KR101078703B1 - Security services, systems using the encryption key and encryption key renewal letters to - Google Patents

Abstract

The present invention provides a character security service system using an encryption key, the character security service system of a communication terminal that provides payment information according to the sale of goods or services, the payment means and payment history information of the user according to the sale of goods or services Convert payment information based on the payment approval to the encrypted payment information message, generate and periodically update the encryption key generated based on the user's personal information and communication terminal information and transmit it to the user's communication terminal through the communication network. A service provider agency server; And a character security service execution program module for managing an encrypted payment information message and an encryption key transmitted to the communication terminal by executing a character security service on the user's communication terminal. To provide.

In addition, the present invention provides a method for updating an encryption key of a character security service system of a communication terminal that provides payment information according to a sale of goods or services, wherein a character security service system activated on a user's communication terminal is periodically transmitted to a service providing institution server. Requesting an encryption key change; Generating, by the service provider institution server, a new encryption key; The service providing authority server transmits the new encryption key and the information message about the new encryption key to the user's communication terminal; And a user confirming reception of an information message for the new encryption key transmitted to the communication terminal.

Character security, encryption key, communication terminal, encryption, decryption

Description

Security services, systems using the encryption key and encryption key renewal letters to}

The present invention relates to a character security service system using an encryption key and a method for updating the encryption key, wherein the service provider periodically updates an encryption key for decrypting an encrypted payment information message for payment information based on payment approval. The present invention relates to a character security service system and an encryption key updating method using an encryption key transmitted to a communication terminal.

Recently, with the rapid development of electronic engineering and communication engineering, mobile communication terminals have various functions, that is, with the rapid development of wireless communication and data processing technology, people use mobile communication terminals to connect not only voice calls but also Internet access, You can use functions such as video communication and video message transmission. In addition, due to the rapid dissemination of mobile communication terminals, mobile communication terminals have become an essential means of communication in modern life, such as a considerable amount of communication occurring in human relationships through mobile communication terminals. Mobile communication companies, financial institution servers, portal sites, etc. in the mobile communication network is applying a variety of authentication technologies for identity authentication.

First, mobile carriers are introducing various identity authentication technologies to maintain the security of user information. Mobile carriers are using self-identification technologies for online cell phone purchases, adult verification, and micro payments. In the case of online mobile phone purchase, mobile carriers have recently introduced various self-authentication methods such as public certificate authentication, credit card authentication, and mobile phone authentication to solve these problems due to the increase in cases of identity theft due to the increase in online mobile phone sales. At this time, the mobile phone authentication is a method of authenticating by transmitting an authentication number (OTP) through SMS if the resident registration number or driver's license number matches the applicant's number after entering the date of issuance or driver's license online. However, it is possible to be authenticated by a third party, such as identity card leak copy mobile phone, there is a problem that can be exploited in the copy phone or mobile phone loan.

In the case of adult authentication, in order to use adult content, authentication is performed by inputting a social security number which confirms the user's identity, and in this process, a numeric password is set only for adult authentication. However, this uses a fixed password, there is a problem such as indiscriminate use of adult content by the password leakage.

In addition, in the case of a small payment for a mobile phone, the mobile carrier selects the subscriber's social security number and the carrier of the mobile phone to be charged and inputs the mobile phone number to request the approval. If there exists a one-time authentication number and transmits it by SMS, it is composed of billing the carrier's fee if the authentication number matches. However, since the SMS authentication method is used, a long authentication waiting time exists. In addition, the SMS authentication number has a problem that can be leaked through a duplicate phone or a messenger.

Next, the financial institution server is investing a lot in security because the real money is distributed. The financial institution server utilizes its own authentication technology by SMS, keyboard security, and public certificate. Transaction history notification SMS method is to inform the details of the transaction to the number of the mobile phone authenticated by the subscriber at the time the transaction is made. However, because this method is to guide after the transaction occurs, there is a problem that it is impossible to prevent hacking or problems in advance.

The keyboard security method intercepts the data of the keyboard input by the user in the middle, stores it in a temporary buffer, and then the interrupt handler filters and passes the data to the OS. However, this method does not prevent physical keyboard hacking, and there is a problem that an input value may be leaked by decryption of a password.

In addition, the public certificate method is a method of authenticating through an authentication password to decrypt the password using a public key. However, this method has a problem in that it can intercept files on the network and leak authentication passwords using keyboard hacking tools.

Next, the portal site is trying to strengthen security by leaking member information. The portal site uses identity authentication technology with I-PIN authentication and OTP authentication. The I-PIN authentication method is a method of receiving the member information provided by the certification authority server when authentication is required by calling the authentication page of the authorized certification authority server when authentication is required. However, this method requires a separate sign-up procedure when the I-PIN certification authority server is different for each web site and the user is not signed up. If there is no credit history of the user, membership is restricted.

In addition, the OTP authentication method stores the login information of the existing ID Password method, and when login is required, generates SMS OTP information and substitutes the login with OTP. However, this method has a problem that it is impossible to log in from a PC without the OTP toolbar installed.

Accordingly, the present invention is to solve the problems raised in the prior art, the service provider periodically updates the encryption key for decrypting the encrypted payment information message payment information based on the payment authorization to the user's communication terminal By transmitting, the user of the communication terminal uses a high-security text security service, and provides a text security service system and an encryption key updating method using an encryption key that can secure security and reliability from message leakage and theft of the communication terminal. Its purpose is to.

The present invention for achieving the above object in the character security service system of a communication terminal providing payment information according to the sale of goods or services, payment approval of the user's payment means and payment history information according to the sale of goods or services A service provider that converts payment-based payment information into an encrypted payment information message, generates and periodically updates an encryption key generated based on user's personal information and communication terminal information and transmits it to a user's communication terminal through a communication network. server; And a character security service execution program module for managing an encrypted payment information message and an encryption key transmitted to the communication terminal by executing a character security service on the user's communication terminal. The purpose is to provide.

The encryption key may be information for decrypting the encrypted payment information message.

The service provider server may be one of a company, a public institution, a financial institution, or a server of a plurality of institutions.

In addition, the service providing agency server may be provided with an encryption module for encrypting payment information using a block encryption algorithm, and an encryption key management unit for generating and periodically updating an encryption key.

In addition, the encryption module of the service provider server may be applied in a plug-in manner.

The encryption key manager may include: a searcher for searching for a communication terminal on which a character security service executor module for periodically updating the encryption key is executed; And a generation unit for generating a new encryption key to be transmitted to the retrieved communication terminal.

The text security service execution program module may include an integrated management unit that manages an encrypted payment information message and an encryption key transmitted from a service provider server.

In order to achieve the above object, the present invention provides a method of updating an encryption key of a character security service system of a communication terminal that provides payment information according to a sale of goods or services, wherein the service provider server server periodically updates the encryption key. Searching for a communication terminal in which the service executor module is activated; The service provider institution server generates a new encryption key to be transmitted to the retrieved communication terminal; The service provider institution server transmits the new encryption key and the information message about the new encryption key to the user's communication terminal; And a user confirming reception of an information message for a new encryption key transmitted to a communication terminal. The object of the present invention is to provide a method for updating an encryption key of a character security service system using an encryption key.

In addition, before the service providing institution server searches for the communication terminal in which the character security service execution program module for periodically updating the encryption key is activated, the character security service subscription of the communication terminal may be included.

The service provider server transmits the new encryption key and the information message about the new encryption key to the user's communication terminal, and the character security service execution program module activated in the user's communication terminal receives the new encryption key. The encryption key of can be updated.

After the user confirms receipt of the information message for the new encryption key transmitted to the communication terminal, the user newly converts the payment information message according to the sale of the encrypted goods or services transmitted from the service provider server after the financial settlement. You can verify the content of the message by decrypting it using.

As described above, the character security service system using the encryption key and the encryption key updating method according to the present invention periodically the encryption key for the service provider to decrypt the payment information message encrypted payment information based on the payment authorization By updating the data transmission to the user's communication terminal, the user of the communication terminal can use a high-security text security service to secure security and reliability from message leakage and communication terminal theft.

Matters concerning the operational effects including the technical configuration of the encryption key updating method of the character security service system using the encryption key according to the present invention will be clearly described by the following detailed description with reference to the drawings showing preferred embodiments of the present invention. Will be understood.

A character security service system using an encryption key and an encryption key updating method thereof according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 2.

Character Security Service System Using Encryption Key

1 is a block diagram of a character security service system using an encryption key according to an embodiment of the present invention.

Referring to Figure 1, the character security service system 100 using an encryption key according to an embodiment of the present invention converts the user's financial terminal 110, financial payment information of the user into an encrypted payment information message and encryption key It includes a service provider service server 120 for generating and updating the service provider server 130 for transmitting to the user's communication terminal 110 and the character security service to the user's communication terminal 110 to execute a text security service. Can be.

In this case, the character security service system 100 using the encryption key transmits the encrypted payment information message from the service provider server 130 to the communication terminal 110 of the user subscribed to the character security service after the user's financial settlement. Refers to a service that can verify the content of the encrypted payment information message using an encryption key to secure the reliability and security of the message. In addition, the financial settlement can be made by one of the payment method of card payment, cash payment, mobile micropayment, payment information refers to information necessary for payment. For example, a card payment includes a card number, an expiration date, and a payment amount, and may also include a card password, a three-digit CVC number on the back of the card, and an installment or the like. In the case of cash payment, in particular, in the case of a transfer payment, the transfer system number, bank account password, and transfer amount of the user to be transferred may be included, and the counterpart bank account number and descriptions to be transferred may be included. In the case of a mobile micropayment, a mobile number, a mobile carrier belonging to a mobile terminal, and a micropayment amount may be included, and further include a social security number and a password. And here, the service provider may be any one of a company, a public institution, a financial institution or a plurality of institutions.

The communication terminal 110 is subscribed to the character security service using the encryption key described above. This can be subscribed by the user of the communication terminal by visiting the service provider directly and requesting to subscribe to the text security service.

When the character security service subscription is completed, the communication terminal 110 receives an information message about the character security service execution program module 120, an encryption key, and an encryption key provided from the service provider server 130 through the communication network. In this case, the communication network may be configured as a wireless mobile communication network for performing data communication between the communication terminal 110 and the service provider server 130. In addition, the encryption key is information for decrypting the encrypted payment information message, that is, the communication terminal 110 decrypts the payment information message encrypted by using the encryption key provided from the service provider server 130. can confirm.

The text security service execution program module 120 is a program for executing a text security service on the user's communication terminal 110. The text security service execution program module 120 may include an integrated management unit 121. The integrated management unit 121 is responsible for managing the encrypted payment information message transmitted from the service provider server 130 to the communication terminal 110. For example, it is possible to manage the database management of the encrypted payment information message transmitted to the communication terminal 110 for each service provider institution 130 and the result of the user's message reception and read confirmation. In addition, it is responsible for the management of the encryption key transmitted from the service provider server 130 to the communication terminal 110. For example, an encryption key transmitted for each service provider server 130 may be separately managed.

The service provider server 130 receives the subscription of the character security service of the user of the communication terminal 110. The service provider server 130 proceeds to join the service after facing the identity of the user who requested the character security service subscription, and generates and periodically renews an encryption key based on the personal information and the terminal information of the user who requested the service subscription. Send to the user's communication terminal 110. In addition, the service provider server 130 generates other payment information in the sale of goods or services of the user of the communication terminal subscribed to the character security service, and provides the payment information based on payment approval for the user's payment method and payment history information. After converting the encrypted payment information message and transmits to the user's communication terminal (110). In addition, the service providing agency server 130 includes an encryption module 131 and an encryption key management unit 132 separately for each server 130 of each service providing authority. The encryption module 131 is a module that encrypts payment information as a payment information message using a block encryption algorithm. Each service provider server 130 uses an encryption module to be applied to each service provider server 130 through an interface. The plug-in method can be used. At this time, the block encryption algorithm is also referred to as SEED, SEED 128 is a 128-bit block, SEED 256 is a block encryption algorithm to process the decryption of the input message having an arbitrary length in units of 128 bits using a 256-bit encryption key to be. Therefore, SEED generates 128-bit ciphertext by encrypting the plaintext message having an arbitrary length by dividing the 128-bit plaintext message into block units. To actually use the block cipher SEED, consider the endianness used in the implementation environment and the data format in which the encrypted data is stored. In addition, the operation mode that applies the input block to the block cipher and the padding to adjust the size of the last block must be implemented together.

Endian refers to the arrangement of bytes of computer memory. Endianness is usually classified into big endian preceded by large units, little endian preceded by small units, and middle endian that do not belong in both cases or support both. Currently, big endian and little endian are used a lot, but since x86 architecture uses little endian, most desktops using x86 architecture use little endian, and SEED source code also uses little endian by default. Endianness is an important issue to consider when implementing cryptographic algorithms. Since most cryptographic algorithms handle bitwise operations, if the byte arrays do not match, you can generate different ciphertexts even if you encrypt the same message with the same algorithm. The currently distributed C source code is designed to automatically determine the endian used by the system. However, if it does not suit your environment, manually set and use the correct endian. The Java virtual machine uses big endian by default, so the big endian is set as the default endian in Java source code. However, depending on the situation, the user must manually select the endian.

In general, the data format is a cryptographic algorithm performs a variety of operations, including bitwise operations to convert the plain text message to a non-significant bit string ciphertext. At this time, since the ciphertext bit string is composed of random bits, problems may occur when storing or processing the ciphertext bit string in the form of a string. For example, in the following C source code, the value stored in ch array is 0x41, 0x42, 0x00, 0x44, 0x45, but if it is outputted as a string, ch [3] = 0x00 = NULL, 0x41, Only "AB" corresponding to 0x42 will be printed, so encrypted messages should always be processed in binary form, not as a string.

In addition, the operation mode is a definition of a method of encrypting and decoding by applying a plurality of input blocks to the block cipher. This mode of operation is defined independently of the block cipher. The most widely used block cipher operation modes include an ECB mode, Cipher Block Chaining (CBC) mode, Ciphertext FeedBack (CFB) mode, Output FeedBack (OFB) mode, and CounTeR (CTR) mode.

On the other hand, when dividing a message into several 128-bit blocks for input into SEED, it will not be easy for the last block to exactly fit. For example, if a 300-bit message is divided into 128-bit blocks, 300 = 128 + 128 + 44 is divided into three blocks, where the last block does not satisfy 128 bits with 44 bits. In this case, you need to fill the remaining 84 bits to use as input value of SEED. Filling this gap is called padding.

The encryption key manager 132 may include a searcher 133 and a generator 134. The retrieval unit 133 retrieves the communication terminal 110 in which the character security service execution program module 120 to periodically update the encryption key is executed and calls for encryption update. The generation unit 134 generates a new encryption key and an information message about the new encryption key to be transmitted to the character security service execution program module 120 of the searched communication terminal 110.

Encryption key generation method of character security service system using encryption key

2 is a flowchart illustrating a method for generating an encryption key of a character security service system using an encryption key according to an embodiment of the present invention.

Referring to Figure 2, the encryption key generation method of the character security service system using an encryption key according to an embodiment of the present invention is a character security service system 100 using an encryption key having the configuration as shown in FIG. The duplicate description will be omitted below as a method of generating an encryption key using the above method.

First, the character security service subscription of the user communication terminal 110 is performed. (S100) In more detail, in the character security service subscription, the user of the communication terminal 110 visits the service provider 130 and applies for the character security service. Proceed by. That is, the service provider 130 checks the identity of the service subscription user and proceeds with the subscription application. At this time, the service provider receives the text security service subscription based on the personal information and the terminal information of the user requesting the server 130 to join the text security service. The service provider server 130 then generates an encryption key and transmits the encryption key and the character security service executor module 120 to the communication terminal 110. In this case, the communication terminal 110 may verify the contents of the message by decrypting the encrypted payment information message transmitted from the service provider server 130 using the encryption key after the financial settlement.

to the next. The service provider authority server 130 searches for the communication terminal 110 in which the character security service execution program module 120 is periodically updated to update the encryption key. (S110) That is, the service provider authority server updates the encryption key. When the period is reached, the encryption key replacement is called to the character security service execution program module 120 to search for a communication terminal to which the new encryption key is to be transmitted.

Next, the service providing institution server 120 generates a new encryption key to be transmitted to the searched communication terminal 110 and transmits the new encryption key to the user's communication terminal 110 along with an information message about the new encryption key (S120). The new encryption key is the same as the method of generating an existing encryption key, and the character security service execution program module 120 activated in the user's communication terminal 110 receives the new encryption key and automatically converts the existing encryption key. Can be updated.

to the next. The user confirms receipt of the information message for the new encryption key transmitted to the communication terminal 9110 (S130). Next, the user newly encrypts the encrypted payment information message transmitted from the service provider server 130 after the financial settlement. The contents of the message can be confirmed by decrypting the key.

As described above, the character security service system 100 and the encryption key updating method using the encryption key according to the present invention include an encryption key for the service provider 130 to decrypt the payment information message encrypted with the payment information based on the payment approval. By periodically updating and transmitting to the user's communication terminal 110, the user of the communication terminal 110 can use a high-security text security service to ensure security and reliability from message leakage and theft of the communication terminal. .

Although the preferred embodiments of the present invention described above have been described in detail, those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom.

Accordingly, the scope of the present invention should not be limited to the disclosed embodiments but should be regarded as belonging to various forms of update and improvement by those skilled in the art using the basic concept of the present invention as defined in the following claims or the scope of the present invention.

1 is a block diagram of a character security service system using an encryption key according to an embodiment of the present invention.

2 is a flowchart illustrating a method for generating an encryption key of a character security service system using an encryption key according to an embodiment of the present invention.

<Explanation of Signs of Major Parts of Drawings>

100: character security service system using encryption key

110: communication terminal 120: character security service execution program module

130: service period server

Claims (11)

In the character security service system of a communication terminal providing payment information according to the sale of goods or services, Converts payment information based on payment approval of the user's payment method and payment history information according to the sale of goods or services into an encrypted payment information message, generates an encryption key and periodically updates the user's communication terminal through a communication network. A service provider agency server for transmitting to; And a character security service execution program module for managing an encrypted payment information message and an encryption key transmitted to the communication terminal by executing a character security service on the user's communication terminal. The service provider institution server, An encryption module for encrypting the payment information using a block encryption algorithm and applying a plug-in method; An encryption key management unit including a search unit for searching for a communication terminal on which a character security service execution program module to periodically update an encryption key and a generation unit for generating a new encryption key to be transmitted to the searched communication terminal through the search unit; Character security service system using an encryption key comprising a. The method of claim 1, Encryption key is a character security service system using an encryption key, characterized in that the information for decrypting the encrypted payment information message. The method of claim 1, Service provider institution server is a character security service system using an encryption key, characterized in that any one of a company, a public institution, a financial institution or a server of a plurality of institutions. delete delete delete The method of claim 1, The character security service executor module, Integrated management unit for managing the encrypted payment information message and the encryption key transmitted from the service provider server; Character security service system using an encryption key comprising a. Claims [1] A method of updating an encryption key of a character security service system of a communication terminal providing payment information according to sale of goods or services. Searching, by the service providing institution server, a communication terminal on which a character security service executor module, for periodically updating an encryption key, is activated; Generating, by the service providing authority server, a new encryption key to be transmitted to the retrieved communication terminal; The service provider server transmits the new encryption key and the information message about the new encryption key to the user's communication terminal, and the character security service executor module activated in the user's communication terminal receives the new encryption key and receives the existing encryption key. Updating; And A user confirming receipt of an information message for a new encryption key transmitted to the communication terminal; Encryption key updating method of a character security service system using an encryption key comprising a. The method of claim 8, Before the service provider server searches for the communication terminal in which the character security service executor module is activated to periodically update the encryption key, A method of updating an encryption key of a character security service system using an encryption key comprising the step of subscribing to a character security service of a communication terminal. delete The method of claim 8, After the user confirms receipt of the information message for the new encryption key transmitted to the communication terminal, After the financial settlement, the user decrypts the encrypted information transmitted from the service provider server or the payment information message according to the service sale by using a new encryption key to check the contents of the message security service system using the encryption key. How to renew encryption key.

Images