KR20050090157A - Method for protecting location information of mobile internet service user - Google Patents

Abstract

A method of protecting location information of a user of a wireless Internet service is disclosed. The present invention comprises the steps of generating a master key (MASTER KEY) for converting the mobile phone ID; When requesting a location-based service from a mobile phone, the mobile phone can encrypt the current location information and designate an encryption method and a method for deriving a key that can decrypt the encrypted signal. Writing in a header and transmitting the same to a content provider; The content provider requesting a location inquiry of a mobile phone to the location-based service platform using a mobile phone ID and an HTTP header as parameters; Querying the location of the mobile phone by acquiring a mobile phone ID, determining a key derivation function, calculating a decryption kit value, and decrypting using the master key; And transmitting the inquired result to the mobile phone. According to the present invention, illegal use of personal location information can be blocked by protecting location information of a user of a wireless Internet location-based service.

Description

Method for protecting location information of mobile internet service user}

The present invention relates to a method of protecting location information of a user of a wireless Internet service, and more particularly, to a method of protecting location information of a user of a wireless Internet service that protects location information of a user by encrypting location information of a user of a wireless Internet location-based service.

In the existing wireless Internet location-based service method, a location-based service platform (Location Based System Platform) is used by using a location information of a user provided by a contents provider and a mobile phone that is not secured. Request the user's location from the LBSP.

Using this method, all users who access the wireless Internet through the content provider (CP) by making a database of (location information, physical location) pairs in all content providers (CP) that provide the wireless Internet location-based service (LBS). The location of the mobile phone can be queried. That is, since the actual location of the user can be used arbitrarily, there is a problem that protection of personal information is not made.

In the present invention, by applying the security technology between the mobile phone and the LBSP by protecting the location information of the user's mobile phone, there is a need to suppress the use of the illegal user's location information.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and an object of the present invention is to provide a location-based service in a wireless Internet environment in which a mobile phone of a user provides a content provider in a wireless Internet environment. When requesting (CP), it provides a method of protecting location information of a wireless Internet service user who encrypts the user's location in the user's mobile phone.

In addition, the present invention is to solve the above problems, an object of the present invention, to protect the location information of the user of the wireless Internet location-based services, information encrypted from the content provider (CP) to the Location Based System Platform (LBSP) When requesting the location of the user by using the, to provide a method of protecting the location information of the user of the wireless Internet service users to decrypt the location of the user mobile phone.

As a technical idea for achieving the object of the present invention described above, the present invention is applied to a wireless Internet service system consisting of a mobile phone, a content provider and a location-based service platform, the method of protecting location information of a wireless Internet service user of the present invention, A first step of receiving a master key for converting the mobile phone ID from a key management system or generating a dedicated master key for location information security in the location based service platform; When requesting a location-based service using the mobile phone, the mobile phone encrypts the current location information, and a method for deriving an encryption method and a key which are information for decrypting the encrypted signal. A second step of designating and writing in an HTTP header to a content provider; The content provider requesting a location inquiry of the mobile phone to the location-based service platform using the mobile phone ID and the HTTP header as parameters; A fourth step of obtaining a mobile phone ID, determining a key derivation function, calculating a decryption kit value and decrypting using the master key to inquire the position of the mobile phone; And a fifth step of transmitting the inquired result to the mobile phone.

At this time, the current position information encrypted in the second step is each ID including a base station, a base station controller, and a mobile switching center.

In addition, the HTTP header of the second step is composed of cLo = “EncodeType + KEY_deri_id + RandomSeed + EncodedLocationInfo”. RandomSeed is a KEY value used to encrypt location information (even if the same location is encrypted by this value), EncodedLocationInfo uses the base station ID, base station controller ID, and mobile switching center ID value using EncodeType, KEY_deri_id, and RandomSeed. It means each encrypted value.)

The fourth step may include obtaining the mobile phone ID using a master key in a location-based service platform for the mobile phone ID and HTTP header transmitted encrypted; Determines the function f (x, y) according to the decipherable KEY value derivation method, and obtains the Decode_KEY value, which is a key value that can decrypt the encrypted location information from the f (mobile phone ID, RandomSeed) function. step; Determining a function f (x ', y') according to an encryption scheme designation, and decoding a base station ID, a base station controller ID, and a mobile switching center ID, which are location information, from the f (Decode_KEY, EncodedLocationInfo) function; And querying the base station administrative area of the mobile phone from the base station ID, base station controller ID, and mobile switching center ID.

Hereinafter, with reference to the accompanying drawings, the configuration and operation of the embodiment of the present invention will be described in detail.

1 is a wireless Internet location-based service system to which the present invention is applied. As shown in FIG. 1, the present invention is largely based on a mobile phone (hereinafter, referred to as 'MP') 10, a contents provider (hereinafter, referred to as a 'CP') 20 and location-based. The present invention is applied to a wireless internet location based service system including a location based system platform (hereinafter, referred to as 'LBSP') 30.

The CP 20 generally includes a mobile telephone service company and a general mobile telephone network. Specifically, the CP 20 includes a base transceiver station (hereinafter referred to as a "BTS") 201, a base station controller (hereinafter referred to as a "BSC") 202, a mobile switching center ( Mobile Switching Center (hereinafter referred to as 'MSC') 203, Signal Transfer Point (hereinafter referred to as 'STP') 204, Positioning Determination Entity (hereinafter referred to as 'PDE') 205, a Mobile Positioning Center (hereinafter referred to as MPC) 206, and a Packet Data Serving Node (hereinafter referred to as PDSN) 207. . Since the BTS 201, the BSC 202, the MSC 203, and the STP 204 are typical configurations of a mobile telephone network, detailed description thereof will be omitted.

Here, the PDE 205 and the MPC 206 perform a function of providing location information. The PDE 205 and the MPC 206 are connected to the STP 204 as shown to serve location based information via the STP 204.

In order to perform the function of providing the encrypted location information service, the LBSP 30 is connected to the MPC 206 and the PDSN 207 and performs a function of decrypting the received signal. The LBSP 30 and the MPC 206 are connected by TCP / IP.

A method of protecting location information of a wireless Internet service user using the wireless Internet location-based service system configured as described above will be described in detail.

2 is a flowchart illustrating a location-based service method according to an embodiment of the present invention. As shown in FIG. 2, the LBSP 30 converts a MIN (Mobile Identification Number) or MDN into a Client ID provided by the MP 10 from a key management system. A dedicated master key (MASTER KEY) for receiving or securing location information is generated by the LBSP itself (S1 to S3).

When the user requests a location-based service by accessing the wireless Internet by using the user's MP 10, the MP 10 transmits location information such as [MSC ID, BSC (or RNC) ID, and BTS (or Node B) ID. ] Is encrypted, and the encryption method which is the information which can decrypt this encrypted signal, and the method which can derive a key are specified, and it writes in an HTTP header (S4).

An example of preparing the HTTP header format is as follows.

x-skt-netinfo: cLo

= “EncodeType + KEY_deri_id + RandomSeed + EncodedLocationInfo”;

here,

EncodeType: Specify the encryption method,

KEY_deri_id: Specify the KEY value derivation method that can decode EncodedLocationInfo,

RandomSeed: KEY value used to encrypt location information (even the same location is encrypted by this value)

EncodedLocationInfo: Encrypted value of [MSC ID, BSC (or RNC) ID, BTS (or Node B) ID] using EncodeType, KEY_deri_id, RandomSeed

Means each.

The CP 20 providing the location based service (LBS) requests the LBSP 30 to look up the location of the MP 10 using the cLo and Client-ID values transmitted from the MP 10 as parameters (S5).

After the LBSP 30 receives the cLo value and the Client-ID transmitted by the CP 20 (S6), the LBSP obtains the MIN or IMSI value from the Client-ID by using the master key (MASTER KEY) ( S7).

The LBSP 30 may determine a function f (x, y) capable of deriving a key value according to the KEY_deri_id value (S8), and decrypt the encrypted position information from the f (MIN, RandomSeed) function. Decode_KEY value, which is a key value, is obtained (S9).

The LBSP 30 determines the function f (x, y) according to the EncodeType value, and the location information [MSC ID, BSC (or RNC) ID, BTS (or Node B) ID is determined from the f (Decode_KEY, EncodedLocationInfo) function. ] Is decoded (S10).

The LBSP 30 inquires the administrative region name of the BTS position of the MP from the values of [MSC ID, BSC (or RNC) ID, and BTS (or Node B) ID] (S11).

Finally, the LBSP 30 transmits the inquired position result to the CP 20, and the CP 20 transmits the result of the request of the MP 10 (S12 to S13).

As such, when the MP 10 requests a wireless Internet location-based service, the present invention encrypts the location information and transmits the location information to the CP 20, and the CP 20 uses the encrypted information to the LBSP 30. 10), the LBSP 30 decrypts the encrypted position information, inquires the position of the MP 10, and transmits it to the corresponding CP 20, and the CP 20 processes the position data to the MP. To 10.

The present invention is not limited to the above-described embodiments, and it will be apparent that many modifications are possible by those skilled in the art within the technical spirit of the present invention.

As described above, the method of protecting location information of a wireless Internet service user according to the present invention may prevent illegal use of personal location information by protecting location information of a wireless Internet location-based service user.

1 is a wireless Internet location-based service system to which the present invention is applied;

2 is a flowchart illustrating a location-based service method according to an embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

10: Mobile Phone (MP)

20: Contents Provider (CP)

201: Base Transceiver Station (BTS)

202: Base Station Controller (BSC)

203: Mobile Switching Center (MSC)

204: Signal Transfer Point (STP)

205: Positioning Determination Entity (PDE)

206: Mobile Positioning Center (MPC)

207: Packet Data Serving Node (PDSN)

30: Location Based System Platform (LBSP)

Claims (4)

In the method of protecting location information of a wireless internet service user using a wireless internet service system composed of a mobile phone, a content provider and a location-based service platform, A first step of receiving a master key for converting the mobile phone ID from a key management system or generating a dedicated master key for location information security in the location based service platform; When requesting a location-based service using the mobile phone, the mobile phone encrypts the current location information, and a method for deriving an encryption method and a key which are information for decrypting the encrypted signal. A second step of designating and writing in an HTTP header to a content provider; The content provider requesting a location inquiry of the mobile phone to the location-based service platform using the mobile phone ID and the HTTP header as parameters; A fourth step of obtaining a mobile phone ID, determining a key derivation function, calculating a decryption kit value and decrypting using the master key to inquire the position of the mobile phone; And A fifth step of transmitting the inquiry result to a mobile phone Location information protection method of a user using a wireless Internet service, characterized in that made. 2. The method of claim 1, wherein the current location information encrypted in the second step is a respective ID including a base station, a base station controller, and a mobile switching center. The method of claim 1, wherein the HTTP header of the second step, cLo = “EncodeType + KEY_deri_id + RandomSeed + EncodedLocationInfo” (In this case, EncodeType is an encryption method designation, KEY_deri_id is a KEY value derivation method that can decrypt EncodedLocationInfo, and RandomSeed is used when encrypting location information.) KEY value (encoded by different value even if same location is used), EncodedLocationInfo means base station ID, base station controller ID and mobile switching center ID value using EncodeType, KEY_deri_id and RandomSeed respectively.) The method of any one of claims 1 to 3, wherein the fourth step, Obtaining, at the location-based service platform, the mobile phone ID using the MASTER KEY for the encrypted and transmitted mobile phone ID and HTTP header; Determines the function f (x, y) according to the decipherable KEY value derivation method, and obtains the Decode_KEY value, which is a key value that can decrypt the encrypted location information from the f (mobile phone ID, RandomSeed) function. step; Determining a function f (x ', y') according to an encryption scheme designation, and decoding a base station ID, a base station controller ID, and a mobile switching center ID, which are location information, from the f (Decode_KEY, EncodedLocationInfo) function; And Querying a base station administrative area of a mobile phone from the base station ID, base station controller ID, and mobile switching center ID; Location information protection method of a user using a wireless Internet service, characterized in that consisting of.