KR20170124405A - Cloud service providing system and method for sharing file thereof - Google Patents

Abstract

According to the present invention, a file sharing method of a cloud service providing system comprises the steps of: authenticating a first user by using a first iris recognition USB device connected to a first terminal; activating the first iris recognition USB device when the first user is a legal user of the first terminal; encrypting a file by using a first encryption key; encrypting the first encryption key by using a public key of a server; and transmitting the encrypted file and the encrypted first encryption key to the server. The method provides a cloud service safer against sniffing.

Description

[0001] CLOUD SERVICE PROVIDING SYSTEM AND METHOD FOR SHARING FILE THEREOF [0002]

The present invention relates to a cloud service providing system and a file sharing method thereof.

Cloud service is a service that provides information technology (IT) resources using Internet technology. It can expand and contract in real time according to the load of the service. Cloud means Internet-based. In other words, the cloud is the Internet and infrastructure. All the information is absorbed by the Internet, and it is a service that can use the IT related functions such as document work, e-mail service, and server management which are used through existing computing without using hardware main body equipment.

Common cloud services can sniff files during file upload / download. In order to prevent such sniffing, encrypted data is uploaded / downloaded when important data is uploaded / downloaded.

It is an object of the present invention to provide a computing system and a method thereof that provide a more secure cloud service for sniffing.

A file sharing method of a cloud service providing system according to an embodiment of the present invention includes: authenticating a first user using a universal serial bus (USB) device connected to a first terminal; Activating the first iris recognition USB device as the authentication result if the first user is a legitimate user of the first terminal; Encrypting the file using the first encryption key; Encrypting the first encryption key using a public key of the server; And transmitting the encrypted file and the encrypted first encryption key to a server.

In an embodiment, encrypting the file may be performed in the first terminal.

In an embodiment, the step of encrypting the file may further comprise receiving the first encryption key and the first private key from the first iris recognition USB device at the first terminal.

In an embodiment, encrypting the file may be performed from the first iris recognition USB device.

In an embodiment, the step of encrypting the file may further comprise receiving the file from the first terminal at the first iris recognition USB device.

In one embodiment, encrypting the file comprises encrypting the first encryption key using a public key corresponding to at least one user desiring to share the file; And transmitting the first encryption key encrypted with the public key to the server.

In an embodiment, the method may further include receiving a first encryption key encrypted with the public key corresponding to the encrypted file and the second terminal from the server at a second terminal different from the first terminal.

Authenticating a second user using a second iris recognition USB device connected to the second terminal; And activating the second iris recognition USB device if the second user is a legitimate user of the second terminal.

In an embodiment, the encrypted file may be decrypted in the second terminal.

In one embodiment, the step of decrypting the encrypted file further comprises: receiving a second private key of a second iris recognition USB device at the second terminal; Decrypting the first encryption key encrypted with the public key using the second private key; And decrypting the encrypted file using the decrypted first encryption key.

In an embodiment, the method may further include deleting the decrypted first encryption key.

In an embodiment, the encrypted file may be decrypted in the second iris recognition USB device.

In an embodiment, the first iris recognition USB device may be a LOCKIT product of Irish.

A file management method of a cloud service providing system including a plurality of terminals and a server according to an embodiment of the present invention includes: receiving a file encrypted using an encryption key corresponding to at least one terminal of the plurality of terminals step; Receiving the encryption key encrypted using the public key of the server; Decrypting the received encrypted encryption key using the private key of the server; Encrypting the decrypted encryption key using a public key corresponding to at least one other terminal of the plurality of terminals; And deleting the decrypted encryption key.

In an embodiment, the encryption key and the private key may be stored in an iris-aware USB device connected to the at least one terminal.

In an embodiment, the method further comprises: receiving a download request for the encrypted file from the at least one other terminal; And transmitting the encrypted file and the encryption key encrypted with the public key to the at least another terminal in response to the download request.

A cloud service providing system according to an embodiment of the present invention includes a plurality of terminals, iris recognition universal serial bus (USB) devices connected to each of the plurality of terminals, and a server connected to the plurality of terminals, Wherein each of the iris recognition USB devices includes a private key and an encryption key, at least one of the iris recognition USB devices encrypts the file using a corresponding encryption key, and at least one of the iris recognition USB devices The terminal may decrypt the encrypted file using the corresponding private key, and the server may store the encrypted file and the encryption key encrypted with the at least one public key.

In an embodiment, an encryption key encrypted with the at least one public key may be generated at the server.

In an embodiment, an encryption key encrypted with the at least one public key may be generated at the at least one terminal.

In an embodiment, each of the iris recognition USB devices performs user authentication and is activated when user authentication is completed, thereby encrypting the file or decrypting the encrypted file.

The cloud service providing system and the file sharing method thereof according to the embodiment of the present invention can more securely perform file sharing by using the encryption key and the private key of the iris recognition USB device.

FIG. 1 is an exemplary diagram illustrating a cloud service providing system 10 according to an embodiment of the present invention. Referring to FIG.
FIG. 2 is a diagram illustrating an exemplary process of uploading an encrypted file to the server 200 in the cloud service providing system 10 according to an embodiment of the present invention.
FIG. 3 is a view showing another embodiment of a process of uploading an encrypted file to the server 200 in the cloud service providing system 10 according to the embodiment of the present invention.
4 is a diagram illustrating an exemplary process of downloading an encrypted file from the server 200 in the cloud service providing system 10 according to an embodiment of the present invention.
5 is a view showing another embodiment of a process of downloading an encrypted file from the server 200 in the cloud service providing system 10 according to the embodiment of the present invention.
FIG. 6 is an exemplary diagram illustrating a cloud service providing system 20 according to another embodiment of the present invention.
7 is a diagram illustrating an exemplary process of uploading an encrypted file to the server 200 in the cloud service providing system 20 according to an embodiment of the present invention.
FIG. 8 is a diagram illustrating an exemplary process of downloading an encrypted file from the server 200 in the cloud service providing system 20 according to an embodiment of the present invention.
FIG. 9 is an exemplary diagram illustrating a cloud service providing system 30 according to another embodiment of the present invention.
FIG. 10 is a diagram illustrating a cloud service providing system 1000 according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

The embodiments according to the concept of the present invention can make various changes and can take various forms, so that the embodiments are illustrated in the drawings and described in detail herein. It should be understood, however, that there is no intention to limit the embodiments according to the concepts of the present invention to the specific disclosed embodiments, and all changes, equivalents, or alternatives included in the spirit and scope of the present invention.

FIG. 1 is an exemplary diagram illustrating a cloud service providing system 10 according to an embodiment of the present invention. Referring to FIG. Referring to FIG. 1, a cloud service providing system 10 includes a plurality of terminals 110 to 1Z0, Z is an integer of 2 or more, a universal serial bus (USB) corresponding to each of a plurality of terminals 110 to 1Z0, ) Devices 112 to 1Z2, and a server 200. [

Each of the plurality of terminals 110 to 1Z0 is connected to the server 200 and can generate data or upload or download the generated data to the server 200. [ Here, when uploading / downloading data, encrypted data can be used. In an embodiment, each of the plurality of terminals 110 to 1Z0 may be implemented with various kinds of electronic devices. For example, the electronic device may be a mobile terminal, a tablet PC, a computer, a wearable device, or the like. However, it should be understood that the electronic device of the present invention is not limited thereto.

The iris recognition USB devices 112 to 1Z2 may be connected to each of the plurality of terminals 110 to 1Z0 through a USB interface. Each of the iris recognition USB devices 112 to 1Z2 can be activated by recognizing the iris information of the user. In the embodiment, each of the iris recognition USB devices 112 to 1Z2 may be implemented as a LOCKIT product of Irish. A description of the LOKIT product of Irishes is disclosed in Korean Patent Nos. 10-0675841, 10-0923161, 10-1336834, Korean Patent Publications 10-2015-0021307, 10-2015-0085417, 10-2016-0001728 , Which will be incorporated by reference in the application.

Each of the iris recognition USB devices 112 to 1Z2 may include a private key used in a public key based encryption system corresponding to the user and an encryption key for encrypting a file. For example, the first iris recognition USB device 112 may include the private key PK_A and the encryption key EK_A of the user A. [ The second iris recognition USB device 122 may include the private key PK_B and the encryption key EK_B of the user B. [ Similarly, the Z-iris recognition USB device 1Z2 may include the private key PK_Z and the encryption key EK_Z of the user Z. [ In an embodiment, the encryption keys EK_A, EK_B, ..., EK_Z may be implemented with 256 bits. In another embodiment, the encryption keys EK_A, EK_B, ..., EK_Z may be implemented with 1024 bits. However, it should be understood that this size of the encryption keys EK_A, EK_B, ..., EK_Z is only an embodiment that does not limit the present invention.

In the embodiment, each of the iris recognition USB devices 112 to 1Z2 encrypts a file using corresponding encryption keys EK_A, EK_B,,, EK_Z, It can be decoded.

In particular, the file (EK_A (File)) encrypted in the first iris recognition USB device 112 can be decrypted in the other iris recognition USB devices 122, ..., 1Z2. To this end, encrypted first encryption keys PUBK_B (EK_A), ..., PUBK_Z (PUBK_Z), ..., and PUBK_Z (PUBK_B) are generated by encrypting the encryption key EK_A of the first user A with the public keys PUBK_B, (EK_A)).

For example, the second iris recognition USB device 122 is connected to the first iris recognition USB device 112 via the first iris recognition USB device 112. The second iris recognition USB device 122 is encrypted with the public key PUBK_B of the second user B and the encrypted file EK_A (File) Receives the encrypted first encryption key PUBK_B (EK_A) via the server 200 and encrypts the encrypted first encryption key PUBK_B (EK_A) using the private key PK_B of the second user B And decrypts the encrypted file EK_A (File) by using the generated first encryption key EK_A to decrypt the encrypted file EK_A to obtain the original file. Similarly, the Z-iris recognition USB device 1Z2 may also restore / share a file created in the first terminal 110. [

The server 200 may be configured to receive the encrypted first encryption key PUBK_S (EK_A) encrypted with the encrypted file EK_A (File) and the public key PUBK_S of the server 200. In an embodiment, the encrypted first encryption key PUBK_S (EK_A) may be generated in the first iris recognition USB device 112. [ In another embodiment, an encrypted first encryption key (PUBK_S (EK_A)) may be generated at the first terminal 110.

In an embodiment, the server 200 may be implemented to generate a first encryption key EK_A by decrypting the encrypted first encryption key PUBK_S (EK_A) using the private key PK_S of the server 200 have. In the embodiment, the server 200 uses the public keys of the users (for example, B, ..., Z) desiring to share the encrypted file EK_A (File) to encrypt the first encryption key EK_A (EK_A),..., And PUBK_Z (EK_A) are stored in the form of a table, and the encrypted first encryption keys PUBK_B (EK_A) The server 200 may delete the decrypted first encryption key EK_A according to a predetermined management policy.

In an embodiment, when the server 200 requests an encrypted file (EK_A (File)) from at least one other terminal (120, ..., 1Z0) (EK_A),..., PUBK_Z (EK_A) of the encrypted first encryption key PUBK_B (EK_A).

The cloud service providing system 10 according to the embodiment of the present invention transmits the data encrypted by the iris recognition USB device (e.g., 112) corresponding to one of the terminals to the iris recognition USB device (e.g., 122 , ..., 1Z2).

2 is a view showing an embodiment of a process of uploading an encrypted file EK_A (Fil) in the cloud service providing system 10 to the server 200 according to an embodiment of the present invention. Referring to FIG. 1 and FIG. 2, an upload process of an encrypted file (EK_A (File)) is as follows.

The first terminal 110 may request the first iris recognition USB device 112 to encrypt the file. For this, the first iris recognition USB device 112 may perform first user (A) authentication through iris recognition. When the authentication for the first user A is completed, the first iris recognition USB device 112 can be activated. Then, the first iris recognition USB device 112 can request a file (Fil) to be encrypted from the first terminal 110. The first iris recognition USB device 112 can encrypt the input file using the first encryption key EK_A). Also, the first iris recognition USB device 112 may encrypt the first encryption key EK_A using the public key PUBK_S of the server 100. The encrypted file EK_A (File) and the encrypted first encryption key PUBK_S (EK_A) can be uploaded to the server 200 via the terminal 110.

The server 200 can obtain the first encryption key EK_A by decrypting the encrypted first encryption key PUBK_S (EK_A) using the private key PK_S of the server 100. Thereafter, the server 200 ... can encrypt the first encryption key EK_A using public keys (e.g., PUBK_B, ..., PUBK_Z) of users B, ..., Z desiring file sharing. The first encryption keys PUBK_B (EK_A), ..., PUBK_Z (EK_A) can be generated from the first encryption keys PUBK_B (EK_A), ..., PUBK_Z (EK_A) May be stored in a storage device in the server 200. The server 200 may then delete the first encryption key EK_A.

On the other hand, in FIG. 2, the encryption operation of the file is performed in the iris recognition USB device 112. However, the present invention is not limited thereto. The encryption operation of the file (File) may be performed in the terminal 110.

3 is a view showing another embodiment of a process of uploading the encrypted file EK_A (Fil) in the cloud service providing system 10 according to the embodiment of the present invention to the server 200. [ 1 and 3, the uploading process of the encrypted file EK_A (File) differs from that shown in FIG. 2 in that the encryption operation of the file (File) is performed in the terminal 110 The first iris recognition USB device 112 transmits a first encryption key EK_A and a first private key PK_A to the terminal 110 when activated as a result of performing iris recognition for the user A. [ Lt; / RTI >

The terminal 110 may encrypt the file and the first encryption key EK_A using the first encryption key EK_A and the public key PUBK_S of the server 100. [

4 is a diagram illustrating an exemplary process of downloading an encrypted file EK_A (File) from the server 200 in the cloud service providing system 10 according to an embodiment of the present invention. Referring to FIG. 1 and FIG. 4, the download process of the encrypted file (EK_A (File)) is as follows. For convenience of explanation, it is assumed that the encrypted file EK_A (File) is decrypted in the second iris recognition USB device 122 connected to the second terminal 120. That is, it is assumed that the second user B wants to download the data created by the first user A from the server 200. [

The second terminal 120 of the second user B may send a request for file decryption to the second iris recognition USB device 122. [ The second iris recognition USB device 122 can authenticate this request via a legitimate request by the user B or iris recognition. If the second user B is correct as the iris authentication result, the second iris recognition USB device 122 can be activated for file decryption. The second iris recognition USB device 122 may transmit to the second terminal 110 information indicating that the preparation for decoding is completed. The second terminal 120 can request the encrypted file (EK_A (Fil)) to the server 200 based on the prepared information.

The server 200 transmits the encrypted file EK_A (File) and the encrypted first encryption key PUBK_B (EK_A) corresponding to the second terminal 120 to the second terminal 120 in response to the file request of the second terminal 120 To the terminal 120. The second terminal 120 transmits the encrypted file EK_A (File) and the encrypted first encryption key PUBK_B (EK_A) to the second iris recognition USB device 122).

The second iris recognition USB device 122 can obtain the encryption key EK_A by decrypting the first encryption key PUBK_B (EK_A) encrypted using the private key PK_B of the second user B . Thereafter, the second iris recognition USB device 122 decrypts the encrypted file EK_A (File) using the encryption key EK_A to obtain the original file File. The encryption key EK_A may then be deleted. Then, the second iris recognition USB device 122 can transmit the restored file (File) to the second terminal 120.

Thus, the second terminal 120 can securely share the file (File) encrypted by the user A of the first terminal 110. [

On the other hand, in FIG. 4, the downloaded encrypted file EK_A (File) is decrypted in the iris recognition USB device 122. However, the present invention is not limited thereto. The encrypted file EK_A (File) may be decrypted in the terminal 120.

5 is a view showing another embodiment of a process of downloading an encrypted file (EK_A (File)) from the server 200 in the cloud service providing system 10 according to the embodiment of the present invention. 1 and 5, the process of downloading the encrypted file EK_A (File) is the same as that shown in FIG. 4, except that the encrypted file EK_A (File) . ≪ / RTI > To this end, after activation of the second iris recognition USB device 122, the private key PK_B of the second user B may be transmitted to the second terminal 120. [

The second terminal 120 may then obtain the encryption key EK_A by decrypting the first encryption key PUBK_B (EK_A) encrypted using the private key PK_B of the second user B. Then, the second terminal 120 can obtain the original file (File) by decrypting the encrypted file EK_A (File) using the encryption key EK_A. The encryption key EK_A may then be deleted.

The server 200 determines the shared range of the encrypted file EK_A (File) in FIGS. 1 to 5. That is, the server 200 determines the first encryption key EK_A through the public keys, ). However, the present invention is not limited thereto. The present invention may also determine the sharing scope of the encrypted file within the terminal that uploads the file to the server.

FIG. 6 is an exemplary diagram illustrating a cloud service providing system 20 according to another embodiment of the present invention. 6, the cloud service providing system 20 includes a plurality of terminals 110a to 1Z0a, Z is an integer of 2 or more, a universal serial bus (I / O) bus corresponding to each of the plurality of terminals 110a to 1Z0a, ) Devices 112a through 1Z2a, and a server 200a. The cloud service providing system 200 shown in FIG. 6 transmits the encrypted first encryption keys PUBK_B (EK_A), ..., PUBK_Z (EK_A) in comparison with that shown in FIG. 1 to the terminal 110a, respectively, except for the difference.

7 is a diagram illustrating an exemplary process of uploading an encrypted file EK_A (Fil) to the server 200 in the cloud service providing system 20 according to an embodiment of the present invention. 6 and 7, the process of uploading the encrypted file EK_A (File) is as follows. The first iris recognition USB device 112a, when activated as a result of performing iris recognition for the user A The first terminal 110a can encrypt the file using the first encryption key EK_A and the first encryption key EK_A can be transmitted to the first terminal 110a using the first encryption key EK_A, The terminal 110a may encrypt the first encryption key EK_A using the public keys of other users B, ..., Z that want to share and their respective public keys.

Then, the first terminal 110a transmits the encrypted file EK_A (File), the encrypted first encryption keys PUBK_S (EK_A), PUBK_B (EK_A), ..., PUBK_Z (EK_A) And uploaded to the server 200a.

8 is a view showing an embodiment of a process of downloading an encrypted file EK_A (Fil) from the server 200 in the cloud service providing system 20 according to the embodiment of the present invention. 6 to 8, the process of downloading the encrypted file (EK_A (Fil)) is as follows. For convenience of explanation, it is assumed that the encrypted file EK_A (File) is decrypted in the second terminal 120a connected to the second terminal 120a.

The second terminal 120a of the second user B may send a request for file decryption to the second iris recognition USB device 122a. The second iris recognition USB device 122a can authenticate this request via a legitimate request by the user B or iris recognition. If the second user B is correct as the iris authentication result, the second iris recognition USB device 122a can be activated for file decryption. The second iris recognition USB device 122a may transmit the private key PK_B of the second user B for decryption to the second terminal 120a.

The second terminal 120a may request the server 200 to encrypt the file EK_A (File). Thereafter, the server 200a transmits the encrypted file (EK_A (File) and the encrypted first encryption key PUBK_B (EK_A) corresponding to the second terminal 120a) in response to the file request of the second terminal 120a To the second terminal 120a.

The second terminal 120a may then obtain the encryption key EK_A by decrypting the first encryption key PUBK_B (EK_A) encrypted using the private key PK_B of the second user B. [ Thereafter, the second terminal 120a decrypts the encrypted file EK_A (File) using the encryption key EK_A to obtain the original file File. The encryption key EK_A may then be deleted. Thus, the second terminal 120a can securely share the file (File) encrypted by the user A of the first terminal 110a.

1 to 8, an iris recognition USB device corresponding to a terminal is additionally provided to perform user authentication. However, the present invention is not limited thereto. The present invention may be embodied as a terminal having an iris recognition module without a separate USB device.

 FIG. 9 is an exemplary diagram illustrating a cloud service providing system 30 according to another embodiment of the present invention. Referring to FIG. 9, the cloud service providing system 20 may include a plurality of terminals 110b to 1Z0b, Z is an integer of 2 or more, and a server 200b.

And iris recognition universal serial bus (USB) modules 112b to 1Z2b corresponding to the plurality of terminals 110a to 1Z0a, respectively. Each of the iris recognition modules 112b to 1Z2b may perform the same operation as the iris recognition USB device described in Figs.

1 to 9, only one group sharing a file has been described. However, the present invention is not limited thereto. The cloud service providing system of the present invention can be implemented so that a plurality of groups can upload / download files encrypted with each other.

FIG. 10 is a diagram illustrating a cloud service providing system 1000 according to an embodiment of the present invention. Referring to FIG. 10, the first to Nth groups 1110, 1120, ..., 11N0, N may be two or more integers) and the cloud server 1200 may be included.

Each of the first to Nth groups 1110, 1120, ..., 11N0, N is an integer equal to or greater than 2 is a file that is encrypted using the iris recognition USB device / iris recognition module described in FIGS. 1 to 9 And may include at least one terminal that can upload / download to the cloud server 1200.

The above-described contents of the present invention are only specific examples for carrying out the invention. The present invention will include not only concrete and practical means themselves, but also technical ideas which are abstract and conceptual ideas that can be utilized as future technologies.

10, 20, 30: Cloud service providing system
110, 120, ..., 1Z0: terminal
112, 122, ..., 1Z2: iris recognition USB device
200: Server
PK_A, PK_B, PK_Z, PK_S: private key
PUBK_A, PUBK_B, PUBK_Z, PUBK_S: Public key

Claims (20)

A file sharing method of a cloud service providing system, comprising:
Authenticating a first user using a first universal serial bus (USB) device connected to the first terminal;
Activating the first iris recognition USB device if the first user is a legitimate user of the first terminal as the authentication result;
Encrypting the file using the first encryption key;
Encrypting the first encryption key using a public key of the server; And
And transmitting the encrypted file and the encrypted first encryption key to the server. The method according to claim 1,
Wherein encrypting the file is performed at the first terminal. 3. The method of claim 2,
Encrypting the file comprises:
Further comprising receiving the first encryption key from a first iris recognition USB device at the first terminal. The method according to claim 1,
Wherein encrypting the file is performed from the first iris recognition USB device. 5. The method of claim 4,
Encrypting the file comprises:
Receiving the file from the first terminal at the first iris recognition USB device. The method according to claim 1,
Encrypting the file comprises:
Encrypting the first encryption key using at least one public key corresponding to at least one user desiring to share the file; And
And sending a first encryption key encrypted with the at least one public key to the server. The method according to claim 1,
Further comprising receiving a first encryption key encrypted with a second public key corresponding to the encrypted file and the second terminal from the server at a second terminal different from the first terminal. 8. The method of claim 7,
Authenticating a second user using a second iris recognition USB device connected to the second terminal; And
If the second user is a legitimate user of the second terminal, activating the second iris recognition USB device. 9. The method of claim 8,
And the encrypted file is decrypted in the second terminal. 10. The method of claim 9,
Wherein the step of decrypting the encrypted file comprises:
Receiving a second private key of a second iris recognition USB device at the second terminal;
Decrypting the first encryption key encrypted with the second public key using the second private key; And
And decrypting the encrypted file using the decrypted first encryption key. 10. The method of claim 9,
And deleting the decrypted first encryption key. 9. The method of claim 8,
Wherein the encrypted file is decrypted in the second iris recognition USB device. The method according to claim 1,
Wherein the first iris recognition USB device is a LOCKIT product of Irish. A file management method of a cloud service providing system including a plurality of terminals and a server, the method comprising:
Receiving an encrypted file using an encryption key corresponding to at least one of the plurality of terminals;
Receiving an encrypted encryption key obtained by encrypting the encryption key using a public key of the server;
Obtaining the encryption key by decrypting the encrypted encryption key using the private key of the server;
Encrypting the encryption key using a public key corresponding to at least one other terminal of the plurality of terminals; And
And deleting the encryption key. 15. The method of claim 14,
Wherein the encryption key and the private key are stored in an iris-aware USB device connected to the at least one terminal. 15. The method of claim 14,
Receiving a download request for the encrypted file from the at least one other terminal;
Further comprising transmitting the encrypted file and the encryption key encrypted with the public key to the at least another terminal in response to the download request. A plurality of terminals;
Iris recognition universal serial bus (USB) devices connected to each of the plurality of terminals; And
And a server coupled to the plurality of terminals,
Wherein each of the iris recognition USB devices includes a private key and an encryption key,
At least one of the iris recognition USB devices encrypts the file using a corresponding encryption key,
At least one of the iris recognition USB devices decrypts the encrypted file using a corresponding private key,
Wherein the server stores the encrypted file and the encryption key encrypted with at least one public key. 18. The method of claim 17,
Wherein the encryption key encrypted with the at least one public key is generated at the server. 18. The method of claim 17,
Wherein the encryption key encrypted with the at least one public key is generated at the at least one terminal. 18. The method of claim 17,
Wherein each of the iris recognition USB devices performs a user authentication and is activated when passing the user authentication, thereby encrypting a file or decrypting an encrypted file.

Images