WO2018008800A1

WO2018008800A1 - Accredited certificate authentication system based on blockchain, and accredited certificate authentication method based on blockchain, using same

Info

Publication number: WO2018008800A1
Application number: PCT/KR2016/011099
Authority: WO
Inventors: 어준선; 홍재우; 송주한
Original assignee: (주)코인플러그
Priority date: 2016-07-04
Filing date: 2016-10-05
Publication date: 2018-01-11
Also published as: KR101723405B1

Abstract

The present invention relates to an accredited certificate authentication system based on a blockchain, and an accredited certificate authentication method based on a blockchain, using the system, the system and method including: a user terminal (100) requesting blockchain-based accreditation; a blockchain-based accredited certificate authentication-requesting server (600) which, in response to the blockchain-based accreditation request of the user terminal (100), transmits personal information for issuing an accredited certificate, of a user operating the user terminal (100), thereby relaying the blockchain-based accreditation request; a blockchain-based accredited certificate management server(300) which performs control such that user authentication is performed, by determining, based on the personal information for issuing an accredited certificate transmitted from the blockchain-based accredited certificate authentication-requesting server (600), the validity of an accredited certificate of the user, and, if the validity of the accredited certificate is determined to be legitimate, transmitting a public key for the accredited certificate of the user to the blockchain-based accredited certificate authentication-requesting server (600); and blockchain-retaining servers (400), each having an electronic wallet, provided with a blockchain, which, when transaction information for a bitcoin payment is transmitted, validates the bitcoin payment by verifying the transmitted transaction information for the bitcoin payment, and in which the transaction information for the bitcoin payment is recorded in accordance with the validation, wherein transaction information for monitoring forgery and tampering, including accredited certificate root hash information for registration, is recorded in the blockchain.

Description

Authorized certificate authentication system based on blockchain and authorized certificate authentication method based on blockchain using the same

In the present invention, in the case of a public key for a public certificate requiring maintenance, the blockchain is held through a peer-to-peer network (P2P) based distributed database, not a server operated by a CA. Since it is stored and managed in the blockchain of the electronic wallet mounted on the servers, it is possible to block the hacking as much as possible so that a high level of security system can be interlocked and the operation and maintenance of the established certificate authentication system. There is no cost related to the system, such as the cost of maintenance, and the certification process can be performed even if ActiveX is not installed, and the public key for the certification certificate of the user during the certification process of the blockchain-based certification certificate is By not registering on the blockchain holding server, the user can use the blockchain without exposing the public key for the public certificate. A certificate that is based on a blockchain that can not only perform the certification process of a certificate, but also monitor forgery of information related to the certificate, including the public key for the certificate of the user who issued the certificate. The present invention relates to an authentication system and a method for authenticating a certificate based on a blockchain using the same.

Generally, an accredited certificate is electronic information issued by a certification authority (CA) for the purpose of verifying the user's identity when using services in various industries, and for preventing the forgery and alteration of documents or the denial of transaction facts. It shows the seal certificate for cyber transaction. These certificates include certificate version, certificate serial number, certificate validity period, issuer, user digital signature verification information, user name, identity verification information, digital signature method.

This public certificate is used in public key infrastructure (PKI), which is a security standard method (see Patent Document 1).

The public key infrastructure refers to a user authentication system that encrypts transmission and reception data using a public key composed of encryption and decryption keys, and verifies the identity of a trader using a password possessed by an Internet user.

However, since the private key used as a key for decrypting the encrypted public key under the public key infrastructure is generated by an authorized certification authority (CA) that is not an individual user but provided to the user, it is not only exposed to the risk of hacking. Due to the soft token-based storage method, the user's private key exists as a file in a standardized storage location, which makes it easy to duplicate and automate the collection of the private key, leading to financial damage and theft of user information. For this reason, the certification authority (CA) that provides the generated private key to the user should build an accredited certificate issuing system in which a highly secure system is interlocked to block the hacking as much as possible. In addition, the operation and maintenance of the established certificate issuance system should be performed. Therefore, there was a problem that a large amount of issuance costs are caused when issuing a conventional public certificate.

In addition, the accredited certificate is available only when ActiveX is installed in advance for the purpose of additional security when performing the user authentication process through a web browser. However, ActiveX can be installed only by lowering the security level of the PC so that it can access resources such as files and registry of personal computers (hereinafter referred to as PCs). Due to the ActiveX installed mandatory to lower the user's PC security level, there was also a problem exposed to dangerous environments such as hacking.

Each of the problems related to the accredited certificate is based on the blockchain based on the blockchain filed by the present applicant (see Patent Document 2), and the blockchain-based method for issuing the certificate and the method of issuing the certificate. It was solved through the public certificate authentication system and the public certificate authentication method based on the blockchain using the same.

Of the conventional certificate issuing system based on the blockchain, the method of issuing the certificate based on the blockchain using the same, and the authentication certificate authentication system based on the blockchain and the method of authenticating the certificate based on the blockchain using the same The gist is provided with a means for generating the public key for the public certificate and the private key for the public certificate directly from the user terminal operating the user, and the user terminal has a public key for the public certificate and the private key for the public certificate while the network is blocked. The private key for the public certificate is encrypted and stored together with the password and photo image specified by the user, thereby preventing external leakage of each key that may occur even in advance, and maintaining The public key required for the public certificate is operated by the CA. Because it is stored and managed in the blockchain of electronic wallets mounted on blockchain holding servers through peer-to-peer network (P2P) based distributed database, not servers, so that hacking can be blocked as much as possible. There is little cost of maintenance because there is no cost of constructing an accredited certificate issuing system that is equipped with a high security system and the operation and maintenance cost of the established accredited certificate issuing system, and even if ActiveX is not installed The accreditation process provides features that can be performed.

However, in spite of these advantages, the accredited certificate issuing system based on the conventional blockchain and the method of issuing the accredited certificate based on the blockchain and the blockchain using the accredited certificate authentication system based on the blockchain Based on the accredited certificate authentication method, the issuing cost must be paid initially to store and manage the public key for the accredited certificate in the blockchain holding server.

At this time, the issuance cost is 0.0001 bitcoin, and as of July 2015, 0.0001 bitcoin is a low cost of about 40 won in Korean Won, which is the cost each time issuing a public certificate based on the blockchain. Therefore, if the number of issuance increases, there is a problem that the issuance cost also increases proportionally.

Moreover, the public certificate issuance system based on the conventional blockchain, the public certificate issuance method based on the blockchain using the same, and the public certificate certificate system based on the blockchain, and the public certificate authentication based on the blockchain using the same The method registers and stores the public key for the public certificate on more than 100,000 blockchain holding servers to prevent forgery of the public key for the public certificate when a hacking occurs.

That is, the propagation of the transaction information including the public key for the public certificate is promised by the protocol. When the transaction information occurs, one node (here referred to as a blockchain holding server) is propagated to eight nodes. All blockchains equipped with an electronic wallet with a blockchain necessary to perform Bitcoin payments through pyramid propagation are repeatedly propagated to each of the eight designated nodes for each of the eight nodes receiving the transaction information for the Bitcoin payment. It is completed by propagating to the holding server.

For this reason, the public certificate issuance system based on the conventional blockchain, the public certificate issuance method based on the blockchain using the same, and the public certificate certificate system based on the blockchain and the public certificate based on the blockchain using the same If the request for registration of the public key for the public certificate is flooded in the authentication method, the certificate that is stored and managed on the blockchain holding servers as well as the risk of causing network overload due to excessive traffic of transaction information including the public key for the public certificate. Since transaction information including the public key for anyone can read, there is a problem in that the public key for the user's public certificate is exposed to the outside.

[Preceding technical literature]

[Patent Documents]

(Patent Document 1) Patent Document 1: Korean Patent Office Publication No. 10-0411448 (Registration Date: December 03, 2003)

(Patent Document 2) Patent Document 2: Korean Patent Office Patent Application Publication No. 10-2015-0109320 (Application Date: August 03, 2015)

The present invention is to solve the problems of the prior art, an object of the present invention is a public key for a public certificate that requires maintenance, not a server operated by a public certification authority (CA), but not between peer communication networks (P2P) : A certificate that is equipped with a highly secure system that can be blocked in case of hacking because it is stored and managed in the blockchain of the electronic wallet mounted on the blockchain holding servers through a peer-to-peer network based distributed database. It is based on a blockchain that does not incur system-related costs such as the cost of establishing the certification system and the operation and maintenance of the established certification certificate system, and can perform the certification process even if ActiveX is not installed. In providing a certificate authentication system and a method of authenticating a certificate based on a blockchain using the same. .

Another object of the present invention is to prevent the public key of the public certificate for the public certificate of the public certificate of the public certificate of the public certificate of the user to prevent the public key of the public certificate of the public certificate is not exposed in the block chain holding server during the authentication process of the certificate based on the block chain Blockchain based blockchain that not only can carry out the certification process of public certificate based on the certificate, but also can monitor the forgery of public certificate related information including public key of public certificate of the user who has issued the certificate. To provide an accredited certificate authentication system based on the system and a blockchain based authentication method using the same.

In accordance with the spirit of the present invention, an authentication certificate authentication system based on the blockchain includes: a user terminal for requesting blockchain-based authentication; A blockchain-based official certificate authentication request server for transmitting a personal information for issuing a public certificate of a corresponding user operating the user terminal according to a blockchain-based official authentication request of the user terminal to relay a request for a blockchain-based official authentication; Based on the personal information for issuing the accredited certificate transmitted from the blockchain-based accredited certificate authentication request server, the validity of the accredited certificate is judged to be valid by determining the validity of the accredited certificate of the user. A blockchain-based official certificate management server for transmitting to the blockchain-based official certificate authentication request server and controlling user authentication to be performed; When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted bitcoin payment transaction information and records the transaction information for the bitcoin payment according to the authentication To be loaded, the blockchain has a blockchain holding server recorded forgery monitoring transaction information information including a registered certificate root hash information for registration; characterized in that consisting of.

The process of authenticating a blockchain-based accredited certificate using the accredited certificate authentication system based on the blockchain of the present invention comprises the steps of requesting a blockchain-based accredited authentication from a user terminal by accessing a blockchain-based accredited certificate authentication request server; ; In the blockchain-based public certificate authentication request server, extract personal information for issuing a public certificate of a corresponding user operating the user terminal from the user identification information DB for each member according to a blockchain-based public certificate request, and blockchain-based authentication Transmitting to a certificate management server; Determining, at the blockchain-based official certificate management server, the validity of the public certificate of the corresponding user based on the transmitted personal information for issuing the public certificate; In the blockchain-based public certificate management server, if it is determined that the validity of the public certificate is legitimate, the public certificate for the public certificate of the corresponding user is extracted from the public certificate registration information DB, and the blockchain-based public certificate authentication request server is extracted. Transmitting; Receiving the public key for the public certificate and performing user authentication between the user terminals based on the transmitted public certificate public key.

In the present invention, in the case of a public key for a public certificate requiring maintenance, the blockchain is held through a peer-to-peer network (P2P) based distributed database, not a server operated by a CA. Since it is stored and managed in the blockchain of the electronic wallet mounted on the servers, it is possible to block the hacking as much as possible so that a high level of security system can be interlocked and the operation and maintenance of the established certificate authentication system. There is no system-related cost such as the cost of maintenance, and even if ActiveX is not installed, the certification process can perform the effect.

In addition, the present invention prevents the public key of the public certificate for the public certificate of the user from being registered in the blockchain holding server during the authentication process of the public certificate based on the blockchain, and does not expose the public key of the public certificate for the public certificate. In addition to performing the certification process of the accredited certificate, there is an effect of monitoring the forgery of the information related to the accredited certification, including the public key for the accredited certificate of the user who issued the accredited certificate.

1 is a block diagram showing a system for issuing an accredited certificate based on the blockchain of the present invention;

2 is a block diagram showing the detailed configuration of the user terminal of the configuration constituting the certificate issue system based on the blockchain of the present invention,

Figure 3 is a block diagram showing the detailed configuration of the blockchain-based authorized certificate issuing request server of the configuration constituting the system for issuing a public certificate based on the blockchain of the present invention,

Figure 4 is a block diagram showing the detailed configuration of the blockchain-based official certificate management server constituting the public certificate issuance system based on the blockchain of the present invention,

5 to 8 is a flow chart illustrating a process for issuing a blockchain-based accredited certificate by using an accredited certificate issuing system based on the blockchain of the present invention;

Figure 9 is a block diagram showing a certificate authentication system based on the blockchain of the present invention,

10 is a block diagram showing the detailed configuration of the blockchain-based public certificate authentication request server of the configuration constituting the public certificate authentication system based on the blockchain of the present invention,

11 to 17 are flowcharts illustrating a process of authenticating a blockchain-based accredited certificate using an accredited certificate authentication system based on the blockchain of the present invention.

Hereinafter, with reference to the accompanying drawings with respect to the configuration and operation of the embodiment of the present invention will be described in detail, the reference numerals of the configuration used in the same name in various embodiments will use the same reference numerals.

The present invention is largely divided into the issuance part of the public certificate based on the blockchain and the authentication part of the public certificate based on the blockchain.

1 to 8 relate to a system and a method for issuing an accredited certificate based on a blockchain which is an issuing part of an accredited certificate based on a blockchain.

As shown in the figure, the blockchain-based authorized certificate issuing system is largely a user terminal 100, a blockchain-based authorized certificate issuing request server 200, blockchain-based official certificate management server 300 And blockchain holding server 400.

First, the user terminal 100 generates a public key for the public certificate and a private key for the public certificate, and the public certificate for the public key for the public certificate and the identification certificate of the user required for issuing a blockchain-based public certificate among the generated keys. Terminal member for transmitting personal information for issuance. Here, the personal information for issuing the public certificate is information including a user name, a user's date of birth, a user's telephone number, and a user's e-mail.

The detailed configuration of the user terminal 100 to perform the function, such as the key generation engine 110 for generating a public key for the public certificate and a private key for the public certificate, for the public authentication for the key generation engine 110 Memory 120, encryption engine 130, hash processing engine 140, decryption engine 160 and the key generation engine 110, encryption engine 130, hash processing engine 140, the private key is stored, The control unit 150 controls the decryption engine 160.

Here, the key generation engine 110, the encryption engine 130, the hash processing engine 140 and the decryption engine 160 is in the form of an application program when the user terminal 100 is a desktop format such as a personal computer (PC). If the user terminal 100 is a mobile device such as a smart phone capable of accessing the Internet, it is provided and installed in the form of a mobile-only app.

In addition, before the user terminal 100 generates the public key for the public certificate and the private key for the public certificate, the user operating the user terminal 100 may identify the user with the blockchain-based public certificate issue request server 200. First, check the registration process.

To this end, the DB block 210 is mounted on the blockchain-based authorized certificate issuing request server 200 to be described later, and the identification information of the user who operates the user terminal 100 is mounted on the DB unit 210. Is stored, the user identification information DB 211 for each member is stored, the same user identification information is stored as the personal information for issuance of the public certificate.

The user terminal 100 transmits the personal information for issuing the public certificate to the blockchain-based public certificate issuing request server 200 to request the blockchain-based public certificate issuing, and the blockchain-based public certificate issuing request server 200. Is a key generation guide signal for guiding the generation of the public key for the public certificate and the private key for the public certificate, if there is matching information by matching the transmitted personal information for issuing the public certificate issue with the user identification information DB 211 for each member. Create and transmit to the user terminal 100.

When the user terminal 100 transmits a key generation guide signal from the blockchain-based authorized certificate issuing request server 200, the user terminal 100 operates the key generation engine 110 to generate a public key for the public certificate and a private key for the public certificate. In addition, the user terminal 100 controls to generate a public key for a certificate and a private key for a certificate in a state of blocking the network, thereby preventing external leakage of each key that may occur even in advance.

The blockchain-based public certificate issuing request server 200 receives a public key for public certificate and personal information for issuing public certificate from the user terminal 100, and transmits the personal information for public certificate and public certificate for public certificate issuance. It is a member for transmitting to the blockchain-based authorized certificate management server 300 to be described later, the authentication certificate registration request signal for each customer made, including.

At this time, the blockchain-based public certificate issuing request server 200 is equipped with a hash processing engine 220, hashing the personal information for issuing the public certificate is processed by processing the user identification hash information blockchain-based public authentication Send to the certificate management server (300).

The blockchain-based official certificate issuing request server 200 that performs such a function performs a public certification when using services such as a server operated by a bank or a securities company, a server operated by a government agency, and a server operated by a shopping mall performing Internet commerce. This required vendor's server can be applied.

The blockchain-based public certificate management server 300 is a public key for personal information and public certificate for issuing a public certificate from among the information included in the request signal for the certificate registration for each customer transmitted from the blockchain-based public certificate issuing request server 200. And accumulate and store them in the certificate registration related information DB (311) sequentially, and the number of sets of personal information for issuing the public certificate and the public key for the public certificate for which the certificate is accumulated is stored in the predetermined route hash generation section. Upon reaching the hash processing engine 320, hashing a set of personal information for issuing a public certificate and a public key for a public certificate that are counted as many as a predetermined number of root hash generation sections, in order of storage, the public certificate node hash information. Process and then process the processed certificate certificate node hash information into the registered certificate certificate root hash information composed of Merkle Tree structure. Processing and processing the transaction processing engine 320 for forgery monitoring transaction information, including forged authentication certificate root hash information for registration and forgery monitoring transaction ID information that is used as a key value to retrieve the forgery monitoring transaction information It generates and transmits the forgery monitoring transaction information of the generated information.

At this time, the public certificate registration information DB 311 is managed by the DB unit 310 as an information storage member.

In addition, the public certificate registration information DB (311) is a hash of the personal information for the issuance of the certificate and the public key for the certificate, as well as the public key for the certificate issued issuing a set of certificates Certificate node hash information is also accumulated and stored sequentially, and certificate certificate root hash identifier information for registration, which is an identifier for identifying certificate root hash information for registration, in which the cumulatively stored public certificate node hash information has a Merkle tree structure. Are also stored cumulatively.

In addition, the DB unit 310 accumulates and stores the forgery monitoring transaction ID information and the registration certificate root hash identifier information for registration generated together as an identifier each time the transaction processing engine 330 generates forgery monitoring transaction information. Also included is a certificate forgery monitoring information DB (312).

In addition, the blockchain-based public certificate management server 300 is associated with the public certificate registration if the number of counted personal certificate issuing certificate and the number of public keys for public certificate reaches a predetermined route hash generation period, since then By newly counting a set of personal information for issuing a public certificate and a public key for a public certificate stored in the information DB 311, new customers requesting issuance of a blockchain-based public certificate are also issued a blockchain-based public certificate. Provide to receive.

Here, the route hash generation section is a section in which the system administrator binds the transaction information including the certificate information of the customer in the blockchain-based customer certificate registration process to the blockchain holding server to the predetermined number. Through this, transaction processing of certificate information of a customer compressed by a predetermined number minimizes the generation of traffic, thereby reducing network overload.

The number of route hash generation sections may be specified by calculating various cases, such as the number of preset certificate node hash information or the number of certificate certificate node hash information accumulated and stored for a predetermined time.

Meanwhile, the blockchain-based public certificate management server 300 stores a set of public information for public information and public certificate for issuing a public certificate that is stored and managed in the public certificate registration-related information DB 311 during the blockchain-based public certificate issuance process. By monitoring the forgery periodically, if any one of the personal information for issuing a certificate and the public key for the certificate are forged due to illegality such as hacking, it can recognize and perform post-processing according to the forgery.

* To this end, the blockchain-based public certificate management server 300 is associated with the forgery monitoring of the public certificate forgery when the number of counted set of personal information for issuing the public certificate and the public key for the public certificate reaches a predetermined route hash generation period. Extract all the forgery monitoring transaction ID information accumulated in the information DB 312, and transmits it to the blockchain holding server 400.

The blockchain holding server 400 matches each transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts each matching forgery monitoring transaction information, and extracts each extracted forgery monitoring transaction information. After extracting the public certificate root hash information for registration included in the registered public certificate root hash information for each registration is transmitted to the blockchain-based public certificate management server 300.

Thereafter, the blockchain-based public certificate management server 300 receives the public certificate root hash information for each registration, and operates the hash processing engine 320 to accumulate and store them sequentially in the public certificate registration information DB 311. The number of personal information for issuing the public certificate and the number of public keys for the public certificate are divided into the predetermined route hash generation section.

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 processes the hash certificate information by hashing as many as the number belonging to the predetermined predetermined route hash generation section.

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 bilaterally prepares the transmitted public certificate root hash information for each registration and the generated public certificate root hash information for each provision in the order of generation. .

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 generates a hash value of each certificate public certificate root hash information and each certificate public certificate root hash information, which are contrasted in order of generation. The operation checks whether the hash values of the computed values are the same from the first generation order to the last generation order.

Through this, the hash processing engine 320 of the blockchain-based public certificate management server 300 recognizes that the forgery of the public certificate related information issued by the users does not occur when both hash values are the same, so that the forgery monitoring is performed. Control so that transaction information can be created.

In addition, the hash processing engine 320 of the blockchain-based official certificate management server 300 recognizes that the forgery of the relevant certificate issued by the user has occurred if the difference between the two hash values occurs, for monitoring the forgery By controlling the transaction information not to be generated, the post processing is performed according to the forgery occurrence.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 also includes public certificate node index information indicating the storage sequence of public certificate node hash information generated when the public certificate node hash information is generated. In addition, when generating the public certificate root hash information for registration, the public certificate root hash identifier information for registration, which is information for identifying the public certificate root hash information for registration, is also generated.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate node hash information, the public certificate node index information, and the public certificate root hash identifier information for registration, the public certificate registration information DB ( In addition to controlling to accumulate and store in 311), the public certificate root hash identifier information for registration is also controlled to accumulate and store in the official certificate forgery monitoring related information DB (312).

The transaction processing engine 320 of the blockchain-based authorized certificate issuing request server 200 controls the generated transaction ID information for forgery monitoring to be accumulated and stored in the authorized certificate forgery monitoring related information DB 312, thereby monitoring the forged authentication certificate. In the related information DB 312, the transaction ID information for forgery monitoring and the public certificate root hash identifier information for registration are controlled to be classified and stored as a pair.

On the other hand, the greater the degree of ease of forgery and alteration becomes, the more publicly authenticated certificate root hash information for registration stored in the blockchain of the blockchain holding server 400 is connected to each other.

Accordingly, the hash processing engine 320 of the blockchain-based public certificate management server 300 stores a set of public certificate private certificates and public keys for public certificate issuing a certificate of the previously generated public certificate root hash information for registration. It is controlled to be processed into the registered certification certificate root hash information having a Merkle tree structure in a state arranged in a predetermined storage order between the hashed and processed certificate certificate node hash information.

Through this, in the case of a registered certificate root hash information for registration stored in the forgery monitoring transaction information stored and managed in the blockchain holding server 400, the last registered registration from the first registered certification certificate root hash information for registration For example, the number of forgery monitoring transaction information registered in the blockchain holding server 400 in the blockchain-based certificate management server 300 has a structure in which the root certificate information for the certificate is connected like a chain. Forgery of hacking controls the personal information for issuing a certificate and forgery of the public key for the certificate.

In addition, the audit organization related to the national institution that audits the accredited certificate may check forgery by requesting an audit through the forgery verification request terminal 500 in relation to the accredited certificate of a specific user who issues the accredited certificate of the present invention.

To this end, the audit organization related to the national agency operates the forgery verification request terminal 500 to request the monitoring of the blockchain-based authorized certificate of a specific user to the blockchain-based authorized certificate issuing request server 200.

Thereafter, the blockchain-based public certificate issuing request server 200 extracts the personal information for issuing the public certificate of a specific user who has requested the monitoring of the blockchain-based public certificate from the public certificate registration information DB 311, and then executes the blockchain-based public information. Send to the official certificate management server (300).

The blockchain-based public certificate management server 300 matches the personal information for issuing the public certificate of a specific user who has requested the monitoring of the transmitted blockchain-based public certificate with the public certificate registration information DB 311, thereby authenticating the public certificate node of the specific user. Check for the presence of hash information.

Thereafter, the blockchain-based public certificate management server 300 operates a hash processing engine 320 when there is no public certificate node hash information of a specific user, and is sequentially stored and stored in the public certificate registration information DB 311. Hashing of public certificate for public certificate and public certificate for public certificate issuing in order of storage, unless there is public certificate node hash information among personal information for public certificate issuance and public key for public certificate. Process with information.

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 generates public certificate node index information indicating the storage order of processed public certificate node hash information, and processes the public certificate node. The city information is processed and processed into a registered public certificate root hash information having a Merkle tree structure, and generates a public certificate root hash identifier information for registration, which is information for identifying the processed public certificate root hash information.

Thereafter, the blockchain-based authorized certificate management server 300 operates a transaction processing engine 320 to retrieve forgery monitoring transaction information including the registered certificate root hash information for registration and the forgery monitoring transaction information as key values. Generates forgery monitoring transaction ID information used, and transmits the forgery monitoring transaction information to the blockchain holding server (400).

The blockchain holding server 400 records the transmitted forgery monitoring transaction information on the blockchain.

In addition, the hash processing engine 320 of the blockchain-based certificate management server 300 is a certificate for registration, which is an identifier for identifying the certificate certificate root hash information for registration in which the certificate certificate node hash information of a specific user belongs to the Merkle Tree structure. All certificate certificates that form the Merkle Tree structure of the registered certificate root hash information to which the certificate node hash information of a specific user belongs by referring to the certificate root hash identifier information. Generate certificate root hash information.

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 refers to the public certificate root hash identifier information for registration, and transmits forgery monitoring transaction information including the public certificate root hash information for registration. The transaction ID information for identifying forgery monitoring is transmitted to the blockchain holding server 400. Here, the blockchain holding server 400 receiving transaction ID information for forgery monitoring may use any one of the blockchain holding servers 400 distributed all over the world, and is designated in advance to increase work efficiency. Can be used.

Thereafter, the blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts the matching forgery monitoring transaction information, and extracts the matching forgery monitoring transaction information. After extracting the included public certificate root hash information for registration and transmits it to the blockchain-based public certificate management server (300).

Then, when the blockchain-based public certificate management server 300 is transmitted to the public certificate root hash information for registration, the hash value of the public certificate root hash information generated for registration and transmitted by operating the hash processing engine 320 generated Calculate each hash value of the prepared public certificate root hash information and verify that the calculated hash values are the same.

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 forgeries the calculated hash value of the public certificate node hash information and the calculated hash value of the prepared public certificate node hash information. The control request so that the message that the personal information and the public key for the certificate is not forgery made of a pair of specific users requested to the verification request terminal 500 is not forged.

On the other hand, the hash processing engine 320 of the blockchain-based public certificate management server 300 is a case where the calculated hash value of the public certificate node hash information and the calculated hash value of the public certificate node hash information for contrast are not the same. Storing of the relevant certificate node hash information with the same hash value among the certificate certificate node hash information corresponding to the hash value of the registered certificate root hash information for registration and the certificate certificate node hash information of the specific user Check that the sequence numbers are the same.

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 has a storage sequence number of the corresponding public certificate node hash information having a different hash value and the public certificate node hash information of a specific user. Control the forgery verification request terminal 500 to be notified that the forgery of the personal information and the public key for the certificate issuing a certificate issued by a pair of specific users.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 receives a hash value that is not the same among the public certificate node hash information corresponding to the hash value of the transmitted public certificate root hash information. If the storage sequence of the corresponding certificate certificate node hash information and the specific certificate node hash information of a specific user are not the same, the personal information for issuing the certificate and the public key for the certificate issued by the forgery verification request terminal 500 Control to be notified that the message is not forged.

As described above, the process of issuing a blockchain-based accredited certificate using the accredited certificate issuing system based on the blockchain of the present invention will be described below.

First, the user accesses the blockchain-based official certificate issuing request server 200 through the user terminal 100, and then transmits the personal information for issuing the public certificate which is composed of the identification information of the user required for issuing the blockchain-based public certificate. Request issuance of a chain-based official certificate (S100).

The blockchain-based public certificate issuing request server 200 generates a key generation guide signal for guiding the generation of public key for public certificate and private key for public certificate after verifying the personal information for issuing the public certificate. Transmission to the corresponding user terminal 100 requesting the issuance of the certificate (S110).

When the user terminal 100 transmits the key generation guide signal, the user terminal 100 operates the key generation engine 110 to control the public key for the public certificate and the private key for the public certificate to be generated, and the private key for the public certificate is a memory 120. ), The public key for the public certificate is transmitted to the blockchain-based public certificate issuing request server 200 (S120).

The blockchain-based public certificate issuing request server 200 receives the public key for the public certificate and receives a request for registration of the public certificate for the private certificate and the public certificate for the public certificate. While transmitting to the management server (300) (S130), by operating a hash processing engine 220, the personal information for issuing the certificate is hashed to control to be transmitted in the processed state as a user identification hash information.

The blockchain-based official certificate management server 300 operates the hash processing engine 320 to classify the public certificate for public information and the public key for public certificate issued in the official certificate registration request signal sent by the customer into a group. The certificate registration information DB 311 is accumulated and stored sequentially (S140).

Thereafter, the blockchain-based official certificate management server 300 checks whether a set of personal information for issuing a public certificate and a public key for a public certificate that have been accumulated and stored have reached a predetermined route hash generation period (S150).

First, the blockchain-based public certificate management server 300 is counted until the number of personal information for issue and the public key for public certificate is not reached as long as the number belonging to the root hash generation period is reached. Perform the count.

The blockchain-based public certificate management server 300 accumulates in the public certificate forgery monitoring-related information DB (312) when the number of personal information for issuing a public certificate and the public key for the public certificate reaches a root hash generation section. Extract all stored forgery monitoring transaction ID information, and transmits the extracted forgery monitoring transaction ID information to the blockchain holding server 400 (S160).

* The blockchain holding server 400 matches each transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts each matching forgery monitoring transaction information, and extracts each extracted forgery monitoring transaction. Extract the certificate of certification root authentication information contained in the information (S170).

Thereafter, the blockchain holding server 400 transmits the extracted public certificate root hash information for each registration to the blockchain-based official certificate management server 300 (S180).

The blockchain-based public certificate management server 300 operates a hash processing engine 320 after receiving the public certificate root hash information for each registration, and accumulates and stores a set of publicly stored certificates in the certificate registration information DB 311. The number of personal information for certificate issuance and the public key for public certificate is divided into a predetermined route hash generation section, and hashed as many as the number belonging to the predetermined predetermined route hash generation section. The furnace is processed (S190).

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 bilaterally prepares the transmitted public certificate root hash information for each registration and the generated public certificate root hash information for each prepared sequence in order of generation. In addition, each hash value of each registered public certificate root hash information and each prepared public certificate certificate root hash information is calculated in order of generation, and both hash values calculated from the first generation order to the last generation order are calculated. Check whether it is the same (S200).

On the other hand, the hash processing engine 320 of the blockchain-based public certificate management server 300 is the public certificate registration information DB (311) when the hash value of both calculated from the first generation order to the last generation order is not the same It detects that the personal information for the issuance of the public certificate for the issued certificate and the public key for the public certificate for the forged certificate (S201) consisting of a set of cumulative managements are carried out, and the post-processing is performed according to the forgery occurrence.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 is the number belonging to the predetermined route hash generation section when both hash values calculated from the first generation order to the last generation order are the same. As a result, hashing of a set of personal information for issuing a certificate and a public key for a certificate is processed in order of storage, and processed into a certificate certificate node hash information.

Subsequently, the hash processing engine 320 of the blockchain-based certificate management server 300 processes the hash certificate of the certificate certificate node hash information into a certificate certificate root hash information for registration in a Merkle tree structure (S210). .

Thereafter, the blockchain-based authorized certificate management server 300 operates a transaction processing engine 320 to retrieve forgery monitoring transaction information including the registered certificate root hash information for registration and the forgery monitoring transaction information as key values. Generates forgery monitoring transaction ID information used, and transmits the dual forgery monitoring transaction information to the blockchain holding server (400) (S220).

At this time, the hash processing engine 320 of the blockchain-based public certificate management server 300 stores the previously generated public certificate root hash information for registration and the public key for issuing the public certificate and the public certificate for the public certificate. It is controlled to be processed into the registered certification certificate root hash information having a Merkle tree structure in a state of being placed in a predetermined storage order among hashed and processed certificate certificate node hashes in order.

The blockchain holding server 400 records the transmitted forgery monitoring transaction information on the blockchain to issue a blockchain-based authorized certificate (S230).

On the other hand, a process for checking forgery by requesting an audit through a forgery verification request terminal 500 in connection with a certified user of a specific user issuing an accredited certificate of the present invention by an auditing organization related to a national institution auditing the accredited certificate is included. Lose.

To this end, the blockchain-based public certificate issuance request server 200 checks whether the forgery verification request terminal 500 requests the monitoring of the blockchain-based public certificate of a specific user (S251), and the blockchain-based public certificate of a specific user. When the request for monitoring of the blockchain-based public certificate is to extract the personal information for issuing the public certificate of the specific user who is requested to monitor the public certificate from the certificate registration information DB 311, and the blockchain-based public certificate management server 300 To transmit (S252).

Thereafter, the blockchain-based official certificate management server 300 matches the personal information for issuing the certificate of the specific user who requested the monitoring of the transmitted blockchain-based public certificate with the certificate registration information DB 311 to authenticate the specific user. Check that the certificate node hash information exists (S253).

The blockchain-based official certificate management server 300 directly enters the step S257 of generating a public certificate root hash information for the preparation described below when the public certificate node hash information of a specific user exists.

The blockchain-based public certificate management server 300 operates a hash processing engine 320 when there is no public certificate node hash information of a specific user, and accumulates and stores them sequentially in the public certificate registration information DB 311. Authorized certificate node hash information by hashing the private certificate issue personal information and public certificate public key in order of storage, unless there is public certificate node hash information among private information for public certificate issuance and public key for public certificate. Process with

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 generates public certificate node index information indicating the storage order of the processed public certificate node hash information, and processed public certificate node. The hash information is processed and processed into the registered public certificate root hash information having the Merkle tree structure, and the public certificate root hash identifier information for registration, which is information for identifying the processed public certificate root hash information, is generated. (S254).

Thereafter, the blockchain-based authorized certificate management server 300 operates a transaction processing engine 320 to retrieve forgery monitoring transaction information including the registered certificate root hash information for registration and the forgery monitoring transaction information as key values. Generates forgery monitoring transaction ID information used, and transmits the forgery monitoring transaction information to the blockchain holding server 400 (S255).

The blockchain holding server 400 records the transmitted forgery monitoring transaction information in the blockchain (S256).

In addition, the hash processing engine 320 of the blockchain-based certificate management server 300 is a certificate for registration, which is an identifier for identifying the certificate certificate root hash information for registration in which the certificate certificate node hash information of a specific user belongs to the Merkle Tree structure. All certificate certificates that form the Merkle Tree structure of the registered certificate root hash information to which the certificate node hash information of a specific user belongs by referring to the certificate root hash identifier information. Generate the certificate root hash information (S257).

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 refers to the public certificate root hash identifier information for registration, and transmits forgery monitoring transaction information including the public certificate root hash information for registration. Transmitting forgery monitoring transaction ID information to identify to the blockchain holding server 400 (S258).

Thereafter, the blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts the matching forgery monitoring transaction information, and extracts the matching forgery monitoring transaction information. After extracting the included public certificate root hash information for registration and transmits it to the blockchain-based public certificate management server 300 (S259).

Then, the blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, and generates a hash value of the public certificate root hash information for registration transmitted by operating the hash processing engine 320. The hash value of the prepared public certificate root hash information is respectively calculated, and it is checked whether the calculated hash values are the same (S260).

Meanwhile, the hash processing engine 320 of the blockchain-based public certificate management server 300 performs forgery verification when the calculated hash value of the public certificate node hash information is the same as the calculated hash value of the public certificate node hash information. The control unit (S261) to be notified that the personal information for a certificate issued by a pair of specific users requested to the request terminal 500 and the public key for the certificate is not forged.

In addition, the blockchain-based public certificate management server 300 has a hash value of the public certificate root hash information for registration and the public certificate node hash information of a specific user when the hash value of the public certificate root hash information for contrast is not the same. Hash of the registered certification certificate root hash information transmitted after recognizing the node index information of a specific user from among the certificate certificate node hash information constituting the Merkle tree structure of the registered certification certificate root hash information (S262). Among the public certificate node hash information corresponding to the value, check whether the corresponding public certificate node hash information having the same hash value and the storage order number of the public certificate node hash information of the specific user are the same (S263).

The blockchain-based public certificate management server 300 is identified as a forgery verification request terminal 500 when the storage order of the corresponding public certificate node hash information having a different hash value and the public certificate node hash information of a specific user are the same. It controls so that the message that the personal information for the issuance of the certificate and the public key for the certificate, which consists of a pair of users, has been forged, is notified (S264).

In addition, the blockchain-based public certificate management server 300 and the corresponding public certificate node hash information having a different hash value among the public certificate node hash information corresponding to the hash value of the public certificate root hash information for registration and If the storage order of the public certificate node hash information of a specific user is not the same, a message indicating that the personal information for issuing the certificate and the public key for the public certificate for the public certificate that have not been tampered with the forgery verification request terminal 500 are notified. S265).

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 is composed of a group of personal information for issuing a public certificate and public key information for a public certificate that are cumulatively managed in the public certificate registration information DB 311. Personal certificate for public certificate and public key for issuing a public certificate that consists of a set of certificates corresponding to the public certificate node hash information that forms the Merkle Tree structure of the public certificate node hash information of a specific user. Detect that the forgery is modified (S266) and performs post-processing according to the forgery.

And Figures 7 to 14 relates to an authentication certificate authentication system and method based on the blockchain.

As shown in the figure, the blockchain-based public certificate authentication system of the present invention includes a user terminal 100, a blockchain-based public certificate authentication request server 600, a blockchain-based public certificate management server 300, The blockchain holding server 400 and the forgery verification request terminal 500.

The blockchain-based authorized certificate authentication request server 600 is equipped with a random number generator 630 and an encryption engine 640, and operates the user terminal 100 according to the blockchain-based authorized authentication request of the user terminal 100. It is a server member that relays a request for a blockchain-based accredited certification by transmitting personal information for issuing an accredited certificate of a corresponding user.

To this end, the blockchain-based public certificate authentication request server 600 includes a DB unit 610.

The DB unit 610 stores the identification information of the user who operates the user terminal 100, the user identification for each member storing the personal information for issuing the certificate, consisting of the identification information of the user used when issuing the blockchain-based certificate issuance The information DB 611 is included. Here, the personal information for issuing the public certificate is stored and transmitted in a state processed as a user identification hash information by hashing operation.

The blockchain-based official certificate management server 300 judges the validity of the public certificate by determining the validity of the public certificate of the corresponding user based on the personal information for issuing the public certificate transmitted from the blockchain-based public certificate authentication request server 600. If it is determined that the public key for the public certificate of the user is a member for transmitting to the blockchain-based public certificate authentication request server 600.

In order to perform such a function, the blockchain-based authorized certificate management server 300 includes a DB unit 310 and a hash processing engine 320.

First, the DB unit 310 has a set of personal information for issuing a public certificate and a public certificate for a public certificate, a public certificate for a public certificate issuing a public certificate, and a public key for a public certificate. The certification certificate root hash identifier information for registration, which is an identifier for identifying the certification certificate root hash information for registration, which is classified and stored sequentially and accumulated and stored sequentially, and accumulatively stored in the Merkle Tree structure, is accumulated and stored. Whenever the transaction information for forgery monitoring is generated in the public certificate registration information DB 311 and the blockchain-based public certificate management server 300, the authentication certificate forgery monitoring that accumulates and stores the transaction ID information for the forgery monitoring generated together as an identifier The related information DB 312 is provided.

Based on this, the blockchain-based official certificate management server 300 describes a process of determining the validity of the public certificate of the user based on the personal information for issuing the public certificate issued as follows.

First, the blockchain-based public certificate management server 300 matches the personal information for issuing the public certificate issued from the blockchain-based public certificate authentication request server 600 with the public certificate registration information DB 311 to authenticate the user. The public key for the certificate is extracted, and the hash processing engine 320 is operated to process the extracted public certificate for public certificate and the transmitted personal information for issuing the public certificate for processing into a public certificate node hash information for preparation. .

Thereafter, the hash processing engine 320 of the blockchain-based official certificate management server 300 extracts the public certificate node hash information registered when issuing the blockchain-based official certificate among information stored in the public certificate registration information DB 311. do.

Thereafter, the hash processing engine 320 of the blockchain-based certificate management server 300 calculates a hash value of the extracted certificate certificate node hash information and a hash value of the prepared certificate certificate node hash information, respectively, Check if the calculated hash values are the same and if it is the same, determine that the validity of the accredited certificate is legal.

If the hash processing engine 320 of the blockchain-based public certificate management server 300 does not have the same hash value as the hash value of the public certificate node hash information and the hash value of the public certificate node hash information is prepared. The user terminal 100 performs a function of controlling to be notified a message that the blockchain-based authentication process is denied.

Through this, the user can quickly recognize the forgery and respond quickly, thereby preventing the illegal use of the illegal user due to hacking in advance, thereby minimizing the harm of the legitimate user.

On the other hand, the hash processing engine 320 of the blockchain-based public certificate management server 300 additionally if the calculated hash value of the public certificate node hash information and the calculated hash value of the public certificate node hash information for comparison are the same. The certification certificate registration information DB (311) is used to register the certification certificate root hash identifier information, which is an identifier that identifies the certification certificate root hash information registered in the Merkle Tree structure. Extract from.

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 refers to the extracted public certificate root hash identifier information for registration, and the public certificate root for registration to which the public certificate node hash information of the user belongs. Extract all the public certificate node hash information that forms the Merkle tree structure of the hash information from the public certificate registration information DB (311), and the extracted public certificate node hash information of the prepared public certificate node hash information is composed of the Merkle tree structure Process with hash information.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 matches the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312 for the forgery monitoring transaction. Extract ID information and transmit it to the blockchain holding server 400.

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and is included in the extracted forgery monitoring transaction information. After extracting the public certificate root hash information for registration and transmitting it to the blockchain-based public certificate management server (300).

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, and operates the hash processing engine 320 for the hash value of the public certificate root hash information for registration and generated contrast. Hash values of the public certificate root hash information are respectively calculated, and both hash values of the calculated certificates are verified to be the same, and finally, the validity of the public certificate is judged to be valid.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 has a hash value that is not the same among the hash values of the public certificate root hash information for registration and the public certificate root hash information for each preparation. If present, among the personal information for issuing the certificate or the public key information for the certificate, which is accumulated and managed in the certificate registration information DB 311, the public certificate root hash for the registration to which the user's certificate certificate node hash information belongs. It detects that the personal information for issuing the public certificate and the public key for the public certificate that constitute the pair corresponding to the node hash information of the public certificate which constitutes the Merkle Tree structure of the information are forged, and then proceeds with post-processing according to the forgery.

Through this, the present invention monitors whether or not forgery of the public certificate registration-related information of customers issued to the blockchain-based certificate management server 300 each time a request for blockchain-based certificate authentication, blockchain due to illegal hacking If forgery certificate registration related information stored and managed by the customer-based certificate management server 300 is forged and provides as quickly as possible to respond to it.

Thereafter, the blockchain-based public certificate authentication request server 600 receives the public key for the public certificate, and checks the Internet communication protocol between the user terminals 100.

Here, the Internet communication protocol is a communication protocol used to transfer hypertext documents between a web server and a user's Internet browser on the Internet, and is divided into http (Hypertext Transfer Protocol) and https (Hypertext Transfer Protocol over Secure Socket Layer). The difference is whether the document is encrypted when it is delivered. In other words, http is delivered in plain text when delivering documents, and https is encrypted when delivering documents.

For this reason, in the case of the use environment of http, since the document is transmitted in plain text, the risk of hacking is caused.

In order to solve the risk of hacking and to verify that the user is a legitimate authorized certificate user, the blockchain-based authorized certificate management server 300 operates a random number generator 630 when the Internet communication protocol between the user terminal 100 is http. Control to generate a random session key that is a random value.

After that, the blockchain-based public certificate management server 300 operates the encryption engine 640 to encrypt the random session key using the public key for the public certificate among the information included in the certificate validation signal, and converts the encrypted random session key into an encrypted random session key. This is transmitted to the user terminal 100.

The user terminal 100 operates the decryption engine 160 to decrypt the encrypted random session key transmitted based on the private key stored in the memory 120 to be converted into a random session key, thereby confirming that the user is a legitimate user. Perform user authentication to confirm the user.

That is, if there is no private key for public authentication in the user terminal 100 held by the user, the decryption process itself may not be performed, thereby proving that the user is a legitimate user.

In addition, the Internet communication protocol is encrypted and decrypted based on a random session key provided from the user terminal 100 between the user terminal 100 and the blockchain-based authorized certificate authentication request server 600 under the environment of http. Since the communication can be performed, even after the user authentication, the private key for public authentication can be completely blocked, and thus the public authentication can be provided safely based on the blockchain without the risk of hacking.

If the Internet communication protocol is https, the documents already transmitted through communication between the user terminal 100 and the blockchain-based authorized certificate authentication request server 600 are transmitted in an encrypted state, and are decrypted and output. You only need to do it.

To this end, the blockchain-based authorized certificate management server 300 controls the random number generator 630 to be generated by operating a random number generator 630 when the Internet communication protocol between the user terminal 100 is https, and the user terminal ( 100) to be transmitted.

The user terminal 100 operates the hash processing engine 140 to hash the transmitted random number data to process the random number hash information.

Thereafter, the user terminal 100 operates the encryption engine 130, encrypts the random number hash information based on the private key for public authentication stored and managed in the memory 120, and converts the random number hash information into encrypted random hash information. It sends to the chain-based official certificate authentication request server 600.

The blockchain-based authorized certificate authentication request server 600 operates the hash processing engine 620 to hash the random number data having the same value as that transmitted to the user terminal 100 to process the random number hash information for preparation. .

Thereafter, the blockchain-based public certificate authentication request server 600 operates a decryption engine 650 to decrypt the encrypted random number hash information transmitted based on the public key for the public certificate of the corresponding user and control the data to be converted into random hash information. The user authentication is performed by calculating the hash value of the converted random number hash information and the hash value of the contrast random number hash information, respectively, and confirming that both hash values are the same.

On the other hand, the user can destroy the issued blockchain-based public certificate.

To this end, the blockchain-based public certificate authentication request server 600, if a request for destruction of the blockchain-based public certificate from the user terminal 100, the public certificate node of the user stored in the public certificate registration information DB (311) Change and save the city information into the discarded certificate certificate node hash information, and count the counted hash information of the user who requested the destruction of the blockchain-based certificate certificate to the number belonging to the predetermined route hash generation section. The certificate is repeatedly stored in the registration information DB (311).

Accordingly, the blockchain-based public certificate management server 300 includes the number of public information for public information and public key for issuing a set of public certificates including the public certificate node hash information of the user who requested the destruction of the blockchain-based public certificate. When a predetermined route hash generation period is reached, a hash processing engine 320 is operated to hash a set of personal information for issuing a public certificate and a public key for a public certificate that are counted as much as a predetermined root hash generation period in order of storage order. By processing the data into the official certificate node hash information, the block chain based on the Merchant structure that forms the official certificate root hash information for registration included in the forgery monitoring transaction information transmitted and registered to the blockchain holding server 400 The user controls his / her blockchain by controlling to include the hash certificate information of the user who requested the destruction of the certificate. The guide can confirm that the certificate was half destroyed.

In addition, the audit organization related to the national institution that audits the accredited certificate may check forgery by requesting an audit through the forgery verification request terminal 500 in relation to the accredited certificate of a specific user using the accredited certificate of the present invention.

To this end, the DB unit 610 of the blockchain-based official certificate authentication request server 600 is provided with personal identification information DB 611 for each member for issuance of the public certificate of the user who operates the user terminal 100. Lose.

In addition, the public certificate registration information information database 311 of the blockchain-based public certificate management server 300 is divided into a public certificate for public certificate issue and a public certificate node public hash information that is hashed. Accumulated and stored sequentially.

Through this, the forgery verification request terminal 500 requests the monitoring of the blockchain-based public certificate of a specific user to the blockchain-based public certificate authentication request server 600.

The blockchain-based public certificate authentication request server 600 extracts the personal information for issuing the public certificate of a specific user who has requested the monitoring of the blockchain-based public certificate from the user identification information DB 611 for each member, and the blockchain-based public certificate. The management server 300 transmits.

The blockchain-based public certificate management server 300 matches the personal information for issuing the public certificate of a specific user who has requested the monitoring of the transmitted blockchain-based public certificate with the public certificate registration information DB 311, thereby authenticating the public certificate node of the specific user. Recognize the hash information, and the certification certificate for the specific user whose node hash information is identified in the Merkle Tree structure. Extracted from the registration related information DB 311.

Subsequently, the blockchain-based official certificate management server 300 operates the hash processing engine 320 to refer to the extracted public certificate root hash identifier information for registration, for registration in which the public certificate node hash information of a specific user belongs. Extract all public certificate node hash information forming the Merkle Tree structure of the public certificate root hash information from the public certificate registration information DB 311, and prepare the prepared certificate node hash information from the extracted mercury tree structure. Process with the official certificate root hash information.

In addition, the blockchain-based public certificate management server 300, the hash processing engine 320 matches the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312 to register the public certificate root Extract the forgery monitoring transaction ID information identifying the forgery monitoring transaction information including the hash information, and transmits it to the blockchain holding server (400).

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, and operates the hash processing engine 320 for the hash value of the public certificate root hash information for registration and generated contrast. By calculating the hash value of the public certificate root hash information, respectively, and confirming that the calculated hash values are the same, in the same case, the personal information for issuing the public certificate which consists of a pair of specific users who requested the forgery verification request terminal 500 And a message notifying that the public key for the public certificate has not been forged.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 may determine that the calculated hash value of the public certificate node hash information is not the same as the calculated hash value of the public certificate node hash information. The storage order of the corresponding certificate certificate node hash information having the same hash value among the certificate certificate node hash information forming the Merkle Tree structure of the registered certificate certificate root hash information to which the user certificate certificate node hash information belongs. The public certificate node index information indicating is recognized through the public certificate registration information DB 311.

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 has the public certificate node index information of the public certificate node hash information and the public certificate node hash information of a specific user having the same hash value. Verify that the storage order of the public certificate node index information is the same.

Through this, the hash processing engine 320 of the blockchain-based public certificate management server 300 hashes the public certificate node index information of the public certificate node hash information having the same hash value and the public certificate node of the specific user. If the storage order number of the public certificate node index information of the information is the same, the forgery verification request terminal 500 controls to be notified that the message forgery of the personal information and the public key for the public certificate for the certificate issued as a pair of specific users.

In addition, the blockchain-based public certificate management server 300 has the public certificate node index information of the corresponding public certificate node hash information having the same hash value and the public certificate node index information of the public certificate node hash information of a specific user. If the storage order is not the same, the forgery verification request terminal 500 is controlled so as to be notified that the message that the personal information for the issuance of a certificate consisting of a set and the public key for the certificate is not forged.

Thereafter, the blockchain-based public certificate management server 300 is a private certificate node of a specific user from among the personal information for issuing the public certificate and the public key information for the public certificate which consists of a group that is accumulated and managed in the public certificate registration-related information DB 311. Detected that the personal information for issuing the public certificate and the public key for the public certificate for the certificate, which consisted of one pair corresponding to the node hash information of the public certificate which constitutes the Merkle Tree structure of the public certificate root hash information to which the city information belongs, have been forged. Perform post-processing according to the forgery occurrence.

The authentication process of the blockchain-based accredited certificate using the accredited certificate authentication system based on the blockchain of the present invention is as follows.

The user accesses the blockchain-based official certificate authentication request server 600 through the user terminal 100 and requests a blockchain-based official authentication (S300).

The blockchain-based public certificate authentication request server 600 extracts the personal information for issuing the public certificate issued by the user identification hash information from the user identification information DB 611 for each member according to the blockchain-based public certificate request. And, this is transmitted to the blockchain-based official certificate management server 300 (S310).

The blockchain-based public certificate management server 300 determines the validity of the public certificate of the user based on the personal information for issuing the public certificate issuance (S320). First, the blockchain-based public certificate management server 300 is a blockchain-based public certificate. By matching the personal information for issuing the public certificate sent from the certificate authentication request server 600 with the public certificate registration information DB 311, extracting the public key for the public certificate of the corresponding user, and operating a hash processing engine 320. The extracted public key for the public certificate and the personal information for issuing the public certificate issued are hashed and processed into a prepared public certificate node hash information (S321).

Thereafter, the hash processing engine 320 of the blockchain-based official certificate management server 300 extracts the public certificate node hash information registered when issuing the blockchain-based official certificate among information stored in the public certificate registration information DB 311. The hash value of the extracted public certificate node hash information and the hash value of the prepared public certificate node hash information are respectively calculated, and the hash values of the calculated both nodes are the same (S322).

Based on this, the hash processing engine 320 of the blockchain-based public certificate management server 300 has a calculated hash value of the public certificate node hash information and the hash value of the prepared public certificate node hash information is not the same. If not, the user terminal 100 controls to be notified a message that the blockchain-based authentication process is denied (S323).

The hash processing engine 320 of the blockchain-based official certificate management server 300 issues an official certificate when the calculated hash value of the public certificate node hash information and the calculated hash value of the public certificate node hash information are the same. Extraction of the certification certificate root hash identifier for registration, which is an identifier for identifying the certification certificate root hash information for registration belonging to the Merkle Tree structure, is registered in the certificate registration information DB (311). (S324).

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 refers to the extracted public certificate root hash identifier information for registration, and the public certificate root for registration to which the public certificate node hash information of the user belongs. Extract all the public certificate node hash information that forms the Merkle tree structure of the hash information from the public certificate registration information DB (311), and the extracted public certificate node hash information of the prepared public certificate node hash information is composed of the Merkle tree structure Processing is performed with hash information (S325).

Subsequently, the hash processing engine 320 of the blockchain-based official certificate management server 300 matches the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312 to register the public certificate root for registration. The forgery monitoring transaction ID information for identifying the forgery monitoring transaction information including the hash information is extracted and transmitted to the blockchain holding server 400 (S326).

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and is included in the extracted forgery monitoring transaction information. After extracting the public certificate root hash information for registration and transmits it to the blockchain-based public certificate management server 300 (S327).

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, and operates the hash processing engine 320 for the hash value of the public certificate root hash information for registration and generated contrast. The hash value of the public certificate root hash information is respectively calculated, and it is checked whether the calculated hash values are the same (S328).

First, the hash processing engine 320 of the blockchain-based official certificate management server 300 is a certification of the customer consisting of a set of cumulative management in the public certificate registration information DB 311 when the calculated hash values are not the same As a group that corresponds to the public certificate information for certificate issuance and public key information for certificate issuance, which corresponds to the public certificate node hash information that forms the Merkle tree structure of the public certificate root hash information for registration to which the user's public certificate node hash information belongs. It detects that the personal information for the issuance of the accredited certificate and the public key for the accredited certificate are forged (S329) and performs post-processing according to the forgery.

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 may determine that the calculated hash value of the public certificate node hash information is the same as the calculated hash value of the public certificate node hash information. It is judged to be valid.

Through this, the blockchain-based public certificate management server 300 extracts the public key for the public certificate of the user from the public certificate registration-related information DB 311, and transmits it to the blockchain-based public certificate authentication request server 600 (S330).

The blockchain-based public certificate authentication request server 600 receives the public key for the public certificate, and performs user authentication between the user terminals 100 based on the transmitted public certificate public key (S3400). As follows.

First, the blockchain-based official certificate authentication request server 600 checks whether the Internet communication protocol between the user terminal 100 requesting the blockchain-based official authentication is http or https (S340).

The blockchain-based official certificate authentication request server 600 controls the random session generator 630 to generate a random session key when the internet communication protocol between the user terminals 100 is http (S350).

The blockchain-based public certificate authentication request server 600 operates an encryption engine 640 to encrypt a random session key by using the public key for the public certificate and converts it into an encrypted random session key and transmits it to the user terminal 100 ( S360).

The user terminal 100 receives the encrypted random session key, operates the decryption engine 160, and decrypts the encrypted random session key based on the private key for public authentication stored in the memory 120 to be converted into a random session key. By controlling, authentication of the user (S370) is completed.

The blockchain-based official certificate authentication request server 600 generates a random value random number data by operating a random number generator 630 when the Internet communication protocol between the corresponding user terminal 100 requesting the blockchain-based official authentication is https. Then, it is transmitted to the user terminal 100 (S380).

The user terminal 100 operates the hash processing engine 140 to hash the transmitted random number data to process the random number hash information (S390).

The user terminal 100 operates the encryption engine 130, encrypts the random number hash information based on the private key for public authentication stored and managed in the memory 120, and converts it into encrypted random number hash information, which is based on block chain. The certificate is sent to the authentication request server 600 (S400).

The blockchain-based authorized certificate authentication request server 600 operates a hash processing engine 620 to hash the random number data having the same value as that transmitted to the user terminal 100 to process the random number hash information for preparation. By operating the decryption engine 650, the encrypted random number hash information relayed on the basis of the public key for the public certificate of the user is decrypted and controlled to be converted into random number hash information, and the hash value of the converted random number hash information. And the hash value of the random number hash information for the comparison are respectively calculated to confirm that both hash values are the same, thereby completing user authentication (S410).

To this end, the blockchain-based public certificate authentication request server 600 checks whether the user terminal 100 requests the destruction of the blockchain-based public certificate (S500), and if the request for the destruction of the blockchain-based public certificate is registered, the public certificate is registered. The public certificate node hash information of the corresponding user stored in the related information DB 311 is changed and stored into the discarded official certificate node hash information (S510).

Thereafter, the blockchain-based public certificate authentication request server 600 may count the public certificate node hash information of the user who requested the destruction of the blockchain-based public certificate as many times as the number belonging to the predetermined root hash generation period. The registration related information DB 311 is repeatedly stored (S520).

Thereafter, the blockchain-based public certificate management server 300 includes the number of public information for public information and public key for issuing a set of public certificates including the public certificate node hash information of the user who requested the destruction of the blockchain-based public certificate. When a predetermined route hash generation section is reached, the hash processing engine 320 stores a set number of personal information for issuing a public certificate and a public key for a public certificate that are counted as many times as a predetermined route hash generation section. By hashing as it is processed into a public certificate node hash information, the block in the Merchant structure that constitutes the official certificate root hash information for registration contained in the forgery monitoring transaction information transmitted and registered to the blockchain holding server 400 The node-based hash information of the corresponding user who requested the destruction of the chain-based official certificate is also included (S530).

This guides the user to confirm that his or her blockchain-based public certificate has been destroyed.

In addition, an auditing organization for a user or a national institution that audits an accredited certificate may request forgery regarding the forgery verification request terminal 500 through the forgery verification request terminal 500 to check whether the forgery is forged or not.

That is, the blockchain-based authorized certificate authentication request server 600 checks whether the forgery verification request terminal 500 requests the monitoring of the blockchain-based authorized certificate of a specific user (S600), and determines the blockchain-based authorized certificate of the specific user. In case of request for monitoring, the personal information for issuing the certificate of the specific user who requested the monitoring of the blockchain-based certificate is extracted from the certificate registration information DB 311 and transmitted to the blockchain-based certificate management server 300 ( S610).

The blockchain-based public certificate management server 300 matches the personal information for issuing the public certificate of a specific user who has requested the monitoring of the transmitted blockchain-based public certificate with the public certificate registration information DB 311, thereby authenticating the public certificate node of the specific user. Recognize the hash information, and the certification certificate for the specific user whose node hash information is identified in the Merkle Tree structure. The registration related information DB 311 is extracted (S620).

The hash processing engine 320 of the blockchain-based public certificate management server 300 refers to the extracted public certificate root hash identifier information for registration, and the public certificate root hash for registration to which the public certificate node hash information of a specific user belongs. Extract all public certificate node hash information forming the Merkle tree structure of information from the public certificate registration related information DB 311, and extract the public certificate node hash of the prepared public certificate node hash information having the extracted mercury tree structure. The information is processed (S630).

After that, the hash processing engine 320 of the blockchain-based official certificate management server 300 matches the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312, and the root certificate for registration. Forgery monitoring transaction ID information for identifying the forgery monitoring transaction information including the time information is extracted and transmitted to the blockchain holding server 400 (S640).

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and is included in the extracted forgery monitoring transaction information. After extracting the public certificate root hash information for registration and transmits it to the blockchain-based public certificate management server 300 (S650).

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, and operates the hash processing engine 320 for the hash value of the public certificate root hash information for registration and generated contrast. The hash value of the public certificate root hash information is respectively calculated, and it is checked whether the calculated hash values are the same (S660).

The hash processing engine 320 of the blockchain-based public certificate management server 300 is a forgery verification request terminal when the calculated hash value of the public certificate node hash information and the calculated hash value of the public certificate node hash information are the same. (500) Control so that the message that the personal information for a certificate issued by a pair of specific users and the public key for the certificate is not forged for a request made to (500) (S670).

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 may determine that the calculated hash value of the public certificate node hash information is not the same as the calculated hash value of the public certificate node hash information. The storage order of the corresponding certificate certificate node hash information having the same hash value among the certificate certificate node hash information forming the Merkle Tree structure of the registered certificate certificate root hash information to which the user certificate certificate node hash information belongs. The public certificate node index information indicating is recognized through the public certificate registration information DB 311 (S661).

Subsequently, the hash processing engine 320 of the blockchain-based public certificate management server 300 has the public certificate node index information of the public certificate node hash information and the public certificate node hash information of a specific user having the same hash value. Check whether the storage order of the public certificate node index information is the same (S662).

First, the hash processing engine 320 of the blockchain-based public certificate management server 300 has the public certificate node index information of the public certificate node hash information having the same hash value and the public certificate node hash information of a specific user. If the storage order of the public certificate node index information of the same is the same, the forgery verification request terminal 500 controls to receive a message indicating that the personal information for issuing a certificate of a specific user and the public key for the public certificate forgery of a specific user have been forged (S663). .

In addition, the hash processing engine 320 of the blockchain-based public certificate management server 300 may include the public certificate node index information of the public certificate node hash information and the public certificate node hash information of a specific user having a different hash value. If the storage order of the public certificate node index information is not the same, the forgery verification request terminal 500 controls to receive a message indicating that the personal information for issuing a certificate and the public key for public certificate forgery have not been forged (S664).

Thereafter, the blockchain-based public certificate management server 300 is a private certificate node of a specific user from among the personal information for issuing the public certificate and the public key information for the public certificate which consists of a group that is accumulated and managed in the public certificate registration-related information DB 311. Detected that the personal information for issuing the public certificate and the public key for the public certificate for which the certificate consists of one pair corresponding to the node hash information of the public certificate which constitutes the Merkle Tree structure of the public certificate root hash information to which the city information belongs (S665) ), And post-treatment according to forgery.

[Description of the code]

100: user terminal 110: key generation engine

120: memory 130,640: encryption engine

140,220,320,620: hash processing engine 150: control unit

160,650 Decoding Engine

200: blockchain-based public certificate issuance request server

210,310,610: DB

211,611: User identification information DB for each member

300: Blockchain based certificate management server

311: DB related information registration information for each customer

312: DB forgery monitoring information DB

330: transaction processing engine 400: blockchain holding server

500: forgery verification request terminal

600: blockchain-based public certificate authentication request server

630: random number generator

Claims

A user terminal 100 for requesting blockchain-based authorized authentication;

In accordance with the blockchain-based authentication request of the user terminal 100, the blockchain-based authentication that relays the request for the authentication of blockchain-based authentication by transmitting personal information for issuing the certificate of the corresponding user operating the user terminal 100. Certificate authentication request server 600;

Based on the personal information for issuing the accredited certificate transmitted from the blockchain-based accredited certificate authentication request server 600, if the validity of the accredited certificate is judged to be valid by determining the validity of the accredited certificate of the corresponding user, the relevant certificate is disclosed for the public. A blockchain-based public certificate management server 300 for transmitting a key to the blockchain-based public certificate authentication request server 600 to control user authentication to be performed;

When the transaction information for bitcoin payment is transmitted, the electronic wallet with a blockchain that authenticates the bitcoin payment by verifying the transmitted bitcoin payment transaction information and records the transaction information for the bitcoin payment according to the authentication Onboard, the blockchain is a blockchain based on the blockchain, characterized in that consisting of; blockchain holding server (400) in which the forgery monitoring transaction information information is recorded, including the certification certificate root hash information for registration; Certificate Authentication System.
The method of claim 1,

The blockchain-based official certificate authentication request server 600 is processed by the hashing operation of the personal information for issuing the public certificate transmitted to the blockchain-based official certificate management server 300 as a user identification hash information processed state Authorized certificate authentication system based on blockchain, characterized in that the control to be transmitted.
The method of claim 1,

The blockchain-based authorized certificate management server 300, DB unit 310; And a hash processing engine 320;

The DB unit 310, the authentication certificate node hash information hashed by a set of personal information and public certificate for public certificate issuance, a public certificate for public certificate issuance and a public certificate for public certificate consisting of a set The certification certificate root hash identifier information for registration, which is an identifier for identifying the certification certificate root hash information for registration, which is sequentially accumulated and stored, and the certificate certificate node hash information stored in the cumulative structure having a Merkle tree structure is accumulated. A stored certificate registration information DB 311 is stored; Whenever the forgery monitoring transaction information is generated in the blockchain-based authentication certificate management server 300, the authentication certificate forgery monitoring related information DB 312, which accumulates and stores transaction ID information for forgery monitoring generated together as an identifier; Include,

In the blockchain-based public certificate management server 300, the process of determining the validity of the public certificate of the user based on the transmitted personal information for issuing the public certificate,

In the blockchain-based official certificate management server 300, matching the personal information for issuing the public certificate issued from the blockchain-based official certificate authentication request server 600 with the official certificate registration information DB 311 corresponding user Extract the public key for the public certificate, and operate the hash processing engine 320 to hash the extracted public certificate public key and the transmitted personal information for issuing the public certificate issuance to the public certificate node hash information for preparation. Processing,

In the hash processing engine 320 of the blockchain-based public certificate management server 300, among the information stored in the public certificate registration information DB 311, the public certificate node hash information registered when issuing a blockchain-based public certificate is issued. Extracts the hash value of the extracted public certificate node hash information and the hash value of the prepared public certificate node hash information, respectively, and checks whether the calculated hash values are the same, Certified certificate authentication system based on the blockchain, characterized in that the validity of the legal decision.
The method of claim 3,

The blockchain-based official certificate management server 300 is the user terminal 100 when the calculated hash value of the certificate certificate node hash information and the calculated hash value of the prepared official certificate node hash information is not the same. The blockchain-based accredited certificate authentication system characterized in that the control to be notified that the message that the blockchain-based accredited authentication process has been rejected.
The method of claim 3,

In the official certificate registration information DB 311, the official certificate root hash identifier for registration, which is an identifier for identifying the official certificate root hash information for registration in which the cumulatively stored official certificate node hash information has a Merkle tree structure. Information is accumulated and stored,

The hash processing engine 320 of the blockchain-based public certificate management server 300 adds the calculated hash value of the public certificate node hash information and the calculated hash value of the prepared public certificate node hash information. The certificate certification related information DB for the certification certificate root hash identifier for registration, which is an identifier for identifying the certification certificate root hash information for registration belonging to the Merkle Tree structure, is registered when the certificate issuance is issued. All public certificates extracted from (311) and forming the Merkle Tree structure of the public certificate root hash information for registration to which the public certificate node hash information of the user belongs with reference to the extracted public certificate root hash identifier information extracted for registration. The node hash information is extracted from the public certificate registration information DB 311, and the extracted public certificate node hash information is a Merkle tree structure. Process the prepared official certificate root hash information for the prepared, and match the extracted public certificate root hash identifier information for registration with the official certificate forgery monitoring related information DB 312 to extract the transaction ID information for forgery monitoring This is transmitted to the blockchain holding server 400,

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and extracts the matching forgery monitoring transaction information. After extracting the included public certificate root hash information for registration and transmits it to the blockchain-based public certificate management server 300,

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, operates the hash processing engine 320 and the hash value of the public certificate root hash information transmitted. Computing the hash value of the generated public certificate root hash information prepared for each, and checks whether the calculated hash value is the same, and if the same block chain characterized in that the validity of the public certificate is determined to be legitimate Based on the accredited certificate certification system.
The method of claim 5,

The hash processing engine 320 of the blockchain-based official certificate management server 300 has a hash value that is not the same among the hash values of the public certificate root hash information for the registration and the public certificate root hash information for each preparation. If present, the certification certificate root for registration belonging to the public certificate information of the certificate or the public key information for the public certificate issued by the customer cumulatively managed in the public certificate registration related information DB (311) belonging to the public certificate node hash information of the user The block chain based on the block chain, which detects that the personal information for issuing the public certificate and the public key for the public certificate for which the public certificate for the certificate is composed of the pair corresponding to the node hash information of the hash information of the hash information are forged. Accredited Certificate Certification System.
The method of claim 1,

The user terminal 100, the decryption engine 160; And a memory 120 in which a private key for public authentication is stored.

The blockchain-based authorized certificate authentication request server 600, a random number generator (630); And an encryption engine 640;

The blockchain-based public certificate authentication request server 600 receives the public key for the public certificate from the blockchain-based public certificate management server 300, and checks the Internet communication protocol between the user terminal 100, and confirms that. If the established Internet communication protocol is http, the random number generator 630 operates to generate a random session key having a random value, and operates the encryption engine 640 to use the public key for the public certificate for the random session. Encrypts the key and converts it into an encrypted random session key and transmits it to the user terminal 100,

The user terminal 100 operates the decryption engine 160 to control the decryption of the transmitted encrypted random session key based on a private key stored in the memory 120 to be converted into a random session key. Authorized certificate authentication system based on blockchain, characterized in that the authentication is performed safely.
The method of claim 7, wherein

The user terminal 100, the encryption engine 130; Random number generator 630; And a hash processing engine 140;

The blockchain-based public certificate authentication request server 600 includes a hash processing engine 620; And a decryption engine 650;

The blockchain-based authorized certificate authentication request server 600 generates random number data having a random value by operating the random number generator 630 when the Internet communication protocol between the user terminal 100 is https, and the user terminal ( 100),

The user terminal 100 operates the hash processing engine 140 to hash the transmitted random number data to process the random number hash information, and operates the encryption engine 130 to operate the memory 120. Encrypts the random number hash information based on the private key for public authentication stored in the system and converts the random number hash information into encrypted random number hash information, and transmits it to the blockchain-based authorized certificate authentication request server 600,

The blockchain-based official certificate authentication request server 600 operates the hash processing engine 620 to hash random data having the same value as that transmitted to the user terminal 100 to prepare random number hash information for preparation. Processing and operating the decryption engine 650 to decrypt the transmitted encrypted random number hash information based on the public key for the public certificate of the corresponding user and control it to be converted into random number hash information, and the converted random number hash. Computing the hash value of the information and the hash value of the random number hash information for the prepared by verifying that both hash values are the same, authentication of the authentication system based on the block chain, characterized in that for performing the user authentication.
The method of claim 1,

In the blockchain-based public certificate management server 300, a public certificate for the public information for public certificate and public certificate for certificate issuance, a public certificate for public certificate for public certificate, and the public certificate for public certificate for public authentication Certificate node hash information, which is divided into certificate node hash information and stored sequentially, and accumulates and stores the certificate certificate hash hash for registration, which is an identifier for identifying the registered certificate root hash information that has a Merkle tree structure. Forgery monitoring transaction ID information generated together as an identifier each time the forgery monitoring transaction information is generated in the public certificate registration information DB (311) and the blockchain-based public certificate management server 300 accumulatively stored at the time identifier information DB unit 310 having a certified certificate forgery monitoring related information DB 312; And a hash processing engine 320;

When the blockchain-based authorized certificate authentication request server 600 requests the destruction of the blockchain-based authorized certificate from the user terminal 100, the authorized certificate node solution of the corresponding user stored in the certificate registration information DB 311 Change and save the city information to the official certificate node hash information, and register the public certificate node hash information of the user who requested the destruction of the blockchain-based public certificate to the predetermined route hash generation section. Repeatedly stored in the related information DB (311),

The blockchain-based public certificate management server 300 has a number of public key for public information and public certificate for issuing a set of public certificates including the public certificate node hash information of the user who requested the destruction of the blockchain-based public certificate. When the predetermined route hash generation section is reached, the hash processing engine 320 operates to store the set of personal information for issuing the public certificate and the public key for the public certificate, which are counted by the predetermined route hash generation section, in the order of storage order. By hashing and processing the certificate into the hash certificate information, the block structure in the Merchant structure that constitutes the authentication certificate root hash information for registration contained in the forgery monitoring transaction information transmitted and registered to the blockchain holding server 400 The user can automatically control node hash information of the user who requested the destruction of the chain-based certificate. Authorized certificate authentication system based on blockchain, characterized by guiding to confirm that the new blockchain-based official certificate has been destroyed.
The method of claim 1,

The blockchain-based official certificate authentication request server 600, DB section 610 having the personal information for issuing the public certificate of the user who operates the user terminal 100 has a user identification information DB 611 for each member; Including,

In the blockchain-based public certificate management server 300, a public certificate for the public information for public certificate and public certificate for certificate issuance, a public certificate for public certificate for public certificate, and the public certificate for public certificate for public authentication It is divided into certificate node hash information and stored sequentially, and accumulates and stores the certificate certificate node index information indicating the order of storing the certificate certificate node hash information generated when generating the certificate certificate node hash information. Accredited certificate registration information DB that accumulates and stores the accredited certificate root hash identifier information for registration, which is an identifier that identifies the accredited certificate root hash information that is sequentially accumulated and stored in the certificate certificate node hash information. And forgery monitoring transaction in the blockchain-based authorized certificate management server (300) DB 310 having; boy the forgery monitoring transaction ID information is accumulated stored certificate forgery monitoring information DB (312) that is generated with an identifier every time the generated; And a hash processing engine 320;

A forgery verification request terminal 500;

In the forgery verification request terminal 500, the blockchain-based authorized certificate authentication request server 600 requests the monitoring of the blockchain-based authorized certificate of a specific user,

The blockchain-based public certificate authentication request server 600 extracts personal information for issuing a public certificate of a specific user who has requested the monitoring of a blockchain-based public certificate from the user identification information DB 311 for each member, and the blockchain. Based on the certificate management server 300 to transmit,

The blockchain-based official certificate management server 300 matches personal information for issuing a certificate of a specific user who has requested the monitoring of the transmitted blockchain-based official certificate with the official certificate registration related information DB 611 of the specific user. Recognition of certification certificate node hash information, and certification certificate root hash identifier information for registration, which is an identifier that identifies the certification certificate root hash information for registration belonging to the Merkle Tree structure. Extracts from the public certificate registration information DB 311, operates the hash processing engine 320, and the public certificate node hash information of a specific user is referred to by referring to the extracted public certificate root hash identifier information. All certificate certificates that form the Merkle Tree structure of the registered certificate certificate root hash information belong to the certificate certificate related information. Extracted from the DB 311, the extracted public certificate node hash information is processed into the prepared public certificate certificate root hash information consisting of the Merkle tree structure, the public certificate certificate for registration registered root hash identifier information The forgery monitoring transaction ID information for identifying the forgery monitoring transaction information including the authentication certificate root hash information for registration is matched with the certificate forgery monitoring related information DB (312), and the blockchain holding server 400 To,

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and extracts the matching forgery monitoring transaction information. After extracting the authentication certificate root hash information included in the registration and transmits it to the blockchain-based public certificate management server 300,

The blockchain-based public certificate management server 300 receives the public certificate root hash information for registration, operates the hash processing engine 320 and the hash value of the public certificate root hash information transmitted. Computing the hash value of the prepared public certification certificate root hash information, respectively, and checks that the calculated hash value is the same, if the same is made of a pair of specific users requested to the forgery verification request terminal 500 A public certificate authentication system based on a blockchain, characterized in that a control message is notified that personal information for public certificate issuance and public key for public certificate are not forged.
The method of claim 10,

The hash processing engine 320 of the blockchain-based public certificate management server 300 has a calculated hash value of the public certificate node hash information and a hash value of the prepared public certificate node hash information is not the same. In case of storing the certificate certificate node hash information having the same hash value among the certificate certificate node hash information forming the Merkle Tree structure of the registered certificate certificate root hash information to which the user certificate certificate node hash information belongs In the state of recognizing the authentication certificate node index information indicating the sequence number, and the authentication certificate node index information indicating the storage sequence of the authentication certificate node hash information of a specific user through the certification certificate registration information DB 311 is not the same. The corresponding certificate node with the hash value that is not recognized The certificate node of the hash information The index information and the certificate node of the specific user Public certificate of the city information Check that the index number of the node index information is the same, and the certificate of the node certificate information and the certificate of the node hash information and the certificate of the node hash information of the specific certificate node hash information with the same hash value When the storage order of the node index information is the same, the block for controlling the forgery verification request terminal 500 to be notified of a message indicating that the personal information for issuing a group of a specific user and the public key for the public certificate for the public certificate are forged. A certificate based certification system based on chain.
The method of claim 11,

The blockchain-based public certificate management server 300 stores the public certificate node index information of the corresponding public certificate node hash information having a different hash value and the public certificate node index information of the public certificate node hash information of a specific user. If the sequence number is not the same, the forgery verification request terminal 500 controls the notification that the personal information for issuing a pair of certificates and the public key for the public certificate that the certificate has not been forged, and the public certificate registration information DB Authorization that forms the Merkle Tree structure of the certification certificate root hash information to which the certification certificate node hash information of a specific user belongs among the personal information for issuance of the public certificate and the public key information for the public certificate, which are collectively managed in (311). Personal certificate for issuance of a set of accredited certificates corresponding to the certificate node hash information. And certificate authentication system that the certificate for the public key has been forged based on the block chain which comprises detection.
Step S300 of accessing the blockchain-based authorized certificate authentication request server 600 from the user terminal 100 to request blockchain-based official authentication;

In the blockchain-based public certificate authentication request server 600, the personal information for issuing the public certificate of the corresponding user operating the user terminal 100 in the user identification information DB 611 for each member according to the blockchain-based public authentication request Extracting and transmitting the same to the blockchain-based authorized certificate management server 300 (S310);

Determining, in the blockchain-based public certificate management server 300, validity of the public certificate of the corresponding user based on the transmitted personal information for issuing the public certificate (S320);

In the blockchain-based public certificate management server 300, if it is determined that the validity of the public certificate is legitimate, the public certificate for the public certificate of the corresponding user is extracted from the public certificate registration information DB 311, and the blockchain-based Transmitting to the public certificate authentication request server 600 (S330);

In the blockchain-based public certificate authentication request server 600, receiving the public key for the public certificate, and performing user authentication between the user terminals 100 based on the transmitted public certificate public key (S3400). Certified method authentication method based on the block chain, characterized in that consisting of.
The method of claim 13,

In the blockchain-based public certificate authentication request server 600, the personal information for issuing the public certificate of the corresponding user operating the user terminal 100 in the user identification information DB 611 for each member according to the blockchain-based public authentication request In step S310 of extracting and transmitting it to the blockchain-based authorized certificate management server 300,

The personal information for issuing the public certificate is transmitted to the blockchain-based public certificate management server 300 is processed based on the block chain, characterized in that the processing is processed as a user identification hash information by hashing operation Certificate authentication method.
The method of claim 13,

In the blockchain-based public certificate management server 300, the step S320 of determining the validity of the public certificate of the corresponding user based on the personal information for issuing the public certificate issuing,

In the blockchain-based public certificate management server 300, the personal information for issuing the public certificate issued from the blockchain-based public certificate authentication request server 600 is matched with the public certificate registration information DB 311 of the corresponding user. The public key for public certificate is extracted, and the hash processing engine 320 is operated to hash the extracted public certificate public key and the personal information for issuing the public certificate to be processed and processed into a public certificate node hash information for preparation. Step S321;

In the hash processing engine 320 of the blockchain-based public certificate management server 300, among the information stored in the public certificate registration information DB 311, the public certificate node hash information registered when issuing a blockchain-based public certificate is issued. Extracting and calculating the hash value of the extracted public certificate node hash information and the hash value of the prepared public certificate node hash information, respectively, and checking whether the calculated hash values are the same (S322); after,

If the calculated hash value of the public certificate node hash information and the calculated hash value of the prepared public certificate node hash information are the same, in the blockchain-based public certificate management server 300, the validity of the public certificate is legal. If it is determined, extracting the public key for the public certificate of the corresponding user from the public certificate registration information DB (311), and transmits it to the blockchain-based public certificate authentication request server 600, characterized in that entering into step S330 Authentication method for accredited certificates based on blockchain.
The method of claim 15,

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate node hash information registered when the public certificate is issued from the public certificate registration information DB 311 is extracted, and the extracted In step S322 of calculating a hash value of the public certificate node hash information and a hash value of the prepared public certificate node hash information, respectively, and checking whether the calculated hash values are the same,

If the calculated hash value of the official certificate node hash information and the calculated hash value of the prepared official certificate node hash information are not the same, in the blockchain-based official certificate management server 300, the user terminal 100 And controlling to be notified that a message indicating that the blockchain-based authentication process has been denied (S323) is included in the blockchain-based authentication certificate authentication method.
The method of claim 15,

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate node hash information registered when the public certificate is issued from the public certificate registration information DB 311 is extracted, and the extracted In step S322 of calculating a hash value of the public certificate node hash information and a hash value of the prepared public certificate node hash information, respectively, and checking whether the calculated hash values are the same,

In the hash processing engine 320 of the blockchain-based authorized certificate management server 300 when the calculated hash value of the certificate certificate node hash information and the calculated hash value of the prepared certificate certificate node hash information are the same, The certification certificate registration hash information for the certification certificate root hash identifier for registration, which is an identifier for identifying the certification certificate root hash information for registration belonging to the Merkle Tree structure, is registered when the certificate issuance is issued. Extracting at 311) (S324);

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate for registration to which the public certificate node hash information of the user belongs by referring to the extracted public certificate root hash identifier information extracted for registration. Extract all the public certificate node hash information forming the Merkle Tree structure of the root hash information from the public certificate registration information DB 311, and extract the public certificate node hash information from the extracted public certificate node. Processing the certificate route hash information (S325);

In the hash processing engine 320 of the blockchain-based official certificate management server 300, matching the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312 to register the public certificate for registration Extracting forgery monitoring transaction ID information for identifying forgery monitoring transaction information including root hash information and transmitting the same to the blockchain holding server 400 (S326);

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and extracts the extracted forgery monitoring transaction information. Extracting the public certificate root hash information included in the registration and transmitting it to the blockchain-based public certificate management server 300 (S327);

In the blockchain-based public certificate management server 300, receiving the public certificate root hash information for registration, operating the hash processing engine 320, the hash value of the transmitted public certificate root hash information And calculating hash values of the prepared official certificate root hash information and checking whether the calculated hash values are the same (S328).

In the hash processing engine 320 of the blockchain-based public certificate management server 300, when the calculated hash value of the public certificate node hash information is the same as the calculated hash value of the prepared public certificate node hash information. In the blockchain-based public certificate management server 300, if it is determined that the validity of the public certificate is legitimate, the public certificate for the public certificate of the corresponding user is extracted from the public certificate registration information DB 311, and the blockchain-based Certified certificate authentication method based on the block chain, characterized in that entering into step S330 to transmit to the certificate authentication request server 600.
The method of claim 17,

In the blockchain-based public certificate management server 300, receiving the public certificate root hash information for registration, operating the hash processing engine 320, the hash value of the transmitted public certificate root hash information And in step S328 of calculating the hash values of the generated public certificate root hash information for the prepared comparison and checking whether the calculated hash values are the same.

In the hash processing engine 320 of the blockchain-based public certificate management server 300, both hashes of the hash certificate of the public certificate root hash information for the registration and the public certificate root hash information for each provision are not the same. If there is a value, the registration information belongs to the certification certificate node hash information of the user, among the personal information for the issuance of a set of certificates and public key information for the certificate, which is accumulated and managed in the certificate registration information DB 311. Detecting that the personal information for issuing a public certificate and the public key for the public certificate for which the certificate is composed of a pair corresponding to the public certificate node hash information forming the Merkle Tree structure of the public certificate root hash information are forged (S329); Certified certificate authentication method based on the blockchain, characterized in that.
The method of claim 13,

In the blockchain-based public certificate authentication request server 600, receiving the public key for the public certificate, and performing the user authentication between the user terminal 100 based on the transmitted public certificate public key, step S3400,

In the blockchain-based public certificate authentication request server 600, receiving the public key for the public certificate, and checking whether the Internet communication protocol between the user terminal 100 requesting the blockchain-based public authentication is http or https. (S340);

When the Internet communication protocol between the user terminal 100 and the blockchain-based official certificate authentication request server 600 is http, the blockchain-based official certificate authentication request server 600 operates a random number generator 630 to provide random access. Controlling to generate a random session key as a value (S350);

In the blockchain-based public certificate authentication request server 600, an encryption engine 640 is operated to encrypt the random session key using the public key for the public certificate and convert the random session key into an encrypted random session key, and the user terminal 100 Transmitting (S360);

The user terminal 100 receives the encrypted random session key, operates a decryption engine 160, and decrypts the encrypted random session key based on a private key for public authentication stored and managed in the memory 120. Control to be converted to the session key (S370); Authorized certificate authentication method based on the blockchain, characterized in that consisting of.
The method of claim 19,

In the blockchain-based public certificate authentication request server 600, the user terminal 100 and the blockchain-based public certificate authentication request server 600 receiving the public key for the public certificate and requesting a blockchain-based public certification In step S340 to check whether the Internet communication protocol between the http or https,

When the Internet communication protocol between the user terminal 100 and the blockchain-based official certificate authentication request server 600 is https, the blockchain-based official certificate authentication request server 600 operates a random number generator 630 to provide random access. Generating random number data which is a value and transmitting the same to the user terminal 100 (S380);

In the user terminal 100, operating a hash processing engine 140 to hash the transmitted random number data to process the random number hash information (S390);

In the user terminal 100, the encryption engine 130 is operated to encrypt the random number hash information on the basis of the authorized private key stored and managed in the memory 120 to convert the encrypted random number hash information, and Transmitting to the blockchain-based official certificate authentication request server 600 (S400);

In the blockchain-based official certificate authentication request server 600, by operating a hash processing engine 620 to hash the random number data having the same value as that sent to the user terminal 100 to prepare a random number hash information for preparation Processing and operating the decryption engine 650 to decrypt the transmitted encrypted random number hash information based on the public key for the public certificate of the corresponding user and control it to be converted into random number hash information, and the converted random number hash information Computing a hash value of the hash value and the random number hash information for the comparison of the step (S410) to confirm that both hash values are the same; Certified certificate authentication method based on a block chain comprising a.
The method of claim 13,

Checking, at the user terminal 100, whether the blockchain-based authorized certificate is discarded to the blockchain-based official certificate authentication request server 600 (S500);

When the user terminal 100 requests the destruction of the blockchain-based official certificate to the blockchain-based official certificate authentication request server 600, the blockchain-based official certificate authentication request server 600 relates to registration of the public certificate. Changing and storing the public certificate node hash information of the corresponding user stored in the information DB 311 into the discard public certificate node hash information (S510);

In the blockchain-based public certificate authentication request server 600, the public certificate node hash information of the corresponding user who requested the destruction of the blockchain-based public certificate is counted as a number belonging to a predetermined route hash generation section. Repeatedly storing the certificate registration information DB 311 (S520);

In the blockchain-based public certificate management server 300, the number of private information and public key for public certificate issuance, including a set of public certificate node hash information including the public certificate node hash of the user who requested the destruction of the blockchain-based public certificate When the preset route hash generation section is reached, the hash processing engine 320 operates the stored private key for issuing the set of public certificate and the public key for the certificate, which are counted by the preset route hash generation section, in the order of storage order. By hashing and processing the certificate into the hash certificate information, the block structure in the Merchant structure that constitutes the authentication certificate root hash information for registration contained in the forgery monitoring transaction information transmitted and registered to the blockchain holding server 400 Controlling to include the hash certificate information of the corresponding user who requested the destruction of the chain-based official certificate (S530); In addition, the authentication method authentication method based on the block chain, characterized in that the user is guided to confirm that the blockchain-based official certificate has been destroyed.
The method of claim 13,

Checking in the forgery verification request terminal 500, the blockchain-based authorized certificate authentication request server 600, whether a request for monitoring of a blockchain-based authorized certificate of a specific user is requested (S600);

In the forgery verification request terminal 500, if the blockchain-based authorized certificate authentication request server 600 requests the monitoring of the blockchain-based authorized certificate of a specific user in the blockchain-based authorized certificate authentication request server 600, Extracting personal information for issuing a certificate of a specific user who has requested the monitoring of a blockchain-based certificate, from the certificate registration information DB 311 and transmitting it to the blockchain-based certificate management server 300 (S610). )Wow;

In the blockchain-based official certificate management server 300, by matching the personal information for issuing the certificate of the specific user who requested the monitoring of the transmitted blockchain-based official certificate with the certificate registration information DB (311) of the specific user Recognition of certification certificate node hash information, and certification certificate root hash identifier information for registration, which is an identifier that identifies the certification certificate root hash information for registration belonging to the Merkle Tree structure. Extracting from the public certificate registration information DB 311 (S620);

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate for registration to which the public certificate node hash information of a specific user belongs by referring to the extracted public certificate root hash identifier information extracted for registration. Extract all the public certificate node hash information forming the Merkle Tree structure of the root hash information from the public certificate registration information DB 311, and extract the public certificate node hash information from the extracted public certificate node. Processing the certificate route hash information (S630);

In the hash processing engine 320 of the blockchain-based official certificate management server 300, matching the extracted public certificate root hash identifier information for registration with the public certificate forgery monitoring-related information DB 312 to register the public certificate for registration Extracting forgery monitoring transaction ID information for identifying forgery monitoring transaction information including root hash information and transmitting the same to the blockchain holding server 400 (S640);

The blockchain holding server 400 matches the transmitted forgery monitoring transaction ID information with the blockchain provided in the electronic wallet, extracts matching forgery monitoring transaction information, and extracts the extracted forgery monitoring transaction information. Extracting the public certificate root hash information included in the registration and transmitting it to the blockchain-based public certificate management server 300 (S650);

In the blockchain-based public certificate management server 300, receiving the public certificate root hash information for registration, operating the hash processing engine 320, the hash value of the transmitted public certificate root hash information And calculating hash values of the prepared official certificate root hash information, respectively, and checking whether the calculated hash values are the same (S660);

In the hash processing engine 320 of the blockchain-based public certificate management server 300, when the calculated hash value of the public certificate node hash information is the same as the calculated hash value of the prepared public certificate node hash information. In the blockchain-based public certificate management server 300, a message indicating that the personal information for issuing a public certificate and the public key for public certificate for which a certificate of a specific user requested to the forgery verification request terminal 500 is not forged is notified. A step (S670); accredited certificate authentication method based on the blockchain comprising a.
The method of claim 22,

In the blockchain-based public certificate management server 300, receiving the public certificate root hash information for registration, operating the hash processing engine 320, the hash value of the transmitted public certificate root hash information And in step S660 of calculating a hash value of the generated public certificate root hash information for the prepared contrast and checking whether the calculated hash values are the same,

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the calculated hash value of the public certificate node hash information is not the same as the calculated hash value of the prepared public certificate node hash information. If the certificate node hash information of a specific user has the same hash value among the certificate certificate node hash information forming the Merkle Tree structure of the registered certificate certificate root hash information to which the specific certificate node hash information belongs, Recognizing the authorized certificate node index information indicating the storage order (S661);

In the hash processing engine 320 of the blockchain-based public certificate management server 300, public certificate node index information of the corresponding public certificate node hash information having a different hash value and public certificate node hash information of a specific user. Checking whether the storage order numbers of the public certificate node index information are the same (S662);

The blockchain-based public certificate management server when the storage order of the public certificate node index information of the corresponding public certificate node hash information having the same hash value and the public certificate node index information of the public certificate node hash information of the specific user are the same. In step 300, controlling the forgery verification request terminal 500 to be notified of the message that the forged personal information and the public certificate for the public certificate for a certificate composed of a pair of a specific user (S663); Certified certificate authentication method based on the blockchain characterized in that.
The method of claim 23, wherein

In step S662 of confirming whether or not the storage order of the public certificate node index information of the public certificate node hash information of the corresponding public certificate node hash information having the same hash value is the same,

The blockchain-based public certificate if the storage order of the public certificate node index information of the corresponding public certificate node hash information having the same hash value and the public certificate node index information of the public certificate node hash information of the specific user are not the same In step S664, the management server 300, the forgery verification request terminal 500 is controlled so that a message indicating that the personal information for issuing the certificate and the public key for the public certificate for which the public certificate has not been forged is not forged;

In the hash processing engine 320 of the blockchain-based public certificate management server 300, the public certificate information for personal certificate and public certificate information for issuing a public certificate consisting of a set of cumulatively managed in the public certificate registration information DB 311 Public certificate for personal certificate and public certificate issuance consisting of a group corresponding to the public certificate node hash information that forms the Merkle Tree structure of the public certificate root hash information of the specific user among the public certificate node hash information. Detecting that the key has been forged (S665); Authorized certificate authentication method based on the blockchain comprising a.