KR102538652B1 - Method and apparatus for performing electronic signature in metaverse environment - Google Patents

Abstract

The present disclosure relates to a method for performing electronic signature, which is performed by at least one processor. According to an embodiment of the present invention, the method for performing electronic signature enables an avatar to perform electronic signature safely and easily in a metaverse environment. The method for performing electronic signature includes: a step of receiving electronic signature original text request information for use in the metaverse environment and first personal identification information related to a certificate for logging in the metaverse environment from a user terminal; a step of generating a key pair of a public key and a personal key for metaverse; a step of encoding the personal key based on the first personal identification information and storing the personal key; a step of transmitting an electronic signature original text including the public key for metaverse to the user terminal, wherein the user terminal performs the electronic signature of the electronic signature original text including the public key for metaverse; a step of receiving a verification request of the electronic signature from a metaverse server receiving a verification request from the user terminal; and a step of transmitting a client ID corresponding to a verification result of the electronic signature and the certificate to the metaverse server by performing verification on the electronic signature. Therefore, the avatar corresponding to the client ID can be activated in the metaverse environment.

Description

Electronic signature method and device in metaverse environment {METHOD AND APPARATUS FOR PERFORMING ELECTRONIC SIGNATURE IN METAVERSE ENVIRONMENT}

The present disclosure relates to a digital signature method and apparatus in a metaverse environment, and specifically, based on a result of a digital signature performed by a user with a user terminal in the real world, an avatar is safely and easily digitally signed in a metaverse environment It relates to a digital signature method and device capable of

I verify my identity several times a day both online and offline. It is performing the user authentication procedure to check whether the user is actually a legitimate user. When accessing the bank site (or app) online using a PC or smartphone, authentication is performed using an ID/password, certificate, or fingerprint, and authentication is performed by showing an employee ID when entering the company. Also, when driving, carry a driver's license to prove that you are qualified to drive.

On the other hand, changes in the service environment are rapidly occurring, such as the emergence of new IT technologies such as artificial intelligence, the Internet of Things, and block chains, and many parts of daily life being converted to non-face-to-face environments due to the spread of infectious diseases. In particular, recently, the metaverse technology that allows people to experience social, cultural, and economic activities that took place in the real world in an online virtual environment is attracting attention. Users can purchase goods using avatars on the metaverse, a virtual environment, and perform cultural and economic activities like the real world on the metaverse, such as attending concerts.

However, in the case of cultural and economic activities in the real world, user authentication can be performed through digital signature using a certificate installed on the terminal device, but in a virtual environment such as the metaverse, the avatar uses the same terminal device as in the real world. Since it does not, a user authentication method using this is not provided. Even on the metaverse, there is an urgent need for technologies that enable avatars to safely and easily sign electronically.

The present disclosure provides a digital signature method in a metaverse environment, a computer program and a device (system) stored in a recording medium to solve the above problems.

The present disclosure may be implemented in a variety of ways, including a method, apparatus (system) or computer program stored on a readable storage medium.

According to an embodiment of the present disclosure, a digital signature method in a metaverse environment, executed by at least one processor, includes first personal identification information associated with a certificate for logging in a metaverse environment from a user terminal and a metaverse environment. Receiving digital signature original text request information for use in, generating a key pair of a private key and public key for metaverse, encrypting and storing a private key based on first personal identification information , Transmitting the original text of the digital signature including the public key for the metaverse to the user terminal - The electronic signature of the original text including the public key for the metaverse is performed by the user terminal -, Request for verification of the digital signature from the user terminal Receiving a request for verification of the digital signature from the received metaverse server, and performing verification of the digital signature and transmitting the customer ID corresponding to the verification result of the digital signature and the certificate to the metaverse server, In the metaverse environment, an avatar corresponding to a customer ID may be activated.

According to an embodiment of the present disclosure, a certificate for logging into a metaverse environment includes a serial number, and the step of generating a key pair of a private key and a public key for metaverse includes the state of the certificate using the serial number. Inquiring, if the certificate is not expired, verifying the first personal identification information, and if the first personal identification information is verified, generating a pair of a private key for metaverse and a public key for metaverse. steps may be included.

According to an embodiment of the present disclosure, the electronic signature method is a second copy of a purchase signature generated by an avatar's purchasing behavior from a metaverse server in a metaverse environment in which an avatar is activated, and a second transmitted from a user terminal to the metaverse server. Receiving personal identification information, using the private key for the metaverse to digitally sign the original purchase signature, using the public key for the metaverse to verify the digital signature, and the performed digital signature It may further include transmitting the result of the verification to the metaverse server.

According to an embodiment of the present disclosure, the first personal identification information and the second personal identification information may include the same information.

According to an embodiment of the present disclosure, the step of performing the digital signature using the private key for the metaverse includes activating the private key for the metaverse based on the received second personal identification number, and the activated metaverse. and performing a digital signature on the original text of the purchase signature using the private key for the purchase.

According to an embodiment of the present disclosure, the digital signature method may further include invalidating a key pair of a private key and a public key for the metaverse when the customer ID is logged out from the metaverse environment.

According to an embodiment of the present disclosure, the first personal identification information and the second personal identification information may include one of a PIN number, pattern information, or biometric information.

According to an embodiment of the present disclosure, in the digital signature method, the step of encrypting and storing the private key based on the first personal identification information is to convert the private key for the metaverse to PBKDF2 (Password- A step of encrypting by the Based Key Derivation Function Version 2) method may be included.

A computer program stored in a computer readable recording medium is provided to execute the electronic signature method according to an embodiment of the present disclosure on a computer.

A digital signature authentication server device according to an embodiment of the present disclosure includes a communication module, a memory, and at least one processor connected to the memory and configured to execute at least one computer-readable program included in the memory, and at least One program receives, from a user terminal, first personal identification information associated with a certificate for log-in of a metaverse environment and digital signature original request information for use in a metaverse environment, and keys of a private key and a public key for metaverse. Creates a pair, encrypts and stores the private key based on the first personal identification information, transmits the original text of the digital signature including the public key for the metaverse to the user terminal in response to the original text request information for the digital signature, and transmits the original text of the digital signature to the user terminal. Transmitting the original text of the digital signature including the public key for the metaverse - The digital signature of the original text including the public key for the metaverse is performed by the user terminal - The metaverse server receiving the verification request of the digital signature from the user terminal Including a command for receiving a request for verification of the digital signature, performing verification of the digital signature, and transmitting the customer ID corresponding to the verification result of the digital signature and the certificate to the metaverse server, and the customer ID in the metaverse environment. An avatar corresponding to may be activated.

According to an embodiment of the present disclosure, the command may further include a command for invalidating a private key and public key key pair for the metaverse when the customer ID is logged out of the metaverse environment.

According to some embodiments of the present disclosure, an avatar can safely and easily digitally sign in a metaverse environment based on a digital signature result performed by a user with a user terminal in the real world.

According to some embodiments of the present disclosure, if a user performs a digital signature with personal identification information (eg, a PIN number, etc.) used in the real world when entering the metaverse, using this, even in transactions on the metaverse, A service capable of electronic signature can be provided using personal identification information used in the real world.

According to some embodiments of the present disclosure, when an individual enters the metaverse and performs a digital signature using a user terminal with an owned private key, a private key (eg, one-time private key, etc.) and a public key to be used on the metaverse By generating a key pair, it is possible to perform electronic signature and verification using a private key and public key pair on the metaverse.

According to some embodiments of the present disclosure, through the same authentication means as in the real world, all tasks requiring authentication, such as purchasing, banking, insurance, obtaining licenses, and issuing distributed identity certificates within the metaverse, will be possible. can

The effects of the present disclosure are not limited to the effects mentioned above, and other effects not mentioned are clear to those skilled in the art (referred to as “ordinary technicians”) from the description of the claims. will be understandable.

Embodiments of the present disclosure will be described with reference to the accompanying drawings described below, wherein like reference numbers indicate like elements, but are not limited thereto.
1 is a configuration diagram of an electronic signature system according to an embodiment of the present disclosure.
2 and 3 are flowcharts illustrating a digital signature method in a metaverse environment according to an embodiment of the present disclosure.
4 and 5 are flowcharts illustrating a digital signature processing method for purchase in a metaverse environment according to an embodiment of the present disclosure.
6 is a flowchart illustrating a digital signature method in a metaverse environment according to an embodiment of the present disclosure.
7 is a flowchart illustrating a purchase electronic signature method for an avatar's purchasing behavior in a metaverse environment according to an embodiment of the present disclosure.
8 is a configuration diagram of a digital signature authentication server according to an embodiment of the present disclosure.

Hereinafter, specific details for the implementation of the present disclosure will be described in detail with reference to the accompanying drawings. However, in the following description, if there is a risk of unnecessarily obscuring the gist of the present disclosure, detailed descriptions of well-known functions or configurations will be omitted.

In the accompanying drawings, identical or corresponding elements are given the same reference numerals. In addition, in the description of the following embodiments, overlapping descriptions of the same or corresponding components may be omitted. However, omission of a description of a component does not intend that such a component is not included in an embodiment.

Advantages and features of the disclosed embodiments, and methods of achieving them, will become apparent with reference to the following embodiments in conjunction with the accompanying drawings. However, the present disclosure is not limited to the embodiments disclosed below and may be implemented in various different forms, but only the present embodiments make the present disclosure complete, and the present disclosure does not extend the scope of the invention to those skilled in the art. It is provided only for complete information.

Terms used in this specification will be briefly described, and the disclosed embodiments will be described in detail. The terms used in this specification have been selected from general terms that are currently widely used as much as possible while considering the functions in the present disclosure, but they may vary according to the intention of a person skilled in the related field, a precedent, or the emergence of new technologies. In addition, in a specific case, there is also a term arbitrarily selected by the applicant, and in this case, the meaning will be described in detail in the description of the invention. Therefore, the terms used in the present disclosure should be defined based on the meaning of the terms and the general content of the present disclosure, not simply the names of the terms.

Expressions in the singular number in this specification include plural expressions unless the context clearly dictates that they are singular. Also, plural expressions include singular expressions unless the context clearly specifies that they are plural. When it is said that a certain part includes a certain component in the entire specification, this means that it may further include other components without excluding other components unless otherwise stated.

Also, the term 'module' or 'unit' used in the specification means a software or hardware component, and the 'module' or 'unit' performs certain roles. However, 'module' or 'unit' is not meant to be limited to software or hardware. A 'module' or 'unit' may be configured to reside in an addressable storage medium and may be configured to reproduce one or more processors. Thus, as an example, a 'module' or 'unit' includes components such as software components, object-oriented software components, class components, and task components, processes, functions, and attributes. , procedures, subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, or variables. Functions provided within components and 'modules' or 'units' may be combined into a smaller number of components and 'modules' or 'units', or further components and 'modules' or 'units'. can be further separated.

According to one embodiment of the present disclosure, a 'module' or 'unit' may be implemented with a processor and a memory. 'Processor' should be interpreted broadly to include general-purpose processors, central processing units (CPUs), microprocessors, digital signal processors (DSPs), controllers, microcontrollers, state machines, and the like. In some circumstances, 'processor' may refer to an application specific integrated circuit (ASIC), programmable logic device (PLD), field programmable gate array (FPGA), or the like. 'Processor' refers to a combination of processing devices, such as, for example, a combination of a DSP and a microprocessor, a combination of a plurality of microprocessors, a combination of one or more microprocessors in conjunction with a DSP core, or a combination of any other such configurations. You may. Also, 'memory' should be interpreted broadly to include any electronic component capable of storing electronic information. 'Memory' includes random access memory (RAM), read-only memory (ROM), non-volatile random access memory (NVRAM), programmable read-only memory (PROM), erasable-programmable read-only memory (EPROM), It may also refer to various types of processor-readable media, such as electrically erasable PROM (EEPROM), flash memory, magnetic or optical data storage, registers, and the like. A memory is said to be in electronic communication with the processor if the processor can read information from and/or write information to the memory. Memory integrated with the processor is in electronic communication with the processor.

In the present disclosure, a 'system' may include at least one of a server device and a cloud device, but is not limited thereto. For example, a system may consist of one or more server devices. As another example, a system may consist of one or more cloud devices. As another example, the system may be operated by configuring a server device and a cloud device together.

In this disclosure, 'display' may refer to any display device associated with a computing device, for example, any display device capable of displaying any information/data provided or controlled by the computing device. can refer to

In the present disclosure, 'each of a plurality of A' or 'each of a plurality of A' may refer to each of all components included in a plurality of A's, or each of some components included in a plurality of A's. .

1 is a configuration diagram of an electronic signature system 100 according to an embodiment of the present disclosure. As shown, the electronic signature system 100 may include a user terminal 110, a metaverse server 120, and/or an electronic signature authentication server 130. The electronic signature system 100 may include system(s) capable of providing an electronic signature service in a metaverse environment through a network. In one embodiment, the electronic signature system 100 includes one or more server devices capable of storing, providing, and executing computer-executable programs (eg, downloadable applications) and data related to digital signature services in a metaverse environment, and /or a database, or one or more distributed computing devices and/or distributed databases based on cloud computing services. For example, the electronic signature system 100 may include separate systems (eg, servers) for providing digital signature services in a metaverse environment. In one embodiment, the electronic signature system 100 may be part of a server implemented with a metaverse platform capable of digital signature in a metaverse environment. In addition, in one embodiment, the electronic signature system 100 may provide an electronic signature service in a metaverse environment, and may be a part of a server in which an electronic signature authentication operation in a metaverse environment is implemented.

In one embodiment, the digital signature authentication operation provided by the digital signature authentication server 130 is provided to the user through a metaverse platform application, a store service application, a financial platform application, a web browser application, etc. installed in the user terminal 110. It can be.

The user terminal 110 may communicate with the metaverse server 120 and the digital signature authentication server 130 over a network. The network may be configured to enable communication between the user terminal 110, the metaverse server 120 and the digital signature authentication server 130. The network depends on the installation environment, for example, wired networks such as Ethernet, wired home networks (Power Line Communication), telephone line communication devices and RS-serial communication, mobile communication networks, WLAN (Wireless LAN), Wi-Fi , a wireless network such as Bluetooth and ZigBee, or a combination thereof. The communication method is not limited, and short-range wireless communication between user terminals 110 as well as a communication method utilizing a communication network that the network may include (eg, mobile communication network, wired Internet, wireless Internet, broadcasting network, satellite network, etc.) can be included

The user terminal 110 may be a user terminal such as a mobile phone terminal, a tablet terminal, and a PC terminal, but is not limited thereto. User terminal 110 may be any computing device capable of wired and/or wireless communication. For example, the user terminal 110 includes a smart phone, a mobile phone, a navigation device, a computer, a laptop computer, a digital broadcasting terminal, a PDA (Personal Digital Assistants), a PMP (Portable Multimedia Player), a tablet PC, a game console, It may include a wearable device, an internet of things (IoT) device, a virtual reality (VR) device, an augmented reality (AR) device, and the like.

In one embodiment, the digital signature authentication server 130 receives the first personal identification information associated with the certificate for logging in the metaverse environment from the user terminal 110 and the electronic signature original text request information for use in the metaverse environment, and , Generates a key pair of private key and public key for metaverse, encrypts and stores the private key based on the first personal identification information, and transmits the original electronic signature including the public key for metaverse to the user terminal 110 And, when the verification request of the electronic signature is received from the metaverse server 120 that has received the verification request of the electronic signature from the user terminal 110, and verification of the electronic signature is performed, and the verification of the electronic signature is normally completed, the electronic signature is verified. The verification result of the signature and the customer ID corresponding to the certificate may be transmitted to the metaverse server 120. Through this operation, an avatar corresponding to the customer ID can be activated in the metaverse environment.

2 and 3 are flowcharts illustrating a method of generating a private key-public key key pair for digital signature in a metaverse environment according to an embodiment of the present disclosure. In one embodiment, a private key-public key key pair generation method for digital signature in a metaverse environment includes a user terminal 420, a security module 430, a metaverse server 440, an avatar 450, and a digital signature authentication server. (460). As shown in FIG. 2 , a private key-public key key pair generation method for digital signature in a metaverse environment may be initiated when a user 410 requests a user terminal 420 to log in with a certificate (412).

The user terminal 420 may display a personal identification information input screen to the user 410 who has requested authentication login (422). The user 410 may input personal identification information through the displayed personal identification information input screen for certificate-based login (414). Here, the personal identification information input operation 414 may be performed after the certificate serial number request operation 424 . For example, the user 410 may input a personal identification number (PIN) number of a certificate for certificate-based login. Here, the personal identification information is not limited to a PIN number, and may include a PIN number, pattern information, or biometric information. Here, the biometric information may include fingerprint information, face information, iris information, retina information, and vein information.

The user terminal 420 may request a certificate serial number from the security module 430 within the user terminal 420 (424). Here, the certificate serial number request operation 424 may indicate an operation of inquiring one or more certificates existing in the user terminal 420 . The security module 430 may transmit serial numbers of one or more requested certificates to the user terminal 420 (432). For example, the user terminal 420 may obtain the serial number of the certificate using the security module 430 installed in the user terminal.

The user terminal 420 may request the original text of the digital signature from the digital signature verification server 460 (426). Here, the user terminal 420 may transmit the certificate serial number and personal identification information (eg, PIN number, etc.) input by the user 410 together with the request information for the original text of the digital signature when requesting the original text of the digital signature. In this case, the user terminal 420 generates hash information corresponding to the certificate serial number and personal identification information (eg, PIN number, etc.), transmits it to the digital signature authentication server 460, and applies section encryption to The certificate serial number and personal identification information can be safely transmitted.

The digital signature verification server 460 may inquire the status of the corresponding certificate serial number based on the received certificate serial number (462). Then, the digital signature authentication server 460 may verify the personal identification information received from the user terminal 420 (464). When the verification is completed, the digital signature authentication server 460 may generate a key pair of a private key and a public key that the user 410 can use while logging in to the metaverse environment (466). Here, the key pair of the private key and public key may refer to a key pair of a one-time private key and public key that is valid only while the user 410 logs in to the metaverse environment and is invalidated when the user 410 logs out, but is limited thereto. It doesn't work.

Thereafter, the digital signature authentication server 460 may encrypt and safely store the private key using the personal identification information input by the user 410 (468). Here, the digital signature authentication server 460 may encrypt the private key based on PBKDF2, which is an encryption standard, but is not limited thereto. That is, an encryption method may be applied in various ways. For example, the digital signature authentication server 460 may store the private key in hardware security module (HSM) hardware equipment or may store it in a block chain.

In addition, the digital signature authentication server 460 may transmit the public key, which is the original text of the digital signature, and the state information of the serial number of the certificate to the user terminal 420 (470).

As such, FIG. 2 shows that the digital signature authentication server 460 generates a private key-public key key pair to be used in the metaverse by using the personal identification information that the user 410 inputs to log in to the metaverse server 440. The operation to create is described. Hereinafter, the user terminal 420 digitally signs the public key to be used in the metaverse, the digital signature authentication server 460 verifies the digital signature, and then the user terminal 420 and the metaverse server 440 verify the verification result. ) to explain the transmission operation.

As shown in FIG. 3 , the user terminal 420 may transmit a digital signature request for a public key, which is the original text of the digital signature, to the security module 430 installed in the user terminal (522). The security module 430 may return the electronic signature value for the public key, which is the original text of the electronic signature, to the user terminal 420 (532). Here, the digital signature value may refer to a PKCS#7 digital signature standard value, but is not limited thereto. For example, the digital signature value may be electronically signed using a JWT (JSON Web Token) method.

The user terminal 420 may request verification by transmitting a digital signature value to the metaverse server 440 (524). The metaverse server 440 may request verification of the digital signature by transmitting the digital signature value received from the user terminal 420 to the digital signature authentication server 460 (542).

The digital signature authentication server 460 may verify the received digital signature value (562). When the verification is completed, the digital signature verification server 460 may transmit the verification result for the digital signature value and the customer ID corresponding to the certificate to the metaverse server 440 (564). The metaverse server 440 may transmit a verification result for the received electronic signature to the user terminal 420 (544). As described above, the digital signature verification operation by the digital signature verification server 460 may be performed. The digital signature verification operation is based on the fact that the private key previously issued by the digital signature authentication server 460 exists in the user terminal 420 and the fact that the original text of the digital signature (eg, public key) is digitally signed using the issued private key. can indicate an operation to verify. When the digital signature verification is completed, the user terminal 420 may transmit the digital signature verification result and customer ID received from the digital signature authentication server 460 to the metaverse server 440 .

As such, in FIG. 3, after the user terminal 420 and the security module 430 digitally sign the public key to be used in the metaverse, and the digital signature authentication server 460 verifies the digital signature, the verification result is sent to the user terminal. (420) and the operation of transmitting to the metaverse server (440) has been described.

Through operations 412 to 546 shown in FIGS. 2 and 3 , the user 410 may complete logging in to the metaverse server. For example, when the user 410 inputs personal identification information (eg, PIN input), a login operation process between the user terminal 420, the digital signature authentication server 460 and the metaverse server 440 may be performed. there is. The user 410 may complete the login operation through operations 412 to 544 shown in FIGS. 2 and 3 .

In addition, the metaverse server 440 may activate the avatar 450 of the user 410 and show it through the user terminal 420 since the certificate-based login is successful (546). The user 410 may create or activate the avatar 450 through operation 546 .

4 and 5 are flowcharts illustrating a digital signature processing method in a metaverse environment according to an embodiment of the present disclosure. In one embodiment, the digital signature processing method in the metaverse environment may be performed by the metaverse server 440 and the digital signature authentication server 460 . As shown in FIG. 4, the digital signature processing method in the metaverse environment is initiated by the avatar 450 in the metaverse environment sending a request for an electronic signature to the store 670 to purchase a product in the store of the metaverse. can be (652).

The store 670 may generate a purchase signature text based on the received purchase written request (672). Thereafter, the store 670 may transmit the generated original text of the purchase signature to the avatar 450 (674). Then, the avatar 450 may transmit the received purchase signature text to the metaverse server 440 to request a purchase digital signature (654). Here, the store 670 may refer to a virtual store that can sell goods (or items) to the avatar 450 within the metaverse environment, and the store 670 sells goods and the like within the metaverse environment. It can be associated with a real-world service provider providing a service.

Metaverse server 440 may provide a personal identification information input screen to the user 410 (642). The user 410 may input personal identification information through the provided personal identification information input screen and transmit it to the metaverse server 440 (612). Here, the same authentication method as the login method used in FIG. 2 may be applied to the personal identification information input method. For example, if a PIN number is used as personal identification information in FIG. 2 , the same PIN number authentication method may be applied in FIG. 4 .

As shown in FIG. 5 , the metaverse server 440 may request a digital signature by transmitting the purchase signature original text and personal identification information to the digital signature verification server 460 (742).

The digital signature authentication server 460 may activate the private key for the metaverse using the personal identification information (762). The digital signature authentication server 460 may generate a digital signature value by signing the purchase signature original text with the activated private key for the metaverse (764). The digital signature authentication server 460 may verify the digital signature value generated using the public key for the metaverse (766). When verification is complete, the digital signature authentication server 460 may transmit the digital signature result to the metaverse server 440 (768).

The metaverse server 440 may deliver the digital signature result to the avatar 450 (742). If the verification result of the digital signature value for purchase is normal, the avatar 450 may express that the digital signature for purchase has succeeded (752).

In this way, when the user 410 uses the avatar 450 to make a purchase on the metaverse, he or she can perform identity authentication using an electronic signature.

4 and 5 show that the digital signature processing method in the metaverse environment is initiated by a request for a digital signature for purchasing a product from the store 670, but is not limited thereto. For example, digital signatures in the metaverse environment can be applied to tasks that require user authentication, such as purchase of insurance products, account inquiry related to banking, withdrawal, and transfer within the metaverse environment. In one embodiment, the digital signature method in the metaverse environment may be applied to a certificate for proving the qualification acquired by an avatar associated with a user in the metaverse environment. Specifically, using the key pair of the private key and public key for the metaverse generated in operation 466 of FIG. You can register what you have acquired. In one embodiment, the digital signature processing method can also be applied to the financial field. For example, in a virtual metaverse environment, a real account can be inquired and a transfer can be performed to an account within the metaverse. In this case, user authentication using a digital signature is performed using the digital signature method in the metaverse environment. can be performed.

6 is a flowchart illustrating an electronic signature method 600 in a metaverse environment according to an embodiment of the present disclosure. In one embodiment, the digital signature method 600 in the metaverse environment may be performed by a processor (eg, at least one processor of an electronic signature system).

As shown, the digital signature method 600 will be initiated by the processor receiving first personal identification information associated with a certificate for logging in to the metaverse environment and electronic signature text request information for use in the metaverse environment from the user terminal. It can (S610). Here, the certificate for logging in to the metaverse environment may include a serial number, and the first personal identification information may include one of a PIN number, pattern information, or biometric information.

Then, the processor may generate a key pair of a private key and a public key for the metaverse (S620). Specifically, the processor may inquire the status of the certificate using the serial number. If the expiration date of the certificate has not expired, the processor may verify the first personal identification information. When the first personal identification information is verified, the processor may generate a pair of a metaverse private key and a metaverse public key. Then, the processor may encrypt and store the private key based on the first personal identification information (S630). Here, the processor may encrypt the metaverse private key using the PBKDF2 method using the first personal identification information.

After that, the processor may transmit the original text of the digital signature including the public key for the metaverse to the user terminal (S640). In this case, the user terminal can perform the digital signature of the original digital signature including the public key for the metaverse. After the electronic signature is completed by the user terminal, the processor may receive an electronic signature verification request from the metaverse server that has received the electronic signature verification request from the user terminal (S650).

The processor may perform verification of the digital signature and transmit the customer ID corresponding to the verification result of the digital signature and the certificate to the metaverse server (S660). At this time, an avatar corresponding to the customer ID may be activated in the metaverse environment. Thereafter, when the customer ID is logged out of the metaverse environment, the processor may invalidate the private key and public key key pair for the metaverse.

7 is a flowchart illustrating a purchase digital signature method 700 for an avatar's purchasing behavior in a metaverse environment according to an embodiment of the present disclosure. In one embodiment, the purchase digital signature method 700 for the avatar's purchasing behavior in the metaverse environment may be performed by a processor (eg, at least one processor of an electronic signature system).

As shown, the purchase digital signature method 700 is a process in which the processor transmits the original text of the purchase signature generated by the purchasing behavior of the avatar in the metaverse environment in which the avatar is activated from the metaverse server and the user terminal to the metaverse server. 2 It may be initiated by receiving personal identification information (S710). Here, the second personal identification information may include one of a PIN number, pattern information, or biometric information.

After receiving the second personal identification information, the processor may perform a digital signature on the original text of the purchase signature using the metaverse private key (S720). Specifically, the processor may activate the private key for the metaverse based on the received second personal identification number. Thereafter, using the activated private key for the metaverse, the processor may perform the electronic signature of the original text of the purchase signature.

Then, the processor may perform verification of the digital signature using the public key for the metaverse (S730), and transmit the result of the verification of the digital signature to the metaverse server (S740).

8 is a configuration diagram of a digital signature authentication server device 800 according to an embodiment of the present disclosure. Here, the digital signature authentication server device 800 includes one or more processors 810, a bus 830, a communication interface 840, and a memory for loading a computer program 860 executed by the processor 810 (loading). 820) and a storage module 850 for storing the computer program 860. However, only components related to the embodiment of the present disclosure are shown in FIG. 8 . Accordingly, those skilled in the art to which the present disclosure belongs may know that other general-purpose components may be further included in addition to the components shown in FIG. 8 .

Processor 810 controls the overall operation of each component of the digital signature authentication server device (800). The processor 810 includes a Central Processing Unit (CPU), a Micro Processor Unit (MPU), a Micro Controller Unit (MCU), a Graphic Processing Unit (GPU), or any type of processor well known in the art of the present disclosure. It can be. Also, the processor 810 may perform an operation for at least one application or program for executing a method according to embodiments of the present disclosure. The digital signature authentication server device 800 may include one or more processors.

The memory 820 may store various data, commands and/or information. Memory 820 may load one or more computer programs 860 from storage module 850 to execute methods/operations according to various embodiments of the present disclosure. The memory 820 may be implemented as a volatile memory such as RAM, but the technical scope of the present disclosure is not limited thereto.

The bus 830 may provide a communication function between components of the digital signature authentication server device 800 . The bus 830 may be implemented as various types of buses such as an address bus, a data bus, and a control bus.

The communication interface 840 may support wired and wireless Internet communication of the digital signature authentication server device 800 . Also, the communication interface 840 may support various communication methods other than Internet communication. To this end, the communication interface 840 may include a communication module well known in the art of the present disclosure.

The storage module 850 may non-temporarily store one or more computer programs 860 . The storage module 850 may be a non-volatile memory such as read only memory (ROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, or the like, a hard disk, a removable disk, or It may be configured to include any well-known form of computer-readable recording medium.

Computer program 860 may include one or more instructions that when loaded into memory 820 cause processor 810 to perform an operation/method in accordance with various embodiments of the present disclosure. That is, the processor 810 may perform operations/methods according to various embodiments of the present disclosure by executing one or more instructions.

For example, the computer program 860 may perform an operation of receiving, from a user terminal, first personal identification information associated with a certificate for log-in in a metaverse environment and digital signature original request information for use in a metaverse environment; An operation of generating a key pair of a key and a public key, an operation of encrypting and storing the private key based on the first personal identification information, an operation of transmitting the original text of the digital signature including the public key for the metaverse to the user terminal, and an operation of transmitting the original text of the digital signature from the user terminal From the metaverse server that has received the verification request of the digital signature, the operation of receiving the verification request of the digital signature, the verification of the digital signature, and the customer ID corresponding to the verification result of the digital signature and the certificate are transmitted to the metaverse server. It may contain one or more instructions to perform an operation, and the like. When the corresponding operation is completed, an avatar corresponding to the customer ID may be activated in the metaverse environment. In this case, a system for digital signature in a metaverse environment according to some embodiments of the present disclosure may be implemented through the digital signature authentication server device 800.

The preceding description of the present disclosure is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications of this disclosure will be readily apparent to those skilled in the art, and the general principles defined herein may be applied in various modifications without departing from the spirit or scope of this disclosure. Thus, the present disclosure is not intended to be limited to the examples set forth herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Although example implementations may refer to utilizing aspects of the presently disclosed subject matter in the context of one or more standalone computer systems, the subject matter is not so limited, but rather in conjunction with any computing environment, such as a network or distributed computing environment. may be implemented. Further, aspects of the presently-disclosed subject matter may be implemented in or across a plurality of processing chips or devices, and storage may be similarly affected across a plurality of devices. Such devices may include PCs, network servers, and handheld devices.

Although the present disclosure has been described in relation to some embodiments in this specification, it should be noted that various modifications and changes can be made without departing from the scope of the present disclosure that can be understood by those skilled in the art. something to do. Moreover, such modifications and variations are intended to fall within the scope of the claims appended hereto.

100: electronic signature system
110: user terminal
120: metaverse server
130: digital signature authentication server

Claims (10)

In the digital signature method in the metaverse environment, performed by at least one processor,
Receiving, from a user terminal, first personal identification information associated with a certificate for log-in of a metaverse environment and digital signature text request information for use in a metaverse environment;
Generating a key pair of a private key and a public key for the metaverse;
encrypting and storing the private key based on the first personal identification information;
Transmitting the original text of the digital signature including the public key for the metaverse to the user terminal - The user terminal performs the digital signature of the original text including the public key for the metaverse -;
Receiving a request for verifying the digital signature from a metaverse server that has received the request for verifying the digital signature from the user terminal; and
Performing the verification of the digital signature, and transmitting the customer ID corresponding to the verification result of the digital signature and the certificate to the metaverse server,
In the metaverse environment, an avatar corresponding to the customer ID is activated.
Digital signature method in the metaverse environment. According to claim 1,
The certificate for logging in the metaverse environment includes a serial number,
Generating a key pair of a private key and a public key for the metaverse,
Inquiring the status of the certificate using the serial number;
verifying the first personal identification information when the expiration date of the certificate has not expired; and
Generating a pair of the private key for the metaverse and the public key for the metaverse when the first personal identification information is verified.
Including, digital signature method in the metaverse environment. According to claim 1,
Receiving, from the metaverse server, second personal identification information transmitted to the metaverse server from the original purchase signature and a user terminal generated by the purchasing behavior of the avatar within the metaverse environment in which the avatar is activated;
performing a digital signature on the original text of the purchase signature using the private key for the metaverse;
verifying the digital signature using the public key for the metaverse; and
Transmitting the result of the verification of the digital signature performed to the metaverse server
Including more,
Wherein the first personal identification information and the second personal identification information include the same information, digital signature method in a metaverse environment. According to claim 3,
The step of performing the digital signature using the private key for the metaverse,
activating the private key for the metaverse based on the received second personal identification number; and
Performing digital signature of the purchase signature original text using the activated private key for the metaverse
Including, digital signature method in the metaverse environment. According to claim 1,
Invalidating the private key and public key key pair for the metaverse when the customer ID is logged out of the metaverse environment.
Further comprising, electronic signature method in the metaverse environment. According to claim 1,
Wherein the first personal identification information and the second personal identification information include one of a PIN number, pattern information or biometric information, a digital signature method in a metaverse environment. According to claim 1,
In the step of encrypting and storing the private key based on the first personal identification information, the private key for the metaverse is encrypted using the PBKDF2 (Password-Based Key Derivation Function Version 2) method using the first personal identification information. Electronic signature method in the metaverse environment, including the step of doing. A computer program stored in a computer readable recording medium to execute the method according to any one of claims 1 to 7 on a computer. As a digital signature authentication server device,
communication module;
Memory; and
at least one processor connected to the memory and configured to execute at least one computer readable program contained in the memory
including,
The at least one program,
Receiving first personal identification information associated with a certificate for logging in to a metaverse environment from a user terminal and electronic signature original text request information for use in a metaverse environment;
Generate a key pair of private and public keys for the metaverse;
Encrypting and storing the private key based on the first personal identification information;
In response to the original text request information for the digital signature, the original text including the public key for the metaverse is transmitted to the user terminal;
Transmitting the original text of the electronic signature including the public key for the metaverse to the user terminal - the user terminal performs the electronic signature of the original text including the public key for the metaverse -,
Receiving a verification request for the digital signature from the metaverse server that has received the verification request for the digital signature from the user terminal;
A command for performing verification of the digital signature and transmitting a customer ID corresponding to the verification result of the digital signature and the certificate to the metaverse server;
In the metaverse environment, an avatar corresponding to the customer ID is activated.
Digital signature authentication server device. According to claim 9,
The command further comprises a command for invalidating the private key and public key key pair for the metaverse when the customer ID is logged out of the metaverse environment.
Digital signature authentication server device.

Images