KR102209481B1 - Method for operating account reinstating service based account key pairs, system and computer-readable medium recording the method - Google Patents

Abstract

The present invention provides a method of operating an account key pair-based account authentication service using a computer system including at least one user terminal, an operator terminal, and a server computer connected through a network, wherein a plurality of Receiving initial key pair information in a form in which keys are dependent; Matching and registering a first key among the key pair information in the account; Receiving account freezing request information when the first key is lost or stolen from the user terminal; Freezing the authority of the account using the first key; And generating re-registration information for re-registering the account by matching a second key among the initial key pair information with the account.

Description

Method for operating account reinstating service based account key pairs, system and computer-readable medium recording the method}

The present invention relates to a method and system for operating an account key pair-based account authentication service, and to a computer-readable recording medium recording the method. More specifically, account data is separated and existed, and one account is A method and system for operating an account key pair-based account authentication service that enables integrity verification by being managed by being subordinated to keys (Key Pairs), and a computer-readable recording medium recording this method. About.

In general, conventional user authentication systems and procedures use a password to authenticate the user's identity.

Most web sites are authenticated using SSL (Secure Sockets Layer) or other protocols. The SSL is a protocol for securely transmitting information through the Internet, and when using the SSL, the web site is authenticated through its certificate. Thereafter, a user seeking access to the web site is authenticated by a user name and password.

Although these passwords are commonly used to authenticate users, passwords are vulnerable to various attacks such as phishing attacks, social engineering attacks, and dictionary attacks.

Typically, longer passwords with a combination of letters and numbers provide a higher level of security. However, these longer passwords are more difficult for the user to remember. Also, passwords provide a single factor of authentication by asking the user to provide anything the user knows. This factor does not provide any physical authentication of the user's identity.

Thus, if any person obtains the user's password and username information, that person can access the web-based account and information. Also, any person who has the information of the user's password can initiate a transaction (eg, purchase transaction and money transfer) without the user's permission.

Another potential threat arising from the use of these passwords is commonly referred to as a "Man in the Browser" attack.

These types of attacks relate to malicious software applications (malware) running in an internet browser while a user is logged in to a web site or performing a financial transaction.

One of the implementations of such an attack is to access the user's password when the user provides their password to an internet browser. After this point, the malware can perform any type of malicious action with the user's account.

Therefore, there is a problem that the browser user interface cannot be trusted when important financial operations are performed or when logging into a web account.

The present invention is to solve various problems including the above problems, and account data is separated and exists, and an account key pair-based account authentication service is operated that allows one account to be managed by being subordinated to several keys. It is an object of the present invention to provide a method, a system, and a computer-readable recording medium recording the method. However, these problems are exemplary, and the scope of the present invention is not limited thereby.

A method of operating an account key pair-based account authentication service according to the idea of the present invention for solving the above problems is an account key using a computer system including at least one user terminal, an operator terminal, and a server computer connected through a network. A method of operating a pair-based account authentication service, the method comprising: receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal; Matching and registering a first key among the key pair information in the account; Receiving account freezing request information when the first key is lost or stolen from the user terminal; Freezing the authority of the account using the first key; And generating re-registration information for re-registering the account by matching a second key among the initial key pair information with the account.

On the other hand, the method of operating an account key pair-based account authentication service according to the idea of the present invention for solving the above problem, by using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network. In the method of operating an account key pair based account authentication service, the server computer, an initial key pair information input program for receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, the An account registration program that matches and registers a first key among the key pair information to an account, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, An account authority freezing program for freezing the authority of the account using the first key, and an account re-registration program for generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account , An initial key pair information database in which the initial key pair information is stored, an account freeze request information database in which the account freeze request information is stored, a re-registration information database in which the re-registration information is stored, (a) the initial key Receiving initial key pair information in a form in which a plurality of keys are subordinated to one account from the user terminal by a pair information input program; (b) matching and registering a first key among the key pair information to the account by the account registration program; (c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program; (d) freezing the authority of the account using the first key by the account authority freezing program; And (e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program.

In addition, according to the present invention, the initial key pair information input program, an authentication application information input program receiving user authentication application information from the user terminal, authenticates a user using the user authentication application information, and provides authentication certificate information. An authentication certificate issuing program to be issued, an authentication certificate information transmission program that transmits the authentication certificate information to the user terminal, and a new account application information input for receiving the authentication certificate information and new account application information from the user terminal through a blockchain network A program, a new account information transmission program that generates new account information by inquiring the validity of a certificate through the blockchain network and transmits the new account information to the user terminal, new account information from the user terminal, and the matching An account matching information input program receiving initial key pair information, an authentication application information database storing the authentication request information, an authentication certificate information database storing the authentication certificate information, and a new account information database storing the new account information. And, the step (a) includes: (a-1) receiving user authentication application information from the user terminal by the authentication application information input program; (a-2) authenticating a user by using the user authentication application information by the authentication certificate issuing program and issuing authentication certificate information; (a-3) transmitting the authentication certificate information to the user terminal by the authentication certificate information transmission program; (a-4) receiving, by the new account application information input program, the authentication certificate information and new account application information from the user terminal through a blockchain network; (a-5) generating new account information by inquiring the validity of a certificate through the blockchain network by the new account information transmission program, and transmitting the new account information to the user terminal; And (a-6) receiving new account information and the matching initial key pair information from the user terminal by the account matching information input program.

In addition, according to the present invention, the account authority freezing program includes an account freezing adequacy screening program that examines the adequacy of the account freezing request information, and when the account freezing request information satisfies an account freezing condition, the first key An account freezing program for freezing an account, and a transaction rejection program for denying approval of all transactions of the account using the first key, and the step (c) includes: (c-1) the account freezing adequacy screening program By examining the appropriateness of the account freeze request information; (c-2) freezing the account using the first key when the account freezing request information satisfies an account freezing condition by the account freezing program; And (c-3) rejecting approval of all transactions of the account using the first key by the transaction rejection program.

In addition, according to the present invention, the account re-registration program is an authentication re-application information input program receiving user authentication re-application information from the user terminal, and re-authentication using the user authentication re-application information, and re-authentication. An authentication certificate reissuance program that issues certificate information, an authentication certificate information retransmission program that transmits the re-authentication certificate information to the user terminal, and a re-application information input program that receives the re-authentication certificate information from the user terminal through a blockchain network. , A certificate re-inquiry program for inquiring the validity of a certificate through the blockchain network, an account re-registration recognition program in which re-registration is recognized based on the user's re-registration information, and the step (e) includes: 1) receiving user authentication re-application information from the user terminal by the authentication re-application information input program; (e-2) re-authentication of a user using the user authentication re-application information by the authentication certificate reissuance program and issuing re-authentication certificate information; (e-3) transmitting the re-authentication certificate information to the user terminal by the authentication certificate information retransmission program; (e-4) receiving, by the re-application information input program, the re-authentication certificate information from the user terminal through a blockchain network; (e-5) querying the validity of the certificate through the blockchain network by the certificate re-inquiry program; And (e-6) re-registration is recognized based on the user's re-registration information by the account re-registration recognition program.

In addition, according to the present invention, the initial key pair information may sequentially list primary to N-order key information in one account.

In addition, according to the present invention, as the initial key pair information, N pieces of key information may be randomly arranged in one account.

In addition, according to the present invention, the server computer further comprises a re-registration information transmission program for transmitting the re-registration information to the user terminal, and after the step (e), (f) the re-registration information transmission program By, transmitting the re-registration information to the user terminal; may further include.

In addition, according to the present invention, the server computer receives transaction re-request information based on the re-registration information from the user terminal, and transmits transaction re-approval information to the user terminal, and the transaction re-application A transaction re-approval information database in which information is stored, and a transaction re-approval information database in which the transaction re-approval information is stored, and after step (f), (g) from the user terminal by the transaction re-approval program It may further include a step of receiving transaction re-application information based on the re-registration information and transmitting transaction re-approval information to the user terminal.

On the other hand, the system for operating the account authentication service based on the account key pair according to the idea of the present invention for solving the above problem, using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network. In a system for operating an account key pair-based account authentication service, the server computer, an initial key pair information input program receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, the An account registration program that matches and registers a first key among the key pair information to an account, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, An account authority freezing program for freezing the authority of the account using the first key, and an account re-registration program for generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account , An initial key pair information database in which the initial key pair information is stored, and an account freeze request information database in which the account freeze request information is stored, and from the user terminal to one account by the initial key pair information input program Initial key pair information in a form in which a plurality of keys are dependent is received, and registered by matching a first key among the key pair information to the account by the account registration program, and by the account freezing request information input program , When the first key is lost or stolen from the user terminal, account freeze request information is received, and the account authority freeze using the first key by the account authority freezing program, and A control unit programmed to generate re-registration information to re-register the account by matching a second key among the initial key pair information to the account by a registration program.

Meanwhile, a computer-readable recording medium recording a method of operating an account key pair-based account authentication service according to the idea of the present invention for solving the above problem includes at least one user terminal, an operator terminal, and a server connected through a network. A computer-readable recording medium recording a method of operating an account key pair-based account authentication service using a computer system equipped with a computer, wherein the server computer includes a plurality of keys dependent on one account from the user terminal An initial key pair information input program that receives initial key pair information in the form of a key pair, an account registration program that matches and registers a first key among the key pair information to the account, and the first key is lost or stolen from the user terminal In case of being subjected to, an account freeze request information input program for receiving account freeze request information, an account authority freeze program for freezing the authority of the account using the first key, and a second key among the initial key pair information to the account An account re-registration program for generating re-registration information for re-registering the account by matching, an initial key pair information database in which the initial key pair information is stored, and an account freeze request information database in which the account freeze request information is stored, (a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program; (b) matching and registering a first key among the key pair information to the account by the account registration program; (c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program; (d) freezing the authority of the account using the first key by the account authority freezing program; And (e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program.

According to various embodiments of the present invention made as described above, account data is separated and existed, and one account is subordinated and managed by several keys, thereby enabling essential integrity verification in the blockchain, through which, The operator can only provide a single account to the user, so the convenience of account use and the integrity of the transaction can be verified, and financial accidents can be prevented in advance, and the user can provide various registration fees, fees, and transactions to the operator in return. It has the effect of providing a business model that can benefit everyone because it can provide payment and credit information. Of course, the scope of the present invention is not limited by these effects.

1 is a conceptual diagram illustrating a system for operating an account authentication service based on an account key pair according to some embodiments of the present invention.
FIG. 2 is a block diagram illustrating in more detail an initial key pair information input program of a system operating an account key pair-based account authentication service of FIG. 1.
3 is a block diagram showing in more detail an account authority freezing program of a system operating an account key pair-based account authentication service of FIG. 1.
FIG. 4 is a block diagram illustrating in more detail an account re-registration program of a system operating an account key pair-based account authentication service of FIG. 1.
5 is a conceptual diagram illustrating a relationship between an operator and a user who operates a system for operating an account authentication service based on an account key pair of the present invention.
6 is a flowchart illustrating a method of operating an account key pair based account authentication service according to some embodiments of the present invention.
7A and 7B are flow charts illustrating a method of operating an account key pair-based account authentication service according to some other embodiments of the present invention.
8 is a reference diagram showing a continuous data integrity verification process of a system operating an account key pair based account authentication service of the present invention.
9 is a reference diagram showing a process of creating a new account according to the method of operating the account key pair-based account authentication service of FIG. 8.
FIG. 10 is a reference diagram illustrating a process of reporting theft and freezing emergency authority according to the method of operating the account authentication service based on the account key pair of FIG. 8.
11 is a reference diagram illustrating a key pair re-registration process according to a method of operating an account key pair-based account authentication service of FIG. 8.

Hereinafter, various exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The embodiments of the present invention are provided to more completely describe the present invention to those of ordinary skill in the art, and the following examples may be modified in various other forms, and the scope of the present invention is as follows. It is not limited to the examples. Rather, these embodiments are provided to make the present disclosure more faithful and complete, and to completely convey the spirit of the present invention to those skilled in the art. In addition, in the drawings, the thickness or size of each layer is exaggerated for convenience and clarity of description.

The terms used in this specification are used to describe specific embodiments, and are not intended to limit the present invention. As used herein, the singular form may include the plural form unless the context clearly indicates another case. Further, as used herein, "comprise" and/or "comprising" specifies the presence of the mentioned shapes, numbers, steps, actions, members, elements and/or groups thereof. And does not exclude the presence or addition of one or more other shapes, numbers, actions, members, elements, and/or groups.

Hereinafter, embodiments of the present invention will be described with reference to the drawings schematically showing ideal embodiments of the present invention. In the drawings, for example, depending on manufacturing techniques and/or tolerances, variations of the illustrated shape can be expected. Accordingly, the embodiments of the inventive concept should not be construed as being limited to the specific shape of the region shown in the present specification, but should include, for example, a change in shape caused by manufacturing.

Hereinafter, a method and a system for operating an account key pair-based account authentication service according to some embodiments of the present invention, and a computer-readable recording medium recording the method will be described in detail with reference to the drawings.

1 is a conceptual diagram illustrating a system for operating an account authentication service based on an account key pair according to some embodiments of the present invention.

First, as shown in FIG. 1, a system for operating an account key pair-based account authentication service according to some embodiments of the present invention includes a user terminal 10, an operator terminal 90, and a network 50. It may be made including a server computer 60 connected through.

Here, the server computer 60 receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal 10, and sends a first key among the key pair information to the account. When the first key is lost or stolen from the user terminal 10, the account freeze request information is input, the authority of the account using the first key is frozen, and the account It is programmed to generate re-registration information for re-registering the account by matching a second key among initial key pair information, and the account key pair-based account authentication service can be operated through the network 50 or the blockchain network. It may be a computer equipped with a data sensor, a company, an organization, a factory, a business entity, a head office, a branch office, a sales office, or an agency.

In addition, for example, the user terminal 10 may include various computers or server computers capable of performing various services such as various transactions, mining, information transmission, or financial services using blockchain technology. .

Here, the user terminal 10 is not necessarily limited to a computer, and all information terminal devices capable of processing various types of information may be applied. For example, not only various smart phones, but also various wearable devices, smart sensors, smart pads, smart watches, mobile terminals, PDAs, notebook computers, laptop computers, smart cameras, smart camcorders, e-books, smart scanners, etc. Can be applied.

In addition, for example, the operator terminal 90, a data center, an individual, an organization, a company, a factory, a business, a central government office, a head office, a branch office that manages and operates the server computer 60 B. Terminals or computers of sales offices or computer managers, which are not necessarily limited to computers or smartphones. Various information terminals, PDAs, which can receive various text information, numeric information or image information, and select various commands. Smart watches, smart pads, cameras, camcorders, notebooks, laptop computers, e-books, personal computers, and other server computers can all be applied.

Meanwhile, as shown in FIG. 1, the user terminal 10 and the operator terminal 90 are not necessarily independently provided, for example, when the user terminal 10 and the operator terminal 90 are the same There may also be.

In addition, for example, the user terminal 10, the operator terminal 90, and the server computer 60 of FIG. 1 are installed with various applications, apps, hybrid apps, programs, etc. to each other through the network 50. Terminals connected and connected by the network 50 include existing mobile communication networks such as 2G, 3G, 4G, 5G, LTE, etc., WIFI communication networks, Bluetooth communication networks, cellular communication networks, CDMA communication networks, LTE communication networks, Ethernet communication networks, WiMAX communication networks. , Local area network (LAN), wide area network (WAN), RF communication network, infrared communication network, optical communication network, etc., as well as Internet browser that can display web contents in the form of HTML, XML, HTML5, etc. It can have (Netscape, Internet Explorer, etc.) or a protocol device for accessing wired/wireless networks within the company or outside the company or near/far.

Meanwhile, as shown in FIG. 1, the server computer 60 may include a program control unit PG for controlling a program and a database DB for storing various types of information.

In particular, as shown in FIG. 1, the program control unit (PG) receives registration application information from the main program 61 operating the entire program, the user terminal 10 or the operator terminal 90, and A user registration program 62 to register with, a login program 63 for receiving login information from the user terminal 10 or the operator terminal 90, and a plurality of keys in one account from the user terminal 10 An initial key pair information input program 64 for receiving the subordinate type of initial key pair information, an account registration program 65 for registering the account by matching a first key among the key pair information, and the user terminal 10 ), when the first key is lost or stolen, an account freeze request information input program 66 that receives account freeze request information, and an account authority freeze program 67 that freezes the authority of the account using the first key. ), an account re-registration program 68 for generating re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and the re-registration information to the user terminal 10 Transmitted re-registration information transmission program 69, a transaction re-approval program that receives transaction re-application information based on the re-registration information from the user terminal 10 and transmits transaction re-approval information to the user terminal 10 (70), other various graphics or other programs that perform functions such as payment or bulletin board 71 may be included.

Here, for example, the main program 61 operates the entire program, and can be expressed in the form of a data management homepage or a main screen of an application or program online, and the user terminal 10 or the operator terminal 90 ) May be a program capable of controlling all the programs by receiving various information and command signals.

In addition, for example, the user registration program 62 is a program that receives registration application information from the user terminal 10 or the operator terminal 90 and registers as a member, so that the user terminal can store the user registration information. It may be a program that can authenticate (10).

In addition, the user registration program 62 may receive unique information from the user terminal 10 or the operator terminal 90 and allow them to agree to standard terms and conditions for information collection and use. It may be a program that can be registered with a public i-Pin, ID, password, email, mobile phone, address, personal information, patient information, resident number information, unique number, phone number stored in a SIM card, etc.

In addition, for example, the login program 63 is a program capable of performing a login process by receiving login information from the user terminal 10, and after the user accesses the server computer 60, an ID or password B. It may be a program that can receive login information from the user terminal 10 so that a phone number can be automatically or manually entered to log in.

In addition, for example, as shown in FIG. 1, the initial key pair information input program 64 receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal 10. As a program, here, as the initial key pair information, primary to N-order key information may be sequentially arranged in one account.

When the initial key pairs are sequentially arranged, the account information and the key information may be sequentially matched upon re-registration, and re-registration must be performed in order when the user re-registers. Here, such an order may be performed according to the listed order, and a separate encrypted order criterion may be set.

Therefore, since N key information is scheduled in one account in order, the account can be quickly re-registered even in various hacking or theft accidents, thereby maintaining continuity and integrity.

In addition, as for the initial key pair information, N key information may be randomly arranged in one account.

In this case, re-registration may be possible as long as key information is included in the initial key pair upon re-registration of the user regardless of the order.

In addition, for example, as shown in Fig. 1, the account registration program 65 is a program for registering the account by matching a first key among the key pair information, and the first key is the key pair information It is possible to be the first among them. However, the present invention is not limited thereto, and may be registered as long as it is randomly included in the key pair information.

In addition, for example, as shown in FIG. 1, the account freeze request information input program 66 receives the account freeze request information when the first key is lost or stolen from the user terminal 10. As a program, it is possible to automatically receive account freeze request information when it is made by the user's report, or when incorrect key information is input to the account several times or more.

In addition, for example, as shown in Fig. 1, the account authority freezing program 67 is a program for freezing the authority of the account using the first key, and any transaction request is made using the first key. It may be a program that allows it to be rejected.

In addition, for example, the account re-registration program 68 is a program for generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account, for example, the second It is possible that the key is the second among the key pair information. However, the present invention is not limited thereto, and may be registered as long as it is randomly included in the key pair information.

In addition, for example, as shown in FIG. 1, the re-registration information transmission program 69 is a program that transmits the re-registration information to the user terminal 10, through which a user can transfer an existing account to a new key. You can see that it can be used as it is.

In addition, for example, the transaction re-approval program 70 is a program that receives transaction re-application information based on the re-registration information from the user terminal 10 and transmits the transaction re-approval information to the user terminal 10 As a result, the user can re-apply for a transaction using the new key information afterwards with one account.

Here, the above-described programs may be operated in a form interlocked with the user terminal 10, an executable program downloaded or installed on the operator terminal 90, a screen control program, or a user application.

However, the above-described programs are not necessarily limited to being linked to an executable program or a smart phone application, and can be linked to all various types of terminals.

Meanwhile, as shown in FIG. 1, the database DB includes a user registration information database 73 in which the user registration information is stored, a login information database 74 in which the login information is stored, and the initial key pair information. The initial key pair information database 75 is stored, the account freeze request information database 76 is stored, the re-registration information database 77 is stored, the authentication request information is stored The authentication request information database 78, the authentication certificate information database 79 in which the authentication certificate information is stored, the new account information database 80 in which the new account information is stored, the transaction re-application in which the transaction re-application information is stored. An information database 81, a transaction re-approval information database 82 in which the transaction re-approval information is stored, and other information database 83 in which information such as various advertisements, promotions, payments, bulletin boards, etc. is stored. Can include.

Accordingly, the server computer 60 receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal 10 by the initial key pair information input program 64, The account registration program 65 matches and registers a first key among the key pair information to the account, and the account freeze request information input program 66 allows the user terminal 10 to register the first key. 1 When the key is lost or stolen, the account freeze request information is received, the account authority freezing program 67 freezes the authority of the account using the first key, and the account re-registration program 68 ), it is possible to perform an account key pair-based account authentication service that generates re-registration information for re-registering the account by matching a second key among the initial key pair information to the account.

FIG. 2 is a block diagram showing in more detail the initial key pair information input program 64 of the system operating the account key pair based account authentication service of FIG. 1.

More specifically, for example, as shown in FIG. 2, the initial key pair information input program 64 is an authentication application information input program 64-1 that receives user authentication application information from the user terminal 10. ), an authentication certificate issuing program 64-2 that authenticates a user using the user authentication application information and issues authentication certificate information, and an authentication certificate information transmission program that transmits the authentication certificate information to the user terminal 10 (64-3), a new account application information input program (64-4) receiving the authentication certificate information and new account application information from the user terminal 10 through a blockchain network, and a certificate through the blockchain network. A new account information transmission program 64-5 for generating new account information by inquiring for validity and transmitting the new account information to the user terminal 10, new account information from the user terminal 10, and matching An account matching information input program 64-6 for receiving the initial key pair information may be included.

Therefore, using the initial key pair information input program 64, user authentication application information is input from the user terminal 10, user authentication application information is used to authenticate a user, and authentication certificate information is issued. , Transmitting the authentication certificate information to the user terminal 10, receiving the authentication certificate information and new account application information from the user terminal 10 through a blockchain network, and validity of the certificate through the blockchain network New account information may be inquired to be generated, the new account information may be transmitted to the user terminal 10, and new account information and the matching initial key pair information may be input from the user terminal 10.

FIG. 3 is a block diagram showing in more detail an account authority freezing program 67 of a system operating an account key pair-based account authentication service of FIG. 1.

More specifically, for example, the account permission freezing program 67 is an account freezing adequacy examination program 67-1 that examines the adequacy of the account freezing request information, and when the account freezing request information satisfies the account freezing condition , An account freezing program 67-2 for freezing the account using the first key, and a transaction rejection program 67-3 for rejecting approval of all transactions of the account using the first key. have.

Accordingly, the account freeze request information is reviewed for the appropriateness of the account freeze request information using the account authority freeze program 67, and if the account freeze request information satisfies the account freeze condition, the account is frozen using the first key, Approval of all transactions of the account using the first key may be rejected.

4 is a block diagram showing in more detail the account re-registration program 68 of the system operating the account key pair-based account authentication service of FIG. 1.

More specifically, for example, the account re-registration program 68 includes an authentication re-application information input program 68-1 receiving user authentication re-application information from the user terminal 10, and the user authentication re-application information. An authentication certificate re-issuance program 68-2 for re-authentication of a user and issuing re-authentication certificate information, and an authentication certificate information retransmission program 68-3 for transmitting the re-authentication certificate information to the user terminal 10. ), a re-application information input program 68-4 receiving the re-authentication certificate information from the user terminal 10 through a blockchain network, a certificate re-checking program for inquiring the validity of the certificate through the blockchain network ( 68-5), an account re-registration recognition program (68-6) that allows re-registration based on user re-registration information may be included.

Therefore, using the account re-registration program 68, user authentication re-application information is input from the user terminal 10, the user is re-authenticated using the user authentication re-application information, and re-authentication certificate information is Issue, transmit the re-authentication certificate information to the user terminal 10, receive the re-authentication certificate information from the user terminal 10 through a blockchain network, and verify the validity of the certificate through the blockchain network. After inquiry, re-registration can be recognized based on the user's re-registration information.

5 is a conceptual diagram illustrating a relationship between an operator and a user who operates a system for operating an account authentication service based on an account key pair of the present invention.

Therefore, as shown in FIG. 5, according to the present invention, account data is separated and managed, and one account is managed by being subordinated to several keys, thereby enabling essential integrity verification in the blockchain, through which, The operator can only provide a single account to the user, so the convenience of account use and the integrity of the transaction can be verified, and financial accidents can be prevented in advance, and the user can provide various registration fees, fees, and transactions to the operator in return. By being able to provide payment, credit information, etc., we can provide a business model that can benefit everyone.

6 is a flowchart illustrating a method of operating an account key pair based account authentication service according to some embodiments of the present invention.

Meanwhile, as shown in FIGS. 1 to 6, when sequentially illustrating a method of operating an account key pair-based account authentication service according to some embodiments of the present invention, an account key according to some embodiments of the present invention The method of operating a pair-based account authentication service includes, first, configuring a server computer 60 capable of providing an account key pair-based account authentication service, and (a) by the initial key pair information input program 64, Receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal 10; (b) matching and registering a first key among the key pair information to the account by the account registration program (65); (c) receiving, by the account freeze request information input program 66, receiving account freeze request information when the first key is lost or stolen from the user terminal 10; (d) freezing the authority of the account using the first key by the account authority freezing program (67); And (e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program 68; .

However, the present invention is not necessarily limited to the drawings, and various steps may be additionally included.

7A and 7B are flow charts illustrating a method of operating an account key pair-based account authentication service according to some other embodiments of the present invention.

Meanwhile, as shown in FIGS. 1 to 7, when a method of operating an account key pair-based account authentication service according to some other embodiments of the present invention is sequentially shown, according to some other embodiments of the present invention. The method of operating an account key pair-based account authentication service includes, first, configuring a server computer 60 capable of providing an account key pair-based account authentication service, and (a) the initial key pair information input program 64 Receiving, from the user terminal 10, initial key pair information in a form in which a plurality of keys are subordinate to one account; (b) matching and registering a first key among the key pair information to the account by the account registration program (65); (c) receiving, by the account freeze request information input program 66, receiving account freeze request information when the first key is lost or stolen from the user terminal 10; (d) freezing the authority of the account using the first key by the account authority freezing program (67); (e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program 68; (f) transmitting the re-registration information to the user terminal (10) by the re-registration information transmission program (69); And (g) receiving transaction re-application information based on the re-registration information from the user terminal 10 by the transaction re-approval program 70, and transmitting transaction re-approval information to the user terminal 10. Step; may include.

Here, the step (a) includes: (a-1) receiving user authentication application information from the user terminal 10 by the authentication application information input program 64-1; (a-2) authenticating a user using the user authentication application information by the authentication certificate issuing program (64-2) and issuing authentication certificate information; (a-3) transmitting the authentication certificate information to the user terminal 10 by the authentication certificate information transmission program (64-3); (a-4) receiving the authentication certificate information and the new account application information from the user terminal 10 through the blockchain network by the new account application information input program 64-4; (a-5) By the new account information transmission program 64-5, the validity of the certificate is inquired through the blockchain network to generate new account information, and the new account information is transmitted to the user terminal 10. Transmitting; And (a-6) receiving new account information and the matching initial key pair information from the user terminal 10 by the account matching information input program 64-6.

In addition, the step (c) may include: (c-1) examining the appropriateness of the account freeze request information by the account freeze adequacy review program 66-1; (c-2) by the account freezing program (66-2), if the account freezing request information satisfies the account freezing condition, freezing the account using the first key; And (c-3) rejecting approval of all transactions of the account using the first key by the transaction rejection program 66-3.

Further, the step (e) may include: (e-1) receiving user authentication reapplication information from the user terminal 10 by the authentication reapplication information input program 68-1; (e-2) re-authentication of a user by using the user authentication re-application information and issuing re-authentication certificate information by the authentication certificate reissuance program (68-2); (e-3) transmitting the re-authentication certificate information to the user terminal by the authentication certificate information retransmission program (68-3); (e-4) receiving, by the re-application information input program (68-4), the re-authentication certificate information from the user terminal 10 through a blockchain network; (e-5) querying the validity of the certificate through the blockchain network by the certificate re-inquiry program (68-5); And (e-6) re-registration is recognized based on the user's re-registration information by the account re-registration recognition program 68-6.

FIG. 8 is a reference diagram showing a continuous data integrity verification process of a system operating an account key pair-based account authentication service of the present invention, and FIG. 9 is a new account according to the method of operating the account key pair-based account authentication service of FIG. Is a reference diagram showing a process of generating, and FIG. 10 is a reference diagram showing a theft reporting and emergency permission freezing process according to the method of operating the account key pair-based account authentication service of FIG. 8, and FIG. 11 is an account key of FIG. It is a reference diagram showing a key pair re-registration process according to a method of operating a pair-based account authentication service.

As shown in FIGS. 8 to 11, in general, block chains and other decentralized systems use Public Key Cryptography, so all digital signatures are used with the signer's ID (Public Key) and cryptography. There is a private key used when signing with.

Early blockchains use this public key itself as the account ID, and as a result, if the private key is lost or stolen, all data and account rights that are dependent on the account are lost.

This is unacceptable in government and enterprise computing systems, and even if the blockchain has the inherent decentralization value, it is unacceptable.

Therefore, if there is a blockchain that accompanies a mechanism for re-registering keys while maintaining decentralization, many problems related to Key Pair Management and security can be solved.

Hereinafter, a method of operating an account authentication service based on an account key pair according to the present invention will be described with reference to FIGS. 8 to 11.

The method for re-registration of account key pairs and continuous data integrity verification of a decentralized network according to the present invention exists by separating account data, and allows one account to be managed by being subordinated to several keys, thereby verifying essential integrity in a blockchain. The integrity verification method is as follows.

As shown in Fig. 8, the time when the account of the account data is created is referred to as the account creation time (t0), and then, when the private key is lost or stolen, all data and account rights subordinate to the account are The account re-registration for maintenance is performed, and the time at which the account re-registration is performed is referred to as the account re-registration time t1.

Similarly, if the private key is lost or stolen again,

Account secondary re-registration is performed to maintain all data and account rights that are subordinate to the policy, and the time at which the account secondary re-registration is performed is called the account secondary re-registration time (t2), and then account re-registration Whenever this is done, a new account re-registration time is issued. For example, when the third account re-registration is performed is the third account re-registration time (t3), and the fourth account is re-registered is the fourth account. The re-registration time point t4, the time at which the fifth account re-registration is performed is referred to as the fifth account re-registration time point (t5), and the time point at which the nth account re-registration is performed is referred to as the nth account re-registration time tn.

Here, from the account registration time t0 to the account re-registration time t1, for example, a key pair is registered as a valid key, and the period in which the a key pair is considered a valid key is defined as a key pair validity period (t0). ~t1). In the a key pair valid period (t0 to t1), the a key pair must be used and signed during the a key pair valid period (t0 to t1).

Further, from the account re-registration time t1 to the account secondary re-registration time t2, which is the time when the account secondary re-registration is performed again, for example, the b key pair is registered as a valid key.

In this case, the period during which the b key pair is considered as a valid key is referred to as a b key pair valid period (t1 to t2). During the valid period of the b key pair (t1 to t2), the b key pair must be used and signed.

Likewise, from the second account re-registration time t2 to the account secondary re-registration time t3 at which the third account re-registration is performed, for example, the c key pair is registered as a valid key. In this case, a period in which the c key pair is considered a valid key is referred to as a c key pair valid period (t2 to t3). During the valid period of the c key pair (t2 to t3), the c key pair must be used and signed.

Further, from the time of account nth re-registration (tn) to the present, for example, n key pairs are registered as valid keys. In this case, a period in which the n key pairs are considered valid keys is referred to as an n key pair valid period (tn to present). During the validity period of the n key pairs (tn to present), the n key pairs must be used and signed.

In this way, a different valid key pair must be used and signed for each valid period of the key pair, so a flawless verification procedure is performed.

In the method of operating an account key pair-based account authentication service according to the present invention, an account creation and initial key pair registration method for account creation and initial key pair registration are as follows.

First, an initial key pair is generated by a user through an individual trusted device (eg, a terminal).

Thereafter, by accessing the authentication network through the user's terminal, the user is authenticated in the authentication network.

Thereafter, after the user is authenticated by the authentication network, an authentication certificate is issued to the user terminal through the authentication network.

Thereafter, a user terminal is connected to the blockchain network, and a new account registration is requested along with an authentication certificate. At this time, a public key to be used as an initial key pair is essentially attached.

After that, the blockchain network is inquired whether the authentication certificate is valid through the authentication network.

Thereafter, after the authentication certificate is inquired, a new account is created by the blockchain network based on the user's registration information.

The account created in this way and the registered initial key pair are used.

Meanwhile, when the private key is lost or stolen, account re-registration is performed to maintain all data and account rights subordinate to the account. The account re-registration method is as follows.

First, a theft report and emergency account freezing are requested to the blockchain network by the user terminal.

After that, it is judged whether the urgent account freeze request is appropriate through the blockchain network. In the above step, if the emergency account freeze request satisfies the account freeze condition, the current valid key pair is frozen. At this time, all transactions signed with the frozen valid key pair are rejected after the valid key pair is frozen.

All transactions signed with the frozen valid key pair are rejected. On the other hand, a key pair registration method for key pair registration is as follows.

First, a new key pair is generated by the user through the terminal. Thereafter, by accessing the authentication network through the user's terminal, the user is authenticated in the authentication network.

Thereafter, after the user is authenticated by the authentication network, an authentication certificate is issued to the user terminal through the authentication network.

Thereafter, by connecting to the blockchain network through the user terminal, a key pair re-registration is requested together with an authentication certificate. At this time, a new public key to be used as a key pair is essentially attached.

After that, the blockchain network is inquired whether the authentication certificate is valid through the authentication network.

Thereafter, after the authentication certificate is inquired, re-registration is recognized by the blockchain network based on the user's re-registration information. In this way, the re-registered initial key pair is used.

As described above, in the method for re-registering an account key pair and continuously verifying data integrity in a decentralized network according to the present invention, account data is separated and managed, and one account is managed by being subordinated by several keys, which is essential in the blockchain. Integrity verification can be enabled.

On the other hand, the present invention can also be implemented as a computer-readable code on a computer-readable recording medium.

The computer-readable recording medium may include any type of recording device storing data that can be read by a computer system.

Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, magneto-optical disk, optical data storage device, flash memory, USB memory, as well as the server computer 60 described above. In addition, it may include a carrier wave (for example, transmission through the Internet).

Further, the computer-readable recording medium is distributed over a computer system connected through a network, so that computer-readable codes can be stored and executed in a distributed manner.

The present invention has been described with reference to the embodiments shown in the drawings, but these are merely exemplary, and those of ordinary skill in the art will appreciate that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the appended claims.

10: user terminal
90: operator terminal
50: network
60: server computer
PG: Program control unit
DB: database

Claims (11)

A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
Receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal;
Matching and registering a first key among the key pair information in the account;
Receiving account freezing request information when the first key is lost or stolen from the user terminal;
Freezing the authority of the account using the first key; And
Generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account;
Including,
The step of receiving the initial key pair information,
Receiving user authentication request information from the user terminal;
Authenticating a user using the user authentication application information and issuing authentication certificate information;
Transmitting the authentication certificate information to the user terminal;
Receiving the authentication certificate information and new account application information from the user terminal through a blockchain network;
Generating new account information by inquiring the validity of a certificate through the blockchain network, and transmitting the new account information to the user terminal; And
Receiving new account information and the matching initial key pair information from the user terminal;
Including, how to operate an account key pair-based account authentication service. A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The initial key pair information input program includes an authentication application information input program for receiving user authentication application information from the user terminal, an authentication certificate issuing program for authenticating a user using the user authentication application information and issuing authentication certificate information, An authentication certificate information transmission program for transmitting the authentication certificate information to the user terminal, a new account application information input program for receiving the authentication certificate information and new account application information from the user terminal through a blockchain network, and the blockchain network. A new account information transmission program for generating new account information by inquiring about the validity of the certificate and transmitting the new account information to the user terminal, receiving new account information and the matching initial key pair information from the user terminal An account matching information input program, an authentication application information database in which the authentication application information is stored, an authentication certificate information database in which the authentication certificate information is stored, and a new account information database in which the new account information is stored,
The step (a),
(a-1) receiving user authentication application information from the user terminal by the authentication application information input program;
(a-2) authenticating a user by using the user authentication application information by the authentication certificate issuing program and issuing authentication certificate information;
(a-3) transmitting the authentication certificate information to the user terminal by the authentication certificate information transmission program;
(a-4) receiving, by the new account application information input program, the authentication certificate information and new account application information from the user terminal through a blockchain network;
(a-5) generating new account information by inquiring the validity of a certificate through the blockchain network by the new account information transmission program, and transmitting the new account information to the user terminal; And
(a-6) receiving new account information and the matching initial key pair information from the user terminal by the account matching information input program;
Including, how to operate an account key pair-based account authentication service. delete A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The account authority freezing program is an account freezing adequacy screening program that examines the adequacy of the account freezing request information, and when the account freezing request information satisfies an account freezing condition, an account freezing action that freezes the account using the first key A program, and a transaction rejection program for rejecting approval of all transactions of the account using the first key,
The step (c),
(c-1) examining the adequacy of the account freezing request information by the account freezing adequacy examination program;
(c-2) freezing the account using the first key when the account freezing request information satisfies an account freezing condition by the account freezing program; And
(c-3) rejecting approval of all transactions of the account using the first key by the transaction rejection program;
Including, how to operate an account key pair-based account authentication service. A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The account re-registration program is an authentication re-application information input program for receiving user authentication re-application information from the user terminal, and an authentication certificate for re-authentication of a user using the user authentication re-application information and issuing re-authentication certificate information A re-issuance program, an authentication certificate information retransmission program for transmitting the re-authentication certificate information to the user terminal, a re-application information input program for receiving the re-authentication certificate information from the user terminal through a blockchain network, through the blockchain network Includes a certificate re-inquiry program for inquiring the validity of a certificate, and an account re-registration recognition program that allows re-registration based on the user's re-registration information
The step (e),
(e-1) receiving user authentication re-application information from the user terminal by the authentication re-application information input program;
(e-2) re-authentication of a user using the user authentication re-application information by the authentication certificate reissuance program and issuing re-authentication certificate information;
(e-3) transmitting the re-authentication certificate information to the user terminal by the authentication certificate information retransmission program;
(e-4) receiving, by the re-application information input program, the re-authentication certificate information from the user terminal through a blockchain network;
(e-5) querying the validity of the certificate through the blockchain network by the certificate re-inquiry program; And
(e-6) re-registration is recognized based on the user's re-registration information by the account re-registration recognition program;
Including, how to operate an account key pair-based account authentication service. A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The initial key pair information is a method of operating an account key pair-based account authentication service, in which primary to N-th key information is sequentially listed in one account. A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The initial key pair information is a method of operating an account key pair-based account authentication service in which N key information is randomly listed in one account. A method of operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , An account freeze request information database in which the account freeze request information is stored, and a re-registration information database in which the re-registration information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The server computer further comprises a re-registration information transmission program for transmitting the re-registration information to the user terminal,
After step (e),
(f) transmitting the re-registration information to the user terminal by the re-registration information transmission program;
A method of operating an account authentication service based on an account key pair further comprising a. The method of claim 8,
The server computer receives transaction re-request information based on the re-registration information from the user terminal, and transmits transaction re-approval information to the user terminal, and a transaction re-application in which the transaction re-application information is stored. An information database, and a transaction re-approval information database in which the transaction re-approval information is stored,
After step (f) above,
(g) receiving transaction re-application information based on the re-registration information from the user terminal by the transaction re-approval program, and transmitting transaction re-approval information to the user terminal;
A method of operating an account authentication service based on an account key pair further comprising a. A system for operating an account key pair based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , Including an account freeze request information database in which the account freeze request information is stored,
By the initial key pair information input program, the user terminal receives initial key pair information in a form in which a plurality of keys are subordinated to one account, and by the account registration program, among the key pair information to the account When the first key is lost or stolen from the user terminal by matching and registering the first key, the account freeze request information input program receives the account freeze request information, and the account freeze request information , Freeze the authority of the account using the first key, and re-register information to re-register the account by matching a second key among the initial key pair information to the account by the account re-registration program Comprising a control unit programmed to generate,
The initial key pair information input program includes an authentication application information input program for receiving user authentication application information from the user terminal, an authentication certificate issuing program for authenticating a user using the user authentication application information and issuing authentication certificate information, An authentication certificate information transmission program for transmitting the authentication certificate information to the user terminal, a new account application information input program for receiving the authentication certificate information and new account application information from the user terminal through a blockchain network, and the blockchain network. A new account information transmission program for generating new account information by inquiring about the validity of the certificate and transmitting the new account information to the user terminal, receiving new account information and the matching initial key pair information from the user terminal An account key pair-based account including an account matching information input program, an authentication application information database in which the authentication application information is stored, an authentication certificate information database in which the authentication certificate information is stored, and a new account information database in which the new account information is stored. A system that operates an authentication service. In a computer-readable recording medium recording a method of operating an account key pair-based account authentication service using a computer system having at least one user terminal, an operator terminal, and a server computer connected through a network,
The server computer, an initial key pair information input program that receives initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal, and matches a first key among the key pair information to the account An account registration program to register, an account freeze request information input program that receives account freeze request information when the first key is lost or stolen from the user terminal, and an account that freezes the authority of the account using the first key Authority freezing program, an account re-registration program that generates re-registration information for re-registering the account by matching a second key among the initial key pair information with the account, and an initial key pair information database storing the initial key pair information , Including an account freeze request information database in which the account freeze request information is stored,
(a) receiving initial key pair information in a form in which a plurality of keys are subordinate to one account from the user terminal by the initial key pair information input program;
(b) matching and registering a first key among the key pair information to the account by the account registration program;
(c) receiving account freeze request information when the first key is lost or stolen from the user terminal by the account freeze request information input program;
(d) freezing the authority of the account using the first key by the account authority freezing program; And
(e) generating re-registration information for re-registering the account by matching a second key among the initial key pair information to the account by the account re-registration program;
Including,
The initial key pair information input program includes an authentication application information input program for receiving user authentication application information from the user terminal, an authentication certificate issuing program for authenticating a user using the user authentication application information and issuing authentication certificate information, An authentication certificate information transmission program for transmitting the authentication certificate information to the user terminal, a new account application information input program for receiving the authentication certificate information and new account application information from the user terminal through a blockchain network, and the blockchain network. A new account information transmission program for generating new account information by inquiring about the validity of the certificate and transmitting the new account information to the user terminal, receiving new account information and the matching initial key pair information from the user terminal An account matching information input program, an authentication application information database in which the authentication application information is stored, an authentication certificate information database in which the authentication certificate information is stored, and a new account information database in which the new account information is stored,
The step (a),
(a-1) receiving user authentication application information from the user terminal by the authentication application information input program;
(a-2) authenticating a user by using the user authentication application information by the authentication certificate issuing program and issuing authentication certificate information;
(a-3) transmitting the authentication certificate information to the user terminal by the authentication certificate information transmission program;
(a-4) receiving, by the new account application information input program, the authentication certificate information and new account application information from the user terminal through a blockchain network;
(a-5) generating new account information by inquiring the validity of a certificate through the blockchain network by the new account information transmission program, and transmitting the new account information to the user terminal; And
(a-6) receiving new account information and the matching initial key pair information from the user terminal by the account matching information input program;
Comprising, a computer-readable recording medium recording a method of operating an account key pair-based account authentication service.

Images