KR101517911B1 - ECC based method for medical data - Google Patents

Abstract

The present invention relates to a security system for encryption algorithm-based medical data. According to an embodiment of the present invention, the security system consists of: a medical data server that contains medical data; a transmission unit that receives a large amount of medical data from the medical data server and transmits split encrypted data based on encryption algorithms; and a reception unit that receives the encrypted data and secures the large amount of medical data by decoding the data based on encryption algorithm.

Description

[0001] The present invention relates to an ECC-based medical data security method,

The present invention relates to a security system and method for ECC-based medical data. More particularly, the present invention relates to an enhanced ECC-based security system and method for transmitting and receiving large amounts of medical data.

Elliptic curve cryptography (Elliptic curve cryptography) is a public key cryptosystem based on elliptic curve theory. It is abbreviated as ECC. Cryptography using elliptic curves was proposed independently by Neil Koblitz and Victor Miller in 1985.

The most prominent advantage of elliptic curve cryptography over conventional public key cryptography, such as RSA or ElGamal, is that it provides a similar level of security while using shorter keys. It is generally accepted that researches have been carried out in academia because of these advantages, and it is suitable for environments with relatively low transmission and computation volume, such as wireless environment.

In this regard, Ubiquitous Healthcare service, which means real-time healthcare service using information and communication devices, also needs a technology to preserve and authenticate medical information. In the case of medical information, there is a lot of information related to the privacy of an individual, and security of information is particularly important. In addition, since medical information is often a large amount of video, it is becoming important to reduce the amount of computation by encrypting the information.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a system for transmitting and receiving medical information using an ECC-based encryption scheme in which the amount of computation is drastically reduced.

SUMMARY OF THE INVENTION The present invention provides a method of transmitting and receiving medical information using an ECC-based encryption scheme in which the amount of computation is drastically reduced.

More specifically, the technical problem to be solved by the present invention is to provide an ECC-based medical data security system and method that provides an integrity verification function for mass data decryption to ensure authentication and confidentiality.

The technical problems of the present invention are not limited to the above-mentioned technical problems, and other technical problems which are not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided an ECC-based medical data security system comprising: a medical information server that stores medical information; a large-capacity medical information transmitting / receiving unit that receives large- algorithm, and a receiver for receiving the ciphertext and decrypting the ciphertext based on the ECC algorithm to acquire the large-capacity medical information.

And an ECC module for generating a curve, a generator, and a first public key based on the ECC algorithm, a random number selection unit for selecting a random number in a range specified by the constructor, An encryption unit operable to generate a second public key by performing an ECC-based multiplication operation using the random number, the curve, and the generator; and an encryption unit operable to generate a cipher text using the first public key and the second public key, Section.

The dividing unit may divide the large capacity medical information into a size smaller than the size of the field in which the creator is defined.

A cipher key generation unit for receiving the random number and the divided medical information and encrypting the cipher key with a divided cipher text; a verification key generation unit for receiving the divided medical information, the random number, and the first public key to generate a verification key; The cipher text including the verification key, the divided cipher text, and the second public key.

The divided cipher text generation unit may generate the divided cipher text using the first hash function.

The verification key generation unit may generate the verification key using a second hash function.

The receiving unit includes a private key generating unit for generating a private key based on the ECC algorithm, a decryption unit for decrypting the divided medical information using the private key and the cipher text, And an integrity verification unit for verifying the integrity of the large-capacity message.

According to another aspect of the present invention, there is provided an ECC-based medical data security method comprising the steps of: (a) dividing large capacity medical information to generate divided medical information; (C) encrypting the decrypted information to transmit a ciphertext, (c) transmitting and decrypting the ciphertext, and (d) verifying the integrity of the decrypted information.

The step (b) includes the steps of generating a first public key and a random number based on an ECC algorithm, generating a second public key by performing an ECC multiplication operation using the random number, And generating a cipher text using the first public key.

The cipher text includes a divided cipher text by the divided medical information, the second public key, and a verification key, wherein the verification key can be generated using the large-capacity medical information, the random number, and the first public key.

The present invention is based on a one-way property of an elliptic curve discrete logarithm problem (ECDLP) based on an elliptic curve cryptosystem and a one-way property of a hash function, so that it can be safe for a spoof attack, a retransmission attack, a DoS attack by an attacker.

Also, the present invention can have superior performance over existing cryptosystem in terms of computational efficiency.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned can be clearly understood to those of ordinary skill in the art from the following description.

1 is a block diagram illustrating a structure of an ECC-based medical data security system according to an embodiment of the present invention.
2 is a block diagram for explaining the transmission unit of FIG. 1 in detail.
3 is a block diagram for explaining the encryption unit of FIG. 2 in detail.
4 is a block diagram for explaining the receiving unit of FIG. 1 in detail.
FIG. 5 is a flowchart illustrating a security method of ECC-based medical data according to an embodiment of the present invention.
FIG. 6 is a flowchart for explaining the encryption step of FIG. 5 in detail.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

Although the first, second, etc. are used to describe various elements, components and / or sections, it is needless to say that these elements, components and / or sections are not limited by these terms. These terms are only used to distinguish one element, element or section from another element, element or section. Therefore, it goes without saying that the first element, the first element or the first section mentioned below may be the second element, the second element or the second section within the technical spirit of the present invention.

It is to be understood that when an element or layer is referred to as being "on" or " on "of another element or layer, All included. On the other hand, a device being referred to as "directly on" or "directly above " indicates that no other device or layer is interposed in between.

The terms spatially relative, "below", "beneath", "lower", "above", "upper" May be used to readily describe a device or a relationship of components to other devices or components. Spatially relative terms should be understood to include, in addition to the orientation shown in the drawings, terms that include different orientations of the device during use or operation. For example, when inverting an element shown in the figure, an element described as " below or beneath "of another element may be placed" above "another element. Thus, the exemplary term "below" can include both downward and upward directions. The elements can also be oriented in different directions, in which case spatially relative terms can be interpreted according to orientation.

The terminology used herein is for the purpose of illustrating embodiments and is not intended to be limiting of the present invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. It is noted that the terms "comprises" and / or "comprising" used in the specification are intended to be inclusive in a manner similar to the components, steps, operations, and / Or additions.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

Hereinafter, a security system for ECC-based medical data according to an embodiment of the present invention will be described with reference to FIG.

1 is a block diagram illustrating a structure of an ECC-based medical data security system according to an embodiment of the present invention.

Referring to FIG. 1, the ECC-based medical data security system includes a medical information server 100, a transmission unit 200, and a reception unit 300 according to an embodiment of the present invention.

The medical information server 100 may be a server for storing medical information. The medical information may be large-capacity information such as an image. The medical information server 100 can collect medical information in various ways. The transmitting unit 200 may be used to encrypt and transmit the medical information. The large-capacity medical information M may be transmitted to the transmission unit 200.

The transfer unit 200 can receive the large capacity medical information M from the medical information server 100. [ The large-capacity medical information M can be encrypted and transmitted in the transmitting unit 200. [ The large-capacity medical information M can be divided into appropriate sizes in the transfer unit 200. [ Accordingly, the transmission unit 200 can perform efficient cryptographic transmission with reduced computational cost. The transmitting unit 200 may transmit the cipher text D to the receiving unit 300. [ The ciphertext D may be encrypted based on an ECC (Elliptic Curve Cryptography) algorithm.

The receiving unit 300 can receive the cipher text D from the transmitting unit 200. The receiving unit 300 can receive the large capacity medical information M by receiving and decrypting the cipher text D. The receiving unit 300 can verify the integrity of the decoded result. Accordingly, once the integrity is verified, the large-capacity medical information M is legitimately received.

Hereinafter, the transmission unit will be described in detail with reference to FIG.

2 is a block diagram for explaining the transmission unit of FIG. 1 in detail.

2, the transmission unit 200 includes a division unit 210, an ECC module 220, a random number selection unit 230, an operation unit 240, and an encryption unit 250.

The partitioning unit 210 can receive large-capacity medical information M. The partitioning unit 210 may divide the large capacity medical information M to generate the divided medical information Mi, ..., Mt. The sizes of the divided medical information Mi, ..., Mt may be specified in advance. Specifically, the size of the divided medical information Mi, ..., Mt must be a size that can be encrypted. Therefore, it can be determined according to the size of the field of the curve Eq of the ECC module 220.

The ECC module 220 may generate a curve Eq, a generator P and a first public key Y based on the ECC algorithm. The curve Eq may be formed on field Fq with a very large odd prime q of k bits. The q is assumed to be an exponential power of a prime number with m power of 2. The curve Eq may be an elliptic curve according to the ECC algorithm and the constructor P may be a point on the curve Eq. According to the ECC algorithm, the curve Eq, the constructor P and the first public key Y are disclosed and the private key x is not disclosed. The first public key Y is the value of the ECC multiply operation of the private key x and the constructor P. [ (I.e., Y = x * P, where "*" is an ECC multiply operation)

The random number selector 230 can designate the random number r in the specified range. The random number selection unit 230 may receive the constructor P from the ECC module 220. The specified range can be determined by the constructor (P). That is, it can be specified from 1 to a value obtained by subtracting 2 from the generator (P). This is to perform an ECC multiplication operation on the curve Eq.

The operation unit 240 can perform an ECC multiply operation with the random number r and the generator P. The operation unit 240 can receive the constructor P from the ECC module 220. The operation unit 240 may receive the random number r from the random number selection unit 230. [ The ECC multiplication operation is a scalar operation, which means that the generator P is added a random number (r) times from the curve Eq. The operation unit 240 may generate the second public key G through the ECC multiplication operation. The second public key G is a value of the ECC multiplication operation of the random number r and the generator P. [ (I.e., G = r * P, where "*" is an ECC multiply operation)

The encrypting unit 250 may receive the divided medical information Mi, ..., Mt from the dividing unit 210. [ The encryption unit 250 may receive the first public key Y from the ECC module 220. [ The encryption unit 250 may receive the second public key G from the operation unit 240. [ The encryption unit 250 may receive the random number r from the random number selection unit 230. The encryption unit 250 may generate the cipher text D using the information.

Hereinafter, the encryption unit will be described in detail with reference to FIG.

3 is a block diagram for explaining the encryption unit of FIG. 2 in detail.

3, the encryption unit 250 includes a divided cipher text generation unit 251, a verification key generation unit 253, and a cipher text transmission unit 200. [

The divided cipher text generation unit 251 can receive the divided medical information Mi, ..., Mt from the division unit 210. [ The divided cipher text generation unit 251 may receive the random number r from the random number selection unit 230. [ The divided cipher text generation unit 251 can generate the divided cipher text (D) using the information.

[Equation 1]

Equation (1) is a formula for generating a divided cipher text (D). In Equation (1), H1 () is a first hash function which is cryptographically one direction. The divided cipher text generation unit 251 can encrypt each piece of divided medical information Mi, ..., Mt with each divided cipher text D.

The verification key generation unit 253 can generate the verification key H2 (M, rY). The verification key generation unit 253 can receive the divided medical information Mi, ..., Mt from the division unit 210. [ The verification key generation unit 253 may receive the random number r from the random number selection unit 230. [ The verification key generation unit 253 may receive the first public key Y from the ECC module 220. [ The verification key generation unit 253 can convert the information into a verification key H2 (M, rY) using the second hash function.

The ciphertext transfer unit 200 can receive the divided ciphertext D from the divided ciphertext generation unit 251. [ The cipher text transmission unit 200 can receive the verification key H2 (M, rY) from the verification key generation unit 253. [ The cipher text transmission unit 200 can receive the second public key G from the operation unit 240. [ The ciphertext transmission unit 200 may generate and transmit the ciphertext D including the second public key G, the divided ciphertext D and the verification key H2 (M, rY) to the receiving unit 300. [

Hereinafter, the receiving unit 300 will be described in detail with reference to FIG.

4 is a block diagram for explaining the receiving unit of FIG. 1 in detail.

Referring to FIG. 4, the receiver 300 includes a decryption unit 310, an integrity verification unit 320, and a private key generation unit 330.

The decryption unit 310 can receive the divided cipher text (D) of the cipher text (D). The decryption unit 310 may receive the private key x from the private key generation unit 330. The decoding unit 310 may decode the divided medical information Mi, ..., Mt using the information.

&Quot; (2) "

Equation (2) is a formula used in the decoding process. That is, the divided medical information Mi, ..., Mt can be decrypted by dividing the divided ciphertext D by the function value of the first hash function by the private key x and the second public key G have.

The integrity verification unit 320 can receive the verification key H2 (M, rY) among the ciphertext D. [ The integrity verification unit 320 may receive the private key x from the private key generation unit 330. [ The integrity verification unit 320 may receive the divided medical information (Mi, ..., Mt) decoded from the decoding unit 310. The integrity verification unit 320 may perform integrity verification using the information.

&Quot; (3) "

Equation (3) is a mathematical expression used for the integrity verification. In Equation (3), "||" denotes a concatenation operation. The integrity verification unit 320 can authenticate the large capacity message M when the integrity is confirmed by Equation (3).

The ECC-based medical data security system of the present embodiment is based on the one-way property of the hash function and the elliptic curve discrete logarithm problem (ECDLP) based on the elliptic curve cryptosystem, Safe on the back

Encryption algorithm Decryption algorithm HCH cipher system 4 Exp + t Mul +
t Xor + 2 Ran 2 Exp + t Div +
t Xor Zhong cipher system 2 Exp + t Mul + t Add +
t Hash + 1 Ran 1 Exp + t Div +
t Add + t Hash The proposed cryptosystem 2 ECC + t Mul + (t + 1) Hash + 1 Ran 1 ECC + t Div + (t + 1) Hash ECC: ECC multiply operation, Exp: modular exponent operation,
Mul: modular multiplication operation, Div: modular division operation,
Add: modular addition, operation, Hash: hash operation,
Ran: Random number generation, Xor: Bitwise XOR operation

[Table 1] shows that the proposed cryptosystem has better performance than the existing cryptosystem in terms of computational efficiency. That is, the proposed encryption algorithm requires two ECC multiplication operations, t multiplication operations, and t + 1 hash operations. Also, the proposed decoding algorithm requires 1 ECC multiplication operation, t division operation and t + 1 hash operation.

Hereinafter, a security method of ECC-based medical data according to an embodiment of the present invention will be described with reference to FIGs. 5 and 6. FIG. The description overlapping with the above-described ECC-based medical data security system is omitted or simplified

FIG. 5 is a flowchart illustrating a security method of ECC-based medical data according to an embodiment of the present invention. FIG. 6 is a flowchart for explaining the encryption step of FIG. 5 in detail.

Referring to FIG. 5, the large-capacity medical information is divided (S500).

The mass medical information M can be divided into divided medical information Mi, ..., Mt, which is an appropriate size according to the basis of the ECC algorithm. Encryption of large-capacity medical information (M) itself can reduce the computation cost by dividing the large amount of computation.

Subsequently, the divided medical information is encrypted (S510).

The split medical information (Mi, ..., Mt) can be encrypted based on the ECC algorithm. The divided medical information (Mi, ..., Mt) is encrypted by an ECC algorithm and can be transmitted.

Subsequently, the encrypted divided medical information is decrypted (S520).

The encrypted split medical information Mi, ..., Mt can be decrypted based on the ECC algorithm. The decoding process can be expressed by Equation (2).

Then, the integrity of the decrypted divided medical information and the mass medical information is verified (S530).

The integrity verification procedure may be expressed by Equation (3). When the integrity of the decrypted divided medical information Mi, ..., Mt and the large capacity medical information M is verified, the large capacity medical information M can be recognized.

Referring to FIG. 6, the encryption step (S510) will be described in detail.

First, the first public key and the random number are selected (S511).

The first public key Y and the random number r may be determined by an ECC algorithm. The ECC algorithm uses an elliptic curve multiplication operation to perform encryption and decryption. The first public key Y may be the recipient's private key x multiplied by the constructor P. The "product" is an ECC multiply operation, which performs an addition on an elliptic curve several times.

Then, an ECC multiplication operation is performed (S513).

An ECC multiply operation can be performed using a random number (r) and a generator (P). The second public key G may be generated using the ECC multiplication operation. The second public key G is disclosed, but the random number r may not be disclosed.

Then, the first encryption is performed (S515).

The first encryption may be a step of generating a divided cipher text (D) according to Equation (1). The divided medical information Mi, ..., Mt can be converted into the divided ciphertext D using the first hash function.

Subsequently, the second encryption is performed (S517).

The second encryption may be a step of generating the verification key H2 (M, rY). The verification key H2 (M, rY) may be used later in the integrity verification step S530. The verification key H2 (M, rY) may be generated using a second hash function.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, You will understand. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

100: medical information server 200:
300: Receiver

Claims (10)

A medical information server containing medical information;
A transmission unit for receiving large-capacity medical information from the medical information server, dividing the large-capacity medical information, and transmitting encrypted ciphertext based on an encryption algorithm (ECC);
And a receiver for receiving the ciphertext and decrypting the ciphertext based on an ECC algorithm to obtain the large capacity medical information,
Wherein the transmission unit comprises: a division unit for dividing the large-capacity medical information into divided medical information;
An ECC module for generating a curve, a generator and a first public key based on the ECC algorithm;
A random number selector for selecting a random number in a specified range according to the generator,
An operation unit for generating a second public key by performing an ECC-based multiplication operation using the random number, the curve, and the creator;
And an encryption unit for generating a cipher text using the first public key and the second public key. delete The method according to claim 1,
Wherein the dividing unit divides the large capacity medical information into a size smaller than a size of a field in which the creator is defined. The method according to claim 1,
The cipher unit receives the random number and the divided medical information and encrypts the received cipher text with the divided cipher text,
A verification key generation unit receiving the divided medical information, the random number, and the first public key to generate a verification key,
And a ciphertext transmission unit for transmitting the ciphertext including the verification key, the divided ciphertext, and the second public key. 5. The method of claim 4,
Wherein the divided cipher text generation unit generates the divided cipher text using a first hash function. 5. The method of claim 4,
Wherein the verification key generation unit generates the verification key using a second hash function. The method according to claim 1,
The receiving unit includes a private key generating unit for generating a private key based on the ECC algorithm,
A decryption unit for decrypting the divided medical care information using the private key and the cipher text,
And an integrity verifying unit for verifying the integrity of the large capacity message using the divided medical information and the cipher text. (A) dividing large-capacity medical information to generate divided medical information;
(B) encrypting the divided medical information based on an ECC algorithm to transmit a ciphertext;
(C) transmitting and decrypting the cipher text; And
(D) verifying the integrity of the decrypted information,
The step (b) includes: generating a first public key and a random number based on an ECC algorithm;
Generating a second public key by performing an ECC multiplication operation using the random number;
And generating a cipher text using the second public key and the first public key. delete 9. The method of claim 8,
The cipher text includes a divided cipher text based on the divided medical information, the second public key, and a verification key,
Wherein the verification key is generated using the large volume medical information, the random number, and the first public key.

Images