Apparatus and method for managing self-sovereign identity-based private key using biometric information

Abstract

The present invention relates to a technology related to a self-sovereign identity (SSI)-based decentralized identifier (DID), and to an apparatus and method for managing a self-sovereign identity-based private key using biometric information, which manages self-sovereign identity identifier information through biometric information. According to one embodiment of the present invention, a private key required for a self-sovereign identity-based identifier can be generated so as not to cause security and theft issues, and can be safely managed.

Description

Device and method for managing private keys based on self-sovereign identity using biometric information

[0001] The present invention relates to a technology for a decentralized identifier (DID) based on a self-sovereign identity (SSI), and relates to a device and method for managing a private key based on a self-sovereign identity using biometric information for managing self-sovereign identity verification information through biometric information.

[0002] Decentralized identity (DI) authentication involves an authentication process where the issuer verifies and issues authentication information requested by the user, registers it on a blockchain network, and verifies the information submitted and requested by the user on the registered blockchain network. This authentication process requires the issuance and management of a private key to generate or verify the information. These services, which require real-name authentication and personal information provision, can minimize the need for such information, leading to active research and development in blockchain-based services.

[0003] However, security incidents such as fraudulent transactions using discarded or hacked distributed IDs are increasing, taking advantage of the characteristics of distributed IDs that emphasize anonymity.

[0004] The present invention provides a device and method for managing a private key based on a self-sovereign identity (SSI) using biometric authentication for generating and managing a private key for a decentralized identifier (DID) based on a self-sovereign identity (SSI).

[0005] The technical problems to be solved by the present invention are not limited to the technical problems mentioned above, and other technical problems not mentioned can be clearly understood by a person having ordinary skill in the technical field to which the present invention belongs from the description below.

[0006] According to one aspect of the invention, a self-sovereign identity-based personal key management device using biometric information is provided.

[0007] A self-sovereign identity-based private key management device using biometric information according to one embodiment of the present invention may include an omit platform that receives a user's request and feeds back the performance result, a biometric authentication unit that recognizes, stores, and manages the user's biometric information, and a certification management unit that provides an identity verification service using the biometric information.

[0008] According to another aspect of the present invention, a method for managing a private key based on self-sovereign identity using biometric information and a computer program for executing the same are provided.

[0009] A method for managing a private key based on self-sovereign identity using biometric information according to one embodiment of the present invention may include a step of acquiring biometric information, a step of searching for biometric information, and a step of issuing or verifying a certificate using biometric information.

[0010] According to one embodiment of the present invention, a private key required for self-sovereign identity-based identity verification can be generated and safely managed without causing security and theft issues.

[0011] The effects of the present invention are not limited to the above-described effects, and should be understood to include all effects that can be inferred from the composition of the invention described in the description or claims of the present invention.

[0012] FIG. 1 and FIG. 2 are drawings for explaining a self-sovereign identity-based private key management device using biometric information according to one embodiment of the invention.

[0013] FIGS. 3 to 8 are drawings for explaining a method for managing a private key based on self-sovereign identity using biometric information according to one embodiment of the present invention.

[0014] FIG. 9 is a diagram illustrating a computing device that implements a self-sovereign identity-based private key management device using biometric information according to an embodiment of the present invention.

[0015] The present invention is susceptible to various modifications and embodiments. Specific embodiments are illustrated in the drawings and described in detail. However, this is not intended to limit the present invention to specific embodiments, but rather to encompass all modifications, equivalents, and alternatives falling within the spirit and technical scope of the present invention. In describing the present invention, detailed descriptions of related known technologies will be omitted if they are determined to unnecessarily obscure the gist of the present invention. Furthermore, the use of the singular forms "a," "an," and "the" in this specification and claims should generally be construed to mean "one or more," unless otherwise specified.

[0016] In the present invention, the term "module" includes a unit composed of hardware, software, or firmware, and may be used interchangeably with terms such as logic, logic block, component, or circuit. A module may be an integrally formed component, or a minimum unit or portion thereof that performs one or more functions. For example, a module may be composed of an application-specific integrated circuit (ASIC).

[0017] Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the attached drawings. In describing with reference to the attached drawings, identical or corresponding components are assigned the same drawing numbers, and redundant descriptions thereof will be omitted.

[0018]

[0019] FIG. 1 and FIG. 3 are drawings for explaining a self-sovereign identity-based private key management device using biometric information according to one embodiment of the invention.

[0020] Referring to Fig. 1, a self-sovereign identity-based personal key management device (10) using biometric information converts biometric information data acquired through a biometric sensor into digital information by binarizing it in a biometric authentication server, and then registers and manages it in a biometric DB.

[0021] A personal key management device (10) based on self-sovereign identity using biometric information can prove self-sovereign identity using biometric information registered in a biometric recognition DB.

[0022] A self-sovereign identity-based personal key management device (10) using biometric information generates a personal key using characteristic data of biometric information. For example, the self-sovereign identity-based personal key management device (10) using biometric information can extract and encrypt characteristic data of biometric information acquired using a biometric authentication server to generate a personal key.

[0023] Referring to FIG. 2, a self-sovereign identity-based personal key management device (10) using biometric information can set a SALT value of an encryption key using characteristic data of biometric information. The self-sovereign identity-based personal key management device (10) using biometric information can extract characteristic data of biometric information and use it as a SALT value. For example, the self-sovereign identity-based personal key management device (10) using biometric information can encrypt information by applying different SALT values ​​to each user by extracting and using SALT values ​​from the individual's biometric information.

[0024] Referring to FIG. 3, a self-sovereign identity-based personal key management device (10) using biometric information includes an Omit platform (100), a biometric authentication unit (200), a proof management unit (300), and an encryption unit (400).

[0025] The OMIC Platform (100) is a user platform that receives user requests and provides feedback on the results. The OMIC Platform (100) can provide self-sovereign identity verification services upon user request. The OMIC Platform (100) is a user platform provided to users, enabling them to request self-sovereign identity verification, encryption, etc. via computers, tablets, laptops, mobile phones, etc. Users can request identity verification services, such as issuance or verification of sovereign identity-based certificates, through the OMIC Platform (100). Users can also request information encryption and storage or decryption through the OMIC Platform (100).

[0026] The biometric authentication unit (200) recognizes, stores, and manages the user's biometric information.

[0027] The biometric authentication unit (200) extracts unique characteristic data from biometric information data acquired through a sensor, converts it into digital information, encrypts it, and then stores and manages it in a database. For example, the biometric authentication unit (200) can convert the characteristic data of the acquired biometric information into digital information using binarization and linear combination weights of eigenfaces, encrypt it, and then store it in a biometric authentication database (DB). The biometric authentication unit (200) can binarize a video image of biometric information such as a fingerprint or face acquired through a biometric sensor by applying an adaptive thresholding algorithm. The adaptive binarization algorithm is a method of individually setting a threshold value for each pixel of an image, and the threshold value is determined based on the surrounding pixels of the target pixel. The adaptive binarization algorithm works well in images with different background brightnesses by applying different threshold values ​​to various areas of the image, and maps the value of each pixel expressed in 8-bit (gray scale) to one of the values ​​(binarization) of 0 and 1.

[0028] The biometric authentication unit (200) acquires biometric information data, extracts characteristic data of the biometric information, binarizes the characteristic data, converts it into a byte format, and then converts it into a string format. The biometric authentication unit (200) uses the value of the converted string as an encryption key to generate a private key and uses it to encrypt data.

[0029] To explain in detail, the biometric authentication unit (200) can extract characteristic data from facial recognition data acquired through a singularity extraction algorithm. In the case of facial recognition, face detection can be performed using a Harr-like singularity extraction algorithm that utilizes rectangular features. The Harr-like singularity extraction algorithm superimposes a black and white square on a human face, then calculates the difference between the sum of pixel values ​​in the dark area and the sum of pixel values ​​in the bright area, and if the difference exceeds a threshold value, it is extracted as a Harr-like singularity for the human face.

[0030] The biometric authentication unit (200) converts the extracted biometric information characteristic data into a binary format, converts it into a byte format, and then converts it into a string format. The value of the converted string is used as an encryption key to generate a private key, and can be used for encryption by setting it as an encryption SALT value. The biometric authentication unit (200) combines the eight least significant bits of the biometric information characteristic data from which the characteristics of the stored biometric information are extracted with a random number and uses it as a private key or an encryption SALT value for self-sovereign identity verification.

[0031]

[0032] The proof management unit (300) authenticates and provides a self-sovereign identity proof service at the user's request through the Omit platform (100) using a private key generated by the biometric authentication unit (200).

[0033] The certificate management unit (300) can verify an individual's identity through the biometric authentication unit (200), use the private key generated by the biometric authentication unit (200) to register identity authentication information (certification type, certification code, issuing place, certification content, issuance date, issuance time, etc.) in the distributed ID, and issue a certificate.

[0034] The certificate management unit (300) can verify the identity of an individual through the biometric authentication unit (200) and verify the certificate by performing identity verification through the private key generated by the biometric authentication unit (200).

[0035] When a user requests information encryption via the Omit platform (100), the encryption unit (400) encrypts and stores information using the encrypted SALT value generated by the biometric authentication unit (200). For example, the encryption unit (400) may request encryption of identification information or other related information (education, hobbies, residential area, behavior, interests, etc.) and store the encrypted data in a database.

[0036] When a user requests information decryption through the Omit platform (100), the encryption unit (400) decrypts or decrypts encrypted data using the encrypted SALT value generated by the biometric authentication unit (200). The encryption unit (400) decrypts the data requested by the user and provides it through the Omit platform (100).

[0037]

[0038] Figures 4 to 8 are diagrams illustrating a method for managing a private key based on self-sovereign identity using biometric information according to an embodiment of the present invention. Each process described below is a process performed by each functional unit constituting a device for managing a private key based on self-sovereign identity using biometric information at each stage. However, for the sake of a concise and clear explanation of the present invention, the subject of each stage will be collectively referred to as a device for managing a private key based on self-sovereign identity using biometric information.

[0039]

[0040] Referring to Figure 4, a self-sovereign identity-based private key management device (10) utilizing biometric information acquires and inputs biometric information through a biometric sensor at step S410. For example, biometric information may use information that can identify an individual, such as a fingerprint, face, iris, or finger vein.

[0041] At step S420, a self-sovereign identity-based private key management device (10) using biometric information checks whether biometric information of the same person is stored in a biometric authentication database.

[0042] If there is no stored biometric information, the process moves to step S430 and performs the process of storing and registering biometric information.

[0043] In step S430, the device for managing a private key based on self-sovereign identity using biometric information (10) converts biometric information data into digital data by binarizing it. In detail, the device for managing a private key based on self-sovereign identity using biometric information (10) can convert biometric information data extracted using binarization and linear combination weights of eigenfaces into digital information. The device for managing a private key based on self-sovereign identity using biometric information (10) can binarize a video image of biometric information by applying an adaptive thresholding algorithm. The adaptive binarization algorithm is a method of individually setting a threshold value for each pixel of an image, and the threshold value is determined based on the surrounding pixels of a target pixel. The adaptive binarization algorithm works well in images with different background brightness by applying different threshold values ​​to various areas of the image, and maps the value of each pixel expressed in 8-bit (gray scale) to one of 0 and 1 values ​​(binarization).

[0044] In step S440, the self-sovereign identity-based private key management device (10) using biometric information extracts characteristic data of the acquired biometric information. For example, the self-sovereign identity-based private key management device (10) using biometric information can extract characteristic data of biometric information using a singularity extraction algorithm. In the case of face recognition, face detection can be performed using a Harr-like singularity extraction algorithm that utilizes rectangular features. The Harr-like singularity extraction algorithm superimposes a black and white square on a human face, then calculates the difference between the sum of pixel values ​​in the dark area and the sum of pixel values ​​in the bright area, and if the difference exceeds a threshold value, it is extracted as a Harr-like singularity for the human face.

[0045] At step S450, a self-sovereign identity-based private key management device (10) using biometric information stores characteristic data of biometric information in a biometric authentication database.

[0046] At step S460, the self-sovereign identity-based private key management device (10) using biometric information can retrieve and return stored characteristic data according to a user's request through the Omit platform.

[0047]

[0048] Referring to FIG. 5, a self-sovereign identity-based private key management device (10) using biometric information issues a self-sovereign identity certificate using biometric information as a private key in response to a request for issuance of a self-sovereign identity certificate.

[0049] At step S510, a self-sovereign identity-based private key management device (10) using biometric information receives a request for issuance of an identity certificate from a user through the Omit platform (100).

[0050] In step S520, a self-sovereign identity-based private key management device (10) using biometric information acquires biometric information of a user who has requested certificate issuance using a biometric recognition sensor.

[0051] At step S530, the self-sovereign identity-based private key management device (10) using biometric information searches the biometric information database for the presence of biometric information of the corresponding user.

[0052] If there is no stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information registers biometric information through steps S540 to S550.

[0053] In step S540, the device for managing a private key based on self-sovereign identity using biometric information (10) binarizes biometric information data and converts it into digital data. In detail, the device for managing a private key based on self-sovereign identity using biometric information (10) can convert biometric information data extracted using binarization and linear combination weights of eigenfaces into digital information. The device for managing a private key based on self-sovereign identity using biometric information (10) can binarize a video image of biometric information by applying an adaptive thresholding algorithm. The adaptive binarization algorithm is a method of individually setting a threshold value for each pixel of an image, and the threshold value is determined based on the surrounding pixels of a target pixel. The adaptive binarization algorithm works well in images with different background brightnesses by applying different threshold values ​​to different areas of the image, and maps the value of each pixel expressed in 8-bit (gray scale) to one of 0 and 1 values ​​(binarization).

[0054] At step S550, the self-sovereign identity-based private key management device (10) using biometric information extracts characteristic data of the acquired biometric information. For example, the self-sovereign identity-based private key management device (10) using biometric information can extract characteristic data of biometric information using a singularity extraction algorithm. In the case of face recognition, face detection can be performed using a Harr-like singularity extraction algorithm that utilizes rectangular features. The Harr-like singularity extraction algorithm superimposes a black and white square on a human face, then calculates the difference between the sum of pixel values ​​in the dark area and the sum of pixel values ​​in the bright area, and if the difference exceeds a threshold value, it is extracted as a Harr-like singularity for the human face.

[0055] A self-sovereign identity-based private key management device (10) using biometric information stores characteristic data of biometric information in a biometric authentication database.

[0056] If biometric information already exists or the storage of acquired biometric information is completed, the self-sovereign identity-based private key management device (10) using biometric information extracts bits of the stored characteristic data at step S560.

[0057] At step S570, the self-sovereign identity-based private key management device (10) using biometric information generates a private key by combining bits of extracted characteristic data with a random number. For example, the self-sovereign identity-based private key management device (10) using biometric information can extract the eight least significant bits of characteristic data of biometric information and combine them with a random number generated by a random number generator.

[0058] At step S580, the self-sovereign identity-based private key management device (10) using biometric information issues a self-sovereign identity-based certificate requested through the Omit platform using the generated private key.

[0059]

[0060] Referring to Fig. 6, a self-sovereign identity-based private key management device (10) using biometric information verifies a certificate according to a request for verification of an issued self-sovereign identity certificate.

[0061] At step S610, a self-sovereign identity-based private key management device (10) using biometric information receives a request for identity certificate verification from a user through the Omit platform (100).

[0062] In step S620, a self-sovereign identity-based private key management device (10) using biometric information acquires biometric information of a user requesting certificate verification using a biometric recognition sensor.

[0063] At step S630, the self-sovereign identity-based private key management device (10) using biometric information searches the biometric information database for the presence of biometric information of the corresponding user.

[0064] If there is no stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information terminates certificate verification as the user is not an authenticated user.

[0065] If there is stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information extracts bits of characteristic data of the stored biometric information at step S640.

[0066] At step S650, the self-sovereign identity-based private key management device (10) using biometric information generates a private key by combining bits of extracted characteristic data with a random number. For example, the self-sovereign identity-based private key management device (10) using biometric information can extract the eight least significant bits of characteristic data of biometric information and combine them with a random number generated by a random number generator.

[0067] At step S660, the self-sovereign identity-based private key management device (10) using biometric information performs self-sovereign identity-based certificate verification requested through the Omit platform using the combined private key.

[0068]

[0069] Referring to FIG. 7, a self-sovereign identity-based private key management device (10) using biometric information performs information encryption using biometric information as an encrypted SALT value. For example, the self-sovereign identity-based private key management device (10) using biometric information can request encryption of identification information or other related information (education, hobbies, residential area, behavior, interests, etc.) and store the encrypted data in a database.

[0070] At step S710, a self-sovereign identity-based private key management device (10) using biometric information receives a request for information encryption from a user through the Omit platform (100).

[0071] In step S720, a self-sovereign identity-based private key management device (10) using biometric information acquires biometric information of a user who has requested information encryption using a biometric recognition sensor.

[0072] At step S740, the self-sovereign identity-based private key management device (10) using biometric information searches the biometric information database for the presence of biometric information of the corresponding user.

[0073] If there is no stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information registers biometric information through steps S740 to S750.

[0074] In step S740, the device for managing a private key based on self-sovereign identity using biometric information (10) binarizes biometric information data and converts it into digital data. In detail, the device for managing a private key based on self-sovereign identity using biometric information (10) can convert biometric information data extracted using binarization and linear combination weights of eigenfaces into digital information. The device for managing a private key based on self-sovereign identity using biometric information (10) can binarize a video image of biometric information by applying an adaptive thresholding algorithm. The adaptive binarization algorithm is a method of individually setting a threshold value for each pixel of an image, and the threshold value is determined based on the surrounding pixels of a target pixel. The adaptive binarization algorithm works well in images with different background brightnesses by applying different threshold values ​​to different areas of the image, and maps the value of each pixel expressed in 8-bit (gray scale) to one of 0 and 1 values ​​(binarization).

[0075] At step S750, the device for managing a private key based on self-sovereign identity using biometric information (10) extracts characteristic data of the acquired biometric information. For example, the device for managing a private key based on self-sovereign identity using biometric information (10) can extract characteristic data of the biometric information using a singularity extraction algorithm. In the case of face recognition, face detection can be performed using a Harr-like singularity extraction algorithm that utilizes rectangular features. The Harr-like singularity extraction algorithm superimposes a black and white square on a human face, then calculates the difference between the sum of pixel values ​​in the dark area and the sum of pixel values ​​in the bright area, and if the difference exceeds a threshold value, it is extracted as a Harr-like singularity for the human face.

[0076] A self-sovereign identity-based private key management device (10) using biometric information stores characteristic data of biometric information in a biometric authentication database.

[0077] If biometric information already exists or the storage of acquired biometric information has been completed, the self-sovereign identity-based private key management device (10) using biometric information extracts bits of the stored characteristic data at step S760.

[0078] At step S770, the self-sovereign identity-based private key management device (10) using biometric information uses the bits of the extracted characteristic data as encrypted SALT values.

[0079] At step S780, the self-sovereign identity-based private key management device (10) using biometric information encrypts the requested information using an encrypted SALT value and stores the encrypted information. For example, the self-sovereign identity-based private key management device (10) using biometric information can request encryption of identification information or other related information (education, hobbies, residential area, behavior, interests, etc.) and store the encrypted data in a database.

[0080]

[0081] Referring to Fig. 8, a self-sovereign identity-based private key management device (10) using biometric information performs information decryption using biometric information as an encrypted SALT value.

[0082] At step S810, a self-sovereign identity-based private key management device (10) using biometric information receives a request for information decryption or decryption from a user through the Omit platform (100).

[0083] In step S820, a self-sovereign identity-based private key management device (10) using biometric information acquires biometric information of a user requesting certificate verification using a biometric recognition sensor.

[0084] At step S830, the self-sovereign identity-based private key management device (10) using biometric information searches the biometric information database for the presence of biometric information of the corresponding user.

[0085] If there is no stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information is terminated without performing information decryption since the user is not an authenticated user.

[0086] If there is stored biometric information, the self-sovereign identity-based private key management device (10) using biometric information extracts bits of characteristic data of the stored biometric information at step S840.

[0087] At step S850, a self-sovereign identity-based private key management device (10) using biometric information uses bits extracted from characteristic data of biometric information as encrypted SALT values.

[0088] At step S860, the self-sovereign identity-based private key management device (10) using biometric information performs and uses information decryption using the extracted encrypted SALT value. For example, when a user requests information decryption through the Omit platform, the self-sovereign identity-based private key management device (10) using biometric information decrypts or decrypts encrypted data using the generated encrypted SALT value and then provides the requested data to the user.

[0089]

[0090] FIG. 9 illustrates a computing device that implements a self-sovereign identity-based private key management device using biometric information according to an embodiment of the present invention.

[0091] The embodiments of the present invention described by FIGS. 1 to 8 may be implemented by a computing device (900) operating by at least one processor.

[0092] A computing device (900) may include a processor (910), memory (920), storage (930), a communication interface (940), a system interconnect (950), and a display (960).

[0093] The processor (910) includes a CPU (Central Processing Unit), an MPU (Micro Processor Unit), an MCU (Micro Controller Unit), a GPU (Graphics Processing Unit), and an APU (Application Processing Unit).

[0094] The memory (920) interacts with the processor (910) to store data and quickly access necessary information so that the program can be executed efficiently. The memory (920) includes at least one of a register, a cache memory, a main memory, a read-only memory, a virtual memory, and a non-volatile memory.

[0095] Storage (930) serves to permanently store and manage data. Storage preserves data even after the computing system is turned off or rebooted, and is used to store operating systems, applications, user files, etc. Storage (930) includes at least one of a hard disk drive (HDD), a solid-state drive (SSD), an optical disk, network storage, and cloud storage.

[0096] The communication interface (940) provides a path for exchanging data between various devices inside and outside the computing system. The communication interface (940) may support at least one communication method among Universal Serial Bus (USB), Peripheral Component Interconnect Express (PCIe), Serial ATA (SATA), Ethernet, Wi-Fi, Thunderbolt, and High-Definition Multimedia Interface (HDMI).

[0097] The system interconnect (950) serves to exchange data and signals between various components within a computing system. The system interconnect (950) may support at least one of a bus, point-to-point, crossbar switch, and network-on-chip (NoC) method.

[0098] The display (960) is an output device of a computing system and performs the function of providing visual information to the user.

[0099] By the above-described configuration, the program according to the embodiment of the present invention is executed based on instructions executed by the processor (910) and can be stored in the memory (920) or storage (930).

[0100]

[0101] The method according to the embodiment of the present invention described above may be implemented in the form of program commands that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, etc., either singly or in combination. The program commands recorded on the computer-readable recording medium may be specially designed and configured for the embodiment of the present invention, or may be known and usable by those skilled in the art of computer software. The computer-readable recording medium includes hardware configured to store and execute program commands, such as magnetic recording media such as hard disks, floppy disks, and magnetic tapes; optical recording media such as CD-ROMs and DVDs; magneto-optical media such as floptical disks; ROMs, RAMs, and flash memories. The program commands include machine language codes generated by a compiler and high-level language codes that can be executed on a computer using an interpreter. The hardware may be configured to operate as one or more software modules to process the method according to the present invention, and vice versa.

[0102] The method according to an embodiment of the present invention can be executed on an electronic device in the form of a program command. The electronic device includes a portable communication device such as a smartphone or smart pad, a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, and a home appliance.

[0103] The method according to an embodiment of the present invention may be provided as a computer program product. The computer program product may be traded as a commodity between sellers and buyers. The computer program product may be distributed in the form of a machine-readable recording medium or online through an application store. In the case of online distribution, at least a portion of the computer program product may be temporarily stored or temporarily generated on a storage medium, such as the memory of a manufacturer's server, an application store's server, or a relay server.

[0104] Each component, such as a module or program, according to an embodiment of the present invention may be composed of one or more sub-components, and some of these sub-components may be omitted, or other sub-components may be further included. Some components (modules or programs) may be integrated into a single entity and perform the same or similar functions as those performed by each respective component prior to integration. Operations performed by a module, program, or other component according to an embodiment of the present invention may be executed sequentially, in parallel, iteratively, or heuristically, or at least some operations may be executed in a different order, omitted, or other operations may be added.

[0105] The foregoing description of the present invention is for illustrative purposes only, and those skilled in the art will readily appreciate that the present invention can be readily modified into other specific forms without altering the technical spirit or essential characteristics of the present invention. Therefore, the embodiments described above should be understood as illustrative in all respects and not restrictive. For example, each component described as a single entity may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined manner.

[0106] The scope of the present invention is indicated by the claims set forth below, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be interpreted as being included in the scope of the present invention.

[0107] The mode for carrying out the invention has been described together with the best mode for carrying out the invention above.

[0108] According to one embodiment of the present invention, a private key required for self-sovereign identity-based identity verification is generated and safely managed to prevent security and theft issues, thereby having industrial applicability.

Claims

1. In a personal key management device based on self-sovereign identity using biometric information, Omit platform that receives user requests and provides feedback on the results; A biometric authentication unit that recognizes, stores, and manages the user's biometric information; and A self-sovereign identity-based personal key management device using biometric information, including a certificate management unit that provides an identity verification service using the above biometric information.

2. In paragraph 1, A self-sovereign identity-based personal key management device using biometric information, further comprising an encryption unit that performs information encryption or information decryption using the biometric information.

3. In paragraph 1, The above biometric authentication part A self-sovereign identity-based personal key management device that obtains the user's biometric information through a biometric sensor.

4. In paragraph 3, The above biometric authentication part A self-sovereign identity-based private key management device using biometric information that generates a private key using the above biometric information.

5. In paragraph 1, The above certificate management department Issue self-sovereign identity-based identity certificates, A self-sovereign identity-based private key management device using biometric information to verify the above-mentioned identity certificate.

6. In a method for managing a self-sovereign identity-based private key using biometric information, performed by a self-sovereign identity-based private key management device using biometric information. Steps to request self-sovereign identity verification service; Step of acquiring biometric information; A step of searching the above biometric information; A method for managing a private key based on self-sovereign identity using biometric information, comprising a step of issuing or verifying a certificate using the above biometric information.

7. In paragraph 6, A method for managing a private key based on self-sovereign identity using biometric information, further comprising a step of generating a private key including the biometric information.

8. A computer program recorded on a computer-readable recording medium that executes a self-sovereign identity-based private key management method using biometric information of Article 6.

Images