KR100596400B1 - Apparatus for security-based synchronizing data between personal mobile node and home network PC and method thereof - Google Patents

Abstract

The security-based data synchronization system and method between the mobile communication medium and the home network PC according to the present invention perform authentication of the mobile communication medium connected to the home network PC and apply security to the traffic between the mobile communication medium and the home network PC. A home gateway performing transmission and reception; A mobile communication medium which accesses a communication network connected to the home gateway, acquires data synchronization with the home network PC, and then transmits and receives data; And a home network PC connected to the home gateway to acquire data synchronization with the mobile communication medium and then perform data transmission / reception, and securely remotely manage and manage the home network host in the mobile communication medium. Data can be shared between the communication medium and the home network host.

Home service gateway, data synchronization system, home network security

Description

Apparatus for security-based synchronizing data between personal mobile node and home network PC and method

1 is a view showing the overall configuration of a security-based data synchronization system between a personal portable terminal and a home network PC according to the present invention.

FIG. 2 is a block diagram illustrating a configuration of the home gateway of FIG. 1.

3 is a block diagram showing the configuration of the personal portable terminal of FIG.

4 is a block diagram showing the configuration of the home network PC of FIG.

5 is a flowchart schematically illustrating a process of a security-based data synchronization method between a mobile communication medium and a home network PC according to the present invention.

FIG. 6 is a flowchart illustrating an authentication process of a home gateway of FIG. 5 in detail.

7 is a flowchart illustrating a process performed in the mobile communication medium of FIG. 5.

8 is a flowchart illustrating a process performed in the home network PC of FIG. 5.

The present invention relates to a security-based data synchronization system and method for ensuring secure data transmission between a home service gateway system, a mobile communication medium, and a home gateway PC in a home network, and more particularly, data communication between a home network and an external network. Secure user authentication and data confidentiality and integrity at home service gateways that provide services, enabling secure remote management of PCs located on the home network on mobile communication media, as well as data synchronization between personal handheld devices and home network PCs. It relates to a system and a method thereof.

The existing home service gateway provides individual authentication and access restriction functions, but does not provide data synchronization between the remote terminal and the internal terminal of the home network. In particular, there is no interworking function between the data processing and the encryption function.

The technical problem to be solved by the present invention is to solve the above problems, and through the secure user authentication, data confidentiality, and integrity of the home service gateway, the mobile communication medium securely manages the home network PC and the mobile communication A security-based data synchronization system and method for sharing data between a medium and a home network PC are provided.

In order to achieve the above technical problem, a security-based data synchronization system between a mobile communication medium and a home network PC according to the present invention performs authentication of a mobile communication medium connected to a home network PC and controls traffic between the mobile communication medium and a home network PC. A home gateway that performs security by applying security; A mobile communication medium which accesses a communication network connected to the home gateway and acquires data synchronization with the home network PC and transmits and receives the traffic; And a home network PC connected to the home gateway to obtain data synchronization with the mobile communication medium and to transmit and receive the traffic.

In order to achieve the above technical problem, a security-based data synchronization method between a mobile communication medium and a home network PC according to the present invention is a method for performing data communication between a home network PC and a mobile communication medium through a home gateway. Performing authentication on a mobile communication medium which attempts to connect; If the authentication succeeds, the mobile communication medium decodes data received from the home network PC, performs data synchronization, and then performs data communication with the mobile communication medium; And generating, by the home network PC, data synchronization with the mobile communication medium, generating an event based on predetermined control information transmitted by the mobile communication medium, and transmitting the result to the mobile communication medium. It is characterized by.

Hereinafter, a preferred embodiment of a security-based data synchronization system and method between a mobile communication medium and a home network PC according to the present invention will be described in detail with reference to the accompanying drawings. For convenience of explanation, the system and method are described together.

First, the outline of the present invention will be described with reference to FIG. 1. 1 is a view showing the overall configuration of a security-based data synchronization system between a personal portable terminal and a home network PC according to the present invention. One embodiment of the data synchronization system (DSS) proposed by the present invention is a home gateway (GDS) 101 and a remote data synchronization block in which data synchronization blocks are largely installed as shown in FIG. 1. The installed mobile communication medium (RDS: Remote Data Synchronization 102) and a home network PC (HDS; Home Data Synchronization) 103 are installed.

According to the present invention, data that is being worked on a remote PDA on a client screen and a home network PC screen simultaneously displayed on a mobile communication medium (for example, a remote PDA may be represented as a remote PDA) based on data synchronization. With one drag and drop, you can share files from your home network PC, and vice versa.

According to the present invention, when a remote PDA user loses a remote PDA or is in the hands of another person, when another person attempts to access the home PC by exploiting the remote PDA, the illegal access of another person is blocked through the user authentication function of the home service gateway. When a remote PDA user connects to a home network PC, even if the remote PDA's performance is low, it can be processed according to the performance of the home network PC.

When a user wants to run a program on a home network PC using a remote PDA, the user can run all the programs installed on the home network PC using his PDA, and the execution result is based on data synchronization. One drag and drop can be shared to a user's PDA, and the data from the PDA can be input to run a program on the home network PC to achieve the desired results.

When several users who use the home network PC want to access the home network PC by using a remote PDA, only the authorized user and the set order through the user authentication and setting function of the home service gateway can perform the above operation on the home network PC. Can be performed.

According to an embodiment of the present invention, when a remote PDA is connected to a home network PC using a remote PDA, it provides confidentiality and integrity of data so that a sniffer or sniffer does not pee or tamper with information transmitted and received through the home network. Secure data transmission is guaranteed because it is protected by a secure security manager. When the power of the home network PC is not always operated at the remote terminal, a control function of remotely turning on / off the power of the home network PC can be performed.

Finally, in the present invention, even when the remote PDA is not only in the home but also in the home, it is possible to wirelessly control the home network PC.

Now, the detailed description of each component block will be given with reference to FIGS. 2 to 6. FIG. 2 is a block diagram showing the configuration of the home gateway of FIG. 1, and FIG. 3 is a block diagram showing the configuration of the mobile communication medium of FIG. 4 is a block diagram showing the configuration of a home network PC of FIG. 1, and FIG. 5 is a flowchart showing a process of a data synchronization method between a mobile communication medium and a home network PC according to the present invention.

As shown in FIG. 2, the home gateway (GDS) 101 provided with the data sync block may receive data from the home network PC 103 installed with the home network PC data sync block to ensure confidentiality and integrity of the data. It performs a security function so as to transmit to the mobile communication medium 102, the remote data synchronization block is installed.

In addition, when the user of the mobile communication medium 102 installed with the remote data synchronization block wants to synchronize data or remotely access the home network PC 103 provided with the home network PC data synchronization block, authentication of the PDA user is performed. After verifying confidentiality and integrity of the data sent from the PDA, it performs a function to receive secure data from the home network PC data sync block of the home network PC 103 in which the home network PC data sync block is installed. .

For this purpose, the home gateway (GDS) 101 having the data sync block is installed when the user of the mobile communication medium 102 having the remote data sync block tries to authenticate with the home gateway (GDS) 101 having the data sync block. It performs the function of authenticating whether it is valid and the security function of the data from the home network PC (103) with the home network PC data sync block installed, and from the user of the mobile communication medium (102) with the remote data sync block installed. In step 510, the confidentiality and integrity of the data are verified.

Now, the detailed functions performed by the home gateway (GDS) 101 having the data sync block are as follows. First, the home gateway (GDS) 101 in which the data sync block is installed has priority and access permission based on information on its own mobile communication medium and user in order to control the mobile communication medium and user. It is determined and stored, and based on this, it is determined whether to authenticate and transmit information (step 610).

When the RDS interface unit 201 attempts to authenticate with the home gateway (GDS) 101 in which the remote data sync block-based PDA 202 is installed, the RDS interface unit 201 is more secure than the security library proposed by the remote data sync block-based PDA 202. It transmits the security library information of the highest version among the libraries held by the home gateway (GDS) 101 having a low version and the data sync block is installed to the remote data sync block-based PDA 202.

The GDS security management unit 203 and the user authentication unit 204 request a user public key certificate to authenticate whether the remote data sync block based PDA 202 is valid. In addition, the GDS security management unit 203 of the home gateway (GDS) 101 in which the data synchronization block is installed performs a function of transmitting key exchange information suitable for the cryptographic library set up for key exchange with the remote data synchronization block-based PDA 202. . The HDS interface 205 uses the public key of the home network PC (HDS-based PC) 206 to verify the digital signature in the public key certificate sent by the remote data sync block-based PDA 202 to verify the digital signature on the remote data sync block-based PDA. The public key certificate of step 202 is verified (step 620).

The GDS security management unit 203 stores the preliminary master key information sent by the remote data sync block based PDA 202, random data generated by the home gateway (GDS) 101 in which the data sync block is installed, and the remote data sync block based PDA ( The user authentication unit performs a function of generating a master key using the random data transmitted by the 202 (step 630) and verifies the integrity and the digital signature master key sent by the remote data sync block-based PDA 202. In step 640, user authentication of the remote data sync block-based PDA 202 is performed. As a result of the authentication process, if the remote data sync block-based PDA 202 or the user does not belong to the priority set in advance in step 610, it is determined that the user does not have the right authority and denies access (step 650). ). In addition, the GDS security management unit 203 performs a function of generating an initial value for integrity, an integrity key, and an encryption / decryption key for remote data from the master key.

Finally, the GDS security management unit 203 generates and encrypts an integrity value for the data received from the home network PC (HDS) 206 and transmits it to the remote data sync block based PDA 202 and the remote data sync block based PDA 202. Decryption is performed on the remote data, and the integrity is verified and transmitted to the home network PC (HDS-based PC) 206 (step 660).

The mobile communication medium 102 provided with the remote data sync block of the present invention performs decoding on the encoded and received data and synchronizes the data by using drag and drop. In other words, the home network PC (HDS-based PC, 103) installed with the home network PC data sync block from the home gateway (GDS) 101 having the data sync block is decrypted, and the integrity is verified to verify the remote data sync block. It also secures the data coming from the installed mobile communication medium 102 user (confidence and integrity function) and verifies the data confidentiality and verifies the integrity of the information coming from the home gateway (GDS) 101 where the data sync block is installed. Perform the function (step 520).

As shown in FIG. 3, the mobile communication medium 102 provided with the remote data sync block includes a user interface unit 301, a decoder 302, an RDS security management unit 303, a data synchronization unit 304, and a GDS interface unit ( 305).

First, the GDS interface unit 305 proposes a cryptographic library setting for user authentication for the home gateway (GDS) 101 in which the data sync block is installed (step 710). The RDS security management unit 303 uses the public key of the home network PC (HDS) 103 in which the home network PC data sync block is installed, and the home in the public key certificate transmitted by the home gateway (GDS) 101 in which the data sync block is installed. By verifying the digital signature of the home network PC (HDS) 103 in which the network PC data sync block is installed, a function of verifying the public key certificate of the home gateway (GDS) 101 in which the data sync block is installed is performed (step 720). In addition, the RDS security management unit 303 generates a spare master key from the key exchange information, encrypts the spare master key with the public key of the home gateway (GDS) 101 having the data sync block, and installs the home gateway (GDS) having the data sync block. (101) performs the function of transmitting (step 730).

In addition, the RDS security management unit 303 uses a spare master key, random data of a home gateway (GDS) 101 in which a data sync block is installed, and random data received from a remote data sync block based PDA 202. It generates and digitally signs the private key of the remote data sync block based PDA 202 and transmits it to the home gateway (GDS) 101 in which the data sync block is installed (step 740). The RDS security manager 303 performs the function of integrating and encrypting the remote control information and the sync data generated from the data synchronizer 304 to the home gateway (GDS) 101 in which the data sync block is installed (step 750). ).

The decoder 302 delivers the data whose integrity has been confirmed to the user interface 301 to restore the data so that the data can appear on the PDA screen. In addition, the data synchronizer 304 provides all functions necessary for synchronizing data remotely through a channel having integrity.

As shown in FIG. 4, the home network PC 103 provided with the home network PC data synchronization block includes a GDS interface unit 401, an HDS data synchronization unit 402, an encoder unit 403, and an event generation unit 404. , An event detection unit 405, and an image capture / update unit 406 configured to acquire data synchronization with the mobile communication medium 102 provided with the remote data synchronization block, and then install the mobile communication medium provided with the remote data synchronization block ( In step 530, data processing according to the information or command requested by 102 is performed.

First, the event generator 404 and the event detector 405 generate and detect events in the home network PC 103 where the home network PC data sync block is installed (step 810). The image capture / update unit 406 performs a function of capturing to transmit an image of these events, and calculates an optimal image change area based on the captured image information and previous image information. The encoder 403 performs a function of encoding to transmit such an image (step 820).

The HDS data synchronizing unit 402 performs a function of synchronizing data with the mobile communication medium 102 in which the remote data synchronizing block is installed by using drag and drop, and the home in which the data synchronizing block is installed based on the GDS interface unit 401. Through the gateway GDS 101, events are generated and detected according to control information transmitted from the RDS 102 provided with the remote data sync block.

In addition, the HDS data synchronization unit 402 and the GDS interface unit 401 encode a response data generated based on the calculation of the image change area and transmit the encoded data to a home gateway (GDS) 101 having a data synchronization block. Also perform (step 830).

The security-based data synchronization method between the mobile communication medium and the home network PC according to the present invention can also be embodied as computer readable codes on a computer readable recording medium. Computer-readable recording media include all types of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, hard disk, floppy disk, flash memory, optical data storage device, and also carrier wave (e.g. transmission over the Internet). It is also included to be implemented in the form of. The computer readable recording medium can also be distributed over computer systems connected over a computer network so that the computer readable code is stored and executed in a distributed fashion. Also, the font ROM data structure according to the present invention can be read by a computer on a recording medium such as a computer readable ROM, RAM, CD-ROM, magnetic tape, hard disk, floppy disk, flash memory, optical data storage device, and the like. It can be implemented as code.

The security-based data synchronization system and method between the mobile communication medium and the home network PC according to the present invention described above are not limited to the description of the above-described configuration and the accompanying drawings, and do not depart from the spirit of the present invention. It will be apparent that various substitutions, modifications and variations are possible within.

As described above, the security-based data synchronization system and method between the mobile communication medium and the home network PC according to the present invention securely remotely manage the home network host in the mobile communication medium, and provide data between the mobile communication medium and the home network host. Can share

In addition, in supporting secure data synchronization service considering the characteristics of home network, it has excellent scalability and ease of management because it adopts public key infrastructure focusing on safety of data synchronization system and efficiency of key management.

In addition, it is possible to remotely monitor and manage the status of communication devices inside the home network remotely, and to ensure reliable communication and home network management because the operation status of the actual home network and the operation information managed by the operator are always consistent. That has an excellent effect.

Claims (12)

A home gateway that performs authentication of a mobile communication medium connected to a home network PC and performs transmission and reception by applying security to traffic between the mobile communication medium and the home network PC; A mobile communication medium which accesses a communication network connected to the home gateway, acquires data synchronization with the home network PC, and then transmits and receives data; And And a home network PC connected to the home gateway to perform data transmission and reception after acquiring data synchronization with the mobile communication medium. The method of claim 1, wherein the home gateway An RDS interface unit providing an interface with the mobile communication medium and transmitting predetermined security library information when the mobile communication medium attempts to authenticate the mobile communication medium; A security manager configured to generate a master key based on predetermined information received from the mobile communication medium and self-generated random data to perform user authentication of the mobile communication medium and the mobile communication medium; And a HDS interface unit for verifying the electronic signature in the public key certificate after receiving the public key from the home network PC. The security-based data synchronization system between the mobile communication medium and the home network PC. The method of claim 2, wherein the secure library information is A security-based data synchronization system between a mobile communication medium and a home network PC, wherein the version is lower than the security library provided by the mobile communication medium and is the best version of the security library held by the home gateway. The method of claim 2, wherein the predetermined information is Security-based data synchronization system between the mobile communication medium and the home network PC, characterized in that it comprises a user public key certificate received from the mobile communication medium, preliminary master key information and random data. The method of claim 2, wherein the security management unit Security-based data synchronization system between the mobile communication medium and the home network PC, characterized in that for generating and encrypting the integrity value for the data transmitted and received between the mobile communication medium and the home network PC. The method of claim 1, wherein the mobile communication medium A GDS interface unit providing an interface means with the home gateway and performing a cryptographic library setting request to the home gateway; An RDS security management unit verifying a public key certificate of the home gateway based on the public key of the home network PC; A data synchronization unit for synchronizing transmission / reception data with the home network PC through a channel where the authentication is completed and the integrity is secured; And And a decoder for restoring the data whose integrity is confirmed, and providing the same to a user. The security-based data synchronization system between a mobile communication medium and a home network PC. The method of claim 1, wherein the home network PC A GDS interface unit providing a connection means with the home gateway; A data synchronization unit configured to perform data synchronization with the personal portable terminal and generate and detect events based on control information received from the personal portable terminal; An event unit for generating predetermined events and detecting events received from the mobile communication medium; An image unit configured to calculate an image change area by capturing an image for transmitting an image of the events and comparing the image with a previous image; And And an encoder for encoding an image in which the image change area is reflected; and a security-based data synchronization system between a mobile communication medium and a home network PC. In the method for performing data communication between a home network PC and a mobile communication medium through a home gateway, (a) performing authentication on a mobile communication medium to which the home gateway attempts to access; (b) if the authentication succeeds, the mobile communication medium decodes data received from the home network PC, performs data synchronization, and then performs data communication with the home network PC; And (c) after the home network PC performs data synchronization with the mobile communication medium, generating an event based on predetermined control information transmitted by the mobile communication medium and transmitting a result to the mobile communication medium; Security-based data synchronization method between a mobile communication medium and a home network PC comprising a. The method of claim 8, wherein step (a) (a1) setting priorities for mobile communication media that can access the home gateway; (a2) transmitting predetermined security library information and a user public key certificate request message to the mobile communication medium when the mobile communication medium attempting access is included in the priority; (a3) transmitting key exchange information to the home network PC and a mobile communication medium; And (a4) verifying an electronic signature transmitted by the mobile communication medium based on the public key transmitted by the home network PC to perform authentication; and a security base between the mobile communication medium and the home network PC. Data synchronization method. The method of claim 8, wherein step (a) (a5) setting priorities for users of the mobile communication media that can access the home gateway; (a6) generating a master key based on a spare mast key and first random data received from the mobile communication medium, and second random data generated by the home gateway; And (a6) verifying the user based on the master key; security-based data synchronization method between a mobile communication medium and a home network PC. The method of claim 8, wherein step (b) verifying the digital signature of the home network PC in the home gateway public key certificate based on the public key of the home network PC to verify the public key certificate of the home gateway; (b2) generating a spare master key based on key exchange information received from the home gateway, and encrypting the spare master key with a public key of a home gateway and transmitting the reserved master key to the home gateway; (b3) generating a master key based on the spare master key, the first random data of the mobile communication medium and the second random data of the home gateway, and then digitally signing the private key of the mobile communication medium to the home gateway. Transmitting; And (b4) encrypting and synchronizing the data synchronized with the control information for the home network PC and transmitting the encrypted data to the home gateway; security-based data synchronization method between the mobile communication medium and the home network PC . The method of claim 8, wherein step (c) (c1) generating and sensing the events and acquiring an image of the events; (c2) calculating an image change area by comparing the acquired image with a previous image; And and (c3) encoding the calculated image change area, and synchronizing and transmitting the dragged and dropped data by the mobile communication medium and the home communication PC.

Images