Did system using browser-based security PIN authentication, and control method thereof
The present disclosure relates to a DID system and a method, using browser-based security PIN authentication, which can perform DID identity verification on a browser even though a program for the user's identity verification is not installed or is not used, thereby solving the problem of compatibility between programs. The DID system and method can easily obtain credentials through the cloud server even in using a browser in which the credentials are not stored, thereby simplifying the identity verification procedure. When there is a request for identity verification while using the browser in which the credentials are not stored, the present invention can provide a new control method capable of performing identity verification even if there is no cloud server since performing identity verification by utilizing the browser in which the credentials are stored or by loading the credentials from the browser in which the credentials are stored.
1. A decentralized identifier (DID) system using browser-based security PIN authentication, comprising:
a server configured to issue verifiable credentials for a decentralized identifier (DID); and
a terminal configured to receive the verifiable credentials from the server, and transmit the verifiable credentials to a verification device that requests verification for the decentralized identifier,
wherein the terminal is further configured to
store the verifiable credentials issued by the server in a local storage of a browser installed in the terminal,
execute the browser in a case in which identity verification is requested by the verification device during a provision of a specific service,
perform browser PIN authentication to access the verifiable credentials stored in the local storage of the executed browser,
transmit the verifiable credentials to the verification device in a case in which the browser PIN authentication is successful,
receive purpose information requested by the verification device,
request issuance of a credential corresponding to the purpose information to the server,
receive the credential corresponding to the purpose information from the server to include the decentralized identifier of the terminal,
transmit the credential corresponding to the verification device to the verification device to perform verification of the identity and the purpose information of the terminal,
register the decentralized identifier in a blockchain-based storage established in advance, and
delete the verifiable credentials stored in the local storage of the browser in response to a request for deletion of the verifiable credentials, and
wherein the server is further configured to extract the decentralized identifier registered in the blockchain-based storage in response to the request for identity verification from the verification device.
2. The DID system according to claim 1 , wherein the executed browser is a browser storing the verifiable credentials in the local storage or a browser storing the credential corresponding to the purpose information requested by the verification device.
3. The DID system according to claim 1 , wherein the server is further configured to generate the verifiable credentials including a decentralized identifier in a case in which the verifiable credentials for the decentralized identifier registered in the blockchain-based storage are requested by the terminal, and
wherein the verifiable credentials including the decentralized identifier are transmitted to the terminal.
4. The DID system according to claim 1 , wherein the terminal is further configured to encrypt the verifiable credentials received from the server, and store the encrypted verifiable credentials in the local storage of the browser.
5. The DID system according to claim 1 , wherein the server is further configured to issue the verifiable credentials to reflect a use purpose of the decentralized identifier, and transmit the issued verifiable credentials to the terminal, and
wherein the verification device is configured to verify whether or not the decentralized identifier matches the use purpose using the verifiable credentials received from the terminal.
6. A control method of a decentralized identifier (DID) system including a server and a terminal, comprising:
issuing, by the server, verifiable credentials for a decentralized identifier (DID); and
receiving, by the terminal, the verifiable credentials from the server, and transmitting, by the terminal, the verifiable credentials to a verification device that requests verification for the decentralized identifier,
wherein the receiving, by the terminal, the verifiable credentials comprises
storing, by the terminal, the verifiable credentials issued by the server in a local storage of a browser installed in the terminal,
executing, by the terminal, the browser in a case in which identity verification is requested by the verification device during a provision of a specific service,
performing, by the terminal, browser PIN authentication to access the verifiable credentials stored in the local storage of the executed browser,
wherein the transmitting, by the terminal, the verifiable credentials comprises
transmitting, by the terminal, the verifiable credentials to the verification device in a case in which the browser PIN authentication is successful,
receiving, by the terminal, purpose information requested by the verification device,
requesting, by the terminal, issuance of a credential corresponding to the purpose information to the server,
receiving, by the terminal, the credential corresponding to the purpose information from the server to include the decentralized identifier of the terminal,
transmitting, by the terminal, the credential corresponding to the verification device to the verification device to perform verification of the identity and the purpose information of the terminal,
registering, by the terminal, the decentralized identifier in a blockchain-based storage established in advance, and
deleting, by the terminal, the verifiable credentials stored in the local storage of the browser in response to a request for deletion of the verifiable credentials, and
wherein the control method further comprises
extracting, by the server, the decentralized identifier registered in the blockchain-based storage in response to the request for identity verification from the verification device.
7. The control method according to claim 6 , wherein the executed browser is a browser storing the verifiable credentials in the local storage or a browser storing the credential corresponding to the purpose information requested by the verification device.
8. The control method according to claim 6 , wherein the issuing, by the server, the verifiable credentials comprises
generating, by the server, the verifiable credentials including a decentralized identifier in a case in which the verifiable credentials for the decentralized identifier registered in the blockchain-based storage are requested by the terminal, and
wherein the verifiable credentials including the decentralized identifier are transmitted to the terminal.
9. The control method according to claim 6 , wherein the receiving, by the terminal, the verifiable credentials further comprises
encrypting, by the terminal, the verifiable credentials received from the server, and storing, by the terminal, the encrypted verifiable credentials in the local storage of the browser.
10. The control method according to claim 6 , wherein the issuing, by the server, the verifiable credentials comprises:
issuing, by the server, the verifiable credentials to reflect a use purpose of the decentralized identifier, and transmitting, by the server, the issued verifiable credentials to the terminal, and
wherein the control method further comprises
verifying, by the verification device, whether or not the decentralized identifier matches the use purpose using the verifiable credentials received from the terminal.