KR20220039606A - Certification system and certification method - Google Patents

Abstract

The present invention relates to an authentication system and an authentication method using the same. The system includes an authentication management computer for authenticating the fact of an act or event that occurs in the relationship between individuals, groups, or an individual and a group (including an organization and an enterprise). The authentication management computer includes at least one hardware processor and a memory storing a program. The at least one hardware processor controls the program stored in the memory for the purpose of fact authentication, receives information on a fact authentication requester and his or her counterpart and information on a fact authentication target, receives fact check information regarding the authentication target from a predetermined number of authenticators, who are persons unrelated to the authentication requester and the counterpart, and executes fact authentication regarding the authentication target based on the authentication target fact check information transmitted from the authenticators.

Description

Certification system and certification method

The present invention relates to an authentication system and an authentication method. In more detail, a large number of non-related persons who are not related to the person to be authenticated, such as fact-checking and identity authentication, for various actions that occur in relationships with others or for various types of content created with relationships in mind in mind It relates to an authentication system and an authentication method that can ensure objectivity and security of authentication by allowing it to be performed by

For example, documents, videos, and videos created by a specific person with other people in mind, require authentication for objective fact-checking regarding various actions, such as conversations, promises, or contracts, that occur between people. Alternatively, there are many cases in which authentication regarding the identity of content, such as transaction details, is required. For this purpose, the method of authenticating the facts by notarizing various documents at a notary law office is mainly used. However, this offline notarization by a law firm does not certify the facts and identity, but legally confirms the fact that the client has requested the confirmation. There is a problem that cannot prevent fraudulent interference with the subject.

As an invention for solving the problems of the conventional notarization method, the invention of an authentication system, an authentication method, an authentication apparatus and a program of Japanese Patent Laid-Open No. 2019-040557 (2019.03.14.) is disclosed.

In the disclosed invention, in the authentication system, there is a data acquisition unit that acquires, from the terminal of the authentication target, party information indicating one or more first parties of the authentication subject, and the first party according to party information indicating the parties of the first party. It is an invention of a configuration including an authentication processing unit that identifies a person to be authenticated and one or more second parties, and performs authentication processing on the subject to be authenticated according to the second party.

The disclosed invention is an invention in which authentication is performed based on the information on the subject and the person concerned by acquiring at least one related person information of the subject to be authenticated. .

In addition, in relation to the authentication in the distribution of electronic information files, the notarization system for distribution of electronic information files of the Republic of Korea Patent No. 10-0694792 (registration date: March 07, 2007) and the operation method of an integrated customer e-mail box 's invention has been patented.

The patented invention includes a registration storage procedure for storing the requested document for the electronic document storage request and executing the creation and issuance of the certificate; After performing unchangeable and copy-prevention processing for electronic documents, verification and confirmation of search conditions is performed to search document information according to authority, and the request document for inquiry request by determining whether access is authorized according to electronic document inquiry a search and viewing procedure to provide a user terminal; Transfer processing for requesting transfer of archived documents to other archives and transfer procedures for destruction of transfer archives; a revocation procedure of destroying archived documents and revocation certificates according to a user revocation request, and then storing a log of certificate revocation; transfer and revocation procedures to carry out operations depending on whether the certificate has been revoked; After the access authority and the digital signature are verified, the type of the issued certificate is checked, a time stamp is requested from a separate certification authority, and the time stamp is generated by the certification authority with the corresponding certificate, and the generated time stamp Upon receiving the key information, the certificate generation (DVCS) and certificate issuance are performed, the corresponding certificate and history are stored, and the corresponding certificate is non-repudiated using the recipient or viewer information set due to the request of the client. Certificate issuance process, e-mailed to the user with verification function; and a certificate revocation procedure of performing a revocation procedure for the certificate, managing a revocation list, and notifying the user according to the completion of the revocation after confirming the authority for revocation and the digital signature according to the user's request for revocation of the certificate; It is an invention of a configuration that does this.

The patented invention is a configuration in which notarization of offline documents, etc. is performed online and electronic information files are notarized, and since the subject of the notarization is a server related to validation and security of electronic documents, it is difficult to guarantee its objectivity.

Accordingly, non-related persons who are not related to the person subject to authentication, such as authentication related to fact confirmation of various actions and events occurring in relationships with others, and identity authentication of various contents created with relationships with others in mind. An invention that can secure objectivity and security of authentication through authentication by

Japanese Patent Application Laid-Open No. 2019-040557 (2019.03.14.) Republic of Korea Patent No. 10-0694792 (Registration Date: March 07, 2007)

The present invention is to solve the problems of the prior art, and an object of the present invention is to provide authentication related to fact confirmation of various actions and events occurring in relationships with others, and various contents generated with relationships with others in mind. It is to provide an authentication system and authentication method that can secure objectivity and security of authentication through authentication by non-related persons who are not related to the party to be authenticated.

As a technical solution means for achieving the object of the present invention, as a first aspect of the present invention, receiving authentication target information, receiving information on a selected authenticator from among non-related persons not related to the authentication target party, and the selection an authentication management computer that receives confirmation information of an object of authentication from authenticated authenticators, authenticates the object of authentication based on the confirmation information, and manages the authentication information; Among the information of the user including the other party in the relationship between the authentication requestor who provides authentication target information and requests for authentication and the authentication requestor, information on related persons related to the user, and non-related persons not related to the user, A participant information storage unit that stores and manages information of a selected authenticator to confirm the facts or identity of the authentication target, and stores and manages information indicating a specific relationship between a person and a person who determines a related person related to the user a relational data storage unit that stores and manages information of non-related persons not related to the user based on the user information; and an authentication information storage unit that stores and manages the authentication information of the authentication target generated based on the fact confirmation or identity confirmation information performed by the selected authenticators, and communicates with the authentication management computer. a data storage computer connected thereto; at least one user terminal used by an authentication requester who is communicatively connected to the authentication management computer to provide authentication target information and requests authentication, and a counterpart of the authentication requester related to the authentication target; at least one non-related terminal used by non-related persons in the non-related person information stored in the data storage computer; It is connected in communication with the authentication management computer, receives the authentication subject information, performs fact confirmation or identity confirmation on the authentication subject, and provides confirmation data to the authentication management computer, and a non-related person of the data storage computer with its own program at least one authenticator terminal used by non-related authenticators who select an authenticator in the information storage unit and provide authenticator information to the authentication management computer; The authentication management computer and the user terminals can be communicatively connected, and the authentication management computer and the user terminal provide a data storage space to users and non-related persons, and the data storage that is not related to the user. an authenticator information management computer comprising a cloud system, etc. that executes its own program from non-related person information stored in the computer or self-stored, randomly selects and stores a predetermined number of non-related persons, and provides it to the authentication management computer; an authenticator information storage unit included in the authenticator information management computer or connected to communication and storing non-related person information or selected authenticator information; The authentication management computer is connected to the communication, and in order to extract relationship information by determining the correspondence with relation data representing a specific relationship of the person analyzed in the communication details of the authentication requester and the other party, a specific relationship of the person is transmitted to the authentication management computer. An authentication system including at least one social networking medium providing relational data, which is information representing information, is provided.

In addition, as a second aspect of the present invention, the authentication request information and the authentication object including the authentication target information transmitted by the authentication management computer from the authentication requester's user terminal, the communication history information of the authentication requester, and the consent to use the communication history information receiving authentication request counterpart information including consent to use of the authentication requester's counterpart information, the counterpart's communication history information, and communication history information in relation to the authentication method; extracting, by the authentication management computer, information that is a relationship between the authentication requester and the counterpart by analyzing the communication details of the authentication request information and the authentication request counterpart information; excluding related person information of the authentication requester and the other party extracted from the non-related person information stored in the authentication management computer and updating the non-related person information; providing, by the authentication management computer, the updated non-related information to an authenticator information management computer or at least one non-related terminal; extracting, by the authenticator information management computer or at least one non-related terminal, a predetermined number or a predetermined ratio of non-related persons from the received non-related person information, selecting them as authenticators, and providing them to the authentication management computer; The authentication management computer provides the authentication target information and user information to at least one authenticator terminal based on the selected authenticator information received from the authenticator information management computer or at least one non-affiliated terminal to request confirmation of an authentication target a step of; receiving, by the authentication management computer, confirmation information of the authentication target transmitted from the at least one authenticator terminal; An authentication method is provided, comprising the step of giving, by the authentication management computer, authentication information to the authentication object according to a rule set based on the received confirmation information of the authentication object, and storing the authentication information in association with the user information.

In addition, as a third aspect of the present invention, the step of receiving, by the authentication management computer, authentication request information including the authentication target information transmitted from the user terminal of the authentication requester, communication history information of the authentication requester, and consent to use the communication history information Wow; extracting, by the authentication management computer, information that is a relationship of the authentication requester by analyzing the communication details of the authentication request information; excluding information related to the authentication requester extracted from the stored non-related person information by the authentication management computer and updating the non-related person information; providing, by the authentication management computer, the updated non-related information to an authenticator information management computer or at least one non-related terminal; The authenticator information management computer or at least one non-related terminal extracts a predetermined number or a predetermined ratio of non-related persons from the non-related person information received from the authenticator information management computer, selects them as authenticators, and provides them to the authentication management computer step; providing, by the authentication management computer, the authentication subject information and user information to at least one authenticator terminal based on the received selected authenticator information, and requesting authentication subject confirmation; receiving, by the authentication management computer, confirmation information of the authentication target transmitted from the at least one authenticator terminal; An authentication method is provided, comprising the step of giving, by the authentication management computer, authentication information to the authentication object according to a rule set based on the received confirmation information of the authentication object, and storing the authentication information in association with the user information.

In addition, as a fourth aspect of the present invention, in the second aspect of the present invention, the step of excluding the related person information of the authentication requester and the other party extracted from the non-related person information stored in the authentication management computer and updating the non-related person information after performing; The authentication method further comprises the step of extracting, by the authentication management computer, a predetermined number or a predetermined ratio of non-related persons from the updated non-related person information, selecting them as candidate authenticators, and storing the selected non-related persons.

In addition, in the fifth aspect of the present invention, in the third aspect of the present invention, the step of updating the non-related person information by excluding the related person information of the authentication requester extracted from the non-related person information stored in the authentication management computer after performing; The authentication method further comprises the step of extracting, by the authentication management computer, a predetermined number or a predetermined ratio of non-related persons from the updated non-related person information, selecting them as candidate authenticators, and storing the selected non-related persons.

In addition, as a sixth aspect of the present invention, in the second to fifth aspects of the present invention, the authentication management computer receives the authentication subject information, and receives the authentication subject information determined to be necessary to encrypt the authentication subject information. An authentication method is provided, wherein the authentication management computer provides authentication target information encrypted with the at least one authenticator terminal and a decryption means for deciphering the encryption.

In addition, as a seventh aspect of the present invention, in the second to sixth aspects of the present invention, the authentication management computer transmits the authentication information of the authentication object to the user terminal and the authenticator after the authentication of the authentication object is completed. An authentication method is provided, characterized in that the terminals and the authenticators are stored in the ledgers of non-related terminals, respectively.

In addition, as an eighth aspect of the present invention, in the second to sixth aspects of the present invention, an authentication method is provided, wherein the authentication management computer updates selected authenticator information in units of a predetermined period.

According to the present invention, authentication related to fact confirmation of various actions and events occurring in a relationship with others, identity authentication for various contents generated with relationships with other people in mind, etc. can be performed without a relationship with the party to be authenticated. Through authentication by non-related persons, objectivity and security of authentication can be secured.

1 is a schematic configuration diagram of an embodiment of an authentication system of the present invention.
2 is a schematic configuration diagram of an embodiment of an authentication management computer, which is a main part of the authentication system of the present invention.
3 is a schematic configuration diagram of an embodiment of the authentication target information management module, which is a main part of the authentication management computer of the present invention.
4 is a schematic configuration diagram of an embodiment of the authenticator information management module, which is a main part of the authentication management computer of the present invention.
5 is a schematic configuration diagram of an embodiment of the authentication information management module, which is a main part of the authentication management computer of the present invention.
6 is a schematic configuration diagram of an embodiment of the participant information storage unit of the data storage computer, which is the main part of the authentication system of the present invention.
7 is a flowchart for explaining an embodiment of an authentication method of the present invention.
8 is a flowchart for explaining another embodiment of the authentication method of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Terms used in the description of the embodiments of the present invention will be defined. Various computers and terminals used in the present invention may consist of hardware itself, or a computer program or web program that utilizes the hardware resources. For example, the authentication management computer and the authenticator information management computer of the present invention may consist of each component of hardware included in the computer, and each component of the web program or computer program stored in the storage means of the computer is a register of the computer. It may be a configuration executed by utilizing hardware resources of a central processing unit (CPU) including instructions and algorithms stored in the .

In addition, terms used or usable in the description of the embodiment of the present invention, such as '~ part', '~ module', '~ means' or ~ unit', may be used with the same meaning of the same configuration, and corresponding These are terms that can be appropriately substituted and used according to the action of the components. The terms may be a hardware configuration of a computer or terminals, and represent each component of a web program, computer program, or cloud computer program that is stored in the storage means of the computer and terminal and executed under the control of the central processing unit (CPU) or processor. can

In the embodiment of the present invention, the above terms are mainly used as terms representing each component of a web program, a computer program, or a cloud computer program.

Of course, other terms or expressions not defined herein are not bound by the terms or expressions, and have a greater meaning in the action or function of the components represented.

In addition, acquaintances, relatives, and neighbors used in the embodiment of the present invention may be used as the same meaning. In addition, a non-related person may be used in the opposite sense to the related person. The authenticator may be used as a meaning of the non-related person or a person selected from among the non-related persons.

1 is a schematic configuration diagram of an embodiment of an authentication system of the present invention. As shown in FIG. 1, the authentication system of the present invention receives authentication target information, receives information on a selected authenticator from among non-related persons not related to the authentication target, and receives authentication target information from the selected authenticators. an authentication management computer 1000 that receives the confirmation information of , authenticates an authentication target based on the confirmation information, and manages the authentication information; Among the information of the user including the other party in the relationship between the authentication requestor who provides authentication target information and requests for authentication and the authentication requestor, information on related persons related to the user, and non-related persons not related to the user, The participant information storage unit 2100 that stores and manages the information of the selected authenticator to confirm the fact or identity of the authentication target, and information indicating a specific relationship between the person and the person who determines the person who has a relationship with the user A relational data storage unit 2200 for storing and managing, a non-related information storage unit 2300 for storing and managing information of non-related persons not related to the user based on the user information, and authentication provided by the authentication requester The authentication target information storage unit 2400 that stores and manages the information of the requested authentication target, and the authentication that stores and manages the authentication information of the authentication target generated based on the fact check or identity verification information performed by the selected authenticators a data storage computer 2000 including an information storage unit 2500 and communicatively connected to the authentication management computer; At least one user terminal ( 3000) and; at least one non-related terminal 4000 used by non-related persons in the non-related person information stored in the data storage computer 2000; It is connected to communication with the authentication management computer 1000 and receives the authentication subject information to perform fact confirmation or identity confirmation on the authentication object to provide confirmation data to the authentication management computer 1000, and to At least one authenticator terminal 5000 used by non-related authenticators who selects an authenticator in the non-related person information storage unit 2300 of the data storage computer 2000 and provides the authenticator information to the authentication management computer 1000 )Wow; The authentication management computer 1000 , the user terminal 3000 , and the non-related terminals 4000 may be communicatively connected to each other, and the authentication management computer 1000 and the user terminals provide data to users and non-related persons. A storage space is provided, and a predetermined number of non-related persons are randomly selected and stored by executing a self-program in the unrelated person information stored in the data storage computer 2000, which is unrelated to the user, or stored on its own, and the authentication is performed. an authenticator information management computer 6000 including a cloud system provided to the management computer 1000; an authenticator information storage unit 7000 included in the authenticator information management computer 6000 or connected to communication and storing non-related person information or selected authenticator information; The authentication management computer 1000 is connected in communication with the authentication management computer 1000, and determines the correspondence with relation data indicating a specific relationship between the authentication requester and the person analyzed in the communication details of the other party, and extracts related person information. It is configured to include at least one social networking medium 8000 that provides relation data, which is information indicating a specific relationship between people.

The authentication management computer 1000 may include at least one server computer having a communication means and capable of executing a computer program or a web program.

The authenticator information management computer 6000 is provided with communication means, provides cloud storage space to the user, non-related persons, and the authentication management computer, and can execute its own programs such as artificial intelligence (AI) related computer programs or web programs. It may be composed of a cloud computer of a cloud system in

The data storage computer 2000 and the authenticator information storage unit 7000 may be configured as a database management system (DBMS).

The user terminal 3000, the non-related terminal 4000, and the authenticator terminal are provided with communication means, and terminals such as smartphones, tablet computers, personal computers (PCs), notebook computers in which application programs or web programs can be executed. can be composed of

The application or web program provided by the user terminal 3000 may be configured as an authentication target information providing means for requesting authentication of an authentication target to the authentication management computer 1000,

The application or web program provided by the authenticator terminal 5000 may be configured as a related person identity confirmation providing means for providing the authentication management computer 1000 with relationship information and communication details with the requestor of the identity authentication. In addition, the application or web program provided by the non-related terminal 4000 may be configured as a confirmation information providing means for providing the authentication management computer 1000 with fact confirmation or identity confirmation information of the authentication target.

The Internet social network 8000 is configured to include various social network services (SNS) and Internet media.

2 is a schematic configuration diagram of an embodiment of an authentication management computer, which is a main part of the authentication system of the present invention.

As shown in Fig. 2, the authentication management computer 1000 of the present invention, preferably, a web program or a component of a computer program executed in the authentication management computer 1000, transmits authentication target information through the authentication management computer. Various information of the authentication requester provided by the authentication requestor who is providing and making the authentication request, and various information of the other party provided by the other party if the authentication target is a target (hereinafter referred to as 'authentication requester and counterpart' or 'authentication requester') a user information management module 1100 for receiving, storing, and managing (referred to as 'user'); a related person information management unit 1200 for storing and managing related person information including the user's acquaintances extracted from the user's communication history information; By analyzing the communication details of the user with the related person, relationship data representing a specific relationship between person and person is stored, and relationship data representing a specific relationship between person and person is collected by accessing the social networking medium 8000 and data is stored. a relational data management module 1300 for updating and managing self-retained relational data stored in the computer 2000; Relationship data analysis module 1400 that analyzes, stores, and manages relationship data with related people analyzed in the user's communication history and only related people who meet the set criteria as related people of the user by determining the consistency between the relationship data and the self-owned relationship data (1400) class; Non-related information that stores and manages information of users excluding users and related persons related to the authentication request from information of existing users who have signed up for membership in order to utilize the authentication management computer 1000 as non-related persons related to the authentication request a management module 1500; The authentication target information management module 1600 that classifies and manages the authentication target provided by the authentication requester into a corresponding category from the set category information, and performs security management such as encryption processing when the authentication target is a security-requiring target. class; The authenticator information management computer 6000 or the non-related terminal 4000 used by the non-related persons, the authenticator information management computer 6000, and the non-related terminal 4000 used by the non-related persons are selected and transmitted. an authenticator information management module 1700 that stores and manages information of authenticators who will participate in the authentication operation of the authentication target among non-related persons related to the authentication target and information of self-selected authenticators; An authentication performance information management module ( 1800) and; It is a configuration including an authentication information management module 1900 that generates, stores, and manages authentication information for performing authentication of the authentication target according to a rule set based on the authentication performance information.

3 is a schematic configuration diagram of an embodiment of the authentication target information management module, which is a main part of the authentication management computer of the present invention. In the authentication target information management module 1600 of the present invention, the authentication target processed by the authentication system of the present invention is a person and a person, a person and an organization (including a company), an action subject including between an organization and an organization, and the other party Relationships between facts representing information about actions or events that may occur, including, for example, conversations, promises, agreements, contracts, etc., and transactions that a person or entity may have in the future with another person or entity. Created with this in mind, for example, it may include categories of various contents requiring identity authentication, including documents, books, images, images, various works, transaction details, and the like.

As shown in FIG. 3, the authentication subject information management module 1600 of the present invention analyzes the received authentication subject information, classifies it into a corresponding category among the set category types, stores it, and manages the authentication subject category management module 1610. class; If the received authentication target information is classified as personal information, confidential information, and sensitive information requiring security, homomorphic encryption technology ( Homomorphic Encryption), or Zero-Knowledge Proof technology that does not expose any information other than true/false when the prover proves that the object is true to the verifier about the object. It is a configuration including an authentication target security management module 1620 for security management of the corresponding authentication target.

4 is a schematic configuration diagram of an embodiment of the authenticator information management module, which is a main part of the authentication management computer of the present invention.

As shown in FIG. 4 , the authenticator information management module 1700 of the present invention provides the authenticator information management computer 6000 or the unrelated person in order for the authentication management computer 1000 to perform authentication of an object of authentication. an authenticator selection information management module 1710 for receiving and managing authenticator information transmitted from the terminal 4000 and selected from among non-related persons; a candidate authenticator information management module 1720 in which the authentication management computer 1000 autonomously manages selected authenticators among non-related persons of the user related to the authentication target as candidate authenticators; It has a configuration including an authenticator update information management module 1730 that updates and manages information of selected authenticators related to an authentication target in units of a predetermined period.

According to the above configuration, the selection of the authenticator participating in the authentication target authentication task of the authentication requester is performed by the authenticator information management computer, which is a distributed non-related terminal or cloud system, and the selected non-related person in terms of efficiency and stability is given a predetermined It may be configured to be updated on a period-by-period basis. If the renewal period is set too long, there is a risk that information of selected non-related persons may be exposed to hacking. For example, it is preferable to set from 1 to 7 days.

The authentication management computer 1000 selects an authenticator to participate in the authentication of the authentication object in a state in which non-relational information of the user related to the authentication object is stored in the data storage computer 2000, the authentication management computer 1000 itself In this case, in order to prevent the risk of hacking or book manipulation regarding the authentication management computer 1000 or the authenticators, the selection of the authenticator of the authentication target is performed by each individual non-related terminal 4000 or A self-program operating in the authenticator information management computer 6000 configured as a cloud system and operating a cloud virtual space is operated, and authenticators can be selected from among non-related persons related to the user of the authentication target at a set ratio.

The selection of an authenticator in the authenticator information management computer 6000, which may be configured as the individual non-affiliated terminal 4000 or a cloud system, is the authentication stored in the data storage computer 2000 by the authentication management computer 1000 Authenticate among the non-related persons at a rate set or self-learned by a program running on the individual non-related terminal 4000 or the authenticator information management computer 6000 itself by utilizing the target user-related non-related person information You can select a person.

The program driven by the individual non-related terminal 4000 or the authenticator information management computer 6000 itself may be configured as a program capable of self-learning including, for example, an artificial intelligence (AI) algorithm. Therefore, when the authenticator is selected, it is possible to minimize the continuous selection of the person selected as the authenticator, so that non-related persons can be configured to be provided with an opportunity to be evenly selected as the authenticator. Therefore, since the authentication work is not concentrated on specific non-related persons and the opportunity to participate in the authentication work is distributed to all non-related persons involved, the objectivity and reliability of the authentication can be improved, and the system can be operated stably.

In addition, in order to compensate for errors that may occur in selecting an authenticator by a program running in the individual non-related terminal 4000 or the authenticator information management computer 6000 itself, the authentication management computer 1000 Also, the same program as the program running on the individual non-related terminal 4000 or the authenticator information management computer 6000 itself is driven, so that an authenticator can be selected from among non-related persons and stored as a candidate authenticator.

5 is a schematic configuration diagram of an embodiment of the authentication information management module, which is a main part of the authentication management computer of the present invention.

As shown in FIG. 5 , the authentication information management module 1900 of the present invention performs authentication based on the confirmation information on the authentication target performed by the selected authenticators in the authentication performance information management module 1800 . an authentication result management module 1910 for generating and storing a book of authentication results of a target, and storing and sharing the book in a terminal not related to the authenticators or in a cloud space of the authenticators; It is a configuration including a book sharing management computer 1920 that stores and shares the ledger of the authentication result in non-related terminals of non-related persons other than the authenticator or in the cloud space of non-related persons.

In the authentication information management module 1900, the authentication task of the authentication target by the selected authenticators is quickly performed, the result book is shared with the authenticators, and then even non-related persons who do not participate in authentication By sharing the ledger at a certain point in time, it acts to increase the efficiency of the authentication operation while performing authentication and overall sharing of the ledger as a result.

6 is a schematic configuration diagram of an embodiment of the participant information storage unit of the data storage computer, which is the main part of the authentication system of the present invention.

As shown in FIG. 6 , the participant information storage unit 2100 of the present invention provides authentication when an authentication target requests authentication in consideration of a future relationship with another person, for example, when authenticating the identity of video content, etc. In the case where the requestor information and the authentication target are for authenticating a factual relationship, such as a contract act, personal information, phone number information, etc. a user information storage module 2110 that stores and manages to provide to the authentication management computer 1000; The authentication management computer 1000 stores the information of related persons extracted on the basis of the correspondence between the relation data obtained through the agreement to use the communication details and the communication details of the authentication requester and the other party and the relation data possessed by the authentication management computer 1000, and the authentication management In selecting the authenticators to participate in the authentication operation from among the non-related persons stored in the computer 1000, the non-related terminal 4000 and the authenticator information management computer 6000, the related information and a related person information storage module 2120 that manages to exclude overlapping non-related persons; The authenticator information management computer 6000, the authenticator information to participate in the authentication task of the authentication target selected by the individual non-affiliated terminal 4000, and the candidate authenticator information selected as a candidate authenticator by the authentication management computer 1000 is stored and an authenticator information storage module 2130 provided by the request of the authentication management computer 1000 .

Hereinafter, an embodiment of the authentication system of the present invention will be described in more detail with reference to FIGS. 1 to 6 .

Existing user information about the authentication requester and the other party stored in the participant information arranging unit 2100 of the data storage computer 2000 is accumulated and stored, and is accumulated and accumulated by the operator's input in the relation data storage unit 2200 Relational data that has been updated with relationship data representing a specific relationship between a person and a person collected by accessing the social networking medium 8000 from the authentication management computer 1000 is stored in the relationship data representing the relationship between the person and person , it is preferable to assume that the information of non-related persons for the authentication requesters stored in the participant information storage unit 2100 is stored, respectively.

Accessing from the user terminal 3000 to the authentication management computer 1000, accessing here means accessing a website related to the operation of an authentication system managed by the authentication management computer 1000, or accessing the authentication management computer 1000 ) may mean accessing the authentication management computer 1000 by executing an application program related to the authentication system provided and managed by the company.

When the authentication target is a counterpart, the user terminal includes the authentication target information input from the authentication requester, the authentication requestor information and the authentication requester's communication history information, the authentication requester's counterpart information and the counterpart's communication history information, and the authentication In the case that the information on consent to use of communication history information from the requester and the other party, or the subject of authentication requires authentication with a relationship such as a transaction with another person in mind, the authentication target information input from the authentication requester, the authentication requester information, and The authentication management computer 1000 receives the communication history information of the authentication requester and the consent information to use the communication history information and stores it in the participant information storage unit 2100 of the data storage computer 2000 .

The authentication management computer 1000 analyzes the communication details of the user including the authentication requester and the counterpart to extract the user's relationship data including words, expressions, and vocabulary indicating a specific relationship between people, and the authentication management computer (1000) determines the consistency between the relationship data of the user analyzed in the communication history and the relationship data possessed by the data storage computer 2000, and the relationship data of the user analyzed in the communication history indicating the consistency of the set numerical value Those who have communicated with the user by using are set as related persons and stored in the participant information storage unit 2100 of the data storage computer 2000 . The authentication management computer 1000 is the authenticator information management computer 6000 and the individual non-related terminal 4000, the authenticator information management computer 6000 or the individual non-related terminal 4000 to authenticate the object of authentication Request the selection of non-related persons to participate in the work. The authenticator information management computer 6000 and/or the individual non-related terminal 4000 receives a selection request of an authenticator composed of non-related persons, and stores it in the participant information storage unit 2100 of the data storage computer 2000. Among the stored participant information, the number or ratio set by the self-program provided in the authenticator information management computer 6000 and/or the individual non-related terminal 4000 in the non-related information excluding the related persons of the user of the authentication target. selects authenticators as authentication workers. The authentication management computer 1000 receives the authenticator information transmitted from the authenticator information management computer 6000 and/or the individual unrelated terminals 4000, It is stored in the non-related person information storage unit 2300 of the storage computer 2000 as authenticator information regarding the user's authentication target.

The authentication management computer 1000 provides the authentication target information and user information to the authenticator terminal 5000 used by the authenticators based on the authenticator information stored in the non-related person information storage unit 2300, and provides an authentication target send a confirmation request. Authenticators using the authenticator terminal 5000 read the authentication target information and user information, and when it is determined that the set rules are met, for example, consistency with the contents confirmed by other authenticators for the authentication target information, etc. , consistency, and identity, and if the content confirmed between the authenticators is identical or identical, the authentication target confirmation information is transmitted to the authentication management computer 1000 . Also, some of the authenticators may determine that the authentication target information and user information do not conform to established regulations. In this case, the authentication target non-confirmation information may be transmitted to the authentication management computer 1000 .

Here, the authentication operation by the authenticators may be performed manually by the authenticator, but to improve efficiency, the authentication operation may be configured to be automatically performed by an automatic program operated in the authenticator terminal or a virtual cloud computer. . With this configuration, the authentication operation can be automatically performed by the program 24 hours a day, 365 days a year through a virtual cloud computer, etc. regardless of whether the authenticator terminal is operating.

The authentication management computer 1000 receives the confirmation information and non-confirmation information of the authentication target transmitted from the authenticator terminal 5000, and according to a set rule, for example, 80 % or more, the authentication target is authenticated, an authentication ledger associated with user information is created and stored in the authentication information storage unit 2500 of the data storage computer 2000, and the authentication information of the authentication target is transmitted to the user terminal or cloud It can be stored in the user virtual space of the system, the authenticator information management computer (6000). In addition, the authentication book may be stored in the terminal 4000 unrelated to the authenticators or may be stored in the user virtual space of the authenticator information management computer 6000 . It can be stored in the virtual space of each non-related person provided to the authenticator of the authenticator information management computer (6000). In addition, the virtual space of each non-related person provided to the authenticator of the authenticator information management computer 6000 or storing the authentication book in the non-related terminal 4000 of the non-related persons who did not participate in the authentication operation of the object of authentication at a certain point in time can be stored in

In addition, when an error or obstacle occurs in the selection of an authenticator to participate in the authentication operation among non-related persons in the authenticator information management computer 6000 and/or the individual non-related terminals, the authentication management computer 1000 selects It may be configured to receive authentication confirmation information and authentication non-confirmation information of the authentication target by a candidate authenticator, and perform authentication of the authentication target.

In an embodiment of the present invention, authenticator information selected from non-related persons related to the authentication target of the authentication requestors is the authenticator information provided in the participant information storage unit 2100 of the data storage computer 2000 for each authentication requester. It may be stored in the storage module 2130 and, when a specific authentication requestor requests authentication of an authentication target, may be configured to perform an authentication operation using the stored authenticator information of the authentication requester. In this case, the authenticator information of the authentication requestors may be configured to be updated every set period or an arbitrary period, for example, every 1 to 7 days. If the renewal period is set for a long time, it may be exposed to the risk of hacking by non-related people or system tracers. Therefore, it may interfere with rapid authentication. Therefore, it is advisable to set the optimal renewal period in consideration of this point. The renewal period may be uniformly applied to all authentication requestors, or may be determined differently based on the authentication request history of each authentication requester.

In an embodiment of the present invention, the authenticator information management computer 6000 and individual non-related terminals 4000 for selecting an authenticator to participate in an authentication operation from information of non-related persons, and the authentication management computer 1000 for selecting a candidate authenticator, , it may be configured to select an authenticator or a candidate authenticator using an artificial intelligence (AI) program for selecting an authenticator. In this case, the program for selecting a certifier may select a certifier according to a preset number of certifiers or a set ratio among all non-related persons. For example, there are 100,000 unrelated persons who can be selected as certifiers. When the number of authenticators is set to 100, the program for selecting an authenticator may be configured to select 100 authenticators from among non-related persons by applying a probability of being selected as an authenticator to all non-related persons as 0.1%. Since the same probability is applied to all non-related persons in the selection of the authenticator, a specific non-related person is not repeatedly selected as the authenticator, so that the certification work is not concentrated on a specific non-related person, and all non-related persons have an opportunity to participate in the certification work can be dispersed. Accordingly, objectivity and reliability of the selection of the authenticator can be secured.

In the embodiment of the present invention, it has been described that non-related persons to be selected as the authenticator selection target to participate in the authentication operation are composed of the user including the authentication requester and/or the other party and non-related persons excluding the related persons of the user, but the present invention is limited thereto. it is not The authentication management computer 1000 may select and store non-related persons according to a rule arbitrarily set in the participant information of the system, and may be used for selecting an authenticator.

An embodiment of the authentication system of the present invention is an individual and an individual, an individual and a group (including a company), a promise, a contract, a legal act, a conversation, a book creation, a document creation, a transaction, etc. occurring between the group and the group. Various actions with the other party Through fact-checking and identification of various contents, such as documents, books, factual acts, videos, work results, and transaction details, created by individuals or groups with consideration for relationships such as transactions with others, events and events By performing authentication by involving a large number of non-related persons who are not specified in the certification requester, the notarization work performed by an existing specific law firm can be replaced by a notarization by the public called non-related persons by the authentication system of the present invention. can

7 is a flowchart for explaining an embodiment of an authentication method of the present invention.

As shown in Fig. 7, in the authentication method of the present invention, authentication request information including consent to use of authentication target information transmitted from the authentication requester's user terminal by the authentication management computer, communication history information of the authentication requester, and communication history information and receiving authentication request counterpart information including consent to use of the authentication requester's counterpart information, the counterpart's communication history information, and communication history information in relation to the authentication target (S100); extracting, by the authentication management computer, information that is a relationship between the authentication requester and the counterpart user by analyzing the communication details of the authentication request information and the authentication request counterpart information (S110); excluding the related person information of the authentication requester and the other party extracted from the non-related person information stored in the authentication management computer and updating the non-related person information (S120); providing, by the authentication management computer, the updated non-related information to the authenticator information management computer or at least one non-related terminal (S130); The authenticator information management computer or at least one non-related terminal extracts a predetermined number or a predetermined ratio of non-related persons from the received non-related information or the non-related information stored in the data storage computer connected to the authentication management computer to become an authenticator. selecting and providing to the authentication management computer (S140); The authentication management computer provides the authentication target information and user information to at least one authenticator terminal based on the selected authenticator information received from the authenticator information management computer or at least one non-affiliated terminal to request confirmation of an authentication target and (S150); receiving, by the authentication management computer, confirmation information of the authentication target transmitted from the at least one authenticator terminal (S160); a step (S170) of the authentication management computer authenticating the authentication object according to a rule set based on the received confirmation information of the authentication object, generating an authentication book, and storing the authentication book in association with the user information (S170); The authentication management computer stores the authentication book in the user terminal of the user, the non-related persons who are the authenticators, and the non-related terminals of non-related persons who do not participate in the authentication operation (S180).

In addition, an embodiment of the authentication method of the present invention includes: after performing the step of excluding the related person information of the authentication requester and the other party extracted from the non-related person information stored in the authentication management computer and updating the non-related person information; The method may further include the step of extracting, by the authentication management computer, a predetermined number or a predetermined ratio of non-related persons from the updated non-related person information, selecting them as candidate authenticators, and storing the selected non-related persons.

8 is a flowchart for explaining another embodiment of the authentication method of the present invention.

As shown in FIG. 8, in the authentication method of the present invention, the authentication request information including the authentication target information transmitted from the authentication requester's user terminal by the authentication management computer, the communication history information of the authentication requester, and the consent to use the communication history information receiving (S200); The authentication management computer analyzes the communication details of the authentication request information and extracts information relating to the authentication requester (S210); a step (S220) of excluding information on the related person of the authentication requester extracted from the non-related person information stored in the authentication management computer and updating the non-related person information; providing, by the authentication management computer, the updated non-related information to the authenticator information management computer or at least one non-related terminal (S230); The authenticator information management computer or at least one non-related terminal extracts a predetermined number or a predetermined ratio of non-related persons from the non-related person information received from the authentication management computer, selects them as authenticators, and provides them to the authentication management computer ( S240) and; providing, by the authentication management computer, the authentication subject information and user information to at least one authenticator terminal based on the received selected authenticator information (S250); receiving, by the authentication management computer, confirmation information of the authentication target transmitted from the at least one authenticator terminal (S260); a step (S270) of the authentication management computer to authenticate the authentication object according to a rule set based on the received confirmation information of the authentication object, generate an authentication book, and store the information in association with the authentication requester information (S270); The authentication management computer stores the authentication book in the user terminal of the authentication requester, the non-related persons who are the authenticators, and the non-related terminals of non-related persons who do not participate in the authentication operation (S280).

In addition, an embodiment of the authentication method of the present invention includes: after performing the step of excluding the related person information of the authentication requester extracted from the non-related person information stored in the authentication management computer and updating the non-related person information; The method may further include the step of extracting, by the authentication management computer, a predetermined number or a predetermined ratio of non-related persons from the updated non-related person information, selecting them as candidate authenticators, and storing the selected non-related persons.

In addition, in the embodiment of FIGS. 7 and 8 , the method may further include the step of encrypting the authentication target information when the authentication management computer receives the authentication target information and recognizes that encryption of the authentication target information is required. In this case, the authentication management computer may provide the authentication target information encrypted with the at least one authenticator terminal and a decryption means for releasing the encryption.

In addition, in the embodiment of Figs. 7 and 8, the authentication management computer may further include the step of updating the selected authenticator information of the authentication requester in units of a predetermined period.

The embodiments of the authentication system and authentication method of the present invention described above are only some of the various embodiments of the present invention. By engaging non-related persons of the authentication requester to verify the facts of various actions and events that may occur between individuals and individuals, individuals and organizations, and organizations and organizations of the present invention, and to authenticate the identity of various contents created with relationships with others in mind It is natural that various embodiments included in the technical idea for authenticating the object of authentication fall within the protection scope of the present invention.

1000: authentication management computer
2000: data storage computer
3000: user terminal
4000: unrelated terminal
5000: authenticator terminal
6000: authenticator information management computer
7000: authenticator information storage unit
8000: social network media

Claims (10)

As an authentication management computer that performs authentication of an authentication target,
The authentication management computer includes at least one hardware processor and a memory storing a program, wherein the at least one hardware processor controls execution of the program stored in the memory,
extracting the information of the non-related person who has no relation to the authentication requester of the authentication target and the counterpart of the authentication requester;
The authentication management computer, characterized in that the authentication of the authentication target is performed based on the fact confirmation information of the authentication target transmitted from the non-related terminal of the non-related person. The method according to claim 1,
The information of the non-related person is extracted by excluding information about the person related to the authentication requester and the other party of the authentication requester, which is extracted by analyzing the communication details of the authentication requester and the authentication requester's counterpart. The method according to claim 1,
The authentication management computer, characterized in that the verification of the facts of the authentication target is performed by an authenticator terminal selected in a predetermined number or in a predetermined ratio from among the non-related terminals. As an authentication management computer that performs authentication of an authentication target,
The authentication management computer includes at least one hardware processor and a memory storing a program, wherein the at least one hardware processor controls execution of the program stored in the memory,
Extracting information of a non-related person who is not related to the authentication requester of the authentication target,
The authentication management computer, characterized in that the authentication of the authentication target is performed based on the identity confirmation information of the authentication target transmitted from the non-related terminal of the non-related person. 5. The method according to claim 4,
The information of the non-related person is an authentication management computer, characterized in that it is extracted by excluding information about the related person of the authentication requester extracted by analyzing the communication details of the authentication requester. 5. The method according to claim 4,
The authentication management computer, characterized in that the verification of the identity of the authentication target is performed by the authenticator terminals selected in a predetermined number or in a predetermined ratio from among the non-related terminals. As an authentication management method for performing authentication of an authentication target,
extracting, by an authentication management computer, information on the authentication requester of the authentication object and information of an unrelated person who has no relation to the counterpart of the authentication requester;
and performing, by the authentication management computer, authentication of the authentication target based on the fact confirmation information of the authentication target transmitted from the non-related terminal of the non-related person. 8. The method of claim 7,
The information of the non-related person is extracted by excluding information about the person related to the authentication requester and the other party of the authentication requester, which is extracted by analyzing the communication details of the authentication requester and the authentication requester's counterpart. As an authentication management method for performing authentication of an authentication target,
extracting, by an authentication management computer, information on an unrelated person who has no relation to the authentication requester of the authentication target;
and performing, by the authentication management computer, authentication of the authentication target based on the identity confirmation information of the authentication target transmitted from the non-related terminal of the non-related person. 10. The method of claim 9,
The information of the non-related person is an authentication management method, characterized in that it is extracted by excluding information about the related person of the authentication requester extracted by analyzing the communication details of the authentication requester.

Images