System and method for global regulatory compliance determination using smart contracts

Abstract

A system and method for determining global regulatory compliance using smart contracts are provided. A system for determining global regulatory compliance using smart contracts according to various embodiments of the present disclosure comprises a computing device that performs a procedure for determining global regulatory compliance using smart contracts, wherein the computing device issues an on-chain ID for a user and records it on-chain, acquires information for determining whether the user complies with regulations, matches the acquired information with the issued on-chain ID, and, when verification of the user is required, determines whether the user complies with regulations based on the information matched with the issued on-chain ID and regulatory information that the user must comply with.

Description

Technology Field

[0001] Various embodiments of the present disclosure relate to a global regulatory compliance determination system and method utilizing smart contracts. Background Technology

[0002] Smart contract-based security token systems are becoming increasingly widespread to ensure the efficient trading and security of digital assets. These systems are composed of multiple stakeholders, such as physical asset owners, token issuers, asset management and custody institutions (custodians), broker dealers, and investors. Each of these stakeholders is registered in a specific Global Registry through credential verification and identity authentication, and during this process, compliance requirements centered on regulations of the U.S. Securities and Exchange Commission (SEC) are verified through the Know Your Customer (KYC) procedure.

[0003] However, the current system is heavily focused on U.S. SEC regulations, despite the fact that regulations across various countries may differ; consequently, it has limitations in simultaneously reflecting the multiple regulatory requirements applicable to multinational transactions. In other words, the lack of flexibility to apply multiple regulatory standards simultaneously may lead to difficulties in regulatory compliance during international asset transactions.

[0004] Existing security token systems execute transactions based on the ERC-20 standard and do not have a built-in function to automatically comply with compliance rules. Therefore, they adopt a method of verifying regulatory compliance by manually calling the compliance module using a compliance rule pointer. However, this approach presents a problem in that changed regulations are not immediately reflected because the function is not automated, even though the compliance module must be updated in a timely manner whenever laws or regulations change.

[0005] Furthermore, the current system lacks the capability to verify whether the correct compliance module is being invoked during transaction execution. This limits the ability to reliably evaluate transaction regulatory compliance in real time and can act as a factor that undermines the stability and reliability of transactions.

[0006] Finally, the Ethereum network, where ERC-20 based security token systems operate, has inherent issues with transaction processing speed and scalability. In situations requiring support for large-scale transactions, processing delays or network overload can become problems, which can negatively impact the overall efficiency and transaction speed of the system.

[0007] The aforementioned background technology is one that the inventor possessed or acquired in the process of deriving the content of the present disclosure, and it cannot be considered as prior art disclosed to the general public prior to the filing of this application. The problem to be solved

[0008] The problem that the present disclosure aims to solve is to provide a global regulatory compliance determination system and method utilizing smart contracts that can improve efficiency by issuing an on-chain ID for a user and recording it on-chain, matching and adding various information for determining regulatory compliance to the on-chain ID, and determining the user's regulatory compliance based on the information recorded in the on-chain ID when user verification is required, thereby verifying regulatory compliance of various countries based on the on-chain ID.

[0009] Another problem that the present disclosure aims to solve is to provide a global regulatory compliance determination system and method utilizing smart contracts, which can reduce system maintenance costs while ensuring regulatory compliance by using a proxy pattern to modify the logic of the smart contract and respond flexibly to regulatory changes, thereby enabling continuous updates to align with new regulations or legal changes even after the smart contract has been deployed.

[0010] Another problem that the present disclosure aims to solve is to provide a global regulatory compliance determination system and method utilizing smart contracts that can reduce security threats by enabling transactions to continue without service interruption even while the smart contract is being upgraded through a proxy design, and by allowing an administrator to safely proceed with the upgrade through specific permissions.

[0011] Another problem that the present disclosure aims to solve is to provide a global regulatory compliance determination system and method utilizing smart contracts that can significantly improve regulatory compliance and reliability by having a decentralized validator verify transactions in advance, and prevent transactions that are ineligible for investor qualification or do not meet regulatory requirements by rejecting transactions in the absence of a verified on-chain ID.

[0012] Another problem that the present disclosure aims to solve is to provide a global regulatory compliance determination system and method utilizing smart contracts that can process more transactions and improve both scalability and security while avoiding security issues of side chain bridges by applying a rollup method that processes multiple transactions at Layer 2, compresses the results, and writes them to Layer 1, thereby significantly improving transaction processing speed and network scalability.

[0013] The problems that this disclosure aims to solve are not limited to those mentioned above, and other unmentioned problems will be clearly understood by a person skilled in the art from the description below. means of solving the problem

[0014] A global regulatory compliance determination system utilizing a smart contract according to one embodiment of the present disclosure for solving the above-mentioned problem comprises a computing device that performs a global regulatory compliance determination procedure utilizing a smart contract, wherein the computing device issues an on-chain ID for a user and records it on-chain, acquires information for determining whether the user complies with regulations, matches the acquired information with the issued on-chain ID, and when verification of the user is required, determines whether the user complies with regulations based on the information matched with the issued on-chain ID and regulatory information that the user must comply with.

[0015] In various embodiments, when the computing device obtains a request from an issuing authority for the issuance of an on-chain ID containing the user's personal identification information (PII), it may store the user's personal identification information on an off-chain blockchain-based distributed database and issue an on-chain ID to the user that includes the hash value of the stored personal identification information.

[0016] In various embodiments, the acquired information includes the user's personal identification information (PII), identity verification results, and transaction information, and the computing device may evaluate the user's risk level based on the user's personal identification information (PII), identity verification results, and transaction information, and store information regarding the evaluated risk level by matching it with the issued on-chain ID.

[0017] In various embodiments, the computing device may store the obtained identity verification result by matching it with the issued on-chain ID when the issuing authority obtains the identity verification result generated as the issuing authority performs an identity verification procedure on the user off-chain.

[0018] In various embodiments, when the computing device obtains two or more identity verification results for each of the two or more countries by performing an identity verification procedure for the user based on regulatory information that must be complied with in each of two or more different countries, the obtained two or more identity verification results may be matched with the codes of each of the two or more countries and added individually to the issued on-chain ID.

[0019] In various embodiments, when verification of the user is required, the computing device may call a compliance module through a smart contract and determine whether the user complies with the regulations based on regulatory information regarding the regulations the user must comply with and information matched with the issued on-chain ID through the called compliance module.

[0020] In various embodiments, the compliance module includes a plurality of regulatory layers each containing regulatory information of different ranges, wherein the plurality of regulatory layers have a hierarchical structure in which they are sequentially connected according to the regulatory range of the regulatory information, and when verification within a specific range is required for the user, the computing device can determine whether the user complies with the regulations by sequentially using regulatory information that corresponds to the specific range among the plurality of regulatory layers or includes at least one regulatory layer that includes the specific range.

[0021] In various embodiments, when verification of the user is required, the computing device calls a local contract of a previously stored address through a proxy contract and determines whether the user complies with regulations based on regulatory information of regulations that the user must comply with through the called local contract, wherein if the regulatory information is updated, the local contract is updated to determine compliance based on the updated regulatory information, the previously stored address is changed to the address of the updated local contract, and the user's compliance with regulations is re-determined by calling the updated local contract through the proxy contract.

[0022] In various embodiments, when a transaction is requested by the user, the computing device calls a validator through a smart contract to determine whether the issued on-chain ID was issued at the request of a trusted issuing authority based on the information included in the issued on-chain ID and a previously stored list of trusted issuing authorities, and determines whether the user complies with regulations based on the information included in the issued on-chain ID and regulatory information that the user must comply with, and may approve the requested transaction only if it is determined that the issued on-chain ID was issued at the request of a trusted issuing authority and that the user complies with regulations.

[0023] In various embodiments, the computing device may process a transaction for issuing on-chain IDs for a plurality of users for a predetermined period in a first blockchain network, and summarize the results of the processed transaction and record them on a second blockchain network.

[0024] A method for determining global regulatory compliance using a smart contract according to another embodiment of the present disclosure for solving the aforementioned problem may include, in a method performed by a computing device included in a regulatory compliance determination system, the steps of: issuing an on-chain ID for a user and recording it on-chain; obtaining information for determining whether the user complies with regulations and matching the obtained information with the issued on-chain ID; and, when verification of the user is required, determining whether the user complies with regulations based on the information matched with the issued on-chain ID and regulatory information that the user must comply with.

[0025] Other specific details of the present disclosure are included in the detailed description and drawings. Effects of the invention

[0026] According to various embodiments of the present disclosure, an on-chain ID for a user is issued and recorded on-chain, various information for determining regulatory compliance is matched and added to the on-chain ID, and when verification of the user is required, the user's regulatory compliance is determined based on the information recorded in the on-chain ID, thereby improving efficiency by verifying regulatory compliance of various countries based on the on-chain ID.

[0027] Furthermore, by using the proxy pattern, the logic of the smart contract can be modified, and by responding flexibly to regulatory changes, continuous updates to align with new regulations or legal changes are possible even after the smart contract is deployed. This allows for reduced system maintenance costs while ensuring regulatory compliance.

[0028] In addition, through proxy design, transactions can continue without service interruption even while the smart contract is being upgraded, and security threats can be reduced by allowing administrators to safely proceed with upgrades through specific permissions.

[0029] In addition, decentralized validators can significantly improve regulatory compliance and reliability by pre-verifying transactions, and can prevent transactions that do not meet investor qualifications or regulatory requirements by rejecting transactions if there is no verified on-chain ID.

[0030] In addition, by applying a rollup method that processes multiple transactions at Layer 2, compresses the results, and writes them to Layer 1, the transaction processing speed and network scalability are significantly improved, allowing for the processing of more transactions and improving both scalability and security while avoiding the security issues of side chain bridges.

[0031] The effects of the present disclosure are not limited to those mentioned above, and other unmentioned effects will be clearly understood by a person skilled in the art from the description below. Brief explanation of the drawing

[0032] The following drawings attached to this specification illustrate preferred embodiments of the present disclosure and serve to further enhance understanding of the technical concept of the present disclosure together with the detailed description of the invention; therefore, the present disclosure should not be interpreted as being limited only to the matters described in such drawings. FIG. 1 is a diagram illustrating a global regulatory compliance determination system utilizing a smart contract according to one embodiment of the present disclosure. FIG. 2 is a diagram illustrating the hardware configuration of a computing device according to another embodiment of the present disclosure. FIG. 3 is a flowchart of a method for determining global regulatory compliance using a smart contract according to another embodiment of the present disclosure. FIG. 4 is a diagram illustrating an on-chain ID issuance process according to various embodiments of the present disclosure. FIG. 5 is a diagram illustrating an exemplary compliance module comprising a plurality of regulatory layers having a hierarchical structure applicable to various embodiments. FIG. 6 is a diagram illustrating the verification process for transaction execution in various embodiments. Specific details for implementing the invention

[0033] The advantages and features of the present disclosure and the methods for achieving them will become clear by referring to the embodiments described below in detail together with the accompanying drawings. However, the present disclosure is not limited to the embodiments disclosed below but may be implemented in various different forms. These embodiments are provided merely to ensure that the disclosure is complete and to fully inform those skilled in the art of the scope of the present disclosure, and the present disclosure is defined only by the scope of the claims.

[0034] The terms used herein are for describing the embodiments and are not intended to limit the disclosure. In this specification, the singular form includes the plural form unless specifically stated otherwise in the text. As used herein, "comprises" and / or "comprising" do not exclude the presence or addition of one or more other components in addition to the components mentioned.

[0035] Throughout this specification, the same reference numerals refer to the same components, and "and / or" includes each of the mentioned components and all combinations of one or more thereof. Although terms such as "first," "second," etc., are used to describe various components, they are not limited by these terms. These terms are used merely to distinguish one component from another. Accordingly, the first component mentioned below may be the second component within the technical scope of this disclosure.

[0036] As used herein, the terms “part” or “module” refer to hardware components such as software, FPGAs, or ASICs, and the “part” or “module” perform certain roles. However, the meaning of “part” or “module” is not limited to software or hardware. The “part” or “module” may be configured to reside in an addressable storage medium or may be configured to run on one or more processors. Thus, by example, the “part” or “module” includes components such as software components, object-oriented software components, class components, and task components, as well as processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The functions provided within the components and “parts” or “modules” may be combined into a smaller number of components and “parts” or “modules,” or further separated into additional components and “parts” or “modules.”

[0037] Spatially relative terms such as "below," "beneath," "lower," "above," and "upper" may be used to facilitate the description of the relationship between one component and other components as illustrated in the drawings. Spatially relative terms should be understood as encompassing different orientations of components during use or operation, in addition to the orientations depicted in the drawings. For example, if a component depicted in a drawing is inverted, a component described as "below" or "beneath" of another component may be placed "above" of that component. Therefore, the exemplary term "below" may encompass both the lower and upper directions. Components may also be oriented in other directions, and accordingly, spatially relative terms may be interpreted according to the orientation.

[0038] Expressions such as "first," "second," or "first," "second" as used in this specification are used to distinguish one object from another when referring to a plurality of objects of the same kind, unless otherwise indicated in the context, and do not limit the order or importance of said objects.

[0039] Expressions used herein such as “A, B, and C,” “A, B, or C,” “A, B, and / or C,” or “at least one of A, B, and C,” “at least one of A, B, or C,” “at least one of A, B, and / or C,” “at least one selected from A, B, and C,” “at least one selected from A, B, or C,” “at least one selected from A, B, and / or C,” etc., may mean each of the listed items or all possible combinations of the listed items. For example, “at least one selected from A and B” may refer to (1) A, (2) at least one of A, (3) B, (4) at least one of B, (5) at least one of A and at least one of B, (6) at least one of A and B, (7) at least one of B and A, and (8) all of A and B.

[0040] As used herein, the expression “based on” is used to describe one or more factors affecting an act or action of a decision or judgment described in the phrase or sentence containing such expression, and such expression does not exclude additional factors affecting said act or action of a decision or judgment.

[0041] As used in this specification, the expression that a certain component (e.g., a first component) is "connected" or "connected" to another component (e.g., a second component) may mean that the said certain component is not only directly connected or connected to the said other component, but is also connected or connected through a new other component (e.g., a third component).

[0042] As used herein, the expression "configured to" may have meanings such as "set to," "capable of," "modified to," "made to," or "capable of." Such expression is not limited to the meaning of "specifically designed in hardware," and, for example, a processor configured to perform a specific operation may mean a generic-purpose processor capable of performing that specific operation by executing software.

[0043] Unless otherwise defined, all terms used herein (including technical and scientific terms) may be used in a meaning commonly understood by those skilled in the art to which this disclosure pertains. Additionally, terms defined in commonly used dictionaries are not to be interpreted ideally or excessively unless explicitly and specifically defined otherwise.

[0044] In this specification, the term "computer" refers to any type of hardware device comprising at least one processor, and may be understood to include software configurations operating on said hardware device according to the embodiments. For example, the term "computer" may be understood to include smartphones, tablet PCs, desktops, laptops, and user clients and applications running on each of these devices, but is not limited thereto.

[0045] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the attached drawings.

[0046] Each step described in this specification is described as being performed by a computer, but the subject of each step is not limited thereto, and depending on the embodiment, at least some of each step may be performed on different devices.

[0048] FIG. 1 is a diagram illustrating a global regulatory compliance determination system utilizing a smart contract according to one embodiment of the present disclosure.

[0049] Referring to FIG. 1, a global regulatory compliance determination system utilizing a smart contract according to one embodiment of the present disclosure may include a computing device (100), a user terminal (200), an external server (300), and a network (400).

[0050] Here, the global regulatory compliance determination system utilizing the smart contract illustrated in FIG. 1 is according to one embodiment, and its components are not limited to the embodiment illustrated in FIG. 1 and may be added, changed, or deleted as needed.

[0051] In one embodiment, the computing device (100) can perform a global regulatory compliance determination process using a smart contract.

[0052] In various embodiments, the computing device (100) may issue an on-chain ID for a user and record it on-chain, and may store information for determining whether the user is compliant with regulations by matching it with the on-chain ID.

[0053] Additionally, the computing device (100) can determine whether the user complies with regulations based on regulatory information related to regulations that the user must comply with and information matched with the user's on-chain ID.

[0054] Here, the computing device (100) may be a server operated by an issuing agency that issues an on-chain ID and determines the identity and regulatory compliance of a user based on the on-chain ID in accordance with an external request, but is not limited thereto, and may be an external server that performs the on-chain ID issuance operation, the identity verification operation and the regulatory compliance determination operation in accordance with a request obtained from the issuing agency.

[0055] In various embodiments, the computing device (100) may be connected to a user terminal (200) via a network (400) and may provide a global regulatory compliance judgment service utilizing a smart contract to the user terminal (200).

[0056] Here, the user terminal (200) is a terminal of a user that is subject to the issuance of an on-chain ID, and may refer to any form of entity(s) in a system having a mechanism for communication with a computing device (100). For example, such a user terminal (200) may include a PC (personal computer), a notebook, a mobile terminal, a smartphone, a tablet PC, and a wearable device, and may include any type of terminal capable of connecting to a wired / wireless network. Additionally, the user terminal (200) may include any computing device implemented by at least one of an agent, an API (Application Programming Interface), and a plug-in. Additionally, the user terminal (200) may include an application source and / or a client application.

[0057] Additionally, the network (400) may refer to a connection structure capable of exchanging information between each node, such as multiple terminals and servers. For example, the network (400) may include a Local Area Network (LAN), a Wide Area Network (WAN), the World Wide Web (WWW), a wired / wireless data network, a telephone network, a wired / wireless television network, a Controller Area Network (CAN), and Ethernet.

[0058] Wireless data communication networks may include, but are not limited to, 3G, 4G, 5G, 3GPP (3rd Generation Partnership Project), 5GPP (5th Generation Partnership Project), LTE (Long Term Evolution), WIMAX (World Interoperability for Microwave Access), Wi-Fi, Internet, LAN (Local Area Network), Wireless LAN (Wireless Local Area Network), WAN (Wide Area Network), PAN (Personal Area Network), RF (Radio Frequency), Bluetooth network, NFC (Near-Field Communication) network, satellite broadcasting network, analog broadcasting network, DMB (Digital Multimedia Broadcasting) network, etc.

[0059] In one embodiment, an external server (300) may be connected to a computing device (100) via a network (400) and may store and manage various information / data necessary for the computing device (100) to perform a global regulatory compliance determination method using smart contracts, or collect, store, and manage various information / data derived as a result of performing a global regulatory compliance determination method using smart contracts. For example, the external server (300) may be a data storage server provided outside the computing device (100), but is not limited thereto. Hereinafter, with reference to FIG. 2, the hardware configuration of a computing device (100) that performs a global regulatory compliance determination method using smart contracts will be described.

[0061] FIG. 2 is a diagram illustrating the hardware configuration of a computing device according to another embodiment of the present disclosure.

[0062] Referring to FIG. 2, in another embodiment of the present disclosure, a computing device (100) may include one or more processors (110), a memory (120) for loading a computer program (151) executed by the processor (110), a bus (130), a communication interface (140), and a storage (150) for storing the computer program (151). Here, FIG. 2 illustrates only the components relevant to the embodiment of the present disclosure. Accordingly, a person skilled in the art to which the present disclosure pertains will understand that other general-purpose components may be included in addition to the components illustrated in FIG. 2.

[0063] The processor (110) controls the overall operation of each component of the computing device (100). The processor (110) may be configured to include a CPU (Central Processing Unit), an MPU (Micro Processor Unit), an MCU (Micro Controller Unit), a GPU (Graphic Processing Unit), or any form of processor well known in the art of the present disclosure.

[0064] Additionally, the processor (110) may perform operations for at least one application or program for executing the method according to the embodiments of the present disclosure, and the computing device (100) may have one or more processors.

[0065] In various embodiments, the processor (110) may further include Random Access Memory (RAM) (not shown) and Read-Only Memory (ROM) (not shown) for temporarily and / or permanently storing signals (or data) processed within the processor (110). Additionally, the processor (110) may be implemented in the form of a System on Chip (SoC) comprising at least one of a graphics processing unit, RAM, and ROM.

[0066] Memory (120) stores various data, instructions and / or information. Memory (120) may load a computer program (151) from storage (150) to execute a method / operation according to various embodiments of the present disclosure. When the computer program (151) is loaded into memory (120), the processor (110) may perform the method / operation by executing one or more instructions constituting the computer program (151). Memory (120) may be implemented as a volatile memory such as RAM, but the technical scope of the present disclosure is not limited thereto.

[0067] The bus (130) provides communication functions between components of the computing device (100). The bus (130) can be implemented as various types of buses, such as an address bus, a data bus, and a control bus.

[0068] The communication interface (140) supports wired and wireless internet communication of the computing device (100). Additionally, the communication interface (140) may support various communication methods other than internet communication. To this end, the communication interface (140) may be configured to include a communication module well known in the art of the present disclosure. In some embodiments, the communication interface (140) may be omitted.

[0069] Storage (150) can store computer programs (151) non-temporarily. When performing a global regulatory compliance judgment process using smart contracts through a computing device (100), storage (150) can store various information necessary to provide the global regulatory compliance judgment process using smart contracts.

[0070] The storage (150) may be configured to include non-volatile memory such as ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), flash memory, a hard disk, a removable disk, or any form of computer-readable recording medium well known in the art to which the present disclosure belongs.

[0071] A computer program (151) may include one or more instructions that cause a processor (110) to perform a method / operation according to various embodiments of the present disclosure when loaded into memory (120). That is, the processor (110) may perform the method / operation according to various embodiments of the present disclosure by executing the one or more instructions.

[0072] In one embodiment, the computer program (151) may include one or more instructions for performing a global regulatory compliance determination method using a smart contract, comprising the steps of: issuing an on-chain ID for a user subject to issuance in response to a request from an issuing authority server and recording it on-chain; obtaining information to determine whether the user is compliant with regulations and matching the obtained information with the issued on-chain ID; and, when verification of the user is required by a verification authority server, determining whether the user is compliant with regulations based on the information matched with the issued on-chain ID and the regulatory information that the user must comply with.

[0073] The steps of the method or algorithm described in connection with the embodiments of the present disclosure may be implemented directly in hardware, implemented as a software module executed by hardware, or implemented by a combination thereof. The software module may reside in RAM (Random Access Memory), ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), Flash Memory, a hard disk, a removable disk, a CD-ROM, or any form of computer-readable recording medium well known in the art to which the present disclosure belongs.

[0074] The components of the present disclosure may be implemented as a program (or application) and stored on a medium to be executed in combination with a computer, which is hardware. The components of the present disclosure may be executed as software programming or software elements, and similarly, embodiments may be implemented in programming or scripting languages ​​such as C, C++, Java, assembler, etc., including various algorithms implemented as a combination of data structures, processes, routines, or other programming configurations. Functional aspects may be implemented as algorithms executed on one or more processors. Hereinafter, with reference to FIGS. 3 through 6, a method for determining global regulatory compliance using a smart contract executed by a computing device (100) will be described in more detail.

[0076] FIG. 3 is a flowchart of a method for determining global regulatory compliance using a smart contract according to another embodiment of the present disclosure, and FIG. 4 is a diagram illustrating an on-chain ID issuance process according to various embodiments of the present disclosure.

[0077] Referring to FIGS. 3 and FIGS. 4, in step S110, the computing device (100) can issue and record an on-chain ID for the user.

[0078] More specifically, referring to FIG. 4, first, a computing device (100) can obtain an on-chain ID issuance request containing the user's personal identification information (PII) from a user (or issuing institution) to be issued (①).

[0079] Afterwards, the computing device (100) can store the user's personal identification information (PII) on an off-chain blockchain-based distributed database (e.g., IPFS (InterPlanetary File System)) (②).

[0080] Afterwards, the computing device (100) can transmit an on-chain ID issuance request containing a hash value of the location where personal identification information is stored in a blockchain-based distributed database to the on-chain ID issuer (Claim Issuer) (③).

[0081] Afterwards, the on-chain ID issuer can verify personal identification information stored in a blockchain-based distributed database through the hash value received from the computing device (100) (④), and can proceed with KYC after mapping the layered compliance module based on the personal identification information verified in the blockchain-based distributed database (⑤).

[0082] Afterwards, the on-chain ID issuer can issue an on-chain ID upon successful KYC (⑥-1), and the computing device (100) can register the issued on-chain ID on the blockchain network (⑦) and notify the user of this (⑧-1).

[0083] Meanwhile, the on-chain ID issuer can transmit the failure result and reason for rejection to the computing device (100) in the event of a KYC failure (⑥-2), and the computing device (100) can transmit the failure result and reason for rejection to the user (⑧-2).

[0084] That is, the computing device (100) can correct the integrity of personal identification information by recording only the hash value of the personal identification information stored in a blockchain-based distributed database, rather than the user's personal identification information itself, on the chain.

[0085] In various embodiments, when the computing device (100) obtains information to determine whether a user is compliant with regulations, it may store said information by matching it with an on-chain ID.

[0086] For example, when the computing device (100) obtains an identity verification result for a user, it can store the identity verification result by matching it with an on-chain ID.

[0087] Here, the identity verification result is generated as the issuing authority performs an identity verification procedure on a user off-chain, for example, the identity verification procedure may be a KYC result derived from performing KYC (Know Your Customer), but is not limited thereto.

[0088] At this time, when the computing device (100) performs an identity verification procedure for a user based on regulatory information that must be complied with in each of two or more different countries, and thereby obtains two or more identity verification results for each of two or more countries, it can match the obtained two or more identity verification results with the codes of each of the two or more countries and add them individually to the on-chain ID. For example, the computing device (100) can match the identity verification result from the United States with the United States country code 1 and add it to the on-chain ID, and match the identity verification result from Korea with the Korea country code 82 and add it to the on-chain ID.

[0089] In other words, instead of issuing country-specific on-chain IDs based on identity verification results from each country, the identity verification results of each country can be individually matched to and added / managed to a single on-chain ID.

[0090] As another example, when a computing device (100) obtains a user’s personal identification information (PII), identity verification results, and transaction information (e.g., transaction history, transaction patterns, etc.), it can evaluate the user’s risk level (e.g., high risk group, medium risk group, low risk group, etc.) based on the user’s personal identification information (PII), identity verification results, and transaction information, and can store information regarding the risk level by matching it with an on-chain ID.

[0091] In step S120, the computing device (100) can obtain a verification request for the user after the on-chain ID for the user has been issued and recorded through step S110.

[0092] Here, a request for verification regarding a user is a request to verify whether the user complies with regulations, and, for example, may be obtained in response to a user requesting a specific transaction or the creation of a transaction, but is not limited thereto; the request for a specific transaction or the creation of a transaction itself may be recognized as a request for verification regarding a user.

[0093] In step S130, the computing device (100) can determine whether the user is compliant with regulations based on the user's on-chain ID in response to a verification request for the user obtained through step S120.

[0094] In various embodiments, when verification of a user is required, the computing device (100) can determine whether the user is compliant with regulations based on information matched with an on-chain ID and regulatory information that the user must comply with.

[0095] In various embodiments, when verification of a user is required, the computing device (100) calls a compliance module through a smart contract and can determine whether the user complies with the regulations based on regulatory information regarding the regulations that the user must comply with and information matched with an on-chain ID through the called compliance module.

[0096] Here, the compliance module may be a specific function or sub-module of the smart contract for determining regulatory compliance. That is, the compliance module may be, but is not limited to, a module within the smart contract responsible for verifying regulatory requirements and reviewing compliance.

[0097] In various embodiments, the compliance module includes a plurality of regulatory layers each containing regulatory information of different ranges, wherein the plurality of regulatory layers may have a hierarchical structure in which they are sequentially connected according to the regulatory range of the regulatory information, and when verification in a specific range is required for a user, the computing device (100) may determine whether the user complies with the regulations by sequentially using regulatory information that corresponds to a specific range among the plurality of regulatory layers or includes at least one regulatory layer that includes a specific range.

[0098] For example, when a computing device (100) wants to determine whether a user complies with regulations in New York when the compliance module has a hierarchical structure by country, state, and type of law as shown in FIG. 5, it can determine whether a user complies with regulations in New York and complies with regulations in the United States by sequentially using regulatory information included in the regulatory layer corresponding to New York among the multiple regulatory layers and regulatory information included in the regulatory layer corresponding to the United States including New York.

[0099] In various embodiments, the computing device (100) can determine regulatory compliance by utilizing a proxy design.

[0100] Typically, when regulations change, such information must be updated, but there is a problem in that smart contracts cannot be modified once deployed. To resolve this problem, the computing device (100) can flexibly respond to changes in regulations by utilizing a proxy design to determine compliance with regulations.

[0101] More specifically, first, when verification of a user is required, the computing device (100) calls a local contract of a previously stored address through a proxy contract and can determine whether the user complies with the regulations based on regulatory information of the regulations that the user must comply with through the local contract.

[0102] At this time, when regulatory information is updated, the computing device (100) can update the local contract to determine compliance with the regulation based on the updated regulatory information and change the address previously stored in the proxy contract to the address of the updated local contract.

[0103] Afterwards, the computing device (100) can call the local contract of the changed address (updated local contract) through the proxy contract and re-evaluate the user's regulatory compliance through the updated local contract.

[0104] Here, a proxy contract refers to a contract with which users interact, which stores the address of a logic contract and delegates calls via delegatecall.

[0105] In addition, a local contract is a contract in which actual functions and logic are implemented, and it can be replaced with a new version as needed.

[0106] Here, address changes in the proxy contract may be implemented so that only administrators with address change authority or principals authorized through contract access control can perform them, but are not limited thereto.

[0107] In step S140, the computing device (100) can perform an action based on whether the regulation is compliant, as determined through step S130.

[0108] For example, the computing device (100) may approve a transaction corresponding to a transaction requested by the user if the user's identity verification result exists and it is determined that the user is compliant with regulations.

[0109] Meanwhile, the computing device (100) may reject a transaction corresponding to a transaction requested by a user if the user's identity verification result does not exist or is determined to be non-compliant with regulations.

[0110] At this time, if the transaction corresponding to the transaction requested by the user is rejected, the computing device (100) can generate and transmit an error message explaining the reason for the transaction failure.

[0111] In various embodiments, the computing device (100) can perform verification of transaction execution.

[0112] More specifically, referring to FIG. 6, the computing device (100) can obtain a transaction request from a user (①).

[0113] Afterwards, the computing device (100) can call a validator through a smart contract and transmit the transaction details requested by the user to the validator (②).

[0114] Subsequently, the validator can verify the validity of the on-chain ID based on the information received from the computing device (100) (③). For example, the computing device (100) can verify whether the ID was issued by an institution on the list of trusted issuing institutions in the Claim Issuer Registry, whether the period is valid, etc. However, it is not limited to this.

[0115] Subsequently, if the validator determines that the on-chain ID is valid, it can determine whether the transaction requested by the user is valid based on the on-chain ID (④). For example, if the transaction requested by the user is a transaction instructing the purchase of a specific token, the validator can verify through the Claim Topic Registry whether the content regarding whether the token purchase is possible based on the user's on-chain ID is included, and can perform verification of the transaction execution based on whether such content is included.

[0116] In various embodiments, the computing device (100) can solve scalability by utilizing a Layer 2 chain.

[0117] More specifically, the computing device (100) can process a transaction to issue on-chain IDs for multiple users for a predetermined period in a first blockchain network (Layer 1), and can summarize the results of the transaction processed in the first blockchain network and record them on a second blockchain network (Layer 2).

[0119] The method for determining global regulatory compliance using the aforementioned smart contract has been explained with reference to the flowchart illustrated in the drawings. For the sake of simplicity, the method for determining global regulatory compliance using a smart contract has been illustrated and described using a series of blocks; however, the present disclosure is not limited to the order of the blocks, and some blocks may be executed in a different order than that illustrated and described in this specification or simultaneously. Additionally, new blocks not described in this specification and drawings may be added, or some blocks may be deleted or modified.

[0121] Although embodiments of the present disclosure have been described above with reference to the attached drawings, those skilled in the art will understand that the present disclosure may be implemented in other specific forms without altering its technical concept or essential features. Therefore, the embodiments described above should be understood as illustrative in all respects and not restrictive. Explanation of the symbols

[0122] 100: Computing device 200 : User terminal 300 : External server 400 : Network

Claims

Claim 1 A regulatory compliance judgment system comprising a computing device that performs a global regulatory compliance judgment procedure utilizing smart contracts, wherein the computing device issues an on-chain ID for a user and records it on-chain, acquires information for determining whether the user complies with regulations, matches the acquired information with the issued on-chain ID, and, when verification of the user is required, determines whether the user complies with regulations based on the information matched with the issued on-chain ID and regulatory information that the user must comply with; wherein, when the computing device acquires a request from an issuing authority for the issuance of an on-chain ID including the user's personal identification information (PII), it stores the user's personal identification information on an off-chain blockchain-based distributed database, and issues an on-chain ID to the user that includes the hash value of the stored personal identification information; wherein the acquired information includes the user's personal identification information (PII), identity verification results, and transaction information; and wherein the computing device evaluates the risk level of the user based on the user's personal identification information (PII), identity verification results, and transaction information, and to the evaluated risk level The computing device is characterized by storing information regarding the user by matching it with the issued on-chain ID, and when verification of the user is required, the computing device calls a compliance module via a smart contract and determines whether the user complies with the regulations based on regulatory information regarding the regulations the user must comply with and information matched with the issued on-chain ID through the called compliance module, wherein the compliance module includes a plurality of regulatory layers each containing regulatory information of different ranges, and the plurality of regulatory layers have a hierarchical structure in which they are sequentially connected according to the regulatory range of the regulatory information, and the computing deviceA global regulatory compliance determination system utilizing smart contracts, characterized in that when verification within a specific range is required for the above-mentioned user, the system determines whether the user complies with regulations by sequentially utilizing regulatory information that includes at least one regulatory layer among the plurality of regulatory layers that corresponds to the specific range or includes the specific range; and when verification for the above-mentioned user is required, the computing device calls a local contract of a previously stored address through a proxy contract, and determines whether the user complies with regulations based on regulatory information of the regulations that the user must comply with through the called local contract, wherein when the regulatory information is updated, the local contract is updated to determine compliance based on the updated regulatory information, the previously stored address is changed to the address of the updated local contract, and the user complies with regulations by calling the updated local contract through the proxy contract. Claim 2 delete Claim 3 delete Claim 4 A global regulatory compliance judgment system utilizing a smart contract, wherein, in claim 1, the computing device stores the acquired identity verification result by matching it with the issued on-chain ID when the issuing authority obtains the identity verification result generated as the issuing authority performs an identity verification procedure on the user off-chain. Claim 5 A global regulatory compliance judgment system utilizing a smart contract according to claim 1, wherein the computing device performs an identity verification procedure for the user based on regulatory information that must be complied with in each of two or more different countries, and when two or more identity verification results for each of the two or more countries are obtained, the obtained two or more identity verification results are matched with the codes of each of the two or more countries and individually added to the issued on-chain ID. Claim 6 delete Claim 7 delete Claim 8 delete Claim 9 A global regulatory compliance determination system utilizing a smart contract according to claim 1, wherein the computing device, when a transaction is requested by the user, calls a validator through a smart contract to determine whether the issued on-chain ID was issued at the request of a trusted issuing authority based on information included in the issued on-chain ID and a previously stored list of trusted issuing authorities, determines whether the user complies with regulations based on information included in the issued on-chain ID and regulatory information that the user must comply with, and approves the requested transaction only when it is determined that the issued on-chain ID was issued at the request of a trusted issuing authority and that the user complies with regulations. Claim 10 A global regulatory compliance judgment system utilizing smart contracts, wherein, in claim 1, the computing device processes a transaction for issuing on-chain IDs for a plurality of users for a predetermined period in a first blockchain network, and summarizes the result of the processed transaction and records it on a second blockchain network. Claim 11 A method performed by a computing device included in a regulatory compliance determination system, comprising: a step of issuing an on-chain ID for a user and recording it on-chain; a step of obtaining information for determining whether the user complies with regulations and matching the obtained information with the issued on-chain ID; And when verification of the above user is required, the method includes a step of determining regulatory compliance of the above user based on information matched with the above issued on-chain ID and regulatory information that the above user must comply with; the step of recording on-chain includes, when a request for the issuance of an on-chain ID including the above user's personal identification information (PII) is obtained from an issuing authority, storing the above user's personal identification information on an off-chain blockchain-based distributed database and issuing an on-chain ID to the above user that includes the hash value of the stored personal identification information, wherein the obtained information includes the above user's personal identification information (PII), identity verification results, and transaction information; the step of matching with the above issued on-chain ID includes evaluating the risk level of the above user based on the above user's personal identification information (PII), identity verification results, and transaction information, and storing information regarding the evaluated risk level by matching it with the above issued on-chain ID; the step of determining regulatory compliance includes, when verification of the above user is required, calling a compliance module through a smart contract, and the called The method includes a step of determining whether the user complies with regulations based on regulatory information regarding regulations that the user must comply with and information matched with the issued on-chain ID through a compliance module, wherein the compliance module includes a plurality of regulatory layers each including regulatory information of different ranges, and the plurality of regulatory layers have a hierarchical structure in which they are sequentially connected according to the regulatory scope of the regulatory information.A method for determining global regulatory compliance using a smart contract, wherein the step of determining whether the user complies with regulations based on regulatory information regarding regulations that the user must comply with and information matched with the issued on-chain ID through the aforementioned called compliance module includes, when verification within a specific range is required for the user, a step of determining whether the user complies with regulations by sequentially using regulatory information that includes at least one regulatory layer among the plurality of regulatory layers that corresponds to the specific range or includes the specific range; and the step of determining regulatory compliance further includes, when verification for the user is required, calling a local contract of a previously stored address through a proxy contract, and determining whether the user complies with regulations based on regulatory information regarding regulations that the user must comply with through the called local contract, wherein, when the regulatory information is updated, the local contract is updated to determine regulatory compliance based on the updated regulatory information, changing the previously stored address to the address of the updated local contract, and calling the updated local contract through the proxy contract to re-evaluate whether the user complies with regulations.

Images