KR20160024185A - Management system and method of crytocurrency using secure element - Google Patents

Abstract

A system and method for managing cryptography using Secure Element (SE) is disclosed. According to one aspect of the present invention, an encrypted money management system using an SE comprises an application for trading by a Crypto Currency, and a control unit for executing a transaction stored in a cipher wallet of a user terminal A first command for managing data and a second command for managing second data stored in a secure element (SE) connected to the user terminal; And an SE for generating encrypted transaction data using the second data when the second instruction is received from the user terminal.

Description

Technical Field [0001] The present invention relates to a secure money management system using a secure element (SE)

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a password management system and a method thereof, and more particularly, to a system and method for managing a password using a Secure Element (SE).

2. Description of the Related Art In recent years, mobile communication terminals such as mobile phones and smart phones have become commonplace, and technology for enabling mobile payment services to be used by using mobile communication terminals has become an issue.

On the other hand, Bitcoin is comparable to gold and Litecoin is comparable to silver. These bit coins and light coins are a type of Internet currency based on cryptographic technology and are referred to as electronic money, virtual currency or crypto currency. Particularly, since mobile payment using mobile communication terminals such as mobile phones and smart phones is commercialized, transactions by passwords are expected to increase.

 Generally, the cipher money is stored and managed in a cipher wallet, which is stored in a storage device in the user terminal in the form of a file. This file also contains the private key required for cryptographic transactions, along with the cryptographic balance.

On the other hand, the technical problem that needs to be solved in order for the transaction by the password to be activated is the security problem to secure the stability of the transaction and to increase the reliability. For example, since the password is digitally signed with the owner's private key, the password coin purse file is replicated by a certain route, or if the other person has only the private key, the owner's password can be used by others .

 Accordingly, there is a need to provide a technical device for safely storing and managing financial information and personal information necessary for cryptographic money transaction.

1 is a diagram for explaining a conventional cryptographic money management system.

1, the conventional password is stored in the mass memory 11, which is a general storage device in the user terminal 10, or in an external memory 20 such as Micro SD. For example, a crypt wallet for storing data required for a cryptographic currency transaction is generated in the form of a file called wallet.dat and is stored in the large-capacity memory 11 or the external memory 20.

The processor 13 processes a task necessary for the cipher currency transaction. For example, the processor 13 generates a private key and a public key required for a cryptographic currency transaction, and generates a cryptographic currency address of the cryptographic currency owner using the public key.

On the other hand, the private key, public key, and other data necessary for the cryptographic transaction are all stored in a crypt wallet having a file type of wallet.dat. That is, all the operations required in the cipher transaction are made by the processor 13 writing and reading the wallet.dat file.

As described above, according to the related art, since all the data necessary for the cryptographic currency transaction are stored in the wallet.dat file, it is possible to replicate the file maliciously from the outside or to change and manipulate the file. Also, a password transaction is made by signing with a private key. When a private key is replicated, there is a problem that no one can make the password of another person his own.

Disclosure of Invention Technical Problem [8] The present invention is directed to a system and method for securely storing cryptographic data using Secure Elements (SEs) connected to a user terminal, which can not be manipulated or changed from the outside and can safely store data using encryption technology And a method thereof.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to another aspect of the present invention, there is provided a system and method for managing a cryptographic currency using an SE, the system comprising: an application for trading by Crypto Currency; a password wallet of a user terminal; And a second instruction for managing second data stored in a secure element (SE) connected to the user terminal; And an SE for generating encrypted transaction data using the second data when the second instruction is received from the user terminal.

According to another aspect of the present invention, there is provided a user terminal, comprising: a first storage unit for storing first data including a password of a third party, a public key of another party, and transaction details; A controller for generating a first command for managing the first data and a second command for managing second data stored in a secure element (SE) connected to the user terminal; And a first network interface unit transmitting the second instruction to the SE and receiving response data for the second instruction from the SE.

According to another aspect of the present invention, there is provided an apparatus for receiving a public key of a third party and a second command for managing a second data from a network-connected user terminal, and for transmitting response data for the second command to the user terminal A network interface unit; A key generation unit for generating a private key and a public key of a cryptographic money owner when a second instruction for generating a private key and a public key of the cryptographic money owner is received from the user terminal; An address generating unit for generating a cryptographic money address of the cryptographic money owner using the public key of the cryptographic money owner; An encryption / decryption unit for encrypting transaction data using the public key of the third party when the second command for generating transaction data is received from the user terminal, and signing the transaction data using the private key of the cryptographic owner; And a second storage for storing the second data including the cipher money, the cipher money address of the cipher owner, the private key of the cipher owner and the public key.

A method for managing a cryptographic key according to another aspect of the present invention using a user terminal and a secure element (SE) network connected with the user terminal comprises the steps of: (a) Generating a second instruction for managing second data stored in the SE; (b) transmitting the second instruction to the SE; And (c) receiving response data for the second instruction from the SE.

Here, the first data includes a password of another person, a public key of another, and a transaction history, and the second data includes a cryptographic money address of the cryptographic money owner generated in the SE, a private key of the cryptographic money owner And a public key.

A method for managing a cryptographic key according to another aspect of the present invention using a user terminal and a secure element (SE) network connected to the user terminal, the method comprising the steps of: (a) Receiving an instruction for data management; (b) generating the private key and the public key of the cryptographic currency owner if the command is for generating a private key and a public key of a cryptographic currency owner; (c) generating a cryptographic currency address of the cryptographic currency owner using the public key of the cryptographic currency owner; And (d) transmitting the cryptographic currency address of the cryptographic currency owner to the user terminal in response to the command.

As described above, according to the present invention, important data such as a private key and a cipher are stored in SEs separate from the user terminal, and other unimportant data, such as log data, And stored separately in the device. Therefore, it is possible to securely store important data required in a cryptographic transaction without requiring a large storage space.

In addition, by implementing the operations such as the generation of transaction data necessary for the cryptographic currency transaction to be executed in the SE, it is possible to prevent data modification and manipulation from the outside. Therefore, even if the password wallet file storing non-critical data is exposed to the outside, the owner's password can be safely protected, and even if the password wallet file is deleted from the outside, the important data stored in the SE can be used There is an advantage to recover files.

Brief Description of the Drawings Fig. 1 is a diagram for explaining a conventional cryptographic money management system. Fig.
BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a secure money management system.
3 is a detailed block diagram of the encrypted money management system shown in FIG.
4 is a first example of a method for managing a cryptographic currency using a secure element (SE) according to an embodiment of the present invention.
FIG. 5 and FIG. 6 are second examples of a method of managing a cryptographic currency using a secure element (SE) according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. And is provided to fully convey the scope of the invention to those skilled in the art, and the present invention is defined by the claims. It is to be understood that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. It is noted that " comprises, " or "comprising," as used herein, means the presence or absence of one or more other components, steps, operations, and / Do not exclude the addition.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the drawings, like reference numerals refer to like elements throughout. In the drawings, like reference numerals are used to denote like elements, and in the description of the present invention, In the following description, a detailed description of the present invention will be omitted.

2 is a configuration diagram of a cryptographic money management system using a secure element (SE) according to an embodiment of the present invention.

Referring to FIG. 2, a cryptographic money management system using an SE according to an embodiment of the present invention includes a user terminal 100 and SEs 170, 200, and 300.

The user terminal 100 may be a device capable of processing a payment process using a password and other user terminals connected to the network and may be a laptop or desktop computer, a cellular phone, a smart phone, a wireless modem, an e-reader, Gaming systems, and the like.

The user terminal 100 uses a public network such as the Internet to exchange peer-to-peer data with other user terminals on a one-to-one basis. The user terminal 100 is provided with software (or an application) for supporting the password settlement, and the user transfers the settlement amount to the other user terminal by using the installed software.

That is, a person who pays the settlement amount and a person who receives the settlement amount are required for the settlement using the cryptography. Here, the user terminal used by the person paying the payment amount is referred to as a caller user terminal, and the user terminal used by the person receiving the payment amount is referred to as a receiver user terminal. In the sender user terminal, a task for paying a payment amount is processed in the processor 130, and a task for receiving a payment amount is processed in the processor 130 in the receiver user terminal.

To this end, the user terminal 100 includes a large-capacity memory 110 in which some data necessary for payment using passwords are stored, a processor 130 for processing a payment payment and reception task, And a modem unit 150 for the mobile terminal.

Meanwhile, the cryptographic money management system according to the embodiment of the present invention includes a separate Secure Element (SE) capable of storing data necessary for settlement using a cryptographic currency. The most important is the owner's private key and password, which are used to sign the bill. Here, the private key and the encrypted money are stored in the SE connected to the user terminal 100 via the network, and the other data is stored in the wallet.dat file of the large-capacity memory 110 of the user terminal 100. [

As described above, the cryptographic money management system according to the embodiment of the present invention is characterized in that the data is separately stored and managed in the SE and the general large capacity memory according to the importance of data required for settlement using the cryptography. As a result, even if the wallet.dat file stored in the general large memory is changed and manipulated by an external attack, the password can be safely stored.

Meanwhile, in the embodiment of the present invention, an embedded SE 170, a MicroSD SE 200, and a UICC (Universal IC Card) 300 can be used as a secure element (SE) A security chip is built in.

Hereinafter, with reference to FIG. 3, the internal configuration of the user terminal and the SE will be described in detail in a cryptographic money management system according to an embodiment of the present invention. 3 is a detailed block diagram of the encrypted money management system shown in FIG.

Referring to FIG. 3, the user terminal 100 includes a first storage unit 110, a controller 130, and a first network interface unit 131.

The first storage unit 110 may be implemented as a mass storage device. The first storage unit 110 may store data such as a password of a third party, a public key of another, a transaction history, .

The control unit 130 drives the password wallet application and divides the function of the password wallet into functions to be processed in the SE and functions to be processed in the user terminal. The control unit 130 includes a first command for managing first data stored in a wallet of a cryptogram of the first storage unit 110 and a second command for managing first data stored in a wallet of the SE 200 And generates a second instruction for managing the second data in the second storage unit 260. [

Here, the first data includes a password of another person, a public key of another, and a transaction history, and the second data includes a cryptographic money address of the cryptographic money owner generated in the SE, a private key of the cryptographic money owner And a public key.

The second command generated in the control unit 130 is transmitted to the SE 200 through the first network interface unit 131 and the SE 200 performs operations for the settlement of the encrypted money based on the second command , And returns only the resultant value to the user terminal 100.

That is, the important data related to the settlement of the encrypted money is stored in the SE 200, the important operation required for the encrypted money settlement is performed in the SE 200, and the user terminal 100 receives only the result value, And is free from external exposure of motion.

The control unit 130 determines whether the wallet.dat file stored in the first storage unit 110 is to be written and read or whether the SE 200 can be operated by reading and writing the SE 200 connected to the network do. For example, when generating the transaction data required for payment of the password, the owner decides to execute the encrypted password information and the private key signature of the owner in the SE 200, and the recipient's password, currency address, transaction details, The first storage unit 110 may determine to read and write data.

The first network interface unit 131 is responsible for communication connection with the SE 200 in the user terminal 100 and includes a protocol control unit 131a and a hardware control unit 131b.

The first network interface unit 131 transmits the second command generated by the control unit 130 to the SE 200 according to the SE protocol for storage and management of the encrypted money in the SE 200, And transmits a response to the second command received from the controller 130 to the controller 130.

The first network interface unit 131 may support a UICC SE, a MicroSD SE, or an embedded SE, and it is obvious that the embodiments of the present invention can be implemented using various interfaces.

The SE 200 includes a second network interface 210, a key generator 220, an address generator 230, an encryption / decryption unit 240, a hash generation unit 250, and a second storage unit 260. .

The second network interface unit 210 cooperates with the first network interface unit 131 to perform communication connection with the user terminal 100.

The second network interface 210 parses the command sent from the user terminal 100 and delivers the command to a functional block capable of executing the command according to the parsed result.

The key generation unit 220 generates a private key and a public key of a cryptographic currency owner using a public key algorithm. Here, the public key of the cryptographic owner may be used to generate the cryptographic currency address of the cryptographic owner, and the private key of the cryptographic owner may be used to sign the transaction data generated for payment.

The address generating unit 230 generates a cryptographic money address of the cryptographic currency owner using the public key of the cryptographic currency owner. At this time, the address generating unit 230 generates a cryptographic money address having a predetermined length by using the public key of the cryptographic money owner as a key value for the hash function.

The encryption / decryption unit 240 encrypts and decrypts data related to cryptography using a public key of another person or a cryptographic key generated by the key generation unit 220.

For example, the encryption / decryption unit 240 encrypts the transaction data including the password of the cryptographic currency owner and the amount to be paid using the public key of the other user, or encrypts the encrypted transaction data transmitted from the other user terminal Key. ≪ / RTI > At this time, the public key of the other user is stored in the first storage unit 110 of the user terminal 100, and is transmitted to the SE 200 through the network interface.

In addition, the encryption / decryption unit 240 may sign the encrypted transaction data using the private key of the cryptographic currency owner.

The hash generation unit 250 generates hash data of a certain length for the data related to the cryptography. The hash data is used to check the integrity of the original data because the value changes dramatically even if only one bit of the original data is changed.

The second storage unit 260 stores the cipher money, the cipher address of the cipher owner, the private key of the cipher owner and the public key.

Hereinafter, a method of managing a cryptogram using a secure element (SE) according to an embodiment of the present invention will be described with reference to FIGS.

FIG. 4 is a first exemplary diagram illustrating a method of managing a cryptographic money using a secure element (SE) according to an embodiment of the present invention. FIG. 4 illustrates a process of generating a cryptographic money address of a cryptographic currency owner.

4, reference numeral 100 denotes a sender user terminal used by a person paying a payment amount, and reference numeral 200 denotes a sender SE. The process of generating the cryptographic money address can be performed not only at the sender user terminal but also at the receiver user terminal, but it is assumed that the corresponding process is performed at the sender user terminal for convenience of explanation.

First, the password coin purse application is activated in the sender user terminal 100, and a password money address creation request is input thereto (S410).

Next, the control unit 130 transmits a key pair generation request for generating a password address to the first network interface unit 131 in step S420, and the first network interface unit 131 generates a key pair generation command in step S430 ).

Thereafter, the sender user terminal 100 transmits a key pair generation command generated by the sender SE 200 (S440).

The key generation unit 220 of the sender SE 200 generates a private key and a public key of the cryptographic money owner using the public key cryptographic algorithm in accordance with the transmitted key pair generation command, (S450).

The generated key pair, e.g., a private key and a public key, and / or a cipher key pair for encryption / decryption are stored in the second storage unit 260 (S460).

Then, the address generating unit 230 generates the cryptographic money address of the cryptographic currency owner using the public key of the cryptographic currency owner (S470). At this time, the address generating unit 230 generates a cryptographic money address having a predetermined length by using the public key of the cryptographic money owner as a key value for the hash function.

The generated password is transmitted from the sender SE 200 to the sender user terminal 100 at step S480 and the controller 130 of the sender user terminal 100 displays the delivered password at step S490.

FIG. 5 and FIG. 6 illustrate a second example of a method for managing a password using a secure element (SE) according to an embodiment of the present invention.

In FIG. 5, reference numeral 100 denotes a sender user terminal used by a person paying a payment amount, and reference numeral 200 denotes a sender SE. In FIG. 6, reference numeral 100 'denotes a recipient user terminal used by a recipient of a payment amount, and reference numeral 200' denotes a recipient SE.

First, the password peculiar purse application is activated in the sender user terminal 100, and a payment request using the password is input (S505). For example, in the password wallet application, a user interface for selecting a receiver's password and a payment amount to receive a payment amount is provided, and the user inputs a payment request using the receiver's password and the payment amount.

Next, the control unit 130 transmits a transaction data generation request for settlement to the first network interface unit 131 in step S510, and the first network interface unit 131 generates a transaction data generation command in step S515. .

Thereafter, the sender user terminal 100 transmits a transaction data generation command generated by the sender SE 200 (S520).

The sender SE 200 generates the transaction data in which the sender's password and the payment amount are selected according to the transaction data creation command (S525) and encrypts the selected sender's password and the payment amount data using the recipient's public key ( S530).

The sender SE 200 then signs the encrypted transaction data using the sender private key to complete the transaction data generation (S535).

When the transaction data is successfully generated, the sender SE 200 transmits a transaction data generation completion message to the sender user terminal 100 (S540).

Upon receiving the transaction data generation completion message, the sender user terminal 100 generates a transfer command for transferring the transaction data (S545) and transfers the transfer command to the sender SE 200 (S550).

The sender SE 200 receiving the transaction transmission command generates a hash value to guarantee the integrity of the encrypted and signed transaction data (S555), and transmits the encrypted and signed transaction data together with the hash value to the sender user terminal 100 (S560).

6, the sender user terminal 100 transmits the encrypted and signed transaction data and the sender public key together with the hash value to the recipient user terminal 100 'to receive the payment amount (S565) .

The control unit 130 of the receiver user terminal 100 'transmits the encrypted and signed transaction data authentication request to the first network interface unit 131 in step S605, and the first network interface unit 131 in the encrypted and signed And generates an instruction for authentication of the transaction data (S610).

 Then, the receiver user terminal 100 'transmits the sender public key together with the authentication command generated by the receiver SE 200' (S615).

The receiver SE 200 'checks the integrity of the transaction data encrypted and signed using the hash value according to the authentication command (S620). If the integrity is confirmed, the receiver SE 200' The validity is confirmed (S625).

The validated encrypted transaction data is decrypted by the recipient private key (S630), and the payment amount included in the transaction data is stored in the recipient password (S635).

When the ciphone corresponding to the payment amount is stored in the recipient ciphering address, the storage completion message and the ciphering balance of the recipient are transmitted from the recipient SE 200 'to the recipient user terminal 100' (S640).

When the store complete message and the recipient's coded money balance are transmitted to the recipient user terminal 100 ', the controller 130 of the recipient user terminal 100' will send a normal transaction completion and a cryptographic currency balance (S645).

It will be understood by those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description, and all changes or modifications derived from the scope of the claims and their equivalents shall be construed as being included within the scope of the present invention.

Claims (16)

A first instruction for executing an application for payment by a Crypto Currency and managing first data stored in a password wallet of a user terminal; A second instruction for managing second data stored in the second memory; And
When the second instruction word is received from the user terminal, generating an encrypted transaction data using the second data,
And a password management system using the SE.
2. The method according to claim 1,
A password of another person, a public key of another person, and a transaction history.
2. The method according to claim 1,
Wherein the SE comprises a cryptographic currency address of the cryptographic currency owner generated at the SE, a private key of the cryptographic currency owner, and a public key.
The method of claim 1,
Generating a private key and a public key of a cryptographic currency owner using a public key algorithm, and generating a cryptographic currency address of the cryptographic currency owner using the public key of the cryptographic currency owner.
5. The method of claim 4,
Generating transaction data including a password of the cryptographic currency owner and an amount to be paid out, encrypting the transaction data using a public key of another person, and transmitting the encrypted transaction data to the cryptographic apparatus using the private key of the cryptographic owner Cryptographic cash management system using SE to sign.
A first storage unit for storing first data including a password of another person, a public key of another person, and transaction details;
A controller for generating a first command for managing the first data and a second command for managing second data stored in a secure element (SE) connected to the user terminal; And
A first network interface unit for transmitting the second instruction to the SE and receiving response data for the second instruction from the SE,
Lt; / RTI >
7. The apparatus of claim 6,
Transmitting a second command for generating a private key and a public key of the cryptographic money owner to the SE via the network interface unit and receiving the cryptographic money address of the cryptographic money owner in response to the second command,
Wherein the cryptographic currency owner's password currency address is generated in the SE using the public key of the cryptographic currency owner.
8. The apparatus of claim 7,
A second instruction for generating transaction data including a password currency address of a cryptographic currency owner and an amount to be paid is transmitted to the SE via the network interface unit and transaction data encrypted and signed in response to the second instruction Receiving,
Wherein the transaction data is encrypted using the public key of the third party in the SE and signed using the private key of the cryptographic owner.
A second network interface unit for receiving a public key of a third party and a second command for managing a second data from a network connected user terminal and transmitting response data for the second command to the user terminal;
A key generation unit for generating a private key and a public key of a cryptographic money owner when a second instruction for generating a private key and a public key of the cryptographic money owner is received from the user terminal;
An address generating unit for generating a cryptographic money address of the cryptographic money owner using the public key of the cryptographic money owner;
An encryption / decryption unit for encrypting transaction data using the public key of the third party when the second command for generating transaction data is received from the user terminal, and signing the transaction data using the private key of the cryptographic owner; And
A second storage unit for storing the second data including the cipher money, the cipher money address of the cipher owner, the private key of the cipher owner and the public key,
(Secure Element).
A method of managing a cryptographic key using a secure element (SE) network-connected to a user terminal, the method comprising:
(a) generating a first instruction for a user terminal to manage first data stored in its cryptograph wallet, and a second instruction for managing second data stored in the SE;
(b) transmitting the second instruction to the SE; And
(c) receiving response data for the second instruction from the SE,
Wherein the first data includes a third party's cryptographic address, a third party's public key, and transaction details, the second data comprising a cryptographic currency address of the cryptographic owner generated in the SE, a private key of the cryptographic currency owner, Wherein the key comprises a key.
11. The method of claim 10,
If the second instruction is for generating a private key and a public key of a cryptographic currency owner, the response data for the second instruction is a cryptographic currency address of the cryptographic currency owner,
And the cryptographic currency address of the cryptographic currency owner is generated in the SE using the public key of the cryptographic currency owner.
11. The method of claim 10,
The response data for the second instruction is encrypted and signed transaction data if the second instruction is for generating transaction data including a cryptographic currency address of the cryptographic currency owner and an amount to be paid,
Wherein the encrypted and signed transaction data is encrypted using the third party's public key in the SE and signed using the private key of the cryptographic owner.
11. The method of claim 10,
If the response data to the second instruction is the cryptographic currency address of the cryptographic owner,
(d) displaying, based on the first instruction, the cryptographic currency address of the cryptographic currency owner.
11. The method of claim 10,
If the response data to the second instruction is encrypted and signed transaction data,
(e) transmitting the encrypted and signed transaction data to a third party user terminal corresponding to the public key of the third party based on the first command.
A method of managing a cryptographic key using a secure element (SE) network-connected to a user terminal, the method comprising:
(a) receiving, by the SE, an instruction for managing the data stored in the SE and the public key of the other user from the user terminal;
(b) generating the private key and the public key of the cryptographic currency owner if the command is for generating a private key and a public key of a cryptographic currency owner;
(c) generating a cryptographic currency address of the cryptographic currency owner using the public key of the cryptographic currency owner; And
and (d) transmitting the cryptographic currency address of the cryptographic currency owner to the user terminal in response to the command.
16. The method of claim 15,
If the instruction is for generating transaction data that includes a password currency address of the cryptographic currency owner and an amount to be paid,
(e) encrypting the transaction data using the public key of the third party; And
(f) signing the transaction data using the private key of the cryptographic currency owner.

Images