Certificate issuing system based on block chain

Patent metadata

Field	Value
Publication number	US-2018227293-A1
Application number	US-201615749287-A
Country	US
Kind code	A1
Filing date	Mar 7, 2016
Priority date	Aug 3, 2015
Publication date	Aug 9, 2018
Grant date	—

Abstract

The present invention provides a certificate issuing system based on a block chain, the system having a means for directly generating a certificate-specific public key and a certificate-specific private key in a user terminal operated by a user, guiding the certificate-specific public key and the certificate-specific private key so as to be generated in a state in which a network in the user terminal is blocked, and eliminating the costs incurred for constructing, operating, and maintaining the certificate issuing system having a high-grade security system linked therewith so as to block hacking, which occurred in the past, as much as possible, since the certificate-specific public key requiring maintenance is stored and managed in an electronic wallet, installed in servers that hold block chains, through a peer-to-peer network (P2P)-based distributed database, not by a server run by a certificate authority (CA).

First claim

What is claimed is:

1 . A blockchain-based-certificate issuing system comprising:
a user terminal ( 100 ) configured to generate a certificate-specific public key and a certificate-specific private key and to transmit blockchain-based-certificate-issuance-specific personal information composed of the generated certificate-specific public key and identification information of a user needed to issue a blockchain-based certificate; a blockchain-based-certificate issuance request server ( 200 ) configured to receive the certificate-specific public key and the blockchain-based-certificate-issuance-specific personal information from the user terminal ( 100 ), hash and process the blockchain-based-certificate-issuance-specific personal information to generate user identification hash information, collect and process designated user identification information corresponding to identification information of a pre-designated user among user identification information composed of the user identification hash information, the certificate-specific public key, and the blockchain-based-certificate-issuance-specific personal information to generate a public key record-specific transaction generation request signal, and transmit the public key record-specific transaction generation request signal; a blockchain-based-certificate management server ( 300 ) configured to generate public key record-specific transaction information including the certificate-specific public key among the information collected in the public key record-specific transaction generation request signal transmitted from the blockchain-based-certificate issuance request server ( 200 ) and also public key record-specific transaction ID information used as a key value to search for the public key record-specific transaction information, transmit and record the public key record-specific transaction information, store and manage the public key record-specific transaction ID information, hash and process the user identification hash information and the public key record-specific transaction ID information among the information collected in the public key record-specific transaction generation request signal to generate user verification hash information, generate user verification-specific transaction information including the generated user verification hash information and user verification-specific transaction ID information used as a key value to search for the user verification-specific transaction information, transmit and record the user verification-specific transaction information, store and manage the user verification-specific transaction ID information, and store and manage the designated user identification information among the information collected in the public key record-specific transaction generation request signal; and blockchain holding servers ( 400 ) configured to authenticate a bitcoin payment through verification of bitcoin-payment-specific transaction information when the bitcoin-payment-specific transaction information is transmitted and configured to record the public key record-specific transaction information and the user verification-specific transaction information, which are transmitted from the blockchain-based-certificate management server ( 300 ), in blockchain of an electronic wallet in which the bitcoin-payment-specific transaction information is to be recorded according to the authentication, wherein the blockchain-based-certificate issuance request server ( 200 ) includes a DB unit ( 210 ), wherein the DB unit ( 210 ) has a member-specific user identification information DB ( 211 ) in which identification information of a user operating the user terminal ( 100 ) is stored and also in which user identification information corresponding to the blockchain-based-certificate-is suance-specific personal information is stored, wherein the user terminal ( 100 ) transmits the blockchain-based-certificate-issuance-specific personal information to the blockchain-based-certificate issuance request server ( 200 ) to request issuance of the blockchain-based certificate, wherein the blockchain-based-certificate issuance request server ( 200 ) matches the transmitted blockchain-based-certificate-issuance-specific personal information to the member-specific user identification information DB ( 211 ), and generates a key generation guidance signal for guiding the user terminal ( 100 ) to generate the certificate-specific public key and the certificate-specific private key and transmits the key generation guidance signal to the user terminal ( 100 ) when there is matching information, and wherein when the key generation guidance signal is transmitted from the blockchain-based-certificate issuance request server ( 200 ), the user terminal ( 100 ) generates a certificate-specific public key and a certificate-specific private key according to the transmitted key generation guidance signal and transmits the certificate-specific public key to the blockchain-based-certificate issuance request server ( 200 ).

2 . The blockchain-based-certificate issuing system of claim 1 ,
wherein the user terminal ( 100 ) has a key generation engine ( 110 ), and wherein the user terminal ( 100 ) operates the key generation engine ( 110 ) to perform control so that the certificate-specific public key and the certificate-specific private key are generated while the user terminal ( 100 ) is not networked.

3 . The blockchain-based-certificate issuing system of claim 1 ,
wherein the user terminal ( 100 ) comprises an information storage unit ( 102 ) and an encryption/decryption engine 120 , and wherein the user terminal ( 100 ) operates the encryption/decryption engine ( 120 ) to encrypt and process the certificate-specific private key on the basis of a password and a photo image designated by the user to generate an encrypted certificate-specific private key and performs control so that the encrypted certificate-specific private key is stored in the information storage unit ( 102 ).

4 . The blockchain-based-certificate issuing system of claim 3 ,
wherein a key generation notification screen unit is stored in the information storage unit ( 102 ), and wherein the stored key generation notification screen unit includes a user identification information input screen ( 141 ) including a user name input box ( 141 a ) to which the user's name will be entered, a user date-of-birth input box ( 141 b ) to which the user's date of birth will be entered, a user phone number input box ( 141 c ) to which the user's phone number will be entered, and a user email input box ( 141 d ) to which the user's email will be entered; a network block notification screen ( 142 ) indicating that a network connected to the user terminal ( 100 ) will be blocked before the certificate-specific public key and the certificate-specific private key are generated, a network block indication screen ( 143 ) indicating that the network of the user terminal ( 100 ) is blocked, a password input screen ( 144 ) including a password input box ( 144 a ) to which a password needed to issue the blockchain-based certificate will be entered, an image selection screen ( 145 ) in which a plurality of images are selectably displayed, a key generation notification screen ( 146 ) indicating that the certificate-specific public key and the certificate-specific private key are generated, a network connection indication screen ( 147 ) indicating that the network that has been blocked is reconnected after the certificate-specific public key and the certificate-specific private key are generated, and an issuance completion notification screen ( 148 ) indicating that the issuance of the blockchain-based certificate is complete.

5 . The blockchain-based-certificate issuing system of claim 1 ,
wherein the blockchain-

Assignees

• Coinplug Inc

Inventors

• Uhr Joon Sun
• Hong Jay Wu
• Song Joo Han

Classifications

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• G06Q20/3821

  Electronic credentials · CPC title

• H04L9/0637

  Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM] · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title