KR20010064800A - Apparatus and Method of protecting Security for User Information - Google Patents

Abstract

PURPOSE: An apparatus and a method for protecting information of a communication network user are provided which generates information at terminals of receiving and transmitting sides to transmit the information to a counterpart as a basic value for encoding and encodes transmission data using the basic value. CONSTITUTION: An apparatus for protecting information of a communication network user includes a transmitter information processor and a receiver information processor. The transmitter information processor sends a signaling signal to a receiver(41) to request communication, delivers transmitter seed information obtained using a point of time of operation to the receiver, decodes data sent from the receiver using the transmitter seed information, and accepts receiver seed information to encode transmitter user data to send it to the receiver. The receiver information processor generates a response signal to the signaling signal, encodes transmission data using the transmitter seed information, obtains the receiver seed information on the basis of the point of time of operation to send it to a transmitter(40), and decodes the data delivered from the transmitter using the receiver seed information.

Description

Apparatus and Method of protecting Security for User Information

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information protection device for a network user, a method thereof, and a computer-readable recording medium having recorded thereon a program for realizing the method. The present invention relates to user information through an exchange or a user terminal (telephone, fax, etc.). The present invention relates to an information protection device for preventing user information from being deliberately intercepted or eavesdropped by any third party during transmission, and a method and a computer-readable recording medium having recorded thereon a program for realizing the method.

1 is an exemplary configuration diagram of a conventional communication system.

1 illustrates a path through which a conventional user transfers information through an exchange or a user terminal (telephone, fax, etc.).

The communication system consists of the telephones 11 and 15, the switchboards 12 and 14, and the communication network 13 so that communication is connected between the telephones 11 and 15.

As shown in FIG. 1, the conventional communication network has a problem in that it is vulnerable to deliberate interception and eavesdropping by a third party. In other words, the eavesdropper was able to monitor the user information at any location and its usefulness was easily achieved.

The present invention has been made to solve the problems described above, by using a time point at which the terminal is started when transmitting data through a user terminal such as an exchange, a telephone, a fax, etc. Provided is an information protection device of a network user for generating information and transmitting the information to a counterpart as a basic value for encryption and encrypting the transmitted data using the same, and a computer-readable recording medium having recorded thereon a method for implementing the method. Its purpose is to.

1 is an exemplary configuration diagram of a conventional communication system.

2 is an exemplary configuration diagram of a user data encryption device to which the present invention is applied.

3 is an exemplary configuration diagram of a communication system to which the present invention is applied.

4A is a block diagram of an embodiment of an information protection device for a receiving side network user according to the present invention;

Figure 4b is an illustration of one embodiment of a transmission signal in the information protection device of the user of the receiving communication network according to the present invention.

FIG. 5A is a block diagram of an embodiment of an information protection apparatus for a user of a transmitting network in accordance with the present invention; FIG.

5B is an explanatory diagram of one embodiment of a transmission signal in an information protection apparatus for a user of a transmission side network in accordance with the present invention;

6 is a signal flow diagram of an embodiment of an information protection method applied to an information protection device of a network user according to the present invention;

The apparatus of the present invention for achieving the above object, in the information protection device of the network user, sends a signaling signal to the receiving side to request communication, and transmits the sender seed information obtained by using the operating point to the receiving side and from the receiving side Transmitting-side information processing means for decrypting the transmitted data by using the transmitting-side seed information, receiving receiving-side seed information, encrypting transmitting-side user data, and transmitting it to the receiving-side; And generating and transmitting a response signal to the signaling signal received from the transmitting side information processing means, encrypting the transmission data using the transmitted side seed information, and obtaining and transmitting the receiving side seed information on the basis of an operation time point. And receiving side information processing means for decoding the data transmitted from the transmitting side and the data transmitted from the transmitting side using the receiving side seed information.

In addition, the method of the present invention, in the information protection method of the network user applied to the information protection device of the network user, on the basis of the signaling signal and the operating time at the transmitting side for communication of communication connection and information protection with the receiving side A first step of generating sender seed information to be transmitted to a receiver; Receiving second seed information based on a response signal, a receiver identifier, and an operation time of the receiver in response to a communication connection request from a transmitter, and retransmitting the transmitter seed information; Checking the retransmitted seed information and retransmitting the received seed information and the send side transmission data to the receiver seed information and transmitting the received seed information; And a fourth step of decoding data transmitted from the receiving side by using the transmitting side seed information.

In addition, the present invention, in the information protection device of a communication network user having a large-capacity processor, the transmitting side generates the transmission side seed information on the basis of the signaling signal and the operating time at the transmitting side for the communication connection and information protection communication with the receiving side A first function for transmitting to a receiving side by transmitting; A second function of receiving receiver seed information based on a response signal, a receiver identifier, and an operation time of the receiver in response to a communication connection request from a transmitter, and retransmitting the transmitter seed information; A third function of checking the retransmitted seed information and retransmitting the received seed information and the send side transmission data to the receiver seed information and transmitting the received seed information; And a computer-readable recording medium having recorded thereon a program for realizing a fourth function of decoding data transmitted from the receiving side by using the transmitting side seed information.

The present invention is a technique for preventing the theft of user information by a third party by various methods such as information leakage, eavesdropping, etc. that can occur when transmitting user information through a communication network.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 is an exemplary configuration diagram of a user data encryption apparatus to which the present invention is applied.

2 is a functional block diagram for encrypting user data to be presented in the present invention. That is, in FIG. 2, a device using a terminal having an encryption block having a similar function in a transmitting side and a receiving side, comprising a user terminal 21 and a switch 22, and the user side communication unit 21 is an encryption / decryption processing unit. 212 and telephone 211.

The location for eavesdropping of user information may occur at an exchange or at any location between the sending terminal and the receiving terminal. However, in the present invention, it is difficult to leak information by a third party by generating and transmitting encrypted user data at both sides based on a seed value generated at an arbitrary position by the operation of a timer. The entire transmission / reception communication system using the block diagram of FIG. 2 may be configured as shown in FIG. 3. That is, the encryption / decryption block may be located in the user terminal.

3 is an exemplary configuration diagram of a communication system to which the present invention is applied.

When the caller communicates using the telephone 311 located in the user terminal 31, the caller performs encryption through the processing of the encryption / decryption processing unit 312 and transmits the call to the exchange 32 and the communication network 33. The transmission data transmitted to the receiving terminal 35 via the receiving exchange 34 is de-encrypted via the encryption / decryption processing unit 351 at the receiving end to reach the receiver using the receiving telephone 352. Done.

4A is a diagram illustrating an embodiment of an information protection device for a user of a receiving side network in accordance with the present invention.

4 is a block diagram illustrating a receiving side of an information protection device according to the present invention. The configuration of the receiving information protection device is largely divided into two parts. Transmitter 40 for encrypting (scrambled) the receiver user data and transmitting it to the transmission path, and receiver 41 for de-scrambled the transmitter user data (descramble) and restoring the original user information. It is composed of

The transmitter 40 is configured to process signaling information input from a timer unit 404, a first seed value storage unit 402, and a transmission path for generating a seed value of the first random number generator 401 for encryption processing. Acknowledge processing unit 403, first random number generator 401, receiving side identifier storage unit 405 for storing receiving side identifiers (ID), seed values and acknowledgment processing data; A first multiplexer (Multiplexer1, 406) for multiplexing a receiver ID (ID), a sender seed value, a second multiplexer (Multiplexer2) for multiplexing the result of the multiplexing of the first multiplexer 406 and the receiving user data; 408, an exclusive logical sum (XOR) processor 407 for encrypting and transmitting the result of the first random number generator 401 and the receiving user information to the transmission path, and a controller 409 for total block control. It is composed.

The receiver 41 is a signaling information detector 414, a seed value detector 413, and a second seed value storage unit for processing transmission side information received through a transmission path in a reverse process of the transmitter 40. 412 and a second exclusive logical sum (XOR) for recovering the original sender user information by de-encrypting the result of the second random number generator 410 and the second random number generator 410 and the encrypted sender user information. And a processor 411.

The transmitter 40 transmits the receiver signaling information (Ack. Signal and seed value) and the receiver user information according to the request of the transmitter user or the exchange. First, the signaling information detection unit 414 of the reception unit 41 recognizes the transmission side signaling information input through the transmission path and informs the control unit 409. The seed detector 413 detects the transmission-side encryption seed value and stores the encrypted seed value in the second seed value storage unit 412.

The controller 409 causes the acknowledgment processor 403 to generate an acknowledgment signal in accordance with the operation of the hook of the telephone or the like, and at any time position of the timer 404 in operation at all times. Load the value in the first seed value storage unit 402.

The seed value stored in the second seed value storage unit 412 is used as an initial value of the first random number generator 401 for encryption when the receiver sends user information. The receiving side no longer sends an acknowledgment (ID) signal, an identifier (ID), and a receiving side seed value, and receives the receiving user information from the first random number generator 401 result and the first exclusive logical OR (XOR) processor ( After encrypting with 407, the second multiplexer 408 for multiplexing is transmitted to the transmission path. In this case, the seed value stored in the second seed value storage unit 412 is used as the initial value of the first random number generator 401.

The first multiplexer 406 multiplexes the receiving side seed value, the receiving side identifier (ID), the acknowledgment (Ack.) Signal, and the transmitting side encryption seed value, and the second multiplexing unit 408 is the first multiplexing unit 406. Multiplex the resulting value and the encrypted receiver user data.

An example of transmitting a signal generated by the transmitter 40 is shown in FIG. 4B described below. Control of the multiplexers 406 and 408 for multiplexing follows the control of the controller 409.

The reception unit 41 recognizes the transmission side signaling information input through the transmission path and informs the control unit 409. That is, the signaling information detector 414 detects the transmitting side information and causes the control unit 409 and the seed value detecting unit 413 to detect the acknowledgment signal and the transmitting side seed value to detect the second seed value storage unit 412. Will be saved as).

The seed value stored in the second seed value storage unit 412 becomes an initial value of the random number generator for encrypting the receiving user information, and also becomes a seed value of the first random number generator 401 of the transmitter 40. .

The result of the second random number generator 410 initialized by the receiver side seed value and the encrypted sender user information input from the transmission path are de-encrypted via the second exclusive logical OR (XOR) processor 411 to transmit the original transmission. Recover user information

Figure 4b is a diagram illustrating an embodiment of a transmission signal in the information protection device of the user of the receiving communication network according to the present invention.

Signals transmitted from the receiving side information protection apparatus include the response signaling information (AckSignaling Information, 455), the identifier (ID, 454), the receiving side seed value (Receiver Seed, 453), the transmitting side seed value (Transmitter Seed, 452), and the user. The data protection device receives the data as the user data 451.

5A is a diagram illustrating an embodiment of an information protection apparatus for a user of a transmission side network in accordance with the present invention.

The configuration and operation of the transmission side encryption block diagram will be described with reference to FIG. The structure of the transmission-side encryption block diagram is largely composed of two parts.

To a transmitting unit 51 for encrypting (scrambled) the transmitting user data and transmitting it to the transmission path, and a receiving unit 52 for de-scramble (rescribing) the receiving user data to restore the original receiver information. It is composed. The transmitter 51 is a signaling information processor for generating signaling information under the control of a timer unit 521, a first seed value storage unit 516, and a controller 514 for generating a seed value of the random number generator for encryption processing. 520, the first random number generator 515, a first multiplexer 517 for multiplexing the seed value and the signaling data, a second multiplexer for multiplexing the seed information and the signaling data and the transmitter user data ( Multiplexer (519), the first exclusive OR processor (XOR, 518) for encrypting the transmission-side user data using the result of the first random number generator 515 and the control unit 514 for the control of the entire block, Receiving unit 52 performs the reverse process of the transmitting unit 51, the seed (Ack.) Processing unit for processing the receiving side information received through the transmission line 526, the seed which is the default value of the random number generator on the receiving side Value detector 524, seed A second deciphering receiver user data using the seed value storage unit 523, the second random number generator 522, the seed value storage unit, and the random number generator, which store the result of the value detector 524; Exclusive OR processor 525.

The transmitting unit 51 generates signaling information for transmitting user information in response to a request of the transmitting user. That is, the control unit 514 causes the signaling information processing unit 520 to generate signaling information and to send it to the transmission path. In this case, the controller 514 loads a value at an arbitrary position of the timer 521 which is in operation at all times to the first seed value storage unit 516. This value is used as the seed value for the random number generator that encrypts the receiving user data and the receiving user data is encrypted with this result. Also, the transmitting side receiving unit uses this value as a basic value of the random number generator 22 and is used for recovering encrypted receiving side user data. To use this value at the receiver side, the transmitter side transmits the two muxes 17 and 19 via temporal multiplexing, immediately after the signaling information, and transmits the signal as shown in FIG. 5B.

The acknowledgment processor 526 of the receiver 52 processes the signal transmitted in response to the receiver to confirm that the receiver correctly received the signaling information of the transmitter 51 and the seed value of the transmitter. The controller 514 is informed of this. The control unit 514 retransmits the receiving side seed value to confirm with the receiving side seed value that the seed value sent from the receiving side is currently used for encryption without sending signaling information anymore, and also receives the transmitting user data. The first random number generator 515 based on the seed value is encrypted with the first exclusive OR processor 18, and then transmitted through the second multiplexer 519 for multiplexing to the transmission path. 5b shows the transmission signal of the transmission side.

The receiving unit 52 processes data transmitted from the receiving side as a result of transmitting signaling information of the transmitting unit 51.

First, the acknowledgment processor 526 recognizes the information confirming that the receiver has correctly received the signaling information and the seed value of the transmitter, and notifies the controller 514 of the result. Then, the seed value detector 524 checks the received encryption seed value on the transmission path, and stores it in the seed value storage unit 23.

In addition, the acknowledgment processor 526 receives the identifier (ID) value of the receiving user from the encryption system using the fixed seed value between the transmitting side and the receiving side, and notifies the control unit 514. The control unit 514 uses the seed value corresponding to the identifier (ID) as the initial value of the first random number generator 515 when transmitting the user information. The controller 514 stores the seed value in the second seed value storage unit 523, and the first random number generator 515 generates a random number based on the seed value, and the first random number generator 515. The sender user data is encrypted by the first exclusive OR processor 518 using the result of the " The second random number generator 522, which uses the sender seed value as a default value, inversely encrypts the encrypted receiver user information inputted into the transmission path through the second exclusive OR processor 525, thereby receiving the original receiver user data. Will be restored.

5B is a diagram illustrating an embodiment of a transmission signal in an information protection apparatus of a user of a transmission side network in accordance with the present invention.

The signal transmitted from the transmitter is received by signaling information 554, transmitter seed 553, receiver seed 552, user data 551, and the like. Will receive it.

6 is a signal flow diagram of an embodiment of an information protection method applied to an information protection device of a network user according to the present invention.

6 shows a signal flow of a transmitting side and a receiving side. As shown in the figure, the signal flow is as follows.

First, transmitting side signaling information and transmitting seed value information used for encrypting receiving user data are transmitted from the transmitting information protection device to the receiving information protection device (601).

In the receiving side information protection device, the receiving side acknowledgment signal, the receiving side identifier (Id), the receiving side seed value information used for encrypting the transmitting side user data, and receiving from the transmitting side are used to encrypt the user data. The sender seed value information to be used is transmitted to the sender information protection device (602).

The receiving side information protection device sets the sending seed value to be used for encryption of the receiving user data, and retransmits to confirm that the received sending seed value is the same as the original sending seed value sent by the sending information protection device. Done.

Sender user data encrypted using the receiver seed value information and the receiver seed value received from the receiver information protection device used for encryption of the transmitter user data in the transmitter information protection device to the receiver information protection device. Transmit (603).

The sending side information protection device sets the receiving seed value to be used for encryption of the sending user data, and retransmits to verify that the received receiving seed value is the same as the original receiving seed value sent by the receiving information protection device. For the retransmitted sender seed value, check whether it is the same as the original sender seed value. As a result of the check, if there is a problem, the sender seed value is sent again.

The receiving information protection device transmits the receiving user data encrypted with the transmitting seed value to the transmitting information protection device (604).

The receiving side information protection apparatus checks whether the receiving side seed value is the same as the original receiving side seed value for the retransmitted receiving side seed value. As a result of the check, if there is an error, the receiver seed value is sent again.

The transmitting-side information protection device ends data transfer with the receiving-side information protection device, and transmits the transmission-side call termination to the receiving side (605).

The receiving information protection device also ends data transfer with the transmitting information protection device and transmits the receiving call termination to the transmitting party (606).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes can be made in the art without departing from the technical spirit of the present invention. It will be apparent to those of ordinary knowledge.

In the present invention as described above, when a user transmits user information through an exchange or a user terminal (telephone, fax, etc.), the caller generates random information at the receiving terminal by using a time point at which the called party starts using the receiving terminal. It transmits to the side to use as default value for encryption, and as the default value for encryption of the receiving terminal, it protects user data by using the value obtained by generating random information at the sending terminal using the operation time of the sending side. There is an effect to prevent interception or eavesdropping of intentional user data by a third party.

Claims (7)

In the information protection device of the network user, Sends a signaling signal to the receiver to request communication, transmits the sender seed information obtained using the operation point to the receiver, decodes the data transmitted from the receiver using the sender seed information, and transmits the receiver seed information. Transmitting side information processing means for receiving and transmitting the transmitting user data to the receiving side; And Generate and transmit a response signal to the signaling signal received from the transmitting side information processing means, encrypt the transmission data using the transmitted side seed information, and obtain the receiving side seed information on the basis of an operation time point to the transmitting side. Receiving side information processing means for transmitting and decoding the data transmitted from the transmitting side using the receiving side seed information; Information protection device of a network user comprising a. The method of claim 1, The transmitting-side information processing means, Transmitting-side transmission processing means for generating and transmitting the signaling signal, the transmission-side seed information, transmission-side user data encrypted with the reception-side seed information, and the like to the reception-side information processing means; And Sending side receiving processing means for receiving and processing the response signal, the receiving side identifier, the receiving side seed information, the receiving side user data and the like encrypted from the receiving side information processing means. Information protection device of a network user comprising a. The method according to claim 1 or 2, The receiving side information processing means, Reception side transmission processing means for generating and transmitting the response signal, the reception side identifier, the reception side seed information, the reception side user data encrypted with the transmission side seed information, and the like to the transmission side information processing means; And Sending side receiving processing means for receiving and processing the signaling signal, the sending side seed information, the sending side user data, etc. encrypted with the receiving side seed information from the sending side information processing means. Information protection device of a network user comprising a. In the information protection method of the network user applied to the information protection device of the network user, A first step of generating transmitting side seed information based on a signaling signal and an operation time point at a transmitting side for transmitting a communication connection and information protection with the receiving side and transmitting the generated seed information to a receiving side; Receiving second seed information based on a response signal, a receiver identifier, and an operation time of the receiver in response to a communication connection request from a transmitter, and retransmitting the transmitter seed information; Checking the retransmitted seed information and retransmitting the received seed information and the send side transmission data to the receiver seed information and transmitting the received seed information; And A fourth step of decoding data transmitted from the receiving side using the transmitting side seed information Information protection method of a network user comprising a. The method of claim 4, wherein A fifth step of transmitting a call termination request signal to terminate the communication connection with the receiver and receiving a call termination response signal in response thereto to terminate the communication connection; Information protection method of a network user further comprising a. The method of claim 4, wherein A fifth step of receiving a call termination request signal for terminating a communication connection from the receiver and transmitting a call termination response signal in response thereto; Information protection method of a network user further comprising a. In the information protection device of the network user with a large processor, A first function of generating transmitting side seed information on the basis of a signaling signal and an operation time point from the transmitting side and transmitting the generated seed information to the receiving side for communication connection and information protection with the receiving side; A second function of receiving receiver seed information based on a response signal, a receiver identifier, and an operation time of the receiver in response to a communication connection request from a transmitter, and retransmitting the transmitter seed information; A third function of checking the retransmitted seed information and retransmitting the received seed information and the send side transmission data to the receiver seed information and transmitting the received seed information; And A fourth function of decoding data transmitted from the receiving side using the transmitting side seed information A computer-readable recording medium having recorded thereon a program for realizing this.