Propagating the protected transaction to a blockchain network, and storing the protected transaction on a blockchain. The method of claim 14,
Generating the public data,
And hashing the personal information of the user and the salt and generating the public data using the hashed result. The method of claim 15,
Generating the public data,
And applying the result of the hash operation to a public key generation algorithm to generate the public data. The method of claim 14,
Generating the protected transaction,
And encrypting the salt and the public data with a private key, and including the encrypted salt and the public data in the protected transaction. The method of claim 14,
Generating the protected transaction,
Confirming the group identification information assigned to the user and including the group identification information in the protection transaction to generate the protection transaction.

Images