JP5982422B2 - Method for encrypting and decrypting files using telephone numbers - Google Patents

Description

  The present invention relates to file encryption and decryption, and more particularly to a file encryption and decryption method using a telephone number of a personal terminal.

  Recently, various forms of computing devices such as computers and mobile communication terminals are used, and communication between devices is possible anytime and anywhere due to the development of not only the Internet network but also a mobile communication network. It was. As a result, the transmission and reception of files via the network is actively performed, which makes it important to maintain the security of important files.

  In general, an encryption system is used to maintain file security. In other words, the person who provides the file (referred to as the sender) encrypts and transfers the file, and the receiving side (referred to as the receiver) decrypts and uses the encrypted file. In an encryption system that encrypts and decrypts a file, an encryption key that is used when encrypting the file and a decryption key that is used when decrypting the file are required. Here, the same encryption key and decryption key may be used, or different keys may be used.

  In a conventional encryption system, a recipient who has received an encrypted file must know the decryption key or possess it as another file in order to release the encryption. To give a simple example, the sender providing a file must encrypt the file with an encryption key, provide it to the receiver, and then notify the recipient separately what decryption key should be used. Don't be. In addition, there is an inconvenience that the recipient has to input a decryption key such as a personal identification number in order to decrypt the file. Furthermore, even if the file is encrypted, a security problem may arise that anyone who knows the decryption key can decrypt and open the file.

  Thus, the present invention has been devised to solve the above-described problems, and the object of the present invention is to decrypt an encrypted file without knowing the decryption key on the receiving side. An object of the present invention is to provide a method for encrypting and decrypting a file using a telephone number and a recording medium on which a program for executing the method is recorded.

  Another object of the present invention is to encrypt and decrypt a file using a telephone number that can decrypt an encrypted file with a minimum of user input in order to provide a user's convenience. It is to provide a method of conversion.

  Still another object of the present invention is to use a contact number to select a recipient, to encrypt a file using the recipient's phone number, and to use a file using a phone number that can be conveniently transferred. A method of encrypting and decrypting the data may be provided.

  Other objects of the present invention will become clearer based on the preferred embodiments described below.

  According to an aspect of the present invention, in the file decryption method performed on the computing device, when the encrypted file is executed, the encrypted key is included in the decryption module included in the encrypted file. Transferring a push message to a personal terminal using a telephone number that is registered; performing personal terminal authentication using an authentication key sent from the personal terminal; and if the personal terminal authentication is successful, the decryption module A method of decrypting the encrypted file, and a recording medium on which a program for executing the method is recorded.

  Here, the push message includes the network information of the computing device, and the personal terminal uses the network information to transfer the authentication key before the computing device exists on the same network. You can check with the user.

  In addition, the push message includes the sender's telephone number that exists in the encryption key, and the personal terminal can be used only when the sender's telephone number is registered in the contact information provided. The authentication key can be transferred without inquiring.

  In addition, when a delete message is received together with the authentication key from the personal terminal, the encrypted file can be deleted and can be transferred to the personal terminal before the encrypted file is deleted. .

  And encrypting the selected file using an encryption key including the input recipient's phone number in the file encryption method performed on the computing device; and Generating a decryption module for decrypting the file encrypted by authentication with the received personal terminal, and generating an encrypted file including the encrypted file, and receiving the encrypted file When the decryption module is executed, the person computer transfers the push message to the personal terminal by the recipient's telephone number, and the personal terminal authentication using the authentication key received from the personal terminal succeeds. File encryption method using telephone number, and program for executing the method, characterized by decrypting file Is provided.

  Here, when a recipient according to the contact information provided is selected, a phone number and an email address by the recipient are extracted from the contact information, and the phone number is included in the recipient's phone number. It can be used as a number to generate the encrypted file and transfer the encrypted file to the email address.

  Further, the encryption key further includes the sender's telephone number, and the personal terminal inquires the user only when the sender's telephone number is registered in the contact information provided. The authentication key can be transferred to the recipient computer without the need.

  According to the present invention, by encrypting a file using the recipient's phone number, the recipient can only carry his / her own personal terminal with that phone number without having to know the decryption key. Can be decrypted.

  Further, according to the present invention, according to the network situation, it is possible to decrypt an encrypted file without possessing another input just by possessing a personal terminal, thereby providing user convenience. To do.

  According to the present invention, the file encryption side can use the contact information to conveniently select a recipient, encrypt a file suitable for the recipient, and transfer the file.

1 is a schematic configuration diagram showing all systems for file encryption and decryption using a telephone number according to an embodiment of the present invention; FIG. 4 is a flowchart illustrating a file encryption process performed by a sender computer according to an embodiment of the present invention. 4 is a flowchart illustrating a process of decrypting an encrypted file performed by a recipient computer according to an embodiment of the present invention. 5 is a flowchart illustrating an authentication process for decrypting an encrypted file in a personal terminal according to an embodiment of the present invention. It is a figure which shows the structure of the encryption key based on one Example of this invention. FIG. 6 is an exemplary diagram illustrating a process of decrypting a file using an authentication key authorized by a personal terminal according to an embodiment of the present invention.

  While the invention is susceptible to various modifications and alternative embodiments, specific embodiments are shown by way of example in the drawings and will be described in detail. However, this should not be construed as limiting the invention to the specific embodiments, but should be understood to include all modifications, equivalents or alternatives that fall within the spirit and scope of the invention. .

  Hereinafter, embodiments according to the present invention will be described in detail with reference to the accompanying drawings. In the description with reference to the accompanying drawings, the same or corresponding components are the same regardless of the reference numerals. Reference numerals are assigned, and repeated descriptions thereof are omitted.

  FIG. 1 is a schematic configuration diagram illustrating all systems for file encryption and decryption using a telephone number according to an embodiment of the present invention, and FIG. 5 illustrates an encryption key according to an embodiment of the present invention. FIG.

  Referring to FIG. 1, all systems according to the present embodiment include a sender computer 10, a recipient computer 20, and a personal terminal 30.

  The sender computer 10 is a computing device of a user who encrypts a file (hereinafter referred to as a sender), and the sender encrypts the file and transmits it to a receiver (a user of the recipient computer 20). However, when the file is encrypted, the telephone number (hereinafter referred to as the telephone number of the recipient) of the personal terminal (30, for example, a smartphone) possessed by the recipient is used.

  Referring to FIG. 5 together, an encryption key used when encrypting a file according to an example includes a unique key and a recipient's telephone number. That is, the sender computer 10 uses a conventional key encryption algorithm when encrypting the file, but encrypts the file using an encryption key that includes the telephone number of the recipient. Such an encrypted file is referred to as an encrypted file, which will be described in detail later. And, as shown in the drawings, according to each embodiment, the encryption key can be divided into a type including a unique key and a telephone number of a recipient and a b type further including a telephone number of a sender. it can. The method of using the sender's telephone number will be described later.

  When the recipient executes the encrypted file acquired using the recipient computer 20 that is his / her own computing device, the recipient can decrypt and use the file by authentication using his / her personal terminal 30.

  The file encryption process and decryption process will be described below.

  FIG. 2 is a flowchart illustrating a file encryption process performed by the sender computer 10 according to an embodiment of the present invention. Referring to FIG. 2, the sender computer 10 selects a file to be encrypted (S210), and receives a recipient's telephone number to generate an encryption key (S220). Here, according to an example, the sender computer 10 uses the contact information stored as a user account in a server device stored in itself or coupled via a communication network. Can also be input. As a simple example, the sender computer 10 outputs a user interface screen that allows browsing of each individual contact based on the stored contact information, and when the user selects any individual as a recipient, the corresponding recipient The mobile communication telephone number is selected as the telephone number of the recipient and input processing is performed.

  As described with reference to FIG. 5, the selected file is encrypted using the encryption key including the input recipient's telephone number (S230).

  An encryption key and an encrypted file that is an execution file for automatic decryption including the encrypted file and the decryption module are created (S240). As will be described later, the decryption module decrypts the encrypted file by authentication with the personal terminal 30 according to the telephone number of the recipient. In order to deliver the encrypted file generated in this way to the receiver, the sender, according to one example, generates the e-mail address based on the contact information of the receiver when using the contact information in S220. It is also possible to automatically transfer the encrypted file. In simple terms, the sender simply selects a recipient using the contact information, encrypts the file with the recipient's phone number, and converts the encrypted file into the recipient's email address. By transmitting automatically, simple operability is provided.

  The decryption process of the encrypted file performed by the recipient computer 20 will be described below.

  FIG. 3 is a flowchart illustrating a process of decrypting an encrypted file performed by the recipient computer 20 according to an embodiment of the present invention. Referring to FIG. 3, when the recipient computer 20 executes the encrypted file (S310), the decryption module of the encrypted file is executed and the telephone number included in the encryption key (that is, the recipient's computer) The push message is transferred to the personal terminal 30 (S320).

  When receiving the push message, the personal terminal 30 uses the network information (for example, IP address, port number, subnet mask (SubnetMask), etc.) of the recipient computer 20 included in the message to receive the recipient computer 20. Send an authentication key to. Here, according to an example, when receiving the push message, the personal terminal 30 can immediately provide the authentication key to the recipient terminal without any restrictions. The authentication key can be transferred immediately without any other procedure only if the condition is satisfied, otherwise the user confirmation procedure can be performed. This will be described in detail with reference to the related drawing (FIG. 4).

  The recipient computer 20 determines whether or not an authentication key has been received from the personal terminal 30 (S330). When the authentication key is received, the recipient computer 20 performs terminal authentication using the authentication key (that is, the recipient's computer). Whether the personal terminal 30 is a telephone number or not is confirmed.) A successful authentication result is determined (S340), and if successful, the personal identification number of the file is decrypted (S360).

  Of course, if the authentication key is not received or authentication of the authentication key fails, failure processing is performed for decryption of the encryption (S350). According to an example, if the decryption failure process is performed a predetermined number of times or more, the recipient computer 20 can delete the encrypted file.

  According to the present embodiment, the user who uses the encrypted file does not need to perform a special operation because the encryption is automatically decrypted simply by executing the corresponding encrypted file. You can view the contents just by executing the attached file (designated file) without the trouble of inputting the back of the resident number like the existing card company details file.

  Hereinafter, a process in the personal terminal 30 using the telephone number included in the encryption key of the encrypted file will be described.

  FIG. 4 is a flowchart illustrating an authentication process for decrypting an encrypted file in the personal terminal 30 according to an embodiment of the present invention. Referring to FIG. 4, when receiving the push message from the recipient computer 20 via the network (S410), the personal terminal 30 confirms the network information of the recipient computer 20 (S415).

  As a result of analyzing the network information, it is determined whether or not it is the same network as the currently connected network (S420). Here, an example of determining whether the networks are the same is whether the network classes are the same. The network class can be classified by the first structure of the address in IPv4, but since this is obvious to those skilled in the art, a more detailed description is omitted. In other words, the personal terminal 30 determines whether or not it is the same network as itself using the IP address, port number, subnet mask (SubnetMask), etc., which are the network information of the recipient computer 20.

In this embodiment, when the same network is recognized, if the encryption key described with reference to FIG. 5 is of type b, the telephone number of the sender included in the encryption key is the contact information ( Whether it is registered in the address book or the like is determined (S425). In other words, by determining whether or not the receiver has registered as a person who knows the sender, this is a file that contains a virus etc. if the encrypted file is received by a person who the receiver does not know Alternatively, it may be an annoying (SPAM) file. Here, the contact information can generally be information by an address book or a telephone book used in a device having a mobile phone function such as a smartphone, and this is obvious to those skilled in the art. More detailed explanation is omitted. However, the contact information is not necessarily stored in the personal terminal 30, but may be information stored in the user account of the personal terminal 30 in the server device. Nowadays, rather than storing data in the terminal device itself, cloud services (cloud
Many services that use a specific storage space on the Web in the form of (service) are disclosed, and accordingly, the contact information described above is stored in a specific server device coupled via a network. The personal terminal 30 can communicate with the corresponding server device and use the contact information in real time as necessary. Since this is also obvious to those skilled in the art, a more detailed description is omitted.

  If the sender's telephone number included in the encryption key is registered in advance as contact information, the personal terminal 30 uses the network information for the receiver computer 20 included in the push message to send the authentication key to the receiver computer 20. Is transmitted (S430).

  Of course, according to another embodiment, if the encryption key is of type a, S425 can be omitted.

  If the result of the determination in S420 or S425 is that they are not the same network or the sender's telephone number is not registered as a contact, the personal terminal 30 performs a user confirmation process (S435). For example, the personal terminal 30 displays the authentication request information including the file information (such as the file name) included in the push message and the sender information (such as the telephone number of the sender) on the screen, and the user confirms this. In addition, an authentication confirmation command, an authentication rejection command, or the like can be input as a response thereto.

  The personal terminal 30 confirms the confirmation result according to the user's input (S440). If the authentication confirmation command is input, the process proceeds to S430 and transfers the authentication key. On the other hand, when an authentication rejection command is input, the personal terminal 30 does not transmit an authentication key. In this case, according to an example, the user can also input a delete command for the corresponding encrypted file. In this way, the personal terminal 30 determines whether or not a delete command is input from the user (S445), and when the delete command is input, transfers the delete command for the encrypted file to the recipient computer 20 ( S450). At this time, the personal terminal 30 can also transfer the authentication key together with the delete command because, from the standpoint of the recipient computer 20, the authenticated personal terminal 30 can decrypt the encrypted file. This is because it is desirable to process only these commands.

  When the user computer receives the delete command together with the authentication key, if the authentication with the authentication key is successful, the user computer deletes the encrypted file in accordance with the delete command that is a command from the corresponding personal terminal 30. At this time, according to another example, the user computer can also transfer the encrypted file to the personal terminal 30 before deleting the encrypted file. Therefore, the recipient can prevent other people from using the encrypted file, and can immediately check the encrypted file on his / her personal terminal 30 and can use it in the future. It becomes like this.

  Here, since the authentication key utilized by the personal terminal 30 is a telephone device having a telephone number, the personal identification information (for example, SIM (Subscriber Identification Module) information given to the personal terminal 30 is provided. Etc.) can be utilized.

  According to another example, the authentication key provided from the personal terminal 30 to the recipient computer 20 may be an authentication key certified by a specific server.

  FIG. 6 is an exemplary diagram illustrating a process of decrypting a file using an authentication key authorized by a personal terminal according to an embodiment of the present invention.

  In this embodiment, the personal terminal 30 is assumed to use an Android operating system provided by Google Inc., and the personal terminal 30 has an authentication key given in advance from a Google server. This decryption process can be executed by registering (for example, the personal identification ID of the device of the personal terminal) in the Web server. Here, GCM is an abbreviation of Google Cloud Messaging, and is a free service provided by Google so that data can be transmitted from the server to the client (Android Application). In this way, the personal terminal 30 generates an authentication key using the GCM of the Google server and registers it in advance with the Web server. Then, the recipient computer 20 processes the authentication for the authentication key of the personal terminal 30 in conjunction with the Web server.

  The above-described file encryption / decryption method using a telephone number according to the present invention can be implemented as a computer-readable code on a computer-readable recording medium. Computer-readable recording media include all types of recording media that store data that can be decoded by a computer system. For example, there can be a ROM (Read Only Memory), a RAM (Random Access Memory), a magnetic tape, a magnetic disk, a flash memory, an optical data storage device, and the like. Further, the computer-readable recording medium is distributed in a computer system connected via a computer network, and can be stored and executed as a code that can be read in a distributed manner.

  In the above description, the preferred embodiments of the present invention have been described. However, those who have ordinary knowledge in the technical field can use the spirit and scope of the present invention described in the following claims. It will be understood that various modifications and changes can be made to the present invention without departing from the scope.

10 Sender computer 20 Receiver computer 30 Personal terminal

Claims (10)

In a method of decrypting a file executed by a computing device,
Receiving an encrypted file comprising an encrypted file, an encryption key used to encrypt the file, and a decryption module for decrypting the encrypted file;
Executing the decryption module to transfer a push message to the recipient's personal terminal using the recipient's phone number contained in the encryption key;
Performing personal terminal authentication using an authentication key sent from the personal terminal in response to the push message, and when the personal terminal authentication is successful, the encryption key is used to encrypt the data. Decrypting the file;
File decryption method.   The push message includes network information of the computing device, and the personal terminal uses the network information to verify the authentication key when the computing device is not on the same network as the personal terminal. The file decryption method according to claim 1, wherein a related message is displayed on a screen and a user confirmation procedure is performed before transferring the file.   The push message includes the telephone number of the sender included in the encryption key, and the personal terminal is only when the telephone number of the sender is registered in the contact information stored in advance. The file decryption method according to claim 1, wherein the authentication key is transferred to the computing device without querying a user.   2. The file decryption method according to claim 1, wherein when the delete message is received together with the authentication key from the personal terminal, the encrypted file is deleted.   5. The file decryption method according to claim 4, wherein the encrypted file is transferred to the personal terminal before the encrypted file is deleted. In a file encryption method performed on a computing device,
Encrypting the selected file with an encryption key containing the input recipient's phone number;
Generating an encrypted file including the encryption key, the encrypted file, and a decryption module for decrypting the encrypted file;
Sending the encrypted file to a recipient's computer;
The recipient's computer that has acquired the encrypted file transfers the push message to the recipient's personal terminal using the telephone number and receives it from the personal terminal by executing the decryption module When the personal terminal authentication using the authentication key is successful, the encrypted file is decrypted by the decryption module. Extracting the recipient's phone number and email address from pre-stored contact information;
7. The file encryption method according to claim 6, wherein the encrypted file is generated using the extracted telephone number, and the encrypted file is transferred to the e-mail address.   The encryption key further includes a telephone number of the sender, and the personal terminal can authenticate the authentication key without inquiring the user only when the telephone number of the sender is registered in the contact information stored in advance. 7. The file encryption method according to claim 6, wherein the file is transferred to the recipient's computer.   A computer program that causes a computing device to execute the decoding method according to any one of claims 1 to 5.   A computer program that causes a computing device to execute the encryption method according to any one of claims 6 to 8.