KR20220050606A - System and Method for Intelligent mediating based enhanced smart contract for privacy protection - Google Patents

Abstract

The present invention relates to an apparatus and a method for intelligent mediation based on an enhanced smart contract for personal information protection, which can prevent misuse and abuse of personal information and autonomously manage and utilize the personal information from the perspective of users and data. For the smart contract-based intelligent mediation, the apparatus comprises: a presentation layer which receives or outputs data from the user as a final contact point with the user; an intelligent mediator which performs transaction mediation, user verification, and history management, classifies and manages the users, groups, and validator nodes by authority, and configures a smart contract to manage the use of the personal information by managing role-based control and transaction records which implement contracts; a business object with logic defining access to and management of business data; a data analysis layer for data analysis; and a data source for storing and providing data.

Description

System and Method for Intelligent mediating based enhanced smart contract for privacy protection

The present invention relates to intelligent brokerage, specifically to prevent misuse of personal information, and to protect personal information that enables autonomous management and utilization of personal information from the user and data point of view. It relates to an apparatus and method.

With the development of IT technology, users are actively participating in content creation and sharing, providing more diverse and extensive information services.

The recent evolution to user-customized information services is increasing the demand for personal information utilization.

However, the use of personal information increases the efficiency and convenience of service provision, while at the same time increasing social problems and security threats. To solve this problem, a blockchain-based security technology can be considered.

Blockchain-based security technology encrypts information and stores it distributedly in each block.

This means that even if the security is breached by an attack, the attacker cannot recognize the information, and the information is not distorted due to transaction log data in other nodes.

Before the blockchain technology, the authenticity of individual-to-person transactions was confirmed and guaranteed by a central authority or centralized control body.

However, since blockchain technology, which makes it possible to give credibility to individual transactions without going through a central control system, makes it possible for anyone to check the entire process from the origin of the transaction, more than half of the data in the network sharing the blockchain database It is impossible to forge or falsify data unless it has access to it.

Although the demand for personal information utilization increases due to the recent evolution to user-customized information services, numerous studies on blockchain are still focusing on improving security.

Therefore, the existing block chain had a problem in that it was difficult to solve the problem of personal information use.

1 is a configuration diagram of a general personal information security management model.

In the information security model of the prior art, the content of information use is not provided transparently. In addition, certain problems arise such as unauthorized use, leakage, abuse and misuse.

A smart contract is defined as a decentralized agreement (Decenetereaeleiezeeed Agreement) stored within these blockchains and entered into computer code, but this is just program code that can predict the automatic execution of the contract.

Nick Sazbo, who first mentioned smart contracts, defined the term as a computerized transaction protocol that executes contract terms.

A smart contract can be seen as a combination of the two processes of contract establishment and execution into one using blockchain technology.

In this smart contract-based intelligent mediation process, it is required to develop a technology to prevent misuse of personal information and to autonomously manage personal information utilization from the user and data point of view.

Republic of Korea Patent Registration No. 10-2096890 Republic of Korea Patent Publication No. 10-2019-0008163

The present invention is to solve the problems of the prior art block chain-based security technology, and it is improved to prevent misuse of personal information, and to protect personal information that enables autonomous management and utilization of personal information from the point of view of users and data Its purpose is to provide a device and method for intelligent mediation based on a smart contract.

The present invention provides an improved smart contract-based intelligent mediation for personal information protection that prevents misuse of personal information by autonomously managing personal information and supports information transparency and rational decision-making on the use of personal information. An object of the present invention is to provide an apparatus and method for

The present invention provides an intelligent arbiter based on a smart contract improved for personal information protection that enables efficient personal information utilization management by brokering a transaction that automatically configures a transaction between users while the intelligent arbiter checks differential information rights and constructs a contract An object of the present invention is to provide an apparatus and method for mediation.

The present invention is improved for the protection of personal information so that the intelligent arbitrator checks the differential data authority for the verification of the scope of personal information disclosure and performs user verification that automatically configures the transaction data in the smart contract to autonomously manage and utilize personal information Its purpose is to provide a device and method for intelligent mediation based on a smart contract.

The present invention provides an apparatus and method for intelligent mediation based on a smart contract improved for the protection of personal information so that a history management method constituting a system for automatically managing personal information utilization history through an intelligent mediator can be presented. There is a purpose.

Other objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned will be clearly understood by those skilled in the art from the following description.

The smart contract-based intelligent mediation device improved for personal information protection according to the present invention for achieving the above object receives data from the user as a final contact point with the user for smart contract-based intelligent mediation, or Presentation layer that outputs; performs transaction brokerage, user verification, and history management; classifies and manages users, groups and verifier nodes by authority; role-based control to implement contracts; transaction record management Intelligent Mediator that configures smart contracts for personal information utilization management; Business Objects with logic that defines access and management of business data; Data Analysis Layer for data analysis and a data source for storing and providing data.

Here, the intelligent mediator (Intelligent Mediator), for access control, a security manager (Security Manager) that manages data usage rights, a role management manager (Roles Manager) that manages node roles, and a rights management manager for rights management (Rights Manager), including a content manager (Content Manager) for network configuration and management, a security manager (Security Manager), characterized in that it includes a search manager (Search Manager).

And the Intelligent Mediator manages data usage rights, manages node roles, and performs functional control to improve privacy and availability, assigns differential information rights with a rights management approach, and the moderator is a user node, group node by rights and classifying and managing verifier nodes.

And the Intelligent Mediator, a role-based control module that implements a contract that performs personal information input, correction, deletion, information request, and result confirmation, and a transaction record management module that performs log data management and data usage history check It is characterized in that it includes.

In addition, an intelligent mediator is a transaction broker that automatically configures transactions between users while configuring a contract and checking the differential information authority to configure an improved smart contract between differential data for managing personal information utilization and personal information It is characterized in that it checks differential data authority for disclosure scope verification, performs user verification that automatically configures transaction data in smart contracts, and performs history management that configures a system that automatically manages personal information utilization history.

And the intelligent mediator is implemented off-chain for individual management of personal information, and the approach is characterized by modifying the block structure to perform the role of managing authority and transaction records.

And the block structure for performing the role of authority and record management, the block header includes a block number, a timestamp, a previous block hash, a transaction hash, DB hash information (database hash information), payload includes transaction information (transaction information), timestamp (timestamp) records the time the transaction was created or completed, DB hash information (database hash information) It is characterized in that it checks the database state at the time, and the payload includes transaction information for the current block and is used to check information executed after the previous block.

And transaction record management verifies the integrity by using block timestamp and hash value verification, users with access rights can restrict the disclosure of personal information for service use, and the researcher It is characterized by requesting consent from the investigator and obtaining consent again if the scope or content of disclosure is changed.

And the intelligent mediator classifies the role of each node, checks the data range through the role-based control module, and supports the configuration of transaction items in the contract by the role of the node by using the verified data, and the mediator is the user It is divided into a (user) node, a group node, and an authority node, and is managed according to a role, and it is characterized in that only authorized nodes can participate in the network.

And, the authority node maintains and manages the network through consensus, mediates transactions, stores and verifies all records, and among the properties of the authority node, A_ID is issued when joining the network and is used to confirm transaction creation. , the ledger is used when all nodes share the same information to verify data, and the database is characterized by including ID and authentication key information required to access an external database.

And the user node is the subject that manages personal information. Among the properties of the user node, U_ID is issued when joining the network and used for transaction execution, P.I is used up to the range set by the user, and smart contract is used to input, modify, and delete user node information. , it is characterized in that the data use consent function can be executed.

And in the user node service for subscription and information request, the user registers personal information and disclosure scope to participate in the network, and when the user is confirmed, additional services are provided through a mediator, and in the process for subscription and information request , U_ID is used for service access, smart contract request, and information utilization range setting, and the user checks the subscription information through the mediator to confirm the service use right, and it is characterized in that the access right is confirmed.

And the group node requests consent to use personal information through the moderator, and among the properties of the group node, G_ID is issued when joining the network and used to confirm the subscription, and the group node's database contains an authentication key that can be used to request information through the moderator. In addition, the smart contract is characterized in that it can execute group node information input, modification, deletion, and user node information request functions.

In addition, authentication and data utilization requests are allowed through the group node registration process, the moderator performs authentication using G_ID, and if group node information is not registered, enters group information for service use, and group information input is completed When the G_ID is provided, the group node is characterized by requesting the moderator to join the network and use the data through the G_ID.

Then, the G_ID is verified through the mediator and authority is granted when information is verified, the verification result is sent to the blockchain service through the mediator, and the group node receives the result through the information utilization request from the mediator, and to validate the information. It is characterized in that integrity validation is performed with the hash value of the result between authorized nodes, and verified data can be verified with the requester's private key.

And the intelligent moderator utilizes the transaction record management module to support the management of personal information use records, compares the transaction log and the activity log using ID and time stamp to check the integrity, and the personal information record is the Authority node. is transmitted, and the authority node checks the personal information record, and the verified record is stored in a database separate from the ledger.

In addition, the group node requests a transaction from the authority node for data utilization and executes authentication. If the user agrees to use the data, the group node analyzes the requested information, and the provided result is verified through the requester's private key. It is characterized in that it allows.

And the authority node makes a difference in the contract usage rights for each node so that the user node can directly participate in information distribution and management and register as a management entity, and manage the network access rights of the user node and group node It is characterized in that it mediates all transactions that occur in the network, and ensures integrity by storing and verifying transaction records.

And the smart contract used by the user node has registration and read contracts and manages information through each contract. The user node is characterized in that it receives a utilization request from the group node based on registered personal information, performs an operation to modify the contract to modify the registered information, updates the previous record through modification, and receives a request for reuse.

And the group node can request the user node to use personal information through the authority node, and in the contract for the group node, the group contract registration uses G_ID, timestamp, and group information as input values. The information request is characterized by obtaining information consent from the user through the mediator and requesting information utilization, and the inquiry result information is characterized in that the result is confirmed using the key value of the utilization result and the data hash value received after the result request.

The method for smart contract-based intelligent mediation improved for personal information protection according to the present invention to achieve another purpose is to configure a smart contract between users through differential information right verification for smart contract configuration by an intelligent mediator. , configuring a transaction between users; a role-based control step that verifies the scope of the user's public data and supports the configuration of transaction data items in a smart contract; a transaction record that automatically manages personal information utilization history through log data management Management step; characterized in that it includes.

As described above, the device and method for intelligent mediation based on a smart contract improved for personal information protection according to the present invention have the following effects.

First, it prevents misuse of personal information, and enables autonomous management and utilization of personal information from the point of view of users and data.

Second, by autonomously managing personal information, misuse of personal information can be prevented and information transparency and rational decision-making about the use of personal information can be supported.

Third, it enables efficient management of personal information utilization by performing transaction brokerage that automatically configures transactions between users while the intelligent arbiter checks differential information rights and forms a contract.

Fourth, to verify the scope of personal information disclosure, the intelligent arbitrator checks the differential data authority and performs user verification that automatically configures transaction data within the smart contract so that personal information can be managed and utilized autonomously.

Fifth, it is possible to present a history management method that constitutes a system that automatically manages personal information use history through an intelligent mediator.

Sixth, by autonomously managing and utilizing personal information from the user and data point of view, the efficiency and convenience of service provision can be increased, while at the same time, social problems and security threats can be greatly reduced.

1 is a configuration diagram of a general personal information security management model
2 is an overall configuration diagram of a device for intelligent mediation based on an improved smart contract for personal information protection according to the present invention;
3 is a configuration diagram of a role-based control module for supporting data item configuration according to an embodiment of the present invention;
4 is a flow chart of a user node service for subscription and information request according to an embodiment of the present invention;
5 is a flowchart of group node registration for user verification and data utilization request according to an embodiment of the present invention;
6 is a configuration diagram of an intelligent personal information management contract scenario according to an embodiment of the present invention;
7 is a flowchart of user service subscription and use agreement according to an embodiment of the present invention;
8 is a flowchart illustrating a request for use of user consent data according to an embodiment of the present invention;
9 is a comparison graph of correlation analysis data through a consensus algorithm and block generation time analysis according to an embodiment of the present invention;
10 is an analysis data comparison graph for checking the number of nodes and block generation time according to an embodiment of the present invention;

Hereinafter, a preferred embodiment of an apparatus and method for intelligent mediation based on a smart contract improved for personal information protection according to the present invention will be described in detail as follows.

Features and advantages of an apparatus and method for intelligent mediation based on a smart contract improved for personal information protection according to the present invention will become apparent through the detailed description of each embodiment below.

2 is an overall configuration diagram of a device for intelligent mediation based on a smart contract improved for personal information protection according to the present invention.

The device and method for smart contract-based intelligent mediation improved for personal information protection according to the present invention support information transparency and rational decision-making on the use of personal information to prevent misuse of personal information, and to prevent misuse of personal information, users and data From this point of view, personal information can be managed and utilized autonomously.

To this end, the present invention may include a configuration for brokering a transaction that automatically configures a transaction between users while the intelligent arbiter confirms the differential information right and constructs a contract.

The present invention may include a configuration in which the intelligent mediator checks the differential data authority and automatically configures the transaction data in the smart contract for user verification for personal information disclosure scope verification.

The present invention may include a history management configuration that configures a system for automatically managing personal information utilization history through an intelligent mediator.

As shown in FIG. 2, the smart contract-based intelligent mediation device improved for personal information protection according to the present invention receives or outputs data from the user as a final contact point with the user for smart contract-based intelligent mediation. Having a presentation layer (21), an intelligent mediator (22) that classifies and manages users, groups, and validator nodes by authority, and a logic that defines access and management of business data It consists of a business object (Business Objects) 23, a data analysis layer (Data Analysis Layer) 24 for data analysis, and a data source (Data Source) 25 for data storage and provision.

Here, the intelligent mediator 22 includes a security manager that manages data usage rights for access control, a role management manager that manages node roles, and authority for rights management It includes a management manager (Rights Manager), and includes a content manager (Content Manager), a security manager (Security Manager), and a search manager (Search Manager) for network configuration and management.

And, the intelligent mediator 22 performs function control for data usage right management, node role management, and privacy and availability enhancement.

In the present invention, the privilege management approach allocates differential information privileges, and the moderator classifies and manages user nodes, group nodes, and verifier nodes by privilege.

And it includes a role-based control module that implements a contract that performs personal information input, correction, deletion, information request, result confirmation, and the like.

It includes a transaction record management module that manages log data and checks data usage records.

And intelligent mediator (22) for personal information utilization management, for improved smart contract configuration between differential data, check differential information rights and automatically configure transactions between users during contract construction To verify the scope of personal information disclosure, differential data authority is checked, user verification that automatically configures transaction data in smart contracts, and history management that configures a system that automatically manages personal information use history is performed.

And the method for smart contract-based intelligent mediation improved for personal information protection according to the present invention is largely, for smart contract configuration by an intelligent mediator, by configuring a smart contract between users through differential information right verification, constructing a transaction; A role-based control step that verifies the user's public data range and supports the configuration of transaction data items in the smart contract; and a transaction record management step of automatically managing personal information utilization history through log data management.

Table 1 shows a proposed block structure for performing the role of authority and records management according to an embodiment of the present invention.

The intelligent mediator 22 according to the present invention solves the personal information problem by allocating differential data use rights through the rights management manager.

Different rights are granted according to the scope of disclosure of personal information.

The intelligent mediator 22 automatically configures transactions between users in the process of building a smart contract through the user's differential information right verification.

In Fig. 2, an intelligent mediator 22 is implemented off-chain for individual management of personal information, and the approach is to modify and create the block structure to fulfill the role of authority and records management, and the proposed block structure is as in Table 1.

The block header includes a block number, a timestamp, a previous block hash, a transaction hash, and database hash information, and a payload includes transaction information.

A timestamp records the time a transaction was created or completed.

DB hash information confirms the database state at the time.

The payload contains transaction information for the current block and is used to verify information that has been executed since the previous block, and transaction history management verifies its integrity using the block's timestamp and hash value verification.

Users with access rights can restrict the disclosure of personal information for service use.

The researcher requests the user's consent through the mediator, and if the disclosure scope or content is changed, the researcher must obtain consent again.

3 is a configuration diagram of a role-based control module for data item configuration support according to an embodiment of the present invention.

The moderator classifies the role of each node and checks the data range through the control module.

By utilizing verified data, it supports the configuration of transaction items in the contract by role of the node.

3, the moderator is divided into a user node, a group node, and an authority node, and is managed according to roles. In this approach, only authorized nodes can participate in the network.

Authority nodes maintain and manage the network through consensus, while authority nodes mediate transactions and store and verify all records.

Table 2 shows the structure of an authorization node for managing and providing personal information for a smart contract according to an embodiment of the present invention.

Table 2 describes the properties of the authority node.

A_ID is issued when joining the network and is used to confirm transaction creation.

A ledger can be used when all nodes share the same information to verify data.

The database contains the identity and authentication key information required to access the external database.

Authorization nodes manage and provide personal information for smart contracts.

Table 3 shows the structure of a user node according to an embodiment of the present invention.

A user node is a subject that manages personal information.

Table 3 shows the properties of user nodes. U_ID is issued when joining the network and is used for transaction execution, and P.I is used up to the range set by the user.

The smart contract can execute functions of inputting, modifying, deleting, and consenting to data use of user node information.

4 is a flowchart of a user node service for subscription and information request according to an embodiment of the present invention.

4 shows the user node subscription and information request service flow, the user registers personal information and public scope to participate in the network. (S401 ~ S403)

When the user is confirmed (S404 ~ 410), an additional service is provided through an arbiter (S411).

In the process for such subscription and information request, U_ID is used for service access, smart contract request, and information utilization range setting.

The user verifies the access right by checking the subscription information through the moderator to confirm the right to use the service.

Moderators identify users via U_IDs and provide access and additional services.

Table 4 shows a group node structure according to an embodiment of the present invention.

The group node requests consent to use personal information through the mediator.

Table 4 shows the properties of group nodes. G_ID is issued when joining the network and is used to confirm the subscription.

The group node's database contains an authentication key that can be used to request information through a moderator.

The smart contract can execute the functions of inputting, modifying, and deleting group node information, and requesting user node information.

In the group, group information is entered into the service to use the member's information.

After going through the validation process, users can request the use of information after they are given an ID to join the network.

5 is a flowchart of group node registration for user verification and data utilization request according to an embodiment of the present invention.

As shown in FIG. 5, authentication and data utilization requests are allowed through the group node registration process.

The moderator performs authentication using G_ID. (S501~S502)

If the group node information is not registered, the group information is input to use the service (S503).

When group information input is completed, G_ID is provided. (S504)

The group node requests the moderator to join the network (S505) and use data through G_ID (S506).

The mediation verifies the G_ID through the mediator and grants authority when verifying information.

The verification result is transmitted to the blockchain service through the mediator (S508).

Finally, the group node receives the result through the request for information utilization from the moderator (S507).

To validate the information, integrity validation is performed with the hash value of the result between the authorized nodes. The verified data can be verified with the requester's private key.

The role-based transaction record management module will be described in detail as follows.

6 is a configuration diagram of an intelligent personal information management contract scenario according to an embodiment of the present invention.

The moderator utilizes the transaction record management module to support personal information use record management. By using ID and timestamp, transaction log and activity log are compared to verify integrity.

The personal information record is transmitted to the authority node, and the authority node checks the personal information record.

Verified records are stored in a database separate from the ledger.

The group node requests a transaction to the authority node for data utilization and executes authentication.

If the user agrees to use the data, the group node analyzes the requested information.

The provided result can be verified through the requester's private key.

And the authority node makes a difference in the contract usage rights for each node so that the user node can directly participate in information distribution and management and register as a management entity.

In addition, it manages network access rights of user nodes and group nodes, mediates all transactions that occur in the network, and stores and verifies transaction records to ensure integrity.

Smart contracts used by user nodes hold registration and read contracts, and information can be managed through each contract.

Table 5 shows the contract structure for a user node according to an embodiment of the present invention.

User contract registration uses ID, time stamp, and personal information as input values.

A user node receives a request for utilization from a group node based on registered personal information.

Revision is to perform a contract to modify registered information, and through modification, an existing record is updated and reused is requested.

Deletion removes related records and information.

A group node can request a user node to use personal information through an authority node.

Table 6 shows the contract structure for a group node according to an embodiment of the present invention.

Group contract registration uses G_ID, time stamp, and group information as input values to perform the contract, and information request receives information consent from the user through the mediator and requests information utilization.

The inquiry result information uses the key value of the utilization result and the data hash value received after requesting the result to check the result.

Table 7 shows a development environment according to a network operating system according to an embodiment of the present invention.

The following explains the consent to the registration and use request of the user's personal information.

7 is a flowchart of user service subscription and use agreement according to an embodiment of the present invention.

It shows the flow of registration and storage of data and personal information required for registration when a user subscribes to receive service.

The user starts the registration process by entering basic information, and the information provided at the time of membership registration is stored in the customer database and the history is recorded in the block chain.

It provides users with the blockchain network ID required to use the blockchain record service so that they can use the service normally.

In order to provide such personal information for further service expansion, the service provider can provide the information with the approval of the information subject through a smart contract, and the history is recorded in the block chain system.

The request for use of user consent data is explained as follows.

8 is a flowchart illustrating a request for use of user consent data according to an embodiment of the present invention.

For service utilization, the Researcher sends the scope and purpose of user data through the Authority node.

The namespace information requested by the investigator is entered only on the blockchain.

When a transaction for the requested data is created, it is designed to check the application result for transaction information through the web interface and to verify the authority node ID through user information authentication.

The delay time analysis and evaluation will be described as follows.

Table 8 shows delay time and processing time data required for block generation according to an embodiment of the present invention.

For model performance evaluation, quantitative evaluation of delay time by generation time, block generation time by block size, and number of nodes is performed. In addition, through a security review, a qualitative evaluation of the existing personal information management service, confidentiality, availability, non-repudiation, etc. is performed.

The PoA consensus algorithm allows network owners to set the block generation interval. In the present invention, delay time and TPS according to block generation time were measured. Latency is the time it takes for a request to be answered, and TPS represents the number of transactions executed per second.

For performance measurement, in this case, 150 transactions were created per second, and the block generation cycle is the time it takes until a new block is created.

Table 8 shows the block processing delay time measurement results using variables.

According to the measurement, the longer the block creation time, the longer the delay time, and the larger the block, the greater the number of transactions in the block, which increases the delay time.

In addition, it can be seen that the TPS fluctuation is relatively stable according to the generation cycle of the measurement result, and the delay time was the lowest at 50 ms.

And the larger the block, the greater the number of transactions a block can hold. Therefore, the number of transactions that the network can handle increases and network latency increases.

It is desirable to set the block size in consideration of this aspect. Also, larger blocks increase storage, bandwidth, and throughput.

Table 9 shows correlation analysis data between block size and network delay time according to an embodiment of the present invention.

According to Table 9, the block size in Ethereum (ETH) is determined by the values of gas limit.

That is, as the information stored in a transaction increases, the number of transactions that a block can hold decreases while the information grows. In ETH, about 300 transactions per block can be processed with a 21000 gas transaction fee.

The average block time is 20 seconds, which is a capacity of 15 transactions per second (15 tps).

Here, with the same gas transaction fee, the average block time is 5 seconds and the capacity is 120 tps.

And in the case of block size, when a transaction is requested from a user/group node, only the elements of the requested personal information item are retrieved.

In the case of output values received in response, statistics or application results for personal information requested from an external database are provided, and a web function to read information is provided.

In practice, personal information is stored in a database outside of the blockchain.

Considering the rapid increase in the number of transactions due to the low scaling problem for the block size, the block size of the model is set to '1M' to keep the network speed constant.

Table 10 shows the detailed options of each block, and the block generation cycle is an option selected when creating a Genesis block.

In the present invention, the network delay time is identified for each block generation period/block size, and an optimal size is found to generate an appropriate network. In the conventional case, if the block generation cycle is short, the data verification time is shortened. This shortens the overall verification time and reduces reliability.

However, in the model proposed in the present invention, the number of confirmations is related to the number of authorized nodes.

As the authority increases, the data verification time also increases. According to the proposed model, an institution selected based on identity proof trust can block malicious attacks through block creation, editing, and verification.

The authority proposes and creates blocks, and the generated blocks are cross-verified to verify the integrity of the data.

Therefore, the proposed model is lower than the existing model in terms of gas consumption required for verification. This means more transactions can be processed with the same amount of gas.

In FIG. 9, a model composed of three nodes and a model composed of eight nodes are implemented. Then, the difference in the time it took to create 1000 blocks was compared.

9 is a graph comparing correlation analysis data through a consensus algorithm and block generation time analysis according to an embodiment of the present invention.

The number in FIG. 9 indicates that the contract request and completion are performed by increasing the number of block generation by thousands.

All blocks were created within 9 seconds, and when configured with 8 nodes, only 3 nodes are selected for validation as in the existing 3-node configuration.

Therefore, there was no change in the overall performance. However, in a three-node model, if two nodes fail, the network is stopped.

However, in the 8-node model, the network operates normally even if an error occurs in the 4-node.

10 is an analysis data comparison graph for checking the number of nodes and block generation time according to an embodiment of the present invention.

10 shows a comparison of performance with a model to which another consensus algorithm is applied under the same conditions (3 nodes, 1M block size).

The device and method for intelligent mediation based on smart contract improved for personal information protection according to the present invention described above is an improved smart contract configuration technique between differential data, and mediation of transactions through transaction mediation technique, user verification, history management, etc. , to prevent misuse of personal information by performing user identification and record management, and to secure autonomy in the use and management of personal information from the point of view of users and data.

As described above, it will be understood that the present invention is implemented in a modified form without departing from the essential characteristics of the present invention.

Therefore, the specified embodiments are to be considered in an illustrative rather than a restrictive point of view, the scope of the present invention is indicated in the claims rather than the foregoing description, and all differences within the scope equivalent thereto are included in the present invention. will have to be interpreted.

21. Presentation Layer
22. Intelligent Mediator
23. Business Objects
24. Data Analysis Layer
25. Data Sources

Claims (21)

For smart contract-based intelligent mediation, a presentation layer that receives or outputs data from a user as a final contact point with the user;
Smart contract configuration to manage personal information utilization by performing transaction brokerage, user verification, and history management, classifying and managing users, groups, and validator nodes by authority, role-based control to implement contracts, and transaction record management Intelligent Mediator;
Business Objects with logic that defines access and management of business data;
Data analysis layer for data analysis (Data Analysis Layer) and data source (Data Source) for data storage and provision; Smart contract-based intelligent mediation device improved for the protection of personal information, characterized in that it includes. According to claim 1, Intelligent Mediator (Intelligent Mediator),
For access control, it includes a security manager (Security Manager) that manages data usage rights, a role management manager (Roles Manager) that manages node roles, and a rights management manager (Rights Manager) for right management,
A device for intelligent mediation based on an improved smart contract for protecting personal information, characterized in that it includes a content manager, a security manager, and a search manager for network configuration and management. The method of claim 2, wherein the Intelligent Mediator performs function control for data usage rights management, node role management, privacy and availability enhancement,
A device for intelligent mediation based on an improved smart contract for privacy protection, characterized in that differential information rights are assigned with a rights management approach, and the moderator classifies and manages user nodes, group nodes, and verifier nodes by rights . According to claim 2, Intelligent Mediator (Intelligent Mediator),
a role-based control module implementing a contract to enter, correct, delete, request information, and verify results;
A device for intelligent mediation based on a smart contract improved for the protection of personal information, characterized in that it includes a transaction record management module that performs log data management and data usage history verification. According to claim 1, wherein the intelligent mediator (Intelligent Mediator) for the configuration of an improved smart contract between differential data for personal information utilization management,
Transaction brokerage that checks differential information rights and automatically organizes transactions between users during contract construction;
In order to verify the scope of personal information disclosure, it is characterized by checking differential data rights, performing user verification that automatically configures transaction data in smart contracts, and performing history management to configure a system that automatically manages personal information utilization history A device for intelligent intermediary based on smart contracts improved to protect personal information. The method according to claim 1, wherein the Intelligent Mediator is implemented off-chain for individual management of personal information, and the approach is written by modifying the block structure to perform the role of managing authority and transaction records. A device for intelligent intermediary based on smart contracts improved to protect personal information. The method according to claim 6, wherein the block structure for performing the role of managing authority and records comprises:
The block header includes a block number, a timestamp, a previous block hash, a transaction hash, and database hash information, and a payload includes transaction information,
A timestamp records the time a transaction was created or completed,
DB hash information checks the database state at the time,
A device for intelligent mediation based on smart contracts improved for privacy protection, characterized in that the payload contains transaction information for the current block and is used to verify information executed after the previous block. 8. The method of claim 7, wherein transaction history management verifies integrity using a timestamp and hash value verification of a block;
Users with access rights can restrict the disclosure of personal information for service use, and the researcher asks for consent from the user through the mediator, and if the scope or content of the disclosure changes, the researcher asks for consent again A device for intelligent intermediary based on smart contracts that is improved for privacy protection. According to claim 1, Intelligent Mediator (Intelligent Mediator),
Classify the role of each node, check the data range through the role-based control module, utilize verified data to support the configuration of transaction items in the contract by role of the node,
Moderators are divided into user nodes, group nodes, and authority nodes, managed according to roles, and improved for privacy protection, characterized in that only authorized nodes can participate in the network A device for intelligent mediation based on smart contracts. 10. The method of claim 9, wherein the Authority node maintains and manages the network through consensus, mediates transactions and stores and verifies all records;
Among the properties of the authority node, A_ID is issued when joining the network and is used to confirm transaction creation,
A ledger is used when all nodes share the same information to verify data, and the database contains the ID and authentication key information required to access an external database. A device for contract-based intelligent mediation. The method of claim 9, wherein the user node is a subject that manages personal information,
Among the properties of the user node, U_ID is issued when joining the network and used for transaction execution, PI is used up to the range set by the user,
Smart contract is a smart contract-based intelligent mediation device that is improved for the protection of personal information, characterized in that it can execute the functions of entering, modifying, deleting, and consenting to data use of user node information. 12. The method of claim 11, wherein the user node service for subscription and information request comprises:
Users register personal information and disclosure scope to participate in the network;
Once the user is verified, additional services are provided through the moderator;
In the process for subscription and information request, U_ID is used for service access, smart contract request, and information utilization range setting, and the user confirms the access right by checking the subscription information through the mediator to check the service use right A device for intelligent intermediary based on smart contracts that has been improved to protect personal information. The method of claim 9, wherein the group node requests consent to use personal information through a moderator,
Among the attributes of a group node, G_ID is issued when joining the network and used to confirm the subscription, the group node's database has an authentication key that can be used to request information through an arbiter,
Smart contract is a smart contract-based intelligent mediation device that is improved for privacy protection, characterized in that it can execute group node information input, modification, deletion, and user node information request functions. 14. The method of claim 13, allowing authentication and data utilization requests through a group node registration process;
The moderator performs authentication using G_ID, and if group node information is not registered, enters group information to use the service,
When group information input is completed, G_ID is provided, and the group node asks the moderator to join the network and use the data through the G_ID. 15. The method of claim 14, wherein G_ID is verified through a mediator and authorization is granted when information is verified, and the verification result is transmitted to the blockchain service through the mediator,
The group node receives the result through the request for information utilization from the moderator, and performs integrity validation with the hash value of the result between the authorized nodes to check the validity of the information, and the verified data can be verified with the requester's private key. A device for intelligent intermediary based on smart contracts that has been improved to protect personal information. The method of claim 9, wherein the intelligent moderator utilizes a transaction record management module to support personal information use record management,
By using ID and time stamp, the integrity is verified by comparing the transaction log and the activity log, the personal information record is sent to the authority node, and the authority node checks the personal information record to confirm the record A device for intelligent brokerage based on an improved smart contract for personal information protection, characterized in that it is stored in a separate database from the ledger. The method of claim 16, wherein the group node requests a transaction from an authority node for data utilization and performs authentication,
When the user agrees to use data, the group node analyzes the requested information, and the provided result can be verified through the requester's private key. 10. The method of claim 9, wherein the authority node makes a difference in the contract usage rights for each node so that the user node can directly participate in information distribution and management and register as a management entity,
Intelligent smart contract-based improved smart contract for personal information protection, characterized by managing network access rights of user nodes and group nodes, mediating all transactions that occur in the network, and storing and verifying transaction records to ensure integrity device for mediation. 10. The method of claim 9, wherein the smart contract used by the user node has registration and read contracts and manages information through each contract;
In the contract for the user node, the user contract registration uses ID, time stamp, and personal information as input values, and the user node receives a utilization request from the group node based on the registered personal information and modifies the registered information. A device for intelligent mediation based on a smart contract improved for privacy protection, characterized in that it performs a corrective action, updates an old record through correction, and receives a reuse request. The method of claim 9, wherein the group node can request the user node to use personal information through an authority node,
In the contract for the group node, the group contract registration uses G_ID, timestamp, and group information as input values to perform the contract, and the information request receives information consent from the user through the mediator and requests information utilization;
Inquiry result information is a device for intelligent mediation based on an improved smart contract for the protection of personal information, characterized in that the result is checked using the key value of the utilization result and the data hash value received after requesting the result. In the method for intelligent mediation based on smart contract improved for the protection of personal information,
For smart contract configuration by intelligent mediator,
configuring a smart contract between users through differential information right verification to configure a transaction between users;
A role-based control step that verifies the user's public data range and supports the configuration of transaction data items in the smart contract;
A method for intelligent mediation based on an improved smart contract for personal information protection, comprising: a transaction record management step of automatically performing personal information utilization history management through log data management.

Images