Certificate issuing system based on block chain

Patent metadata

Field	Value
Publication number	US-12063209-B2
Application number	US-202117353244-A
Country	US
Kind code	B2
Filing date	Jun 21, 2021
Priority date	Aug 3, 2015
Publication date	Aug 13, 2024
Grant date	Aug 13, 2024

Abstract

The present invention provides a certificate issuing system based on a block chain, the system having a means for directly generating a certificate-specific public key and a certificate-specific private key in a user terminal operated by a user, guiding the certificate-specific public key and the certificate-specific private key so as to be generated in a state in which a network in the user terminal is blocked, and eliminating the costs incurred for constructing, operating, and maintaining the certificate issuing system having a high-grade security system linked therewith so as to block hacking, which occurred in the past, as much as possible, since the certificate-specific public key requiring maintenance is stored and managed in an electronic wallet, installed in servers that hold block chains, through a peer-to-peer network (P2P)-based distributed database, not by a server run by a certificate authority (CA).

First claim

What is claimed is:

1. A system configured to issue a certificate comprising:
a certificate issuance request server;
a blockchain network;
a user terminal communicatively coupled, via a network, to the certificate issuance request server, a certificate management server, and the blockchain network, wherein the user terminal comprises a user terminal processor coupled to a user terminal non-transitory computer-readable storage medium having stored thereon software instructions that, when executed by the user terminal processor, cause the user terminal processor to:
receive, from the certificate issuance request server, a key generation guidance signal;
in response to receiving the key generation guidance signal, block a network connection with the network;
generate, a public key and private key of a user;
in response to generating the public key and private key of the user, reconnecting to the network; and
in response to reconnecting to the network, transmit the generated public key and personal information of the user to the certificate issuance request server;

a certificate management server communicatively coupled, via the network, to the user terminal, the certificate issuance request server, and the block chain network, wherein the certificate management server comprises a processor coupled to a memory having stored thereon software instructions that, when executed by the processor, cause the processor to:
receive, from the certificate issuance request server, a certificate registration request including user identification information, the public key of the user, and identification hash information, wherein the identification hash information is generated by hashing pieces of the personal information of the user, and wherein the user identification information is generated by using specific personal information among the pieces of personal information of the user;
generate a certification transaction including the public key;
generate a certification transaction ID for matching the certification transaction in a distributed ledger of a blockchain network comprising blockchain nodes;
broadcast the certification transaction to the blockchain nodes;
hash the user identification information and the certification transaction ID to generate verification hash information;
generate a verification transaction including the verification hash information;
generate a verification transaction ID for matching the verification transaction in the distributed ledger of the blockchain network;
broadcast the verification transaction to the blockchain nodes;
broadcast the certification transaction ID and the verification transaction ID to the blockchain nodes;
confirm, by using the certification transaction ID and the verification transaction ID, whether the certification transaction and the verification transaction are registered in the distributed ledger of the blockchain network; and
in response to a registration of the certification transaction and the verification transaction in the distributed ledger being confirmed, notify a certificate registration result to the user terminal.

2. The system of claim 1 , wherein the personal information of the user includes at least two of a name of the user, a date of birth of the user, a phone number of the user, and an email of the user, and
wherein the user identification information is the phone number of the user.

3. The system of claim 1 , wherein the processor of the certificate management server stores the user identification information in a user transaction search keyword information database, and matches the certification transaction ID and the verification transaction ID with the user identification information in the user transaction search keyword information database.

4. The system of claim 1 , wherein the certification transaction further includes previous cryptocurrency payment transaction ID information used to identify a storage position of a cryptocurrency to be used among cryptocurrencies held by a remitter through previous cryptocurrency payment transaction information; cryptocurrency authorization information of the remitter; a cryptocurrency payment public key needed to determine validity of the cryptocurrency authorization information; and certification transaction registration cost information corresponding to a cost required to register the certification transaction.

5. The system of claim 1 , wherein the verification transaction further includes previous cryptocurrency payment transaction ID information used to identify a storage position of a cryptocurrency to be used among cryptocurrencies held by a remitter through previous cryptocurrency payment transaction information; cryptocurrency authorization information of the remitter; a cryptocurrency payment public key needed to determine validity of the cryptocurrency authorization information; and verification transaction registration cost information corresponding to a cost required to register the verification transaction.

6. The system of claim 5 , wherein the verification transaction further includes certificate discard reserve cost information corresponding to a cost to be used to discard the certificate, and discard reserve cost transfer information indicating a discard-prepared-reserve cryptocurrency address and a certificate discard reserve cost corresponding to the certificate discard reserve cost information so that the corresponding a certificate discard reserve cost is transferred to a designated cryptocurrency address when the verification transaction is recorded in the distributed ledger of the blockchain network.

7. The system of claim 1 , wherein the certificate issuance request server receives the pieces of the personal information of the user from the user terminal, determines whether at least one of the pieces of the personal information of the user matches any information within a member user identification information database, generates a key generation guidance signal when at least one of the pieces of the personal information of the user matches any of the information within the member user identification information database, transmits the key generation guidance signal to the user terminal, and receives the public key of the user.

8. The system of claim 7 , wherein the user terminal has a key generation engine, and
wherein the key generation engine generates the public key of the user and a private key of the user in response to the user terminal receiving the key generation guidance signal.

9. The system of claim 8 , wherein the user terminal comprises an information storage unit and an encryption/decryption engine, and
wherein the encryption/decryption engine generates an encrypted private key by encrypting the private key of the user on the basis of a password and a photo image, and stores the encrypted private key in the information storage unit.

10. The system of claim 9 , wherein the information storage unit includes a key generation notification screen unit, and
wherein the key generation notification screen unit includes:
a user personal information input screen including a user name input box receives a name of the user, a user date-of-birth input box receives a date of birth of the user, a user phone number input box receives a phone number of the user, and a user email input box receives an email of the user;
a network block notification screen indicates that a network to which the user terminal is connected will be blocked before the public key of the user and the private key of the user are generated;
a network block indication screen indicates that the network is blocked;
a password input screen including a password input box receives the password

Assignees

• Coinplug Inc
• Cplabs Inc

Inventors

• Uhr Joon Sun
• Hong Jay Wu
• Song Joo Han

Classifications

• H04L67/104

  Peer-to-peer [P2P] networks · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title