KR101289810B1 - Transmitter, receiver, data transmitting method, data receiving method, and data transmitting and receiving method - Google Patents

Abstract

The transmitter includes an encryption block for encrypting data using unique information of the receiver, and a transmission block for transmitting the encrypted data, wherein the encryption block includes: a receiver information acquisition unit for obtaining unique information of the receiver, the receiver An encryption key generation unit for generating an encryption key by inputting unique information of the data into an encryption key generation function, and an encryption unit for generating the encrypted data using the generated encryption key. Since the encryption key used for data encryption is not directly transmitted during the transmission and reception of data, the risk of exposing the encryption key of the data to the outside can be minimized, thereby improving the confidentiality of the transmission and reception data.

Description

Transmitter, receiver, data transmission method, data reception method and data transmission and reception method {TRANSMITTER, RECEIVER, DATA TRANSMITTING METHOD, DATA RECEIVING METHOD, AND DATA TRANSMITTING AND RECEIVING METHOD}

The present invention relates to a transmitter, a receiver, a data transmission method, a data reception method, and a data transmission / reception method. More particularly, the present invention relates to a transmitter, a receiver, a data transmission method, and data for encrypting and decrypting data using unique information of a receiver. The present invention relates to a receiving method and a data transmitting / receiving method.

In general, data encryption means that data is replaced with a specific code to prevent unauthorized persons from verifying the contents of the data even if the data is leaked during the transmission or storage of the data. The encryption apparatus encrypts the data using a specific encryption key, and the decryption apparatus decrypts the data using the same decryption key used in the encryption apparatus. That is, to decrypt the encrypted data, the same key as the encryption key used in the encryption device must be used.

In order for the decryption apparatus to use the same decryption key as the encryption key, the encryption apparatus encrypts the data using an encryption key previously promised with the decryption apparatus or transmits the encryption key used for data encryption together with the data to the decryption apparatus.

If an encryption key is exposed in the course of data transmission, anyone can decrypt the data using the encryption key.

SUMMARY OF THE INVENTION The present invention has been made in an effort to provide a transmitter, a receiver, a data transmission method, a data reception method, and a data transmission / reception method that may prevent an encryption key from being exposed according to transmission of an encryption key.

A transmitter according to an embodiment of the present invention includes an encryption block for encrypting data using unique information of a receiver, and a transmission block for transmitting the encrypted data, wherein the encryption block obtains unique information of the receiver. A receiver information acquisition unit, an encryption key generation unit for generating an encryption key by inputting unique information of the receiver to an encryption key generation function, and an encryption unit for generating the encrypted data using the generated encryption key.

The unique information of the receiver may be any one of an Internet Protocol (IP) address and a Medium Access Control (MAC) address of the receiver.

The encryption block further includes a data length calculator for calculating the length of the data, and the encryption key generator generates the encryption key by inputting the calculated data length together with the unique information of the receiver to the encryption key generation function. can do.

The transmission block may transmit data length information input to the encryption key generation function.

The encryption key generator may convert the IP address of the receiver into a decimal number and input the same to the encryption key generation function.

The encryption key generator may convert the MAC address of the receiver into one hexadecimal number and input the same to the encryption key generation function.

A receiver according to another embodiment of the present invention includes a reception block for receiving encrypted data and a decryption block for decrypting the encrypted data using the unique information of the receiver, wherein the decryption block includes the unique information of the receiver. A receiver information storage unit for storing a receiver, a decryption key generator for inputting unique information of the receiver into a decryption key generation function to generate a decryption key, and a decryption unit for decrypting the encrypted data using the generated decryption key do.

The unique information of the receiver may be any one of an IP address and a MAC address of the receiver.

The receiving block may further receive data length information from a transmitter, and the decryption key generation unit may generate the decryption key by inputting the received data length information together with the unique information of the receiver to the decryption key generation function.

The decryption key generation unit may convert the IP address of the receiver into one decimal number and input the decryption key generation function.

The decryption key generation unit may convert the MAC address of the receiver into one hexadecimal number and input it into the decryption key generation function.

The data transmission method according to another embodiment of the present invention comprises the steps of generating the encryption key by inputting the unique information of the receiver to the encryption key generation function, encrypting the data using the generated encryption key, and the encrypted Transmitting the data.

The unique information of the receiver may be any one of an IP address and a MAC address of the receiver.

The method may further include calculating a length of the data, and generating the encryption key may include generating the encryption key by inputting the calculated data length together with the unique information of the receiver to the encryption key generation function. It may include.

The method may further include transmitting data length information input to the encryption key generation function.

The generating of the encryption key may include converting an IP address of the receiver into one decimal number and inputting the same into the encryption key generation function.

The generating of the encryption key may include converting the MAC address of the receiver into one hexadecimal number and inputting the same to the encryption key generation function.

A data receiving method according to another embodiment of the present invention comprises the steps of receiving encrypted data, inputting unique information of a receiver into a decryption key generation function, generating a decryption key, and using the generated decryption key Decrypting the encrypted data.

The unique information of the receiver may be any one of an IP address and a MAC address of the receiver.

The method may further include receiving data length information, and generating the decryption key may include generating the decryption key by inputting the received data length information together with the unique information of the receiver to the decryption key generation function. It may include.

The generating of the decryption key may include converting an IP address of the receiver into one decimal number and inputting the decryption key generation function.

Generating the decryption key may include converting the MAC address of the receiver into one hexadecimal number and inputting the decryption key generation function.

In another embodiment, a method for transmitting and receiving data includes receiving a ranging request message including a unique identifier of a terminal from a terminal, and receiving a basic capability request message including a supportable encryption key generation function of the terminal. Determining an encryption key generation function for data encryption based on the basic capability request message, and transmitting a basic capability response message including an indicator indicating the determined encryption key generation function; Inputting link data length information to the determined encryption key generation function to generate an encryption key, encrypting the downlink data using the encryption key, and encrypting the downlink data and the downlink data length information. Transmitting to the terminal do.

Generating a decryption key by inputting a unique identifier of the terminal and the downlink data length information to the determined encryption key generation function, and decrypting the encrypted downlink data using the generated decryption key; It may further include.

Receiving encrypted uplink data and uplink data length information from the terminal, generating a decryption key by inputting the unique identifier and the uplink data length information of the terminal to the determined encryption key generation function; and The method may further include decrypting the encrypted uplink data using the generated decryption key.

Since the encryption key used for data encryption is not directly transmitted during the transmission and reception of data, the risk of exposing the encryption key of the data to the outside can be minimized, thereby improving the confidentiality of the transmission and reception data.

1 is a block diagram illustrating a wireless communication system according to an embodiment of the present invention.
2 is a block diagram showing the configuration of a transmitter according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of a receiver according to an embodiment of the present invention.
4 is a block diagram illustrating a data configuration according to an embodiment of the present invention.
5 is a flowchart illustrating a data encryption method according to an embodiment of the present invention.
6 is a flowchart illustrating a data decoding method according to an embodiment of the present invention.
7 is a flowchart illustrating a process of transmitting and receiving encrypted data in a wireless communication system according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art to which the present invention pertains. The present invention may be embodied in many different forms and is not limited to the embodiments described herein.

In addition, in the various embodiments, components having the same configuration are represented by the same reference symbols in the first embodiment. In the other embodiments, only components different from those in the first embodiment will be described .

In order to clearly illustrate the present invention, parts not related to the description are omitted, and the same or similar components are denoted by the same reference numerals throughout the specification.

1 is a block diagram illustrating a wireless communication system according to an embodiment of the present invention.

Referring to FIG. 1, a wireless communication system includes a base station (BS) 10 and a user equipment (UE) 20. The base station 10 generally refers to a fixed station that communicates with the terminal 20 and may be referred to in other terms such as a Node-B, a Base Transceiver System (BTS), an Access Point Can be called. The terminal 20 may be fixed or mobile and may be referred to by other terms such as a mobile station (MS), a user terminal (UT), a subscriber station (SS), a wireless device,

Hereinafter, downlink (DL) means data transmission from the base station 10 to the terminal 20, and uplink (UL) means data transmission from the terminal 20 to the base station 10. . In downlink, the transmitter may be part of the base station 10 and the receiver may be part of the terminal 20. In uplink, the transmitter may be part of the terminal 20 and the receiver may be part of the base station 10.

In uplink, the terminal 20 may generate an encryption key using information of the base station 10 and length information of the uplink data, and may encrypt and transmit uplink data using the generated encryption key. The base station 10 may generate a decryption key using its information and length information of uplink data, and may decrypt uplink data using the generated decryption key.

In downlink, the base station 10 may generate an encryption key using information of the terminal 20 and length information of downlink data, and may encrypt and transmit downlink data using the generated encryption key. The terminal 20 may generate a decryption key using the encrypted own information and the length information of the downlink data, and decrypt the downlink data using the generated decryption key.

Hereinafter, a transmitter that becomes part of the base station 10 in downlink or part of the terminal 20 in uplink will be described.

2 is a block diagram showing the configuration of a transmitter according to an embodiment of the present invention.

Referring to FIG. 2, the transmitter 100 includes an encryption block 110 for encrypting data using receiver information and / or data length information, and a transmission block 120 for transmitting encrypted data.

The encryption block 110 includes a receiver information obtaining unit 111, a data length calculating unit 112, an encryption key generating unit 113, and an encryption unit 114.

The receiver information obtaining unit 111 obtains and stores unique information of the receiver.

The unique information of the receiver may be an Internet Protocol (IP) address of the receiver. An IP address is a unique identification address for distinguishing a sender and a receiver when communicating using the Transmission Control Protocol / Internet Protocol (TCP / IP) protocol. The IP address is written with 4 decimal numbers separated by dots and stored as 32 bits (4 bytes).

The IP address includes a part indicating a network address and a part indicating an address of a communication device connected to the communication network. The IP address includes the following types according to a part indicating a network address and a part indicating a communication device address. The type A IP address may consist of a 7 bit network address and a 24 bit communication device address. Type B IP addresses may consist of 14-bit network addresses and 16-bit communication device addresses. Type C IP addresses may consist of a 21-bit network address and an 8-bit communication device address. The type D IP address may consist of a configuration bit of 1110 and a multicast group address.

Table 1 shows an example of types of IP addresses.

IP address (binary) Mark Network address
(Setting bit) Communication device address
(Multicast group address) 00001010 00000000 00000000 00000000 10.0.0.0 10. 0.0.0 10000000 00000011 00000010 00000011 128.3.2.3 128.3. 2.3 11000000 00000000 00000001 00000111 192.0.1.7 192.0.1. 7 11100000 00000010 00000011 00000001 224.2.3.1 224. 2.3.1

An IP address is unique information of a communication device given by an internet provider that provides an internet service. That is, the receiver has an IP address with its own unique information.

The receiver information obtaining unit 111 may obtain an IP address of the receiver from an internet service provider giving an IP address or may receive an IP address of the receiver from the receiver.

Meanwhile, the unique information of the receiver may be a medium access control (MAC) address of the receiver. The MAC address is a unique identifier assigned at the manufacturing stage of the communication device and used for identification of the communication device. In general, MAC addresses are represented by six hexadecimal digits represented by 8 bits and stored as 48 bits (6 bytes). For example, the MAC address may be represented as '00 -21-1A-2B-CF-23 '. In the direct communication in which the transmitter 100 and the receiver directly transmit and receive data, the MAC address, which is a unique identifier of the receiver, may be used as the unique information of the receiver.

Since the IP address may vary, the receiver information obtaining unit 111 needs to periodically obtain and update the IP address of the receiver. On the other hand, since the MAC address is a fixed value, the receiver information acquisition unit 111 can be used continuously without having to update the IP address of the initially acquired receiver.

The receiver information acquirer 111 transmits the stored unique information of the receiver to the encryption key generator 113.

The data length calculator 112 calculates a length of data. The data length calculator 112 may calculate the length of data of the MAC layer to be transmitted to the receiver, the length of data transmitted from the MAC layer to the physical layer, the length of data of the physical layer, and the like. Data of the MAC layer is called an information block. Data transmitted from the MAC layer to the physical layer is called a transport block. The data of the physical layer is called a code block. Information blocks, transport blocks, and code blocks will be described later with reference to FIG. 4.

The data length calculator 112 may calculate the length of data in binary, decimal, hexadecimal, etc. as necessary. The data length calculator 12 transmits the calculated data length to the encryption key generator 113.

The encryption key generator 113 generates an encryption key corresponding to the unique information and / or data length of the receiver by using an encryption key generation function.

As a cryptographic key generation function, a hash function that generates the same output value for the same input value and generates a different output value for the different input value may be used. Hash functions are computations that produce pseudo-random numbers of fixed length. As the encryption key generation function, various functions such as a key derivation function (KDF) and a message-digest algorithm 5 (MD5) as well as a hash function may be used, and the types of functions used in the encryption key generation unit 113 are not limited. Do not.

However, the receiver to decrypt the encrypted data should generate the decryption key using the same function as the encryption key generation function used by the transmitter 100. Therefore, the encryption key generator 113 should use a function previously promised in the wireless communication system or provide a function used by the receiver to the receiver.

The encryption key generator 113 inputs (1) a receiver's IP address input method, (2) a receiver's MAC address input method, and (3) a receiver's IP address and data length according to a value input to the encryption key generation function. The encryption key may be generated using any one of the method, (4) a receiver MAC address and a data length input method.

(1) The receiver's IP address input method is a method of generating an encryption key by inputting the receiver's IP address to an encryption key generation function. The encryption key generator 113 may convert four decimal numbers (or 32-bit binary numbers) of the IP address of the receiver into one decimal number and input the same to the encryption key generation function. For example, in the example of Table 1, the IP address of '128.3.2.3' may be converted into '128323' and input to the encryption key generation function. That is, four decimal numbers of the IP address of the receiver may be listed in order and converted into one decimal number to be input to the encryption key generation function.

(2) The MAC address input method of the receiver is a method of generating an encryption key by inputting the receiver's MAC address into an encryption key generation function. The encryption key generator 113 lists six hexadecimal digits of the MAC address of the receiver in order, converts them into one hexadecimal number to be input to the encryption key generation function, and inputs the converted hexadecimal number to the encryption key generation function. To generate an encryption key. For example, the MAC address of '00 -21-1A-2B-CF-23 'may be converted into' 00211A2BCF23 'and input to the encryption key generation function.

(3) The receiver's IP address and data length input method is a method of generating an encryption key by inputting the receiver's IP address and data length into an encryption key generation function. The encryption key generator 113 converts four decimal numbers (or 32-bit binary numbers) of the receiver's IP address into one decimal number, and converts the converted decimal number and data length value into an encryption key generation function. You can generate an encryption key by typing in. In this case, the encryption key generator 113 may generate an input value to be input to the encryption key generation function by adding a data length value calculated in decimal to the left or right side of the decimal number in which the receiver's IP address is converted. have. For example, if the IP address of the receiver is converted to '128323' and the data length value is '256', the input value to be input to the encryption key generation function may be generated as '128323256'.

(4) The receiver's MAC address and data length input method is a method of generating an encryption key by inputting the receiver's MAC address and data length into an encryption key generation function. The encryption key generator 113 converts six hexadecimal digits of the MAC address of the receiver into one hexadecimal number, and generates an encryption key by inputting the converted hexadecimal number and the data length into an encryption key generation function. Can be. In this case, the encryption key generator 113 may generate an input value to be input to the encryption key generation function by adding a data length value calculated in hexadecimal to the left or right side of one hexadecimal number in which the receiver's MAC address is converted. have. For example, if the MAC address of the receiver is converted to '00211A2BCF23' and the data length value is 'B1C', the input value to be input to the encryption key generation function may be generated as '00211A2BCF23B1C'.

In the above description, the receiver's IP address and data are input to the encryption key generation function as a decimal number, but the receiver's IP address and data may be input to the encryption key generation function as a binary number other than a decimal number. In addition, although the MAC address and data of the receiver are input to the encryption key generation function as hexadecimal, the receiver MAC address and data may be input to the encryption key generation function as binary or decimal.

The encryption key generating unit 113 (1) the IP address input method of the receiver, (2) the MAC address input method of the receiver, (3) the IP address and data length input method of the receiver, and (4) the MAC address and data of the receiver. The encryption key may be generated using any one of the length input methods. The encryption key generator 113 transmits the generated encryption key to the encryption unit 114.

The encryption unit 114 encrypts the data using the encryption key generated by the encryption key generator 113. The encryption unit 114 transmits the encrypted data to the transmission block 120. In this case, when data is encrypted using the data length, the encryption unit 114 may transmit the data length information to the transmission block 120 together with the encrypted data.

The transmission block 120 transmits encrypted data, or encrypted data and data length information to the receiver. The transmission block 120 includes a channel encoder 121, a mapper 122, and an RF unit 123.

The channel encoder 121 encodes the input data according to a predetermined coding scheme to generate coded data. That is, the channel encoder 121 generates encoded data by performing encoding on the encrypted data and the data length information according to a predetermined coding scheme.

The mapper 122 modulates the encoded data according to a predetermined modulation scheme and maps the symbols to positions representing positions according to amplitude and phase constellation.

The RF unit 123 converts the input symbols into transmission symbols according to a transmission scheme and transmits them through a transmission antenna. For example, the RF unit 123 performs an Inverse Fast Fourier Transform (IFFT) on input symbols according to an orthogonal frequency division multiple access (OFDMA) scheme using multiple carriers, converts them into OFDMA symbols in a time domain, and performs time OFDMA symbols in the region may be transmitted through the transmit antenna. The RF unit 123 may process input symbols according to various transmission schemes such as not only the OFDMA scheme but also Time Division Multiple Access (TDMA), Code Division Multiple Access (CDMA), and the like.

3 is a block diagram illustrating a configuration of a receiver according to an embodiment of the present invention.

Referring to FIG. 3, the receiver 200 includes a reception block 210 for receiving data transmitted from a transmitter, and a decoding block 220 for decoding data using receiver information and / or data length information.

The reception block 210 includes an RF unit 211, a demapper 212, and a channel decoder 213.

The RF unit 211 processes a signal received through the reception antenna according to a transmission scheme, detects a transmission symbol, and transmits the transmitted symbol to the demapper 212. For example, the RF unit 123 may perform a fast fourier transform (FFT) on the received signal according to the OFDMA scheme to detect a symbol in the frequency domain from the received signal.

The demapper 212 and the channel decoder 213 perform the reverse process of the signal processing technique performed by the mapper 122 and the channel encoder 121 of the transmitter 100 to perform data and data encrypted by the transmitter 100. Length information can be detected. The detected encrypted data and data length information are passed to the decryption block 220.

The decryption block 220 includes a receiver information storage unit 221, a decryption key generation unit 222, and a decryption unit 223.

The receiver information storage unit 221 stores its own information. That is, the receiver information storage unit 221 stores at least one of its own IP address and its own MAC address given by the Internet provider. The receiver information storage unit 221 transmits any one of its own IP address and MAC address to the decryption key generation unit 222.

The decryption key generation unit 222 generates a decryption key corresponding to the unique information and / or data length of the receiver 200 using a decryption key generation function.

The decryption key generation unit 222 preferably uses the same function as the encryption key generation function used to generate the encryption key in the transmitter 100 as the decryption key generation function. Accordingly, the decryption key generation unit 222 should use the decryption key generation function previously promised in the wireless communication system or receive information on the encryption key generation function from the transmitter 100.

In addition, the decryption key generation unit 222 is (1) the IP address input method of the receiver, (2) the MAC address input method of the receiver, (3) the IP address and data of the encryption key generation method used by the transmitter 100 (4) A decryption key should be generated in the same manner as the length input method and (4) the receiver's MAC address and data length input method. Accordingly, the decryption key generation unit 222 should use the encryption key generation method previously promised in the wireless communication system or receive information on the encryption key generation method from the transmitter 100.

Decryption key generation unit 222 generates a decryption key by inputting any one of the IP address of the receiver, the MAC address of the receiver and data length information to the decryption key generation function in the same manner as the encryption key generation method used by the transmitter 100 can do. The decryption key generation unit 222 may convert the IP address of the receiver into a single decimal number and input the decryption key generation function. The decryption key generator 222 may convert the MAC address of the receiver into one hexadecimal number and input the decryption key into the generation function.

The decryption key generation unit 222 transfers the generated decryption key to the decryption unit 223.

The decryption unit 223 decrypts the encrypted data using the decryption key generated by the decryption key generation unit 222.

4 is a block diagram illustrating a data configuration according to an embodiment of the present invention.

Referring to FIG. 4, an information block, which is higher layer data to be transmitted from the transmitter 100 to the receiver 200, is generated in the MAC layer.

The information block of the MAC layer is divided into appropriate lengths for transmission to the physical layer. All or part of an information block for transmission to the physical layer is called a transport block. Cyclic redundancy checking (CRC), which is an error detection code, is added to one transport block.

The CRC is to check whether there is an error in the data. A CRC code calculated by applying a polynomial of 16 bits or 32 bits to the transport block is added to the transport block.

The transport block appended with the CRC is divided into appropriate lengths for channel encoding. The divided block is called a code block. The code block has a predetermined length according to the performance of the channel encoder 121. The code block is output as code bits encoded by the channel encoder 121.

The channel encoder 121 may generate a coded bit using a turbo code, a low density parity check code (LDPC), a convolutional code, or the like as an error correction code. For example, the turbo code includes a code block as structural bits and adds at least one parity bits to the structural bits. Turbo codes with a code rate of 1/3 add two parity bits to one structural bit.

Thereafter, the encoded bits are mapped and transmitted to a physical resource by the mapper 122.

The data length calculator 112 may include a length of an information block, a length of a transport block, a length of a code block, a coded block in a process of generating an information block, a process of generating a transport block, a process of generating a code block, and a process of generating coded bits. The length of the bit can be calculated. The data length calculator 112 may encrypt at least one of an information block length, a transport block length, a code block length, and an encoded bit length according to the encryption key generation method of the encryption key generator 113. It may be delivered to the generation unit 113. That is, in generating the encryption key, the encryption key generator 113 may use any one of an information block, a transport block, a code block, and a coded bit length.

5 is a flowchart illustrating a data encryption method according to an embodiment of the present invention.

Referring to FIG. 5, the transmitter acquires receiver information (S110). The receiver information is unique information of the receiver, and may be an IP address of the receiver and a MAC address of the receiver.

The transmitter calculates the length of data to be transmitted to the receiver (S120). The data length is for generating an encryption key, and the transmitter may calculate the length of at least one of an information block, a transport block, a code block, and encoded bits.

The transmitter generates an encryption key using receiver information, or receiver information and data length information (S130). That is, the transmitter generates an encryption key by inputting the receiver's IP address, the receiver's MAC address, data length, and the like into an encryption key generation function. The transmitter may generate an encryption key by converting the receiver's IP address into a single decimal number and inputting the same to an encryption key generation function. The transmitter may generate an encryption key by converting the MAC address of the receiver into one hexadecimal number and inputting the same to an encryption key generation function.

In this case, the transmitter is one of (1) the IP address input method of the receiver, (2) the MAC address input method of the receiver, (3) the IP address and data length input method of the receiver, and (4) the MAC address and data length input method of the receiver. Either one can be used to generate an encryption key. When the encryption key is generated using (1) the IP address input method of the receiver and (2) the MAC address input method of the receiver, the transmitter may skip the data length calculation process (S120).

The transmitter encrypts the data using the generated encryption key (S140).

The transmitter transmits the encrypted data, or the encrypted data and the data length information to the receiver (S150). When generating an encryption key using (1) the IP address input method of the receiver and (2) the MAC address input method of the receiver, the transmitter transmits only the encrypted data to the receiver. When generating an encryption key using (3) the IP address and data length input method of the receiver and (4) the MAC address and data length input method of the receiver, the transmitter transmits the encrypted data and data length information to the receiver.

6 is a flowchart illustrating a data decoding method according to an embodiment of the present invention.

Referring to FIG. 6, the receiver receives encrypted data, or encrypted data and data length information (S210).

The receiver calls receiver information which is its own information (S220). The receiver information may be any one of an IP address and a MAC address of the receiver.

The receiver generates a decryption key using the called receiver information, or the called receiver information and the data length information received from the transmitter (S230). The receiver generates a decryption key using the same decryption key generation function as the encryption key generation function used by the transmitter. The receiver may generate its decryption key by converting its IP address into one decimal number and inputting it to the decryption key generation function. The receiver may generate a decryption key by converting its MAC address into one hexadecimal number and inputting it to the decryption key generation function.

In addition, the receiver may include (1) receiver's IP address input method, (2) receiver's MAC address input method, (3) receiver's IP address and data length input method (4) The decryption key is generated in the same manner as the MAC address and data length input method.

The receiver decrypts the data using the generated decryption key (S240).

As described above, since the encryption key used for data encryption is not directly transmitted during the transmission and reception of data, the risk of exposing the encryption key of the data to the outside can be minimized, thereby improving the confidentiality of the transmission and reception data. .

Meanwhile, in addition to unique information such as an IP address or a MAC address of a receiver, data may be encrypted using an identifier used in an initial access process between a base station and a terminal of a wireless communication system.

Hereinafter, a process of encrypting data using an identifier used in an initial access process between a base station and a terminal in the wireless communication standard IEEE (Institute of Electrical and Electronics Engineers) 802.16 will be described. Here, the wireless communication standard IEEE 802.16 will be described as an example. However, the process of encrypting data using an identifier used in an initial access process between a base station and a terminal includes IEEE 802.11, Generation Partnership Project (3GPP), 4GPP Long Term Evolution (LTE), and the like. Can be applied to various wireless communication standards.

7 is a flowchart illustrating a process of transmitting and receiving encrypted data in a wireless communication system according to an embodiment of the present invention.

7 is a flowchart illustrating a network initialization process. Network initialization refers to a process in which a terminal initially enters a network. Among these, initial ranging is a process of obtaining an accurate timing offset between a terminal and a base station and adjusting initial transmission power.

The terminal scans a radio channel and receives a frame structure used by the base station to synchronize uplink and downlink with the base station. The base station assigns an initial ranging interval consisting of at least one transmission opportunity. The transmission opportunity is an allocation provided to allow a certain set of terminals to transmit an initial ranging request.

The terminal transmits a ranging code to attempt initial ranging (S310). The ranging code is a code division multiple access (CDMA) code that is arbitrarily selected from a series of allowed codes. The ranging code may use a pseudo-random bit sequence (PRBS) coded binary phase shift keying (BPSK) code.

The base station transmits a ranging response message to the terminal in response to the ranging code (S315). The ranging response message includes ranging status information. If the ranging status is 'continue', the terminal continues to send the ranging code.

After receiving the ranging response message having the ranging status 'success', the terminal transmits a ranging request message including its own unique identifier to the base station (S320). Since the ranging process is a contention-based process, when ranging is successfully performed, an identifier for identifying a corresponding terminal is required. The unique identifier may be a MAC address of the terminal. That is, the MAC address of the terminal may be delivered to the base station through the ranging request message.

The base station transmits the ranging response message including the first primary management connection identifier (CID) to the terminal (S325). The connection identifier (CID) refers to a value for confirming a connection in the MAC of the base station and the terminal.

The base station and the terminal negotiate a basic capability (S330). As soon as ranging is completed, the terminal transmits a basic capability request message including its basic capability. The basic capability of the UE included in the basic capability request message includes whether to support ARQ (Automatic Repeat Request), MAC level CRC support, supportable encryption key generation function (decryption key generation function) information, and supportable encryption key generation method (decryption key). Generation method).

The base station may determine an encryption key generation function (decryption key generation function) and encryption key generation method (multiplex key generation method) to be used for data encryption based on the basic capability request message. The base station transmits a basic capability response message in response to the basic capability request message. The basic capability response message includes an indicator indicating an encryption key generation function (decryption key generation function) and an encryption key generation method (decryption key generation method) determined by the base station.

The terminal transmits a registration request message to the base station (S340). The registration request message includes a first CID.

The base station transmits a registration response message in response to the registration request message (S345). The registration response message includes a secondary management CID (CID). The second CID is a CID used while the terminal is registered in the wireless communication network. When the terminal is registered in the wireless communication network, network initialization is completed.

In the network initialization process, supportable encryption key generation function information (decryption key generation function information) and supportable encryption key generation method (decryption key generation method) of the terminal are transmitted to the base station, and the encryption key generation function (decryption key) by the base station. Generation function) and encryption key generation method (decryption key generation method) are determined. The terminal receives the first CID and the second CID from the base station, and the base station receives the MAC address of the terminal. Thereafter, the base station and the terminal may perform data encryption and decryption using the first CID, the second CID, and the MAC address of the terminal.

The terminal generates an encryption key and performs data encryption according to the determined encryption key generation function and encryption key generation method (S350). The terminal may generate an encryption key using any one of the first CID and the second CID, or any one of the first CID and the second CID and data length information. In addition, since the base station knows the MAC address of the terminal through the basic capability negotiation process (S330), the terminal may generate an encryption key using its MAC address, or its MAC address and data length information. The terminal encrypts uplink data with the generated encryption key.

The terminal transmits uplink data to the base station (S355). The terminal may further transmit data length information according to an encryption key generation method.

The base station generates a decryption key and performs data decryption according to the determined decryption key generation function and decryption key generation method (S360). The base station may decode uplink data using any one of the first CID and the second CID, or any one of the first CID and the second CID and data length information. The base station may decode uplink data using the MAC address of the terminal, or the MAC address and data length information of the terminal.

The base station generates an encryption key and performs data encryption according to the determined encryption key generation function and encryption key generation method (S370). The base station may generate an encryption key using any one of the first CID and the second CID, or any one of the first CID and the second CID and data length information. The base station may generate an encryption key using the MAC address of the terminal, or the MAC address and data length of the terminal. The base station encrypts the downlink data with the generated encryption key.

The base station transmits downlink data to the terminal (S375). The base station may further transmit the data length information according to the encryption key generation method.

The terminal generates a decryption key according to the determined decryption key generation function and decryption key generation method and performs data decryption (S380). The terminal may decode downlink data using any one of the first CID and the second CID, or any one of the first CID and the second CID and data length information. The terminal may decode downlink data using its MAC address, or its MAC address and data length information.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are illustrative and explanatory only and are intended to be illustrative of the invention and are not to be construed as limiting the scope of the invention as defined by the appended claims. It is not. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

10: base station 20: terminal
100 transmitter 110 encryption block
111 receiver information acquisition unit 112 data length calculation unit
113: encryption key generation unit 114: encryption unit
120: transmission block 121: channel encoder
122: mapper 123: RF unit
200 receiver 210 reception block
211: RF unit 212: demapper
213: channel decoder 220: decoding block
221: receiver information storage unit 222: decryption key generation unit
223: decryption unit

Claims (40)

delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete delete In a data transmission system,
An encryption block for encrypting data using the unique information of the receiver; And
A transmission block for transmitting the encrypted data,
The encryption block,
A receiver information acquisition unit for obtaining unique information of the receiver;
An encryption key generation unit for generating an encryption key by inputting unique information of the receiver into an encryption key generation function; And
A transmitter including an encryption unit configured to generate the encrypted data using the generated encryption key;
A receiving block for receiving encrypted data; And
Decryption block for decrypting the encrypted data using the unique information of the receiver,
The decoding block,
A receiver information storage unit for storing unique information of the receiver;
A decryption key generation unit configured to generate decryption keys by inputting unique information of the receiver into a decryption key generation function; And
A receiver including a decryption unit for decrypting the encrypted data using the generated decryption key,
The encryption key generation unit converts the IP address of the receiver into one decimal number and inputs it to the encryption key generation function, and converts the MAC address of the receiver into one hexadecimal number and inputs it to the encryption key generation function. With
The decryption key generation unit converts the IP address of the receiver into one decimal number and inputs it to the decryption key generation function, and converts the MAC address of the receiver into one hexadecimal number and inputs the decryption key generation function. Data transmission system. The method of claim 26,
And the unique information of the receiver is one of an IP (Internet Protocol) address and a MAC (Medium Access Control) address of the receiver. 28. The method of claim 27,
The encryption block further includes a data length calculation unit for calculating the length of the data,
The encryption key generation unit is a transmitter for generating the encryption key by inputting the calculated data length together with the unique information of the receiver to the encryption key generation function. 29. The method of claim 28,
The transmission block is a data transmission system, characterized in that the transmitter for transmitting the data length information input to the encryption key generation function. The method of claim 26,
And the unique information of the receiver is one of an IP address and a MAC address of the receiver. 31. The method of claim 30,
The receiving block further receives data length information from a transmitter,
And the decryption key generation unit generates the decryption key by inputting the received data length information together with the unique information of the receiver to the decryption key generation function. In the data transmission method,
Generating an encryption key by inputting unique information of the receiver into an encryption key generation function;
Encrypting data using the generated encryption key; And
Transmitting the encrypted data;
Receiving the encrypted data;
Generating a decryption key by inputting unique information of the receiver into a decryption key generation function; And
Decrypting the encrypted data using the generated decryption key,
Generating the encryption key,
Converting the receiver's IP address into a single decimal number and inputting it to the encryption key generation function;
Converting the MAC address of the receiver into one hexadecimal number and inputting the same into the encryption key generation function;
The generating of the decryption key may include converting an IP address of the receiver into one decimal number and inputting the decryption key generation function.
Converting the MAC address of the receiver into one hexadecimal number and inputting the same to the decryption key generation function. 33. The method of claim 32,
The unique information of the receiver is any one of an IP address and a MAC address of the receiver. 34. The method of claim 33,
Calculating a length of the data;
Generating the encryption key,
And generating the encryption key by inputting the calculated data length together with the unique information of the receiver to the encryption key generation function. 35. The method of claim 34,
And transmitting data length information input to the encryption key generation function. 33. The method of claim 32,
And unique information of the receiver is one of an IP address and a MAC address of the receiver. 37. The method of claim 36,
Receiving data length information,
Generating the decryption key,
And generating the decryption key by inputting the received data length information together with the unique information of the receiver to the decryption key generation function. 33. The method of claim 32, wherein the data encryption is performed using an identifier used in an initial access process between a base station and a terminal.
Receiving a ranging request message including a unique identifier of the terminal from the terminal;
Receiving a basic capability request message including a supportable encryption key generation function of the terminal;
Determining an encryption key generation function for data encryption based on the basic capability request message, and transmitting a basic capability response message including an indicator indicating the determined encryption key generation function;
Generating an encryption key by inputting unique identifier and downlink data length information of the terminal to the determined encryption key generation function;
Encrypting the downlink data using the encryption key; And
And transmitting the encrypted downlink data and the downlink data length information to the terminal. 39. The method of claim 38,
Generating a decryption key by inputting a unique identifier of the terminal and the downlink data length information to the determined encryption key generation function, and decrypting the encrypted downlink data using the generated decryption key; The data transmission method further comprises. 39. The method of claim 38,
Receiving encrypted uplink data and uplink data length information from the terminal;
Generating a decryption key by inputting the unique identifier of the terminal and the uplink data length information to the determined encryption key generation function; And
And decrypting the encrypted uplink data using the generated decryption key.

Images