KR102451130B1 - Distributed cluster decryption system and method - Google Patents

Abstract

Provided is a distributed cluster decryption system formed to decrypt a specific password by using a plurality of computers included in a distributed cluster. According to an embodiment of the present invention, the distributed cluster decryption system comprises: a passwords information patterning unit which collects dictionary passwords, analyzes patterns of the collected dictionary passwords to generate encoding password information, and filters out the encoding password information to obtain filtering password information; an encryption pattern expansion unit which calculates a detailed probability of the filtering password information by using the encoding password information and the filtering password information, and obtains extended password patterns by obtaining exclusive patterns for the filtering password information; and a decryption unit which decrypts a specific password by using the filtering password information or the extended password patterns and using the plurality of computers of the distributed cluster, and outputs decryption results. Therefore, the distributed cluster decryption system can perform, in a distributed cluster environment, establishment of a brute-force strategy for effective decryption (cracking) and scheduling of tasks for executing the brute-force strategy.

Description

Distributed cluster decryption system and method

The present invention relates to a distributed cluster decryption system and method, and more particularly, to a distributed cluster decryption system and method capable of inferring a probability-based encryption pattern for decrypting a weak password and scheduling it for a distributed cluster computing environment. .

Today's IT environment consists of various types of devices, from devices in the user area such as smartphones and Internet of Things devices to large-scale infrastructure such as cloud and blockchain networks. has increased to In addition, the risk and level of cyber attacks targeting the IT environment have also increased continuously. The majority of these cyber attacks use digital devices as a vehicle. Evidence data for malicious behavior remains in the form of artifacts on devices used or exploited for attacks, and these evidence data become valid evidence through digital forensic procedures and are used in the investigation process for cyberattacks. . Therefore, behavior-related data existing in the device, particularly user-related data, plays a very important role in the digital forensics process.

However, since most of the user's data is encrypted and stored, securing the user's password information in the process of collecting user data for a digital forensic procedure acts as a very realistic difficulty. In general, it is difficult to expect the cooperation of the suspect to be analyzed in the process of analyzing the confiscated and secured device for digital forensic analysis.

The decryption (cracking) technique is a technology that generates a character string that is presumed to be the user's password according to a specific principle and performs decryption using it, which is a basic technology that plays an important role in the digital forensic procedure. The conventional decryption (cracking) technology performs an attack entirely using a password dictionary. The password dictionary is a database that collects actual password data of users that have been leaked in the past. General users have a strong tendency to use the same password rather than a different password for each site or program.

Due to this tendency, a dictionary attack, which substitutes a password in the password dictionary, has a very high attack success rate and is an attack technique that also finds the actual password very fast. For this reason, most existing commercial cryptocurrency (cracking) products each build their own encryption dictionary and perform cracking using it.

As for the decryption (cracking) performance using this dictionary attack, the larger the size of the password dictionary, the higher the attack success rate. For this reason, commercial technologies or products use the database for decryption (cracking) of a vast amount of passwords collected from all over the world. However, many of the leaked passwords collected around the world are data from other linguistic cultures, such as English-speaking or Greater China.

Common users use a combination of some words in the process of creating passwords. Korean is a language with a special string composition of initial, middle, and final characters, and the pattern of passwords combined with Korean words is different from patterns used in other language and culture cultures. see the difference

Therefore, the decryption (cracking) technique using a general password dictionary is not suitable for decryption (cracking) targeting users of the Korean culture. There is a problem that the procedure is not suitable.

Korean Patent No. 10-1834345

In order to solve the problems of the prior art as described above, an embodiment of the present invention extracts the probability of a password pattern from a password dictionary and uses it to establish a brute-force strategy for effective decryption (cracking) and An object of the present invention is to provide a distributed cluster decryption system and method that can perform task scheduling for complete investigation in a distributed cluster environment.

According to one aspect of the present invention for solving the above problems, there is provided a distributed cluster decryption system formed to decrypt a specific password using a plurality of computers included in the distributed cluster. The distributed cluster decryption system performs collection of dictionary passwords, generates encoding encryption information by analyzing patterns for the collected dictionary passwords, and performs filtering on the encoding encryption information to obtain filtering encryption information. Encryption information pattern processing unit; an encryption pattern extension unit for calculating a detailed probability of the filtering encryption information by using the encoding encryption information and the filtering encryption information and obtaining an exclusive pattern for the filtering encryption information to obtain an extended encryption pattern; and a decryption performing unit that decrypts the specific encryption using the plurality of computers in the distributed cluster using the filtered encryption information or the extended encryption pattern and outputs a decryption result.

The password information patterning processing unit may include: a leaked password information storage module configured to define and collect leaked passwords among actual passwords used by a plurality of users as the dictionary password, and store the collected dictionary password as leaked password information; a leaked encryption information encoding module for generating encoded encryption information by encoding the leaked encryption information to perform pattern analysis on the leaked encryption information; and an encoding encryption information processing module that sorts the encoded encryption information using an appearance frequency and performs filtering of the encoded encryption information using a preset appearance probability value to obtain the filtering encryption information.

The encoding maps numbers, letters, and special characters to different symbols, groups consecutive symbols, and can be expressed by Equation 1 below.

Equation 1

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters)

The encoded encryption information processing module may filter the encoded encryption information in which the frequency of appearance is equal to or less than the preset appearance probability value through the filtering.

The encryption pattern extension unit may include: an encryption pattern detailed probability obtaining module for obtaining the filtering encryption information, calculating the detailed probability to obtain the encryption pattern detailed probability information; and an exclusive pattern extraction module for extracting an exclusive pattern that is a pattern not included in the filtering encryption information by using the encoding encryption information and the length of the specific encryption.

The encryption pattern detailed probability means a concatenation probability of two adjacent strings included in the character string of the password, and the concatenation probability is a starting pattern and the two adjacent strings when the two adjacent character strings are two character strings starting the encryption. It can be obtained by classifying the string into a continuous pattern that is not the two strings starting the encryption.

The connection probability may be calculated as a frequency of the first two character strings in the case of the start pattern, and may be calculated as a frequency between the remaining adjacent characters except for the first two character strings in the case of the continuous pattern.

The exclusive pattern extraction module obtains the generation condition of the specific encryption, and extracts the exclusive pattern by excluding the pattern included in the filtering encryption among reference patterns that are all patterns obtained based on the obtained generation condition. can

The decryption performing unit may include: a decryption pattern priority determining module for determining a priority for decryption of the encryption from the filtering encryption information and the extended encryption pattern; When the filtering encryption information is obtained, the obtained filtering encryption information is distributed to the plurality of computers in the distributed cluster to obtain primary decryption information, and when the extended encryption pattern is obtained, the obtained extended encryption pattern is a decryption information obtaining module for distributing to the plurality of computers in the distributed cluster to obtain secondary decryption information; and when it is obtained that the decryption of the encryption is successful from the first decryption information, generates and outputs a decryption process stop signal requesting not to acquire the exclusive pattern for the corresponding encryption, and outputs the decryption information from the first decryption information and a decryption result output module for generating a decryption process progress signal for requesting acquisition of the exclusive pattern for the corresponding encryption and outputting the decryption result as the decryption result when it is confirmed that the decryption of the password is not successful.

The decryption pattern priority determination module determines the priority by using the detailed probability of the filtering encryption information, obtains a probability product of adjacent strings constituting the pattern, and determines the priority based on the obtained probability product can be decided

The decryption result output module may output the successful decryption information to the user terminal when it is confirmed that the decryption of the encryption is successful by analyzing the first decryption information or the second decryption information.

According to one aspect of the present invention, there is provided a distributed cluster decryption method formed to decrypt a specific password using a plurality of computers included in the distributed cluster. The distributed cluster cipher decryption method performs collection of dictionary ciphers using a cipher information patterning processing unit, analyzes patterns for the collected dictionary ciphers to generate encoded cipher information, and performs filtering on the encoded cipher information. performing the steps to obtain filtering encryption information; obtaining an extended encryption pattern by calculating a detailed probability of the filtering encryption information by using the encoding encryption information and the filtering encryption information through an encryption pattern extension unit and obtaining an exclusive pattern for the filtering encryption information; and performing decryption of the specific encryption using the plurality of computers of the distributed cluster using the filtering encryption information or the extended encryption pattern through a decryption performing unit and outputting a decryption result.

The obtaining of the filtering password information may include: defining and collecting leaked passwords among actual passwords used by a plurality of users as the dictionary password, and storing the collected dictionary password as leaked password information; generating encoded encryption information by encoding the leaked encryption information to perform pattern analysis on the leaked encryption information; and arranging the encoded encryption information using an appearance frequency, and performing filtering of the encoded encryption information using a preset appearance probability value to obtain the filtering encryption information.

The encoding maps numbers, letters, and special characters to different symbols, groups consecutive symbols, and can be expressed by Equation 2 below.

Equation 2

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters)

The encoded encryption information processing module may filter the encoded encryption information in which the frequency of appearance is equal to or less than the preset appearance probability value through the filtering.

The step of obtaining the extended encryption pattern may include: obtaining the filtering encryption information, calculating the detailed probability to obtain detailed probability information of the encryption pattern; and extracting an exclusive pattern that is a pattern not included in the filtering encryption information by using the encoding encryption information and the length of the specific encryption.

The encryption pattern detailed probability means a concatenation probability of two adjacent strings included in the character string of the password, and the concatenation probability is a starting pattern and the two adjacent strings when the two adjacent character strings are two character strings starting the encryption. It can be obtained by classifying the string into a continuous pattern that is not the two strings starting the encryption.

The connection probability may be calculated as a frequency of the first two character strings in the case of the start pattern, and may be calculated as a frequency between the remaining adjacent characters except for the first two character strings in the case of the continuous pattern.

The step of extracting the exclusive pattern may include obtaining the generation condition of the specific encryption, and excluding the pattern included in the filtering encryption among reference patterns that are all patterns obtained based on the obtained generation condition. can be extracted.

The step of performing the decryption of the specific encryption and outputting the decryption result may include: determining a priority for decryption of the encryption from the filtering encryption information and the extended encryption pattern; When the filtering encryption information is obtained, the obtained filtering encryption information is distributed to the plurality of computers in the distributed cluster to obtain primary decryption information, and when the extended encryption pattern is obtained, the obtained extended encryption pattern is distributing to the plurality of computers in the distributed cluster to obtain secondary decryption information; and when it is obtained that the decryption of the encryption is successful from the first decryption information, generates and outputs a decryption process stop signal requesting not to acquire the exclusive pattern for the corresponding encryption, and outputs the decryption information from the first decryption information If it is confirmed that the decryption of the password is not successful, generating a decryption process progress signal for requesting the acquisition of the exclusive pattern for the corresponding encryption and outputting the decryption result as the decryption result.

In the step of determining the priority for decryption of the encryption, the priority is determined using the detailed probability of the filtering encryption information, the probability product of the adjacent strings constituting the pattern is obtained, and the obtained probability product is obtained. The priority may be determined based on the criteria.

In the outputting of the decryption result, if it is confirmed that the decryption of the encryption is successful by analyzing the first decryption information or the second decryption information, the successful decryption information may be output to the user terminal.

Distributed cluster decryption system and method according to an embodiment of the present invention, by extracting the probability of a password pattern from a password dictionary and using it, establishment of a brute-force strategy for effective decryption (cracking) and full investigation It has the effect of being able to perform task scheduling for execution in a distributed cluster environment.

1 is a diagram schematically illustrating a structure in which a distributed cluster decryption system according to an embodiment of the present invention operates.
FIG. 2 is a block diagram showing the encryption information patterning processing unit of FIG. 1 .
3 is a diagram illustrating an encryption pattern extension unit of FIG. 1 .
FIG. 4 is a diagram illustrating the decryption performing unit of FIG. 1 .
5 is a flowchart illustrating a distributed cluster decryption method according to an embodiment of the present invention.
6 is a flowchart illustrating step S11 of FIG. 5 .
7 is a flowchart illustrating step S13 of FIG. 5 .
8 is a flowchart illustrating step S15 of FIG. 5 .
9 is a diagram illustrating an embodiment of a code for generating a probability table for two character string patterns, a start pattern and a continuous pattern.
10 is a diagram illustrating an example of a code for obtaining an exclusive pattern.

Hereinafter, with reference to the accompanying drawings, embodiments of the present invention will be described in detail so that those of ordinary skill in the art to which the present invention pertains can easily implement them. The present invention may be embodied in many different forms and is not limited to the embodiments described herein. In order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and the same reference numerals are assigned to the same or similar components throughout the specification.

1 is a diagram briefly showing the structure of the operation of a distributed cluster encryption decryption system according to an embodiment of the present invention, FIG. 2 is a block diagram showing the encryption information patterning processing unit of FIG. 1, and FIG. 3 is the encryption of FIG. It is a diagram showing a pattern expansion unit, and FIG. 4 is a diagram showing the decryption performing unit of FIG. 1 . Hereinafter, a distributed cluster decryption system according to an embodiment of the present invention will be described in detail with reference to FIGS. 1 to 4 . Decryption referred to below generally refers to a forced intrusion technique called cracking.

The distributed cluster decryption system 1 according to an embodiment of the present invention is connected to the distributed cluster 2 and uses a plurality of computers included in the distributed cluster 2 to decrypt the decryption target encryption 3 is formed To this end, the distributed cluster decryption system 1 may obtain the leaked passwords 4 and transfer the processing results to a plurality of computers in the distributed cluster to perform decryption.

번의 암호 해독 시도를 필요로 하며 이는, 단일 단말기로는 수행하기 어려운 횟수이다. 따라서, 본 발명에서는 도 1에 도시된 바와 같이 분산 클러스터(2)를 이용하여 복수의 단말기를 설정하고, 설정한 복수의 단말기가 암호 해독 시도를 분배하여 수행하도록 함으로써 보다 빠른 암호 해독을 수행하도록 형성된다.In general, in the case of cryptocurrency, there are innumerable cases. For example, the number of all cases that the user can input as a password is 10 numbers, 52 types of uppercase and lowercase letters of the English alphabet, and 12 types of special characters that can be generally used, so that there are a total of 74 inputable characters. If so, to find a random n-digit user password through an exhaustive search, the average

It requires one decryption attempt, which is a number that is difficult to perform with a single terminal. Therefore, in the present invention, as shown in FIG. 1, a plurality of terminals are set using the distributed cluster 2, and the set plurality of terminals distribute and perform decryption attempts to perform faster decryption. do.

A distributed cluster decryption system 1 according to an embodiment of the present invention includes a cryptographic information patterning processing unit 11, a cryptographic pattern extension unit 13, and a decryption performing unit 15 as shown in FIG. formed to do

The encryption information patterning processing unit 11 collects dictionary passwords, analyzes patterns for the collected dictionary passwords to generate encoded encryption information, and performs filtering on the encoded encryption information to obtain filtering encryption information. do. The encryption information patterning processing unit 11 may collect the leaked passwords 4 of FIG. 1 as a dictionary password, and may obtain filtering encryption information by processing the collected dictionary passwords, for this purpose, FIG. As shown in , it may be formed to include a leaked cryptographic information storage module 111 , a leaked cryptographic information encoding module 113 , and an encoded cryptographic information processing module 115 .

The leaked password information storage module 111 is configured to perform and store the dictionary password collection. The leaked password information storage module 111 may define and collect the leaked passwords 4 among actual passwords used by a plurality of users as dictionary passwords, and store the collected dictionary passwords as leaked password information. The leaked password information storage module 111 may store, for example, a dictionary password as a data set in which leaked passwords expressed as a leaked password dictionary are collected. Here, various types of databases may be used for the dictionary according to the analysis target device, environment, and user characteristics. For example, an open-source encryption dictionary such as the RockYou data set also exists. In the present invention, in order to extract an encryption pattern from the leaked encryption dictionary, various types of encryption dictionaries such as text files or databases can be used.

The leaked cryptographic information encoding module 113 is configured to perform encoding on the leaked cryptographic information to perform pattern analysis on the leaked cryptographic information to generate encoded cryptographic information.

When raw passwords are used, numerous patterns can be derived, and since most of the derived patterns may not have a special meaning, the leaked encryption information encoding module 113 of the present invention provides a meaningful pattern from the leaked password information. In order to derive it, it is possible to perform a specific process, encoding. In general, as described above, passwords are formed with a length of n using at least one of numbers, letters, and special characters. Accordingly, in the present invention, an encoding method in which numbers are grouped by mapping numbers to numbers, letters to letters, and special characters to special characters can be performed as encoding.

Preferably, the leaked encryption information encoding module 113 may encode a number by changing it to D, a letter to L, and a special character to S. The leaked password information encoding module 113, for example, when acquiring the password "test1234!@#" and the password "12test!@34#" as the leaked password information, goes through the above-described encoding process, respectively, to "LLLLDDDDSSS" and "DDLLLLSSDDS". Thereafter, the leaked encryption information encoding module 113 may encode each password into “L ₄ D ₄ S ₃ ” and “D ₂ L ₄ S ₂ D ₂ S ₁ ” through mapping and grouping processes.

Summarizing the above-described example, the leaked encryption information encoding module 113 may encode an arbitrary password P consisting of an n-digit string through an encoding process using Equation 1 below.

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters)

The encoding encryption information processing module 115 is configured to sort the encoded encryption information using an appearance frequency, and perform filtering of the encoded encryption information using a preset appearance probability value to obtain filtering encryption information. Since the encoded encryption information is expressed using three codes differently from the existing encryption, each encoded encryption information may have a high frequency, unlike the initial encryption.

As an example, "test12" and "dogs68" are judged to be different cipher information based only on the initial state, and the frequency of each appears as 1, 1, but when the above-described encoding processing is performed on both ciphers, both ciphers are "L ₄ D ₂ " and the frequency may be represented by 2. The encoding encryption information processing module 115 may arrange the encoding encryption information as in the above-described example to obtain a frequency of occurrence for each encoding encryption information, and may sort the encoded encryption information using the frequency of occurrence. Here, the sorting may be, for example, descending sorting.

When the sorting of the encoded cryptographic information is finished, the encoded cryptographic information processing module 115 may perform filtering on the sorted encoded cryptographic information by using a preset appearance probability value.

In the case of a very long password or an extreme pattern of a sparse form, the frequency of appearance may be very low because it is a password that is not generally used by users. The very low frequency of appearance indicates that users rarely use that length or pattern.

For example, assuming that a password such as "xO75F2^jTK0432QBnt!^^%*&Spq@$vJG(Ez)w25$&" exists among the leaked passwords, the password has 51 strings, L ₁ D ₃ L ₁ It has encoding information of D ₁ S ₁ L ₃ D ₄ L ₃ S ₆ L ₃ S ₂ L ₃ S ₁ L ₂ S ₁ L ₁ D ₂ S ₂ . Even if the user is presented with the setting to enter a password of unlimited length, the user cannot enter a password longer than a certain length of unknown meaning like "xO75F2^jTK0432QBnt!^^%*&Spq@$vJG(Ez)w25$&" like the password above. The probability of setting is low. This is because users usually set up passwords of a pattern and length that are convenient to memorize and type.

Therefore, the frequency of encoded encryption information having the same length and pattern as the above-described encryption appears extremely low, which means that users generally do not use it as described above, so that the encoding encryption information processing module 115 is The shapes or patterns may be filtered using a preset appearance probability value.

The filtering encryption information generated by the encoding encryption information processing module 115 may select encoding encryption information having a predetermined appearance probability value or more mentioned above and store it as a data set expressed as an encoding encryption dictionary. In the dictionary, various types of databases may be used depending on the analysis target device, environment, and user characteristics. In the present invention, various types of encryption dictionaries such as text files or databases can be used.

Meanwhile, the encoding encryption processing module 115 may temporarily store encoded encryption information not selected as a result of filtering in a filtering result storage module (not shown). The temporary meaning referred to here means until the decryption procedure of the current password to be decrypted is finished. This is to use the corresponding encoding encryption information for decryption in the second decryption when decryption is not completed through the first decryption, which will be described later.

Using the leaked cryptographic information storage module 111, the leaked cryptographic information encoding module 113, and the encoded cryptographic information processing module 115 described above to obtain the leaked passwords 4 from the cryptographic information patterning processing unit 11, When the filtering encryption information is obtained by processing, the encryption pattern extension unit 13 of the present invention calculates a detailed probability of the filtering encryption information using the encoding encryption information and the filtering encryption information, and obtains an exclusive pattern for the filtering encryption information, An extended encryption pattern can be obtained. To this end, the encryption pattern extension unit 13 of the present invention may include an encryption pattern detailed probability acquisition module 131 and an exclusive pattern extraction module 133 as shown in FIG. 3 .

The encryption pattern detailed probability obtaining module 131 is configured to obtain the filtering encryption information, calculate the detailed probability, and obtain the encryption pattern detailed probability information. The encryption pattern detail probability means a connection probability between two adjacent strings included in the encryption string. The concatenation probability may be obtained by setting the starting pattern as a starting pattern when two adjacent strings are two strings starting the corresponding encryption, and classifying it as a continuous pattern in other cases. For all strings, the starting pattern concatenation probability is calculated as the frequency for the first two strings of each password, and the continuous pattern concatenation probability can be calculated as the frequency between the remaining adjacent strings except for the first two strings.

In an embodiment of the present invention, the cipher pattern detailed probability acquisition module 131 may acquire cipher pattern detailed probability information to be expressed in the form of a probability table. An example of code for generating a table is shown.

When the cryptographic pattern detailed probability acquisition module 131 obtains the cryptographic pattern detailed probability information, the exclusive pattern extraction module 133 uses the encoding cryptographic information and the length of a specific password to extract the exclusive pattern, which is a pattern not included in the filtering cryptographic information. formed to extract. The exclusive pattern may be a remaining pattern other than the encryption pattern obtained using the leaked passwords 4 as described above.

When the encryption pattern detailed probability information is obtained from the encryption pattern detailed probability acquisition module 131, the filtering encryption information is arranged in the form of a probability table, and decryption to be described later is performed using the filtering encryption information, but the password cannot be decrypted, Decryption must be performed using different patterns. Here, the other patterns are different from the filtering encryption information, and all possible encryption patterns must be used for decryption.

번의 암호 해독 시도를 필요로 한다. 앞서 획득된 필터링 암호 정보로 표현되는 암호 패턴들은 일반적으로 이 모든 암호의 정의역을 포함하지 못한다. 따라서, 필터링 암호 정보로 표현되는 암호 패턴을 이용하여 암호 해독을 수행하지 못한 경우, 전수 조사를 이용하여 암호 해독을 수행하여야 한다.Using the above example, the number of all cases that the user can input as a password has 10 numbers, 52 types of upper and lower case letters of the English alphabet, and 12 types of special characters that can be generally used, so that a total of 74 types of characters are set. If there are inputable characters, in order to find a random n-digit user password through a full search, the average

Requires one decryption attempt. The encryption patterns expressed by the previously obtained filtering encryption information generally do not include the domain of all these encryptions. Therefore, when decryption is not performed using the encryption pattern expressed by the filtering encryption information, decryption must be performed using a full investigation.

To this end, the exclusive pattern extraction module 133 may define an encryption pattern excluding encryption patterns expressed by filtering encryption information among all the obtainable encryption patterns as an exclusive pattern and extract the exclusive pattern. The exclusive pattern extracted by the exclusive pattern extraction module 133 may be extracted using the encoding encryption information and the length of a specific password, and FIG. 10 shows an example of a code for obtaining such an exclusive pattern.

If detailed probability information on filtering encryption information is obtained or an exclusive pattern is extracted using the encryption pattern extension unit 13, the decryption performing unit 15 according to an embodiment of the present invention decrypts the information using the corresponding information. Decryption is performed to decrypt the target encryption (3).

The decryption performing unit 15 performs decryption of the decryption target encryption 3 using a plurality of computers included in the distributed cluster 2 using the filtering encryption information or the extended encryption pattern, and returns the result of decryption. formed to output. Here, the extended encryption pattern may be the above-described exclusive pattern. The decryption performing unit 15 is configured to include a decryption pattern priority determining module 151, a decryption information obtaining module 153, and a decryption result output module 155 as shown in FIG. 4 to output a decryption result can be

The decryption pattern prioritization module 151 is configured to determine a priority for decryption of the encryption from the filtering encryption information and the exclusive pattern, respectively. The decryption pattern priority determining module 151 may be configured to determine a priority for decryption from a priority or an exclusive pattern of filtering encryption information, and for this purpose, the detailed probability may be used. The decryption pattern prioritization module 151 determines the priority of the filtering encryption information or the priority of the exclusive pattern in the order of the highest detail probability. As an example, the decryption pattern prioritization module 151 may obtain a product of probability between adjacent strings included in the encryption pattern of the filtering encryption information, and determine the priority of the filtering encryption information by using the obtained probability product, The priority may be used in the order of obtaining primary decryption information, which will be described later.

As another example, the decoding pattern prioritization module 151 may obtain a probability product between adjacent strings included in the exclusive pattern, and use the obtained probability product to determine the priority of the exclusive pattern, wherein the determined exclusive pattern The priority of can be used in the order of obtaining secondary decryption information, which will be described later.

In addition, in the case of an exclusive pattern including a character string encompassing the number of input possible cases D, L, and S within the pattern represented by the wild card included in the exclusive pattern, the exclusive pattern probability may be derived by adding the respective probabilities.

For example, a wild card is indicated by *, and any character string among D, L, and S may be included in the corresponding position. For example, an exclusive pattern expressed as DD* can be expressed as the sum of three probabilities, since it can eventually be expressed as either DDD, DDL or DDS, where the probability of each exclusive pattern starts as described above. It can be expressed as the product of the pattern connection probability and the continuous pattern connection probability.

When the priority is determined, the decryption information obtaining module 153 according to an embodiment of the present invention causes the distributed cluster 2 to perform the first decryption or the second decryption, and obtains the first decryption information or the second decryption information. can be obtained

On the other hand, the decryption pattern priority determination module 151 according to an embodiment of the present invention acquires the missing password information stored in the above-described filtering result storage module (not shown) and includes it in the exclusive pattern, and You can prioritize further. Through this, the exclusive pattern of the present invention may include all possible encryption patterns except for filtering encryption information.

When the decryption information obtaining module 153 obtains the filtering encryption information, it may distribute the obtained filtering encryption information to a plurality of computers of the distributed cluster 2 to obtain the primary decryption information. Here, the filtering encryption information may be filtering encryption information having a priority determined by the above-described decoding pattern priority determination module 151, and the distribution order may also be made based on the above-described priority.

When the decryption information obtaining module 153 obtains the exclusive pattern, the obtained exclusive information may be distributed to a plurality of computers of the distributed cluster 2 to obtain the secondary decryption information. Here, the exclusive pattern may be filtering encryption information having a priority determined by the above-described decryption pattern priority determination module 151, and the distribution order may also be made based on the above-described priority.

The decryption result output module 155 is configured to output the decryption result obtained by the decryption information obtaining module 153 . When the decryption result output module 155 obtains that the decryption of the decryption target password 3 is successful from the primary decryption information, it generates and outputs a decryption process stop signal so as not to generate an exclusive pattern that is an additional pattern for the corresponding encryption can When the decryption process stop signal is output, the above-described exclusive pattern extraction module 133 does not perform exclusive pattern extraction, so that meaningless resources are not consumed after decryption is completed.

In addition, even if filtering encryption information not used for decryption remains, if the decryption result output module 155 generates a decryption process stop signal, the decryption information acquisition module 153 is present in the distributed cluster 2 at the same time as receiving the signal It is also possible to prevent additional pointless resource consumption by sending a decryption stop signal to all computers that do it.

On the other hand, when the decryption result output module 155 obtains that the decryption of the decryption target encryption 3 has failed from the primary decryption information, the decryption result output module 155 does not generate a decryption process stop signal and proceeds with the decryption process A signal can be generated and output. When the decoding process progress signal is output, the above-described exclusive pattern extraction module 133 may perform exclusive pattern extraction and obtain secondary decoding information using the extraction result.

As described above, when the decryption result output module 155 of an embodiment of the present invention obtains that the decryption of the decryption target encryption 3 is successful from the secondary decryption information, in order to prevent meaningless resource consumption after decryption is completed , it is possible to generate and output a decryption process stop signal so that decryption using the distributed cluster 2 does not proceed any more. When the decryption process stop signal is output, the decryption information acquisition module 153 may prevent additional useless resource consumption by transmitting the decryption stop signal to all computers in the distributed cluster 2 at the same time as receiving the signal.

In addition, the decryption result output module 155 of the present invention transmits the decryption success information to the user terminal or the central control terminal when the decryption success information is included in the first decryption information or the second decryption information to decrypt the decryption target password ( The decoding result of 3) can be output.

Meanwhile, FIGS. 5 to 8 show a distributed cluster decryption method according to an embodiment of the present invention. 5 is a flowchart illustrating a distributed cluster decryption method according to an embodiment of the present invention, FIG. 6 is a flowchart illustrating step S11 of FIG. 5, FIG. 7 is a flowchart illustrating step S13 of FIG. 5, and FIG. It is a flowchart showing step S15 of FIG. 5 . Hereinafter, for convenience of explanation, a distributed cluster decryption method according to an embodiment of the present invention will be described using the system of FIGS. 1 to 4 described above, but the method of the present invention is not necessarily implemented only in the system, and similar It may be implemented in various devices, systems, and terminals capable of performing an operation.

A distributed cluster decryption method 10 according to an embodiment of the present invention is formed to decrypt a decryption target encryption using a plurality of computers connected to the distributed cluster and included in the distributed cluster. To this end, the distributed cluster decryption method 10 may obtain the leaked passwords and transfer the processing results to a plurality of computers in the distributed cluster to perform decryption.

번의 암호 해독 시도를 필요로 하며 이는, 단일 단말기로는 수행하기 어려운 횟수이다. 따라서, 본 발명에서는 분산 클러스터를 이용하여 복수의 단말기를 설정하고, 설정한 복수의 단말기가 암호 해독 시도를 분배하여 수행하도록 함으로써 보다 빠른 암호 해독을 수행하도록 형성된다.In general, in the case of cryptocurrency, there are innumerable cases. For example, the number of all cases that the user can input as a password is 10 numbers, 52 types of uppercase and lowercase letters of the English alphabet, and 12 types of special characters that can be generally used, so that there are a total of 74 inputable characters. If so, to find a random n-digit user password through an exhaustive search, the average

It requires one decryption attempt, which is a number that is difficult to perform with a single terminal. Therefore, in the present invention, a plurality of terminals are set using a distributed cluster, and the set plurality of terminals are configured to perform faster decryption by distributing decryption attempts.

Distributed cluster decryption method 10 according to an embodiment of the present invention, as shown in FIG. 5, obtains filtering encryption information (S11), obtains an extended encryption pattern (S13), and performs the decryption result. It is formed to include the step of outputting (S15).

In the step (S11) of obtaining the filtering encryption information, the dictionary password collection is performed using the encryption information patterning processing unit, the pattern of the collected dictionary passwords is analyzed to generate the encoding encryption information, and the encoding encryption information is filtered It is formed to obtain filtering encryption information by performing. In the step S11 of obtaining the filtering password information, the leaked passwords of FIG. 5 may be collected as a dictionary password, and filtering password information may be obtained by processing the collected dictionary passwords, and for this purpose, it is shown in FIG. As described above, it may be formed to include a step (S111) of storing the dictionary encryption as leaked encryption information, a step of generating encoding encryption information (S113), and a step of obtaining the filtering encryption information (S115).

The step (S111) of storing the dictionary password as leaked encryption information is configured to perform and store the dictionary password collection. In the step of storing the dictionary password as leaked password information (S111), the leaked passwords among the actual passwords used by a plurality of users are defined and collected as the dictionary password, and the collected dictionary password may be stored as the leaked password information. In the step of storing the dictionary password as leaked password information (S111), for example, the dictionary password may be stored as a data set in which the leaked passwords expressed as the leaked password dictionary are collected. Here, various types of databases may be used for the dictionary according to the analysis target device, environment, and user characteristics. For example, an open-source encryption dictionary such as the RockYou data set also exists. In the present invention, in order to extract an encryption pattern from the leaked encryption dictionary, various types of encryption dictionaries such as text files or databases can be used.

The step of generating the encoded encryption information ( S113 ) is configured to generate encoded encryption information by performing encoding on the leaked encryption information in order to perform pattern analysis on the leaked encryption information.

When raw encryption is used, numerous patterns can be derived, and since most of the derived patterns may not have a special meaning, the step (S113) of generating the encoded encryption information of the present invention is significant from the leaked encryption information. To derive a pattern, a specific process, encoding, can be performed. In general, as described above, passwords are formed with a length of n using at least one of numbers, letters, and special characters. Accordingly, in the present invention, an encoding method in which numbers are grouped by mapping numbers to numbers, letters to letters, and special characters to special characters can be performed as encoding.

Preferably, in the step of generating the encoding encryption information (S113), a number can be changed to D, a letter to L, and a special character to S to be encoded. The step (S113) of generating the encoding encryption information is, for example, when the password "test1234!@#" and the password "12test!@34#" are obtained as leaked encryption information, "LLLLDDDDSSS" through the above-described encoding process, respectively. and "DDLLLLSSDDS". Thereafter, in the step of generating the encoding encryption information ( S113 ), each encryption may be encoded into “L ₄ D ₄ S ₃ ” and “D ₂ L ₄ S ₂ D ₂ S ₁ ” through a mapping and grouping process.

Summarizing the above-described example, the step of generating the encoding encryption information ( S113 ) may encode an arbitrary encryption P consisting of an n-digit string through an encoding process using Equation 2 below.

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters)

The step of obtaining the filtering encryption information (S115) is formed to obtain the filtering encryption information by arranging the encoded encryption information using the appearance frequency, and performing filtering of the encoding encryption information using a preset appearance probability value. Since the encoded encryption information is expressed using three codes differently from the existing encryption, each encoded encryption information may have a high frequency, unlike the initial encryption.

As an example, "test12" and "dogs68" are judged to be different cipher information based only on the initial state, and the frequency of each appears as 1, 1, but when the above-described encoding processing is performed on both ciphers, both ciphers are "L ₄ D ₂ " and the frequency may be represented by 2. In the step of obtaining the filtering encryption information (S115), as in the above-described example, the encoding encryption information is arranged to obtain the appearance frequency for each encoding encryption information, and the encoding encryption information may be sorted using the appearance frequency. Here, the sorting may be, for example, descending sorting.

When the sorting of the encoded cryptographic information is finished, the step of obtaining the filtering cryptographic information ( S115 ) may perform filtering on the sorted encoded cryptographic information by using a preset appearance probability value.

In the case of a very long password or an extreme pattern of a sparse form, the frequency of appearance may be very low because it is a password that is not generally used by users. The very low frequency of appearance indicates that users rarely use that length or pattern.

For example, assuming that a password such as "xO75F2^jTK0432QBnt!^^%*&Spq@$vJG(Ez)w25$&" exists among the leaked passwords, the password has 51 strings, L ₁ D ₃ L ₁ It has encoding information of D ₁ S ₁ L ₃ D ₄ L ₃ S ₆ L ₃ S ₂ L ₃ S ₁ L ₂ S ₁ L ₁ D ₂ S ₂ . Even if the user is presented with the setting to enter a password of unlimited length, the user cannot enter a password longer than a certain length of unknown meaning like "xO75F2^jTK0432QBnt!^^%*&Spq@$vJG(Ez)w25$&" like the password above. The probability of setting is low. This is because users usually set up passwords of a pattern and length that are convenient to memorize and type.

Therefore, the frequency of encoding encryption information having the same length and pattern as the above-described encryption appears extremely low, which means that users generally do not use it as described above, so the step of obtaining filtering encryption information (S115) The corresponding shapes or patterns may be filtered using a preset appearance probability value.

The filtering encryption information generated in the step (S115) of obtaining the filtering encryption information may be stored as a data set expressed as an encoding encryption dictionary by selecting encoding encryption information having a predetermined appearance probability value or more mentioned above. In the dictionary, various types of databases may be used depending on the analysis target device, environment, and user characteristics. In the present invention, various types of encryption dictionaries such as text files or databases can be used.

On the other hand, the step of obtaining the filtering encryption information (S115) may be temporarily stored through the step of storing the encoding encryption information not selected as a filtering result (not shown) as a filtering result. The temporary meaning referred to here means until the decryption procedure of the current password to be decrypted is finished. This is to use the corresponding encoding encryption information for decryption in the second decryption when decryption is not completed through the first decryption, which will be described later.

Storing the above-mentioned dictionary password as leaked encryption information (S111), generating the encoding encryption information (S113), and obtaining the filtering encryption information using the step (S115) of obtaining the filtering encryption information (S11) When the filtering encryption information is obtained by acquiring and processing the leaked passwords, the step of obtaining an extended encryption pattern of the present invention (S13) is the filtering encryption information using the encoding encryption information and the filtering encryption information through the encryption pattern extension unit. An extended encryption pattern can be obtained by calculating a detailed probability and obtaining an exclusive pattern for filtering encryption information. To this end, the step of obtaining the extended encryption pattern of the present invention (S13) may include the step of obtaining the encryption pattern detailed probability information (S131) and the step of extracting the exclusive pattern (S133) as shown in FIG. have.

The step of obtaining the cipher pattern detailed probability information (S131) is configured to obtain the filtering cipher information, calculate the detailed probability, and obtain the cipher pattern detailed probability information. The encryption pattern detail probability means a connection probability between two adjacent strings included in the encryption string. The concatenation probability may be obtained by setting the starting pattern as a starting pattern when two adjacent strings are two strings starting the corresponding encryption, and classifying it as a continuous pattern in other cases. For all strings, the starting pattern concatenation probability is calculated as the frequency for the first two strings of each password, and the continuous pattern concatenation probability can be calculated as the frequency between the remaining adjacent strings except for the first two strings.

In an embodiment of the present invention, the step (S131) of obtaining the encryption pattern detailed probability information may also obtain the encryption pattern detailed probability information to be expressed in the form of a probability table. An example of a code for generating a probability table for

If the encryption pattern detailed probability information is obtained in the step (S131) of obtaining the encryption pattern detailed probability information, the step of extracting the exclusive pattern (S133) is not included in the filtering encryption information by using the encoding encryption information and the length of the specific password. It is formed to extract an exclusive pattern that is a pattern. The exclusive pattern may be a remaining pattern other than the password pattern obtained using the leaked passwords as described above.

In the step (S131) of obtaining the cipher pattern detailed probability information, the cipher pattern detailed probability information is obtained, the filtering cipher information is sorted in the form of a probability table, and decryption described later is performed using the filtering cipher information, but the cipher is not decrypted If not, decryption must be performed using other patterns. Here, the other patterns are different from the filtering encryption information, and all possible encryption patterns must be used for decryption.

번의 암호 해독 시도를 필요로 한다. 앞서 획득된 필터링 암호 정보로 표현되는 암호 패턴들은 일반적으로 이 모든 암호의 정의역을 포함하지 못한다. 따라서, 필터링 암호 정보로 표현되는 암호 패턴을 이용하여 암호 해독을 수행하지 못한 경우, 전수 조사를 이용하여 암호 해독을 수행하여야 한다.Using the above example, the number of all cases that the user can input as a password has 10 numbers, 52 types of upper and lower case letters of the English alphabet, and 12 types of special characters that can be generally used, so that a total of 74 types of characters are set. If there are inputable characters, in order to find a random n-digit user password through a full search, the average

Requires one decryption attempt. The encryption patterns expressed by the previously obtained filtering encryption information generally do not include the domain of all these encryptions. Therefore, when decryption is not performed using the encryption pattern expressed by the filtering encryption information, decryption must be performed using a full investigation.

To this end, in the step of extracting the exclusive pattern ( S133 ), an encryption pattern excluding encryption patterns expressed by filtering encryption information among all the obtainable encryption patterns may be defined as an exclusive pattern and the exclusive pattern may be extracted. The exclusive pattern extracted in the step of extracting the exclusive pattern ( S133 ) may be extracted using encoding encryption information and the length of a specific encryption, and FIG. 10 shows an example of a code for obtaining such an exclusive pattern.

When obtaining detailed probability information for filtering encryption information or extracting an exclusive pattern using the step (S13) of obtaining an extended encryption pattern, outputting a decryption result according to an embodiment of the present invention (S15) The decryption is performed to decrypt the decryption target password using the corresponding information.

In the step of outputting the decryption result (S15), the decryption target decryption is performed using a plurality of computers included in the distributed cluster using the filtering encryption information or the extended encryption pattern through the decryption performing unit, and the decryption result is the result. is formed to output Here, the extended encryption pattern may be the above-described exclusive pattern. The step of outputting the decryption result (S15) includes the steps of determining a priority as shown in FIG. 8 to output the decryption result (S151), obtaining decryption information (S153), and outputting the decryption result (S151) S155).

The step of determining the priority (S151) is formed to determine the priority for decryption of the encryption from the filtering encryption information and the exclusive pattern, respectively. The step of determining the priority (S151) may be formed to determine the priority for decryption from the priority or exclusive pattern of the filtering encryption information, and for this, the detailed probability described above may be used. In the step of determining the priority (S151), the priority of the filtering encryption information or the priority of the exclusive pattern is determined in the order of the highest detail probability. As an example, the step of determining the priority (S151) may obtain a probability product between adjacent strings included in the encryption pattern of the filtering encryption information, and determine the priority of the filtering encryption information by using the obtained probability product, The priority may be used in the order of obtaining primary decryption information, which will be described later.

Also, as another example, the step of determining the priority ( S151 ) may obtain a probability product between adjacent strings included in the exclusive pattern, and use the obtained probability product to determine the priority of the exclusive pattern, wherein the determined exclusive pattern The priority of can be used in the order of obtaining secondary decryption information, which will be described later.

In addition, in the case of an exclusive pattern including a character string encompassing the number of input possible cases D, L, and S within the pattern represented by the wild card included in the exclusive pattern, the exclusive pattern probability may be derived by adding the respective probabilities.

For example, a wild card is indicated by *, and any character string among D, L, and S may be included in the corresponding position. For example, an exclusive pattern expressed as DD* can be expressed as the sum of three probabilities, since it can eventually be expressed as either DDD, DDL or DDS, where the probability of each exclusive pattern starts as described above. It can be expressed as the product of the pattern connection probability and the continuous pattern connection probability.

When the priority is determined, the step of obtaining decryption information according to an embodiment of the present invention ( S153 ) causes the first decryption or the second decryption to be performed in the distributed cluster, and the first decryption information or the second decryption information is obtained can do.

On the other hand, the step of determining the priority according to an embodiment of the present invention (S151) is to store the encoding encryption information not selected as a result of the above-described filtering as a filtering result (not shown) in the step of storing the missing encryption information stored in the It can be obtained and included in the exclusive pattern, and the priority of the corresponding encryption information can be further determined. Through this, the exclusive pattern of the present invention may include all possible encryption patterns except for filtering encryption information.

In the step of obtaining decryption information (S153), when filtering encryption information is obtained, the obtained filtering encryption information is distributed to a plurality of computers in a distributed cluster to obtain primary decryption information. Here, the filtering encryption information may be filtering encryption information having a priority determined in step S151 of determining the above-mentioned priority, and the distribution order may also be made based on the above-mentioned priority.

In the step of obtaining decryption information ( S153 ), if the exclusive pattern is obtained, the obtained exclusive information may be distributed to a plurality of computers in a distributed cluster to obtain secondary decryption information. Here, the exclusive pattern may be filtering encryption information having a priority determined in step S151 of determining the above-mentioned priority, and the distribution order may also be made based on the above-mentioned priority.

The step of outputting the decryption result (S155) is configured to output the decryption result obtained in the step of obtaining the decryption information (S153). In the step of outputting the decryption result (S155), when the decryption of the decryption target password is successfully obtained from the primary decryption information, a decryption process stop signal can be generated and output so as not to generate an exclusive pattern that is an additional pattern for the corresponding password. have. When the decryption process stop signal is output, the step of extracting the above-described exclusive pattern ( S133 ) does not extract the exclusive pattern, so that meaningless resources are not consumed after decryption is completed.

In addition, even if the filtering encryption information not used for decryption remains, if a decryption process stop signal is generated in the step of outputting the decryption result (S155), the step of obtaining decryption information (S153) is transmitted to the distributed cluster at the same time as receiving the signal. By sending a decryption stop signal to all existing computers, additional pointless resource consumption can be prevented.

On the other hand, in the step of outputting the decryption result (S155), if it is obtained from the primary decryption information that the decryption of the decryption target encryption has failed, outputting the decryption result (S155) does not generate a decryption process stop signal, but the decryption process A progress signal can be generated and output. When the decoding process progress signal is output, in the step of extracting the exclusive pattern ( S133 ), the exclusive pattern extraction may be performed, and secondary decoding information may be obtained using the extraction result.

As described above, the step of outputting the decryption result of an embodiment of the present invention (S155) is to prevent meaningless resource consumption after decryption is completed. A decryption process stop signal can be generated and output so that decryption using the distributed cluster is no longer performed. When the decryption process stop signal is output, the step of obtaining decryption information ( S153 ) may prevent additional meaningless resource consumption by transmitting the decryption stop signal to all computers existing in the distributed cluster at the same time as receiving the signal.

In addition, in the step of outputting the decryption result of the present invention (S155), when the decryption success information is included in the first decryption information or the second decryption information, the decryption target by transferring the decryption success information to the user terminal or the central control terminal You can output the decryption result.

Although one embodiment of the present invention has been described above, the spirit of the present invention is not limited to the embodiments presented herein, and those skilled in the art who understand the spirit of the present invention can add components within the scope of the same spirit. , changes, deletions, additions, etc. may easily suggest other embodiments, but this will also fall within the scope of the present invention.

1: Distributed Cluster Decryption System
2: Distributed cluster 3: Password to decrypt
4: Leaked passwords 11: Cryptographic information patterning processing unit
13: password pattern extension unit 15: decryption execution unit
111: leaked password information storage module 113: leaked password information encoding module
115: encoding encryption processing module 131: encryption pattern detailed probability acquisition module
133: exclusive pattern extraction module 151: decoding pattern prioritization module
153: decoding information acquisition module 155: decoding result output module

Claims (22)

In the distributed cluster decryption system formed to decrypt a specific password using a plurality of computers included in the distributed cluster,
The distributed cluster decryption system,
an encryption information patterning processing unit that collects dictionary passwords, generates encoded encryption information by analyzing patterns for the collected dictionary passwords, and performs filtering on the encoded encryption information to obtain filtering encryption information;
an encryption pattern extension unit for calculating a detailed probability of the filtering encryption information by using the encoding encryption information and the filtering encryption information and obtaining an exclusive pattern for the filtering encryption information to obtain an extended encryption pattern; and
Distributed cluster decryption system comprising a; a decryption performing unit for performing decryption of the specific encryption using the plurality of computers of the distributed cluster using the filtering encryption information or the extended encryption pattern and outputting a decryption result; . The method of claim 1,
The encryption information patterning processing unit,
a leaked password information storage module for defining and collecting leaked passwords among actual passwords used by a plurality of users as the dictionary password, and storing the collected dictionary password as leaked password information;
a leaked encryption information encoding module for generating encoded encryption information by encoding the leaked encryption information to perform pattern analysis on the leaked encryption information; and
An encoding encryption information processing module that sorts the encoded encryption information using an appearance frequency, and performs filtering of the encoded encryption information using a preset appearance probability value to obtain the filtered encryption information; Distributed cluster decryption system comprising a; . 3. The method of claim 2,
The encoding maps numbers, letters, and special characters to different symbols, groups consecutive symbols, and is a distributed cluster decryption system expressed by Equation 1 below.
Formula 1

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters) 4. The method of claim 3,
The encoding encryption information processing module is a distributed cluster decryption system for filtering the encoded encryption information whose appearance frequency is equal to or less than the preset appearance probability value by the filtering. The method of claim 1,
The encryption pattern extension unit,
an encryption pattern detailed probability obtaining module for obtaining the filtering encryption information and calculating the detailed probability to obtain the encryption pattern detailed probability information; and
and an exclusive pattern extraction module for extracting an exclusive pattern that is a pattern not included in the filtering encryption information by using the encoding encryption information and the length of the specific encryption information. 6. The method of claim 5,
The cryptographic pattern detailed probability information is,
It means the connection probability of two adjacent strings included in the string of the filtering encryption information,
The connection probability is
The starting pattern concatenation probability when the two adjacent strings are two strings starting the encryption string of the filtering encryption information and the continuous pattern connection probability when the two adjacent strings are not the two strings starting the encryption string of the filtering encryption information A distributed cluster decryption system obtained by classifying as 7. The method of claim 6,
The connection probability is
In the case of the starting pattern concatenation probability, it is calculated as the frequency of the two strings starting the cipher string for the entire cipher string, and in the case of the continuous pattern concatenation probability, the two strings starting the cipher string with respect to the entire cipher string Distributed cluster decryption system calculated by the frequency between the remaining adjacent characters. 8. The method of claim 7,
The exclusive pattern extraction module,
A distributed cluster decryption system for obtaining the generation condition of the specific encryption and extracting the exclusive pattern by excluding the pattern included in the filtering encryption information among reference patterns that are all patterns obtained based on the obtained generation condition. The method of claim 1,
The decryption performing unit,
a decryption pattern priority determination module for determining a priority for decrypting the specific encryption, respectively, from the filtering encryption information and the extended encryption pattern;
When the filtering encryption information is obtained, the obtained filtering encryption information is distributed to the plurality of computers in the distributed cluster to obtain primary decryption information, and when the extended encryption pattern is obtained, the obtained extended encryption pattern is a decryption information obtaining module for distributing to the plurality of computers in the distributed cluster to obtain secondary decryption information; and
When it is obtained from the first decryption information that the decryption of the specific encryption is successful, a decryption process stop signal is generated and output to request not to acquire the exclusive pattern for the corresponding encryption, and the specified encryption information is obtained from the first decryption information. Distributed cluster decryption system comprising a; if it is confirmed that the decryption of the password is not successful, a decryption result output module for generating a decryption process progress signal for requesting acquisition of the exclusive pattern for the corresponding password and outputting the decryption result as the decryption result; . 10. The method of claim 9,
The decryption pattern prioritization module,
A distributed cluster decryption system for determining the priority by using the detailed probability of the filtering encryption information, obtaining a product of probability of adjacent strings constituting the pattern, and determining the priority based on the obtained product of probability. 11. The method of claim 10,
The decoding result output module,
Distributed cluster decryption system for outputting the successful decryption information to the user terminal when it is confirmed that the decryption of the specific password is successful by analyzing the first decryption information or the second decryption information. In the distributed cluster decryption method formed to decrypt a specific password using a plurality of computers included in the distributed cluster,
The distributed cluster decryption method comprises:
Collecting a dictionary password using the encryption information patterning processing unit, generating encoding encryption information by analyzing patterns for the collected dictionary passwords, and performing filtering on the encoding encryption information to obtain filtering encryption information step;
obtaining an extended encryption pattern by calculating a detailed probability of the filtering encryption information by using the encoding encryption information and the filtering encryption information through an encryption pattern extension unit and obtaining an exclusive pattern for the filtering encryption information; and
A distributed cluster cipher comprising a; performing decryption of the specific cipher using the plurality of computers of the distributed cluster using the filtering cipher information or the extended cipher pattern through a decryption performing unit and outputting a decryption result; Detox method. 13. The method of claim 12,
The step of obtaining the filtering encryption information includes:
defining and collecting leaked passwords among actual passwords used by a plurality of users as the dictionary password, and storing the collected dictionary password as leaked password information;
generating encoded encryption information by encoding the leaked encryption information to perform pattern analysis on the leaked encryption information; and
and arranging the encoded encryption information using an appearance frequency, and performing filtering of the encoded encryption information using a preset appearance probability value to obtain the filtered encryption information. 14. The method of claim 13,
The encoding maps numbers, letters, and special characters to different symbols, groups consecutive symbols, and is a distributed cluster decryption method expressed by Equation 2 below.
Formula 2

(here, P: random password consisting of n-character strings, L: number of consecutive characters, D: number of consecutive numbers, S: number of consecutive special characters) 15. The method of claim 14,
The step of obtaining the filtering encryption information includes:
A distributed cluster decryption method for filtering the encoded encryption information whose appearance frequency is equal to or less than the preset appearance probability value by the filtering. 13. The method of claim 12,
The step of obtaining the extended encryption pattern comprises:
obtaining the filtering encryption information and calculating the detailed probability to obtain detailed probability information of the encryption pattern; and
and extracting an exclusive pattern, which is a pattern not included in the filtering encryption information, by using the encoding encryption information and the length of the specific encryption. 17. The method of claim 16,
The cryptographic pattern detailed probability information is,
It means the connection probability of two adjacent strings included in the string of the filtering encryption information,
The connection probability is
The starting pattern concatenation probability when the two adjacent strings are two strings starting the encryption string of the filtering encryption information and the continuous pattern connection probability when the two adjacent strings are not the two strings starting the encryption string of the filtering encryption information A distributed cluster decryption method obtained by classifying as 18. The method of claim 17,
The connection probability is
In the case of the starting pattern concatenation probability, it is calculated as the frequency of the two strings starting the cipher string for the entire cipher string, and in the case of the continuous pattern concatenation probability, the two strings starting the cipher string with respect to the entire cipher string Distributed cluster cryptography method calculated by the frequency between the remaining adjacent characters. 19. The method of claim 18,
The step of extracting the exclusive pattern,
A distributed cluster decryption method for obtaining the generation condition of the specific encryption and extracting the exclusive pattern by excluding the pattern included in the filtering encryption information from among reference patterns that are all patterns obtained based on the obtained generation condition. 13. The method of claim 12,
The step of performing the decryption of the specific password and outputting the decryption result,
determining a priority for decryption of the specific cipher from the filtering cipher information and the extended cipher pattern, respectively;
When the filtering encryption information is obtained, the obtained filtering encryption information is distributed to the plurality of computers in the distributed cluster to obtain primary decryption information, and when the extended encryption pattern is obtained, the obtained extended encryption pattern is distributing to the plurality of computers in the distributed cluster to obtain secondary decryption information; and
When it is obtained from the first decryption information that the decryption of the specific encryption is successful, a decryption process stop signal is generated and output to request not to acquire the exclusive pattern for the corresponding encryption, and the specified encryption information is obtained from the first decryption information. When it is confirmed that the decryption of the password is not successful, generating a decryption process progress signal requesting to obtain the exclusive pattern for the corresponding password and outputting it as the decryption result; 21. The method of claim 20,
Determining the priority for decryption of the password comprises:
A distributed cluster decryption method for determining the priority by using the detailed probability of the filtering encryption information, obtaining a product of probability of adjacent strings constituting the pattern, and determining the priority based on the obtained product of probability. 22. The method of claim 21,
The step of outputting the decoding result is,
Distributed cluster decryption method for outputting the successful decryption information to a user terminal when it is confirmed that decryption of the specific password is successful by analyzing the first decryption information or the second decryption information.

Images