KR101613572B1 - Variable encryption algorithm management apparatus and method based on the security environment changes - Google Patents

Abstract

Disclosed are an apparatus and a method for managing variable encryption algorithm base on security environment changes. An apparatus and a method for managing a variable encryption algorithm base on security environment changes, according to an embodiment of the present invention, may reinforce the security of a network in such a manner that: for each specific period, the number of times of occurrences of security events relating to failures of data encryption and decryption which are generated from a plurality of terminals connected through a network is counted, and for each said period, a security threat level according to the number of times of the security events is calculated and a data encryption algorithm according to the calculated security threat level is transmitted to the plurality of terminals to lead the plurality of terminals to perform data communication on the basis of the data encryption method changed for each said period.

Description

FIELD OF THE INVENTION [0001] The present invention relates to a variable encryption algorithm management apparatus and method based on security environment change,

Embodiments of the present invention relate to security technologies for enhancing security in environments where various terminals are connected to each other like a network, such as Internet of Thing.

2. Description of the Related Art [0002] Recently, various network environments such as a wireless Internet or a mobile communication have been established, so that a user can access the Internet anywhere using a terminal capable of network communication.

Recently, with the construction of such a network environment, an Internet of Thing system has been introduced to allow a variety of objects in daily life to be connected to one another and to share information.

In this kind of internet system, the necessity of information security is very important in that various information is exchanged between terminals through a network.

Generally, in a method for information security, when a transmitting side transmits data to a receiving side, the transmitting side performs encryption according to a data encryption method previously shared with the corresponding data, and then transmits the encrypted data to the receiving side. When the receiving side decrypts the encrypted data .

In this regard, security can be enhanced by constructing a security environment in which data is encrypted and transmitted / received according to a pre-shared data encryption scheme even in an environment where various terminals are connected to each other, such as the object Internet system.

However, in an environment of transmitting and receiving data by encrypting data according to a pre-shared encryption method, there is a problem in security when the encryption method is exposed to others. Therefore, In an environment where encryption is performed in a simple manner, data encryption according to one encryption method may have various security vulnerabilities.

Therefore, in a situation where various terminals are connected to each other through a network, as in the object Internet system, instead of simply performing data exchange between terminals according to a single encryption method, a change in the security environment It is necessary to study a technique for enhancing security by introducing a security technique that allows each terminal to adaptively change the encryption scheme used in data exchange.

An apparatus and method for managing a variable encryption algorithm based on a security environment change according to an exemplary embodiment of the present invention includes a management server for managing a number of times of occurrence of a security event associated with a failure of data encryption decryption generated from a plurality of terminals connected to a network Calculates a security threat level according to the number of occurrences of the security event and transmits a data encryption algorithm according to the security threat level to the plurality of terminals every cycle, And to enhance the security of the network by guiding the data exchange based on the encryption method.

An apparatus for managing a variable encryption algorithm based on a security environment change according to an embodiment of the present invention includes an index database storing index values for each of a plurality of predetermined scrambling schemes associated with encryption of plaintext data, A combination database in which selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is separately stored and stored in a plurality of terminals A security event counting unit for counting the number of occurrences of a security event associated with a data encryption / decryption failure occurring at the time of data exchange between the data security decryption unit and the data security decryption unit, Total threat level for the network And extracting first selection combination information for an index value corresponding to the calculated total security threat level from the combination database at the predetermined period interval and outputting the first selection combination information to the plurality of terminals And the plurality of terminals store the index values corresponding to the plurality of predetermined scrambling schemes and the plurality of selected scrambling schemes on the memory, and the first selection When at least one scrambling scheme is selected in accordance with a combination scheme of index values according to the first selection combination information among the plurality of scrambling schemes selected in accordance with at least one scrambling scheme selected and combined Data is encrypted to perform data exchange.

According to another aspect of the present invention, there is provided a method of managing a variable encryption algorithm based on a security environment change, the method comprising: maintaining an index database storing index values of a plurality of predetermined scrambling schemes associated with encryption of plaintext data; Maintaining a combination database in which selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is stored separately; Counting the number of occurrences of a security event associated with a data encryption / decryption failure occurring at the time of exchanging data between a plurality of terminals, counting the number of times of occurrence of the security event counted at the predetermined period interval The total security threat to the network And extracting first selection combination information on an index value corresponding to the calculated total security threat level from the combination database at the predetermined period interval and outputting the first selection combination information to the plurality of terminals Wherein the plurality of terminals store the plurality of predetermined scrambling schemes and the index values corresponding to each of the plurality of selected scrambling schemes on a memory, When at least one scrambling scheme is selected in accordance with a combination scheme of index values according to the first selection combination information among the plurality of scrambling schemes selected in accordance with at least one scrambling scheme selected and combined Data is encrypted to perform data exchange.

An apparatus and method for managing a variable encryption algorithm based on a security environment change according to an exemplary embodiment of the present invention includes a management server for managing a number of times of occurrence of a security event associated with a failure of data encryption decryption generated from a plurality of terminals connected to a network Calculates a security threat level according to the number of occurrences of the security event and transmits a data encryption algorithm according to the security threat level to the plurality of terminals every cycle, It is possible to enhance security for the network by inducing data exchange based on the encryption scheme.

1 is a system conceptual diagram schematically showing a network system according to an embodiment of the present invention.
2 is a diagram illustrating an example of a data header structure for explaining a process of generating a security event based on a header structure of data by a plurality of terminals connected to a network.
3 is a diagram illustrating a structure of a variable encryption algorithm management apparatus based on security environment change according to an embodiment of the present invention.
4 is a flowchart illustrating a variable encryption algorithm management method based on security environment change according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a system conceptual diagram schematically showing a network system according to an embodiment of the present invention.

Referring to FIG. 1, the network system may include a variable encryption algorithm management apparatus 110 and a plurality of terminals 121, 122, 123, 124, and 125 based on a security environment change.

In this case, the plurality of terminals 121, 122, 123, 124, and 125 may be connected to each other via a network to exchange data, and the variable encryption algorithm management apparatus 110 based on a change in security environment may include a plurality of terminals 121 122, 123, 124, and 125, respectively, and can exchange data with the plurality of terminals 121, 122, 123, 124, and 125, respectively.

First, the variable encryption algorithm management apparatus 110 based on security environment change stores an index database in which index values for a plurality of predetermined scrambling schemes associated with encryption of plaintext data are stored May be included.

Here, the scrambling method refers to a data changing method used for encrypting plaintext data, and there are usually methods such as transposition, substitution, and algebraic.

For example, if data scrambling is performed by replacing the second bit and the third bit with the plaintext data '1010', the plaintext data may be changed to encrypted data '1101'.

In this regard, index values for each of the plurality of selected scrambling schemes may be stored in the index database as shown in Table 1 below.

Scrambling  system Index value substitution One Replacement 2 Arithmetic 3 ... ...

In the variable encryption algorithm management apparatus 110 based on the security environment change, a combination database in which the selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is separately stored and stored May be included.

In this regard, in the combination database, selection combination information for at least one index value according to each of the plurality of selected security threat levels may be stored in a form as shown in Table 2 below.

Security threat level Selection combination information for index values Level 1 One Level 2 1, 2 Level 3 1, 2, 3 Level 4 3, 1, 2 ... ...

Under such circumstances, the variable encryption algorithm management apparatus 110 based on the change of the security environment, when exchanging data between the plurality of terminals 121, 122, 123, 124, and 125 connected to each other in the network The number of occurrences of the security event associated with the occurrence of the data encryption / decryption failure can be counted.

When the encrypted data is received from any one of the terminals, the plurality of terminals 121, 122, 123, 124, and 125 decrypt the encrypted data and generate decrypted data Parses the decoded data to determine a data header structure included in the decoded data, and generates header structure information based on a communication protocol standard for exchanging data of the decoded data stored in the memory with the data header structure If the data header structure is not matched with the header structure information, the security event may be generated.

For example, when the first terminal 121 of the plurality of terminals 121, 122, 123, 124, and 125 encrypts and transmits the IP-based data to the second terminal 122, After decoding the data, the decoded data may be parsed to determine the data header structure included in the decoded data.

At this time, even if the data is scrambled and encrypted, the type and the number of bits of each data included in the header structure of the data are not changed. Therefore, the terminal 2 122 may store the data header structure included in the decoded data The header structure information according to the communication protocol standard for IP-based data such as the example shown in FIG. 2 is compared, and if the data header structure is determined not to match the header structure information, the security event may be generated .

That is, in the data header structure included in the decoded data, as in the example shown in FIG. 2, in the case of IP version 4, the first 4 bits are binary number "0100" It is necessary not only to have a value specified in the standard for each back position having a value of up to 15, but also to match the value stored in the "Header Checksum" when calculating the checksum of the information contained in the header, The terminal 2 122 can not recognize that the security event related to the data encryption / decryption failure is not matched with the header structure information according to the communication protocol standard, Can be generated.

In this manner, the plurality of terminals 121, 122, 123, 124, and 125 determine whether the data encryption / decryption has been normally performed based on the header structure of the received data during data exchange with each other, If it is determined that it is not performed, the security event may be generated.

At this time, the variable encryption algorithm management apparatus 110 based on the security environment change can count the number of occurrences of the security events generated from the plurality of terminals 121, 122, 123, 124, and 125 at predetermined period intervals .

The variable encryption algorithm management apparatus 110 based on the security environment change counts the number of occurrences of the security event at the predetermined period interval and calculates the number of occurrences of the security events counted at the predetermined period interval The entire security threat level for the network can be calculated at a predetermined periodic interval.

In this regard, the variable encryption algorithm management device 110 based on the change of the security environment determines whether or not the security event counted in the predetermined period interval based on the security threat score per predetermined number of occurrences When the calculation of the sum of the security threat scores is completed, the threat level table in which different security threat levels are allocated according to a predetermined score range, The security threat level corresponding to the sum of the threat scores may be selected, and the selected security threat level may be determined as the total security threat level for the network.

For example, it is assumed that the predetermined period is one day, and the security threat score designated in advance for the occurrence count of the security event is 10 points.

At this time, the variable encryption algorithm management apparatus 110 based on the security environment change can count the security events generated from the plurality of terminals 121, 122, 123, 124, and 125 at intervals of one day.

If the security event is counted as 10 occurrences in a specific one-day period, the variable encryption algorithm management device 110 based on the change in the security environment determines that the security threat score specified in the one- Therefore, the total number of the security threat points according to the number of occurrences of the security event can be calculated as 100 points.

Then, the variable encryption algorithm management apparatus 110 based on the change of the security environment refers to the threat level table to which different security threat levels are assigned according to a predetermined score range, and calculates a security threat level corresponding to the sum of the security threat scores And determine the selected security threat level as the total security threat level for the network.

Assuming that the threat level table is configured as shown in Table 3 below, the variable encryption algorithm management apparatus 110 based on the change of the security environment calculates a security threat level corresponding to 100 points, which is the sum of the security threat scores, Level 2 'and then determine the' level 2 'as the total security threat level for the network in the specific one-day period.

Sum of security threat scores Security threat level 0 to 50 points Level 1 51 ~ 100 points Level 2 101 to 150 points Level 3 151 ~ 200 points Level 4 ... ...

When the total security threat level for the network is calculated at the predetermined periodic interval, the variable encryption algorithm management apparatus 110 based on the security environment change calculates the total security level of the calculated security level from the combination database at the predetermined period interval 122, 123, 124 and 125. The first selection combination information may be transmitted to a plurality of terminals 121, 122, 123, 124 and 125 by extracting first selection combination information for index values corresponding to the threat level.

For example, as described above, when the total security threat level for the network is calculated as 'level 2' in the specific one-day period, the variable encryption algorithm management apparatus 110 based on the security environment change, 1, 2 'as the first selection combination information for the index value corresponding to the' level 2 'from the combination database such as the first combination information, and outputs the first selection combination information to the plurality of terminals 121, 122, 123 and 124 , 125, respectively.

At this time, the plurality of terminals 121, 122, 123, 124, and 125 may store, in its own memory, the plurality of selected scrambling schemes identical to those included in the index database of Table 1, Scrambling schemes, and when the first selection combination information is received from the variable encryption algorithm management device 110 based on a change in security environment, among the plurality of selected scrambling schemes At least one scrambling scheme may be selected and combined according to a combination scheme of index values according to the first selection combination information, and data may be exchanged by encrypting data according to the selected combined scrambling scheme.

That is, when '1, 2' is received as the first selection combination information from the variable encryption algorithm management apparatus 110 based on the security environment change, the plurality of terminals 121, 122, 123, 124, A substitution that is a scrambling method corresponding to the index value '1', a 'substitution' corresponding to the index value '2', and data is encrypted according to a selective scrambling method such as 'substitution and substitution' Exchange can be performed.

In other words, when transmitting data to a counterpart terminal, the plurality of terminals 121, 122, 123, 124, and 125 perform data scrambling of 'replacement' for the corresponding data and then perform data scrambling , And the terminal that has received the data can perform data decoding by performing inverse conversion on 'substitution' and inverse conversion on 'substitution' with respect to the received data.

As a result, the variable encryption algorithm management apparatus 110 based on the security environment change according to an embodiment of the present invention generates from the plurality of terminals 121, 122, 123, 124, and 125 connected to the network A security threat level corresponding to the number of occurrences of the security event is calculated for each period, and a data encryption algorithm according to the security threat level is transmitted to a plurality of terminals 121, 122, 123, 124, and 125 to thereby cause the plurality of terminals 121, 122, 123, 124, and 125 to perform data exchange based on the changed data encryption method every cycle, The security can be enhanced.

According to an embodiment of the present invention, the variable encryption algorithm management apparatus 110 based on a security environment change calculates a total security threat level for the network at the predetermined period interval. It may further include a configuration that considers data traffic occurring on the network, rather than only counting the number of occurrences.

In general, when data traffic suddenly increases on the network, hacking to the network may be caused. Therefore, it may be necessary to consider the data traffic in the process of calculating the security threat level.

Therefore, the variable encryption algorithm management apparatus 110 based on the security environment change can measure the data traffic occurring on the network at the predetermined period interval in the process of calculating the security threat level.

The variable encryption algorithm management apparatus 110 based on the security environment change may then determine whether the data traffic measured at the predetermined periodicity interval exceeds the reference traffic.

If it is determined that the data traffic measured at the predetermined periodic interval exceeds the reference traffic, the variable encryption algorithm management apparatus 110 based on the change in the security environment determines a predetermined weight for the sum of the security threat scores The security threat level corresponding to the sum of the security threat scores to which the selected weight is applied can be selected by referring to the threat level table.

For example, if it is assumed that the data traffic measured by the variable encryption algorithm management apparatus 110 based on the security environment change in a specific one-day period exceeds the reference traffic, the variable encryption algorithm management apparatus 110 based on the security environment change It is possible to select a security threat level corresponding to the sum of the security threat scores to which the selected weight is applied by referring to the threat level table after applying the selected weight to the sum of the security threat scores calculated in a specific one- .

In this case, if the sum of the security threat scores is calculated as '100 points' in the specific one-day period and the selected weight is '2 times', the variable encryption algorithm management apparatus 110 based on the security environment change Since the sum of the security threat scores to which the selected weight is applied is '200 points' in the specific one-day cycle, it is determined that the sum of the security threat scores corresponding to the sum of the security threat scores to which the selected weight is applied You can select 'Level 4' instead of 'Level 2' as the security threat level.

According to an embodiment of the present invention, a total security threat level for a network is calculated in a specific period, and selection combination information on an index value corresponding to the security threat level is transmitted to a plurality of terminals 121, 122, 123, 124 And 125 to thereby allow the plurality of terminals 121, 122, 123, 124 and 125 to encrypt and exchange data according to the scrambling scheme corresponding to the selected combination information, If no security event has occurred between the plurality of terminals 121, 122, 123, 124, and 125 during the security environment change, the variable encryption algorithm management device 110 based on the security environment change judges that the security reaches a somewhat safe level , The entire security threat level for the network can be changed from the current level to the lower level.

In this regard, the variable encryption algorithm management apparatus 110 based on the security environment change transmits predetermined selection combination information to the plurality of terminals 121, 122, 123, 124, and 125 every predetermined period, It is possible to confirm whether or not the security event has occurred at a predetermined time interval within the period.

At this time, the variable encryption algorithm management apparatus 110 based on the security environment change changes the entire security threat level to a lower level every time it is confirmed that the security event is not generated at the predetermined time interval in each cycle .

Then, the variable encryption algorithm management apparatus 110 based on the change of the security environment updates the index value corresponding to the changed lower level from the combination database every time the entire security threat level is changed to the lower level 122, 123, 124, and 125. In this case, the second selection combination information may be transmitted to the plurality of terminals 121, 122, 123, 124,

At this time, the plurality of terminals 121, 122, 123, 124, and 125 may encrypt and decode data according to the scrambling method corresponding to the second selected combination information.

As a result, the variable encryption algorithm management apparatus 110 based on the security environment change according to an embodiment of the present invention calculates the security threat level of the entire network at every predetermined period, It is determined that there is no security event associated with the data encryption / decryption failure in the network for a predetermined time in each cycle, the security is secure to some extent The security threat level of the entire network is changed to a lower level and the encryption algorithm corresponding to the lower level is transmitted to the plurality of terminals 121, 122, 123, 124 and 125, 122, 123, 124, and 125 can reduce the complexity of the encryption algorithm used in exchanging data, so that the plurality of terminals 121, 122, 123, 124, The system resources used for data encryption / decryption can be minimized.

3 is a diagram illustrating a structure of a variable encryption algorithm management apparatus based on security environment change according to an embodiment of the present invention.

3, the variable encryption algorithm management apparatus 310 based on security environment change according to an exemplary embodiment of the present invention includes an index database 311, a combination database 312, a security event counting unit 313, (314) and an algorithm transmission unit (315).

The index database 311 stores index values for each of a plurality of predetermined scrambling schemes associated with encryption of plaintext data.

The combination database 312 stores selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values.

The security event counting unit 313 counts the number of occurrences of the security events associated with the data encryption / decryption failure occurring at the time of data exchange between the plurality of terminals 331, 332, and 333 connected to each other in the network Count.

The level operation unit 314 calculates the total security threat level for the network at the predetermined period intervals based on the number of times the security events are counted at the predetermined period interval.

The algorithm transmitting unit 315 extracts the first selected combination information for the index value corresponding to the calculated total security threat level from the combination database 312 at the predetermined periodic interval, To the terminals 331, 332, and 333 of the base station.

At this time, the plurality of terminals 331, 332, and 333 store the index values corresponding to the plurality of predetermined scrambling schemes and the plurality of selected scrambling schemes on the memory, When at least one scrambling scheme is selected in accordance with a combination scheme of index values according to the first selection combination information among the plurality of scrambling schemes selected in accordance with at least one scrambling scheme selected and combined Data can be encrypted to perform data exchange.

In this case, according to an embodiment of the present invention, when the encrypted data is received from any one of the terminals, the plurality of terminals 331, 332, and 333 decrypt the encrypted data and then parse the decrypted data, The data header structure of the decoded data is compared with header structure information based on a communication protocol standard for exchanging data of the decoded data stored in the memory, May not be matched with the header structure information, the security event may be generated.

Also, according to an embodiment of the present invention, the level operation unit 314 may include a sum operation unit 316 and a level selection unit 317.

The total operation unit 316 calculates the sum of the security threat scores according to the number of occurrences of the security events counted at the predetermined period interval based on the security threat score per occurrence count previously specified for the security event .

The level selection unit 317 selects a security threat level corresponding to the sum of the security threat scores by referring to a threat level table to which different security threat levels are assigned according to a predetermined score range, It is determined as the total security threat level for the network.

In this case, the level calculator 314 may further include a traffic measuring unit 318 and a traffic determiner 319 according to an embodiment of the present invention.

The traffic measurement unit 318 measures data traffic occurring on the network at the predetermined periodic interval.

The traffic determination unit 319 determines whether the data traffic measured at the predetermined periodic interval exceeds the reference traffic.

At this time, the sum operation unit 316 may apply a predetermined weight to the sum of the security threat scores when it is determined that the data traffic measured at the predetermined period interval exceeds the reference traffic, The control unit 317 can refer to the threat level table and select a security threat level corresponding to the sum of the security threat scores to which the selected weight is applied.

In addition, according to an embodiment of the present invention, the variable encryption algorithm management apparatus 310 based on the security environment change may further include a security event confirmation unit 320 and a lower level change unit 321. [

When the first selected combination information is transmitted to the plurality of terminals 331, 332, and 333, the security event verifier 320 calculates the total security threat level for each predetermined period, Information is transmitted to the plurality of terminals 331, 332 and 333, and then it is checked whether or not the security event has occurred at a predetermined time interval within each cycle.

The lower level change unit 321 changes the overall security threat level to a lower level whenever it is confirmed that the security event is not generated at the predetermined time interval in each cycle.

At this time, the algorithm transmitting unit 315 receives from the combination database 312 an index value corresponding to the changed lower level every time the entire security threat level is changed to the lower level in each cycle in the predetermined period The second selection combination information may be extracted to transmit the second selection combination information to the plurality of terminals 331, 332, and 333.

The configuration of the variable encryption algorithm management apparatus 310 based on the security environment change according to the embodiment of the present invention has been described above with reference to FIG. Here, the variable encryption algorithm management apparatus 310 based on the security environment change according to an embodiment of the present invention may correspond to the variable encryption algorithm management apparatus 110 based on the security environment change described with reference to FIGS. 1 and 2 Therefore, a detailed description thereof will be omitted.

4 is a flowchart illustrating a variable encryption algorithm management method based on security environment change according to an embodiment of the present invention.

In step S410, an index database in which index values are stored for each of a plurality of predetermined scrambling schemes associated with encryption of plaintext data is maintained.

In step S420, a combination database in which selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is separately stored and stored.

In step S430, the number of occurrences of a security event related to a data encryption / decryption failure occurring at the time of data exchange between a plurality of terminals connected to each other on a network is counted at a predetermined periodic interval.

In step S440, the overall security threat level for the network is calculated at the predetermined periodic interval based on the number of occurrences of the security events counted at the predetermined periodic interval.

In step S450, the first selection combination information for the index value corresponding to the calculated total security threat level is extracted from the combination database at the predetermined period interval, and the first selection combination information is transmitted to the plurality of terminals Lt; / RTI >

The plurality of terminals store the plurality of predetermined scrambling schemes and the index values corresponding to each of the plurality of selected scrambling schemes on the memory, and when the first selected combination information is received, At least one scrambling scheme is selected and combined according to a combination scheme of index values according to the first selection combination information among a plurality of predetermined scrambling schemes, and data is encrypted according to at least one selected scrambling scheme to perform data exchange Can be performed.

In this case, according to an embodiment of the present invention, when the encrypted data is received from one of the terminals, the plurality of terminals decrypt the encrypted data and then parse the decrypted data, And comparing the data header structure with header structure information according to a communication protocol standard for exchanging data of the decoded data previously stored on the memory to match the header structure information with the header structure information, It may generate the security event.

According to an embodiment of the present invention, in step S440, the number of occurrences of the security events counted at the predetermined period interval based on the number of security threats per occurrence count that is predetermined for the security event And selecting a security threat level corresponding to the sum of the security threat scores by referring to a threat level table to which different security threat levels are allocated according to a predetermined score range, And determining the security threat level as the total security threat level for the network.

According to an embodiment of the present invention, the step S440 may include measuring data traffic occurring on the network at the predetermined periodic interval, and determining whether the data traffic measured at the predetermined period interval exceeds the reference traffic And a step of determining whether or not to perform the process.

The step of calculating the sum of the security threat scores may include applying a predetermined weight to the sum of the security threat scores when it is determined that the data traffic measured at the predetermined periodic interval exceeds the reference traffic, The determining of the total security threat level may refer to the threat level table and may select a security threat level corresponding to a sum of the security threat scores to which the selected weight is applied.

According to an embodiment of the present invention, in the variable encryption algorithm management method based on the security environment change, the entire security threat level is calculated every predetermined period, and the first selection combination information is transmitted to the plurality of terminals Determining whether the security event has occurred at a predetermined time interval within each cycle after the first selection combination information is transmitted to the plurality of terminals, Changing the entire security threat level to a lower level every time it is determined that the security event does not occur at intervals, and changing the entire security threat level to the lower level in each cycle A second selection group for index values corresponding to the changed lower level from the combination database, Extracts the information of the second selected combination information may further include the step of transmitting to said plurality of terminals.

The variable encryption algorithm management method based on the security environment change according to the embodiment of the present invention has been described above with reference to FIG. Here, the variable encryption algorithm management method based on security environment change according to an embodiment of the present invention is a method for managing the configuration of the operations of the variable encryption algorithm management apparatuses 110 and 310 based on the security environment change described with reference to FIG. 1 to FIG. And therefore, a detailed description thereof will be omitted.

A variable encryption algorithm management method based on security environment change according to an embodiment of the present invention can be implemented by a computer program stored in a storage medium for execution through a combination with a computer.

In addition, the variable encryption algorithm management method based on the security environment change according to an embodiment of the present invention may be implemented in the form of a program command which can be executed through various computer means and recorded in a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above, the present invention has been described with reference to particular embodiments, such as specific elements, and specific embodiments and drawings. However, it should be understood that the present invention is not limited to the above- And various modifications and changes may be made thereto by those skilled in the art to which the present invention pertains.

Accordingly, the spirit of the present invention should not be construed as being limited to the embodiments described, and all of the equivalents or equivalents of the claims, as well as the following claims, belong to the scope of the present invention .

110: Variable encryption algorithm management device based on security environment change
121, 122, 123, 124, 125: a plurality of terminals
310: Variable encryption algorithm management device based on security environment change
311: index database 312: combination database
313: Security event count unit 314: Level operation unit
315: Algorithm transmission unit 316: Sum operation unit
317: level selection unit 318: traffic measurement unit
319: Traffic judging unit 320: Security event checking unit
321: Lower level changing section
331, 332 and 333:

Claims (12)

An index database storing index values for each of a plurality of predetermined scrambling schemes associated with encryption of plaintext data;
A combination database in which selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is stored separately;
A security event counting unit counting the number of occurrences of a security event associated with a data encryption / decryption failure occurring at the time of exchanging data between a plurality of terminals connected to each other at a predetermined cycle interval;
A level operation unit for calculating a total security threat level for the network at the predetermined periodic interval based on the number of occurrences of the security events counted at the predetermined periodic interval; And
Extracting first selection combination information for an index value corresponding to the calculated total security threat level from the combination database at the predetermined period interval and transmitting the first selection combination information to the plurality of terminals part
Lt; / RTI >
The plurality of terminals
When the encrypted data is received from any one of the terminals, the decrypted data is parsed and the decrypted data is parsed to grasp the data header structure included in the decrypted data, And comparing the header structure information according to a communication protocol standard for exchanging data of the decoded data stored in advance on the header structure information, generates the security event if it is determined that the data header structure does not match the header structure information,
The plurality of terminals
Storing the index values corresponding to the plurality of predetermined scrambling schemes and the plurality of selected scrambling schemes on the memory, and when the first selection combination information is received, the plurality of predetermined scrambling schemes Wherein the at least one scrambling scheme is selected and combined according to a combination scheme of index values according to the first selection combination information to encrypt data according to at least one selected scrambling scheme to perform a data exchange, Based variable encryption algorithm management device. delete The method according to claim 1,
The level-
A total operation unit for calculating a total number of security threat points according to the number of occurrences of the security events counted at the predetermined period interval based on a security threat score per occurrence count previously specified for the security event; And
Selecting a security threat level corresponding to a sum of the security threat scores by referring to a threat level table to which different security threat levels are assigned according to a predetermined score range, And a level selection unit
Wherein the secure encryption algorithm management device is based on a change in the security environment. The method of claim 3,
The level-
A traffic measuring unit measuring data traffic occurring on the network at the predetermined periodic interval; And
A traffic determiner for determining whether the data traffic measured at the predetermined periodic interval exceeds a reference traffic,
Further comprising:
The sum operation unit
And applying a predetermined weight to the sum of the security threat scores if it is determined that the data traffic measured at the predetermined periodic interval exceeds the reference traffic,
The level selector
And selecting a security threat level corresponding to a sum of the security threat scores to which the selected weight is applied by referring to the threat level table. The method according to claim 1,
Wherein when the first selection combination information is transmitted to the plurality of terminals, the first selection combination information is transmitted to each of the plurality of terminals, A security event verifying unit for verifying whether the security event has occurred at a predetermined time interval; And
Level changing unit for changing the entire security threat level to a lower level whenever it is determined that the security event has not occurred at the predetermined time interval in each cycle,
Further comprising:
The algorithm transmitting unit
Extracting second selection combination information for the index value corresponding to the changed lower level from the combination database every time the entire security threat level is changed to the lower level within each cycle in each cycle, 2 selection combination information to the plurality of terminals. Maintaining an index database in which index values for each of a plurality of predetermined scrambling schemes associated with encryption of plaintext data are stored;
Maintaining a combination database in which selection combination information for at least one index value according to each of a plurality of selected security threat levels among the index values is separately stored and stored;
Counting the number of occurrences of a security event associated with a data encryption / decryption failure occurring at the time of data exchange between a plurality of terminals connected to each other in a network at a predetermined cycle interval;
Computing a total security threat level for the network at the predetermined periodic interval based on the number of occurrences of the security events counted at the predetermined periodic interval; And
Extracting first selection combination information on an index value corresponding to the calculated total security threat level from the combination database at the predetermined period interval and transmitting the first selection combination information to the plurality of terminals
Lt; / RTI >
The plurality of terminals
When the encrypted data is received from any one of the terminals, the decrypted data is parsed and the decrypted data is parsed to grasp the data header structure included in the decrypted data, And comparing the header structure information according to a communication protocol standard for exchanging data of the decoded data stored in advance on the header structure information, generates the security event if it is determined that the data header structure does not match the header structure information,
The plurality of terminals
Storing the index values corresponding to the plurality of predetermined scrambling schemes and the plurality of selected scrambling schemes on the memory, and when the first selection combination information is received, the plurality of predetermined scrambling schemes Wherein the at least one scrambling scheme is selected and combined according to a combination scheme of index values according to the first selection combination information to encrypt data according to at least one selected scrambling scheme to perform a data exchange, Based encryption algorithm management method. delete The method according to claim 6,
The step of calculating the overall security threat level
Calculating a total number of security threat points according to the number of occurrences of the security events counted at the predetermined periodic interval based on a security threat score per occurrence count previously specified for the security event; And
Selecting a security threat level corresponding to a sum of the security threat scores by referring to a threat level table to which different security threat levels are assigned according to a predetermined score range, ≪ / RTI >
The method comprising the steps of: 9. The method of claim 8,
The step of calculating the overall security threat level
Measuring data traffic occurring on the network at the predetermined periodic interval; And
Determining whether the data traffic measured at the predetermined periodic interval exceeds a reference traffic
Further comprising:
The step of calculating the sum of the security threat scores
And applying a predetermined weight to the sum of the security threat scores if it is determined that the data traffic measured at the predetermined periodic interval exceeds the reference traffic,
Wherein determining the overall security threat level comprises:
And selecting a security threat level corresponding to a sum of the security threat scores to which the selected weight is applied by referring to the threat level table. The method according to claim 6,
Wherein when the first selection combination information is transmitted to the plurality of terminals, the first selection combination information is transmitted to each of the plurality of terminals, Determining whether the security event has occurred at a predetermined time interval;
Changing the entire security threat level to a lower level whenever it is determined that the security event has not occurred at the predetermined time interval in each cycle; And
Extracting second selection combination information for the index value corresponding to the changed lower level from the combination database every time the entire security threat level is changed to the lower level within each cycle in each cycle, 2 selection combination information to the plurality of terminals
The method comprising the steps of: A computer-readable recording medium recording a program for performing the method of any one of claims 6, 8, 9, and 10. A computer program stored in a storage medium for executing the method of any one of claims 6, 8, 9, or 10 through a combination with a computer.

Images