-
公开(公告)号：KR101638613B1
公开(公告)日：2016-07-11
申请号：KR1020150054404
申请日：2015-04-17
Applicant: 현대자동차주식회사 , 기아자동차주식회사 , 조선대학교산학협력단 , 서울대학교산학협력단
CPC classification number: H04L63/1416 , G06F21/552 , H04L12/40006 , H04L63/1425 , H04L67/12 , H04L2012/40215 , H04L2012/40273
Abstract: 본발명은차량내부네트워크에대한공격시도를사전에차단하는침입탐지시스템(IDS) 및그 제어방법에관한것이다. 상기와같은과제를해결하기위해본 발명의일 실시예에따른차량의공격탐지시스템(IDS)에서네트워크공격을탐지하는방법은, 기설정된주기동안네트워크의메시지들을입력받는단계; 상기입력된각 메시지별로현재발생빈도값을구하는단계; 상기주기가시작될때 차량의동작상태정보를입력받는단계; 상기동작상태정보에대응되는메시지별정상발생빈도값을호출하는단계; 상기현재발생빈도값 및상기정상발생빈도값을이용하여메시지별로선형근사화한상대거리함수연산을수행하는단계; 및상기선형근사화한상대거리함수연산의결과를기 설정된임계값과비교하여상기각 메시지별로공격상태여부를판단하는단계를포함할수 있다.
Abstract translation: 入侵检测系统（IDS）及其控制方法技术领域本发明涉及一种先前阻止企图攻击车载网络的入侵检测系统（IDS）及其控制方法。 为此，根据本发明的实施例的用于检测在车辆的攻击检测系统（或IDS）中的网络的攻击的方法可以包括以下步骤：在预设时段内接收网络的消息; 获得每个接收到的消息的当前重复率; 在该周期的起始点接收车辆的操作状态信息; 为每个消息调用对应于操作状态信息的正常重复率; 通过使用当前重复率和正常重复率来计算每个消息的线性近似相对距离函数; 以及通过将所述线性近似相对距离函数的计算结果与预设阈值进行比较来确定是否存在针对每个消息的攻击状态。
-
公开(公告)号：KR101371902B1
公开(公告)日：2014-03-10
申请号：KR1020120144900
申请日：2012-12-12
Applicant: 현대자동차주식회사 , 서울대학교산학협력단 , 조선대학교산학협력단
IPC: H04L12/26 , H04L12/851
CPC classification number: H04L63/1425 , H04L67/12
Abstract: The present invention relates to a device for detecting an attack on a vehicle network and a method thereof and is to provide to a device for detecting an attack on a vehicle network and a method thereof which accumulatively counts packets by each device (ID) connected to a vehicle network bus, calculates the accumulated value by accumulating an inspected value (S) whenever accumulatively counting packets and determines that an attack is occurred if the average accumulated value calculated by dividing the accumulated value by the accumulated counting does not exceed a first threshold value. For the purpose, in a vehicle network environment in which devices, having a priority for packet transmission, connected to a vehicle network bus include: a packet collection unit for collecting packets transmitted through the vehicle network bus; a packet counting unit for accumulatively counting the number of packets collected by the packet collection unit; an inspected value calculation unit for calculating an inspected value based on a time difference between packets having the same ID; an accumulated value calculation unit for calculating an accumulated value by adding the inspected value which is calculated by the inspected value calculation unit to the previous inspected value; an average accumulated value calculation unit for calculating the average accumulated value by dividing the accumulated value calculated by the accumulated value calculation unit by accumulated counting value by the packet counting unit; and an attack determination unit for determining the existence of attack based on the average accumulated value calculated by the average accumulated value calculation unit. [Reference numerals] (10) Packet collection unit; (20) Packet counting unit; (30) Inspected value calculation unit; (40) Accumulated value calculation unit; (50) Average accumulated value calculation unit; (60) Attack determination unit; (70) Control unit
Abstract translation: 本发明涉及一种用于检测车辆网络攻击的装置及其方法，并提供给用于检测对车辆网络的攻击的装置及其方法，其中每个装置（ID）对连接到车辆网络的数据进行累积计数 车辆网络总线，每当累积计数分组时累积检查值（S）来计算累积值，并且如果通过将累加值除以累加计数而计算的平均累积值不超过第一阈值，则确定发生攻击 。 为此，在车辆网络环境中，具有连接到车辆网络总线的分组传输优先级的设备包括：分组收集单元，用于收集通过车辆网络总线传送的分组; 分组计数单元，用于累积计数由所述分组收集单元收集的分组的数量; 检查值计算单元，用于基于具有相同ID的分组之间的时间差计算检查值; 累积值计算单元，用于通过将由检查值计算单元计算的检查值与先前检查值相加来计算累积值; 平均累计值计算单元，用于通过将由累积值计算单元计算出的累积值除以累积计数值来计算平均累积值; 以及攻击确定单元，用于基于由平均累积值计算单元计算的平均累积值来确定攻击的存在。 （附图标记）（10）分组收集单元; （20）分组计数单元; （30）检验价值计算单位; （40）累计值计算单位; （50）平均累计值计算单位; （60）攻击判定单元; （70）控制单元
-
公开(公告)号：KR101980655B1
公开(公告)日：2019-05-22
申请号：KR1020180112229
申请日：2018-09-19
Applicant: 한화시스템 주식회사 , 서울대학교산학협력단
IPC: H04W16/08 , H04W16/24 , H04B17/336
-
公开(公告)号：KR101913100B1
公开(公告)日：2018-10-31
申请号：KR1020160157232
申请日：2016-11-24
Applicant: 서울대학교산학협력단 , 조선대학교산학협력단
CPC classification number: H04L9/304 , H03M13/005 , H03M13/136 , H03M13/616 , H03M13/6362 , H04L9/0861
Abstract: 생성행렬의천공에기초한암호화키를사용하는데이터암호화장치및 방법이개시된다. 본발명은리드-뮬러(Reed-Muller: RM) 코드의생성행렬로부터특정지점의열에위치하는비트값들을천공한후 천공된생성행렬을이용하여생성된공개키를통해메시지의암호화를수행함으로써, 생성행렬의구조가변경됨으로인해 RM 코드의구조에기반한제3자로부터의공격을방어할수 있어서, 기존의 McEliece 암호화시스템이특수한구조를갖는 RM 코드의생성행렬을그대로사용함으로인해서발생하는보안상의취약성을해소할수 있다.
-
公开(公告)号：KR101873881B1
公开(公告)日：2018-07-03
申请号：KR1020160160261
申请日：2016-11-29
Applicant: 서울대학교산학협력단 , 조선대학교산학협력단
Abstract: 데이터보안이강화된전자서명장치및 방법이개시된다. 본발명은 "1"과 "0"의코드값을임의의성분들로포함하는 (n-k) x k 크기의제1 부분행렬(submatrix) R과 (n-k) x (n-k)의크기를갖는단위행렬인제2 부분행렬 I가열 방향으로조합된제1 행렬 H를생성하고, "1"과 "0"의코드값을성분으로포함하는 (n-k) x (n-k) 크기의스크램블링행렬 Q와 "1"과 "0"의코드값을성분으로포함하는 n x n 크기의순열행렬 P를생성한후 상기제1 행렬 H, 상기스크램블링행렬 Q 및상기순열행렬 P를개인키로활용하여전자서명값을생성하고, 상기스크램블링행렬 Q, 상기제1 행렬 H 및상기순열행렬 P가곱해진 QHP를공개키로사용하여상기전자서명값을검증하는새로운방식의전자서명생성및 검증과관련된알고리즘을제공할수 있다.
-
Patent Agency Ranking
公开(公告)号：KR101873878B1
公开(公告)日：2018-07-03
申请号：KR1020160149020
申请日：2016-11-09
Applicant: 조선대학교산학협력단 , 전남대학교산학협력단 , 서울대학교산학협력단
Abstract: 상대차집합에기초하여메시지의최적분산저장이가능한데이터저장장치및 방법이개시된다. 본발명은다수의메시지들을여러데이터저장소들에분산저장하는방법에있어서, 최소한의데이터저장소들만을활용해서상기다수의메시지들을분산저장한후 상기데이터저장소들중 최소한의데이터저장소들만을선택하여액세스하더라도상기다수의메시지들이로드될수 있도록하여상기다수의메시지들에대한데이터손실에대비함과동시에데이터저장소들로부터빠른데이터로드가가능하도록하는기법을제공할수 있다.
-
公开(公告)号：KR1020180060588A
公开(公告)日：2018-06-07
申请号：KR1020160160261
申请日：2016-11-29
Applicant: 서울대학교산학협력단 , 조선대학교산학협력단
CPC classification number: G06F21/33 , H04L9/30 , H04L9/3247
Abstract: 데이터보안이강화된전자서명장치및 방법이개시된다. 본발명은 "1"과 "0"의코드값을임의의성분들로포함하는 (n-k) x k 크기의제1 부분행렬(submatrix) R과 (n-k) x (n-k)의크기를갖는단위행렬인제2 부분행렬 I가열 방향으로조합된제1 행렬 H를생성하고, "1"과 "0"의코드값을성분으로포함하는 (n-k) x (n-k) 크기의스크램블링행렬 Q와 "1"과 "0"의코드값을성분으로포함하는 n x n 크기의순열행렬 P를생성한후 상기제1 행렬 H, 상기스크램블링행렬 Q 및상기순열행렬 P를개인키로활용하여전자서명값을생성하고, 상기스크램블링행렬 Q, 상기제1 행렬 H 및상기순열행렬 P가곱해진 QHP를공개키로사용하여상기전자서명값을검증하는새로운방식의전자서명생성및 검증과관련된알고리즘을제공할수 있다.
-
公开(公告)号：KR101613572B1
公开(公告)日：2016-04-29
申请号：KR1020140172035
申请日：2014-12-03
Applicant: 조선대학교산학협력단 , 동국대학교 산학협력단 , 서울대학교산학협력단
Abstract: 보안환경변화에기초한가변암호화알고리즘관리장치및 방법이개시된다. 본발명의일실시예에따른보안환경변화에기초한가변암호화알고리즘관리장치및 방법은특정주기마다, 네트워크로연결되어있는복수의단말들로부터발생하는데이터암복호화의실패와연관된보안이벤트의발생횟수를카운트한후 해당주기마다, 상기보안이벤트의발생횟수에따른보안위협레벨을연산하여해당보안위협레벨에따른데이터암호화알고리즘을상기복수의단말들로전달함으로써, 상기복수의단말들이매 주기마다변경된데이터암호화방식에기초하여데이터교환을수행하도록유도하여네트워크에대한보안성을강화시킬수 있다.
Abstract translation: 公开了一种基于安全环境变化来管理可变加密算法的装置和方法。 根据本发明的实施例的用于管理基于安全环境变化的可变加密算法的装置和方法可以以这样的方式加强网络的安全性：对于每个特定时段，出现次数 对从通过网络连接的多个终端产生的与数据加密和解密失败有关的安全事件进行计数，并且对于每个所述期间，计算根据安全事件的次数的安全威胁级别，并且 根据计算出的安全威胁级别的数据加密算法被发送到多个终端，以引导多个终端基于每个所述周期改变的数据加密方法进行数据通信。
-
公开(公告)号：KR101371895B1
公开(公告)日：2014-03-10
申请号：KR1020120144901
申请日：2012-12-12
Applicant: 현대자동차주식회사 , 서울대학교산학협력단 , 조선대학교산학협력단
IPC: H04L12/70
CPC classification number: H04L43/045 , H04L43/16 , H04L2012/40215
Abstract: A controller area network (CAN) packet automatic analysis method according to the present invention, which comprises the steps of sorting packets related to the performance of a specific function among data packets used in CAN, and comparing and analyzing the change of packet data values with time on the graph, enables a simple and efficient analysis on the function, the type and the operation method of the packet. [Reference numerals] (AA) Start; (BB) End; (ST10) Input data and perform a function?; (ST11) Read a log file and write ID array; (ST12) Calculate a data variation value (A) before performing the function; (ST13) Calculate a difference (B) of average data amount by section before and during performing the function; (ST14) Record and store the variation according to the time relative to a packet satisfying with 'B/A > Threshold value'; (ST15) Performing analysis?; (ST16) Display an analysis result; (ST17) Section '1' increase; (ST18) Section end?
Abstract translation: 一种根据本发明的控制器局域网（CAN）数据包自动分析方法，包括以下步骤：对与CAN中使用的数据包中的特定功能的性能相关的分组进行排序，并将分组数据值的变化与 时间在图上，能够对数据包的功能，类型和操作方法进行简单有效的分析。 （附图标记）（AA）开始; （BB）结束; （ST10）输入数据并执行功能？ （ST11）读取日志文件并写入ID数组; （ST12）在执行功能之前计算数据变化值（A） （ST13）在执行功能之前和期间计算平均数据量的差（B）; （ST14）根据相对于满足“B / A>阈值”的包的时间记录和存储变化; （ST15）进行分析？ （ST16）显示分析结果; （ST17）第1节增加; （ST18）截面？
-
公开(公告)号：KR1020080072406A
公开(公告)日：2008-08-06
申请号：KR1020070011127
申请日：2007-02-02
Applicant: 엘지전자 주식회사 , 서울대학교산학협력단
CPC classification number: H03M13/1105 , H03M13/1148 , H04L1/0057
Abstract: A method of performing LDPC(Low-Density Parity-Check codes) decoding using a model matrix is provided to perform a decoding process by using the model matrix having high performance. A method of performing LDPC decoding using a model matrix comprises the following steps of: receiving an LDPC coded signal from a channel; iteratively performing a check node update and a variable node update based on the model matrix in which at least two shift numbers are superposed; determining a decoding value based on result values of the check node update and the variable node update; and performing a check for the determined decoding value. The step of performing the check node update includes the step of performing data processing to reflect an operation result processed through at least one among a plurality of edges formed with a superposition structure to a corresponding variable node memory(2001,2002,2003).
Abstract translation: 提供使用模型矩阵执行LDPC（低密度奇偶校验码）解码的方法，以通过使用具有高性能的模型矩阵来执行解码处理。 使用模型矩阵执行LDPC解码的方法包括以下步骤：从信道接收LDPC编码信号; 基于叠加了至少两个移位号的模型矩阵迭代地执行校验节点更新和变量节点更新; 基于所述校验节点更新和所述变量节点更新的结果值来确定解码值; 并对所确定的解码值进行检查。 执行校验节点更新的步骤包括执行数据处理以将通过叠加形成的多个边缘中的至少一个处理的操作结果反映到对应的可变节点存储器的步骤（2001,2002,2003）。
-
-
-
-
-
-
-
-
-
Search Results
38
records
(took 0.025 seconds)
