-
公开(公告)号：KR101321401B1
公开(公告)日：2013-10-25
申请号：KR1020070011277
申请日：2007-02-02
Applicant: 삼성전자주식회사 , 재단법인서울대학교산학협력재단
IPC: H04L9/30
Abstract: 그룹 키 관리 방법 및 그룹 키 관리 장치가 개시된다. 본 발명의 그룹 키 관리 방법은, 각각 둘 이상의 사용자들로 구성되고 고유한 공통키를 가지는 사용자 집합 원소들을 생성하는 단계, 상기 사용자 집합 원소들 중 두 개를 선택하여 상위 레벨 집합 원소를 생성하고, 선택된 상기 사용자 집합 원소들 중 두 개 각각의 공통키들 중 어느 하나 이상을 이용하여 상기 상위 레벨 집합 원소의 레벨 키를 생성하는 단계, 및 기설정된 레벨까지 상기 상위 레벨 집합 원소의 레벨 키를 생성하는 단계를 반복하는 단계를 포함하는 것을 특징으로 한다. 따라서, 그룹 키 관리에 필요한 전송량을 줄일 수 있다.
브로드캐스트 암호화, 그룹 키 관리-
公开(公告)号：KR1020080072463A
公开(公告)日：2008-08-06
申请号：KR1020070011277
申请日：2007-02-02
Applicant: 삼성전자주식회사 , 재단법인서울대학교산학협력재단
IPC: H04L9/30
CPC classification number: H04L9/0836 , H04L9/0643 , H04L9/0891
Abstract: A group key management method and a group key management apparatus using the same are provided to remarkably reduce a transmission quantity required for update of a group key when the number of seceders is small. A group key management method comprises the following steps of: generating user congregation elements including at least two users and having unique common keys(S110); selecting two of the user congregation elements to generate an upper level congregation element and generating level keys of the upper level congregation elements by using at least one of the common keys of the two user congregation elements(S120); and determining whether operation of the step S120 is performed up to a preset level(S130).
Abstract translation: 提供组密钥管理方法和使用该组密钥管理装置的组密钥管理装置，以在分离器数量小时显着地减少组密钥更新所需的传输量。 组密钥管理方法包括以下步骤：生成包括至少两个用户并具有唯一公共密钥的用户聚合元素（S110）; 通过使用两个用户会众元素中的至少一个公共密钥来选择两个用户会众元素来生成上级会众元素并生成上级会众元素的等级密钥（S120）; 并且确定步骤S120的操作是否被执行到预设级别（S130）。
-
公开(公告)号：KR101213160B1
公开(公告)日：2012-12-17
申请号：KR1020060113438
申请日：2006-11-16
Applicant: 삼성전자주식회사
CPC classification number: H04L9/0836 , H04L9/0891
Abstract: 바이너리트리(binary tree)에상응하는그룹의멀티탈퇴(multi leave)에대한그룹키 업데이트방법및 장치가개시된다. 본발명의일실시예에따른그룹키 업데이트방법은상기바이너리트리상의노드들중 서브루트노드를선택하는단계; 상기서브루트노드의타입에따라상기그룹에대한노드체인지(node change)를수행하여변화된바이너리트리를생성하는단계; 및상기변화된바이너리트리에대하여노드키 업데이트를수행하는단계를포함하는것을특징으로한다. 따라서, 효율적으로멀티탈퇴에대한그룹키 업데이트를수행할수 있다.
-
公开(公告)号：KR1020120100046A
公开(公告)日：2012-09-12
申请号：KR1020110018664
申请日：2011-03-02
Applicant: 삼성전자주식회사
Inventor： 김대엽
CPC classification number: H04L9/3247 , H04L9/008 , H04L9/0643 , H04L9/0825 , H04L9/0861 , H04L9/088 , H04L63/061 , H04L63/101 , H04L2209/38 , H04L2209/60 , H04L2463/062
Abstract: PURPOSE: An apparatus and method for controlling access to contents in a distributed environment network are provided to classify rights to read and write the contents in the distributed environment network by generating keys through classification of the keys for reading and writing. CONSTITUTION: A list generation part(111) generates an access control list which includes one or more items of user information and access right information. A first key generation part(112) generates a first key corresponding to a key for a writing right. A second key generation part(113) generates a key for a reading right, a second key, using the first key. A first key distribution part(114) codes the first key using each public key of members who have the writing right among the members who are included in the access control list. A second key distribution part(115) decodes the second key using each public key of the members who have the reading right among the members who are included in the access control list. [Reference numerals] (110) Control part; (111) List generation part; (112) First key generation part; (113) Second key generation part; (114) First key distribution part; (115) Second key distribution part; (120) Communication part; (130) Storage part
Abstract translation: 目的：提供一种用于控制分布式环境网络中内容访问的装置和方法，用于通过分类密钥进行读写分类，生成密钥来分类读写分布式环境网络内容的权限。 构成：列表生成部（111）生成包含一个或多个用户信息项和访问权限信息的访问控制列表。 第一密钥生成部分（112）生成对应于写入权限的密钥的第一密钥。 第二密钥生成部分（113）使用第一密钥生成用于读取权限的密钥，第二密钥。 第一密钥分配部分（114）使用包括在访问控制列表中的成员中具有书面权限的成员的每个公钥来对第一密钥进行编码。 第二密钥分发部件（115）使用在访问控制列表中包括的成员中具有读取权限的成员的每个公钥来解码第二密钥。 （附图标记）（110）控制部; （111）列表生成部分; （112）第一关键代码部分; （113）第二关键生成部分; （114）第一钥匙分配部分; （115）第二密钥分发部分; （120）通讯部分; （130）储存部分
-
公开(公告)号：KR1020110083886A
公开(公告)日：2011-07-21
申请号：KR1020100003858
申请日：2010-01-15
Applicant: 삼성전자주식회사
Inventor： 김대엽
CPC classification number: H04L63/08 , G06F21/33 , G06F2221/2129 , H04W12/06 , H04L9/30 , H04W12/08 , H04W88/02
Abstract: PURPOSE: An apparatus for authenticating other portable terminal in a mobile terminal and a method thereof are provided to issue an authentication in a mobile terminal through an authentication channel such as an LLC(Location-limited Channel). CONSTITUTION: A method for authenticating other portable terminal in a mobile terminal comprises steps of: receiving a first seed from an authentication response terminal through an authentication channel and transmitting a second seed to the authentication response terminal; creating the first seed, the second seed, and an opened key; and transmitting the authentication to the authentication response terminal.
Abstract translation: 目的：提供一种用于认证移动终端中的其他便携式终端的装置及其方法，用于通过诸如LLC（位置限制信道）的认证信道在移动终端中发出认证。 构成：用于在移动终端中认证其他便携式终端的方法包括以下步骤：通过认证信道从认证响应终端接收第一种子，并将第二种子发送到认证响应终端; 创建第一个种子，第二个种子和一个打开的钥匙; 并将认证发送到认证响应终端。
-
Patent Agency Ranking
公开(公告)号：KR1020080083874A
公开(公告)日：2008-09-19
申请号：KR1020070024659
申请日：2007-03-13
Applicant: 삼성전자주식회사
Inventor： 김대엽
IPC: H04N21/266 , H04N21/4623 , H04N21/6334
CPC classification number: H04N7/1675 , H04N21/2347 , H04N21/26609 , H04N21/4181 , H04N21/4334 , H04N21/4405 , H04N21/4623
Abstract: A security system based on a conditional access system and a method for processing a conditional access service using the same are provided to enable a smart card to check whether a subscriber has permission if the subscriber starts recording, decode an encrypted CW, transmit the decoded CW to a receiver, and generate and store right configuration condition information and a CEK, and transmit a program ID(Identification) and the CEK to the receiver, and enable the receiver to encrypt a recording program using the CEK and store the encrypted recording program with the program ID. A security system includes a transmitter(100), a receiver(200), and a smart card(300). The transmitter generates and outputs an ECM(Entitlement Control Message) or an EMM(Entitlement Management Message), and performs the scrambling of broadcast data through a CW(Control Word) or a CEK(Contents Encryption Key) to output the scrambled broadcast data. The receiver receives, analyzes, and processes the scrambled broadcast data, the ECM, the EMM outputted from the transmitter, performs the descrambling of the scrambled broadcast data with the CW or the decoded CEK to output the descrambled broadcast data to a receiving terminal(500), or encodes and stores the descrambled broadcast data. The smart card includes a code/authentication processor and an entitlement message processor. The code/authentication processor compares the EMM with information about the scrambled broadcast data to determine whether a subscriber has permission to the broadcast data, and decodes the encoded CEK of the EMM and outputs the decoded CEK to the receiver.
Abstract translation: 提供了一种基于条件访问系统的安全系统和使用该安全系统处理条件访问服务的方法，以使得智能卡能够在用户开始记录，解密加密的CW，传送解码的CW 并且生成和存储正确的配置条件信息和CEK，并且向接收者发送程序ID（Identification）和CEK，并且使接收器能够使用CEK加密记录程序并将加密的记录程序存储在 程序ID。 安全系统包括发射机（100），接收机（200）和智能卡（300）。 发送器产生并输出ECM（授权控制消息）或EMM（授权管理消息），并且通过CW（控制字）或CEK（内容加密密钥）执行广播数据的加扰，以输出加扰的广播数据。 接收机接收，分析和处理加扰的广播数据，ECM，从发射机输出的EMM，用CW或解码的CEK对加扰的广播数据进行解扰，以将解扰的广播数据输出到接收终端（500 ），或编码并存储解扰的广播数据。 智能卡包括代码/认证处理器和授权消息处理器。 代码/认证处理器将EMM与有关加扰的广播数据的信息进行比较，以确定用户是否具有广播数据的许可，并对EMM的编码CEK进行解码并将解码的CEK输出到接收机。
-
公开(公告)号：KR100699467B1
公开(公告)日：2007-03-26
申请号：KR1020050090696
申请日：2005-09-28
Applicant: 삼성전자주식회사
IPC: G06K17/00
CPC classification number: H04L9/3271 , H04L2209/805
Abstract: An RFID(Radio Frequency IDentification) tag, and a system and a method for protecting RFID privacy are provided to protect RFID tag information by transmitting a real RFID to only the RFID reader authenticated based on a pseudo ID. A tag storing part(540) stores the pseudo ID used for authenticating the RFID reader. A determiner(530) determines whether the stored pseudo ID is matched with the pseudo ID generated by using a received key in case that the key is received in response to the pseudo ID transmitted by an information transmission request signal of the RFID reader. A tag controller(520) transmits the RFID of the tag to the RFID reader through a transmitter(550) in case that the stored pseudo ID is matched with the generated pseudo ID. The tag storing part stores a common pseudo ID generated by using a common key of an RFID privacy protection system.
Abstract translation: 提供RFID（射频识别）标签，以及用于保护RFID隐私的系统和方法，以通过仅向基于伪ID认证的RFID读取器发送真实RFID来保护RFID标签信息。 标签存储部（540）存储用于认证RFID阅读器的伪ID。 在由RFID读取器的信息发送请求信号发送的伪ID响应于接收到密钥的情况下，确定器（530）确定存储的伪ID是否与通过使用接收的密钥生成的伪ID相匹配。 标签控制器（520）在所存储的伪ID与生成的伪ID匹配的情况下，通过发送器（550）将RFID标签的RFID发送到RFID读取器。 标签存储部存储通过使用RFID隐私保护系统的公共密钥生成的公共伪ID。
-
公开(公告)号：KR1020060049340A
公开(公告)日：2006-05-18
申请号：KR1020050100726
申请日：2005-10-25
Applicant: 삼성전자주식회사
IPC: H04N21/2347 , H04N21/6334 , H04L9/32 , G06F15/00
CPC classification number: H04L9/0869 , H04L9/0643 , H04L9/0822 , H04L9/0827 , H04L9/083 , H04L9/0836 , H04L9/0891 , H04L2209/38 , H04L2209/601 , H04N7/162 , H04N7/1675 , H04N21/2585 , H04N21/26613
Abstract: 브로드캐스트 암호화를 위한 사용자 키 관리 방법이 개시된다. 본 발명은 순차적으로 배열된 각 노드에 노드 패스 아이디(Node Path ID)를 부여하는 단계, 각 노드에 노드 패스 아이디에 따라 임의의 씨드 키(Seed Value Key)를 부여하는 단계, 부여된 임의의 씨드 키에 해쉬함수를 반복적으로 적용하여 키값들을 생성하는 단계, 및 생성된 키값들을 각 노드들에 순차적으로 부여하는 단계를 통해 구현된다. 본 발명에 의하면, 브로드캐스트 암호화에서 가장 중요한 전송량을 r 미만으로 줄일 수 있게 된다. 또한, 본 발명의 실시예들에서는 현재까지 가장 좋은 방법으로 알려진 SD와 비교하여 전송량이 크게 줄일 수가 있다는 장점이 있다.
브로드캐스트 암호화, 해쉬 함수, 씨드 키, 해쉬 체인,계층구조-
公开(公告)号：KR1020060031257A
公开(公告)日：2006-04-12
申请号：KR1020040080218
申请日：2004-10-08
Applicant: 삼성전자주식회사
IPC: H04L9/28
CPC classification number: G06Q20/3829 , H04L9/0836 , H04L9/0891 , H04L2209/601
Abstract: An apparatus and method for generating a key for a broadcast encryption. The apparatus includes a node secret generator for managing a user that receives broadcast data in a tree structure and for generating a unique node secret for each node in the tree structure. The apparatus also includes an instant key generator for temporarily generating an instant key used at all nodes in common in the tree structure, and a node key generator for generating a node key for each node by operating the node secret generated at the node secret generator and the instant key generated at the instant key generator. Thus, key update can be efficiently achieved.
-
公开(公告)号：KR101584987B1
公开(公告)日：2016-01-13
申请号：KR1020090050392
申请日：2009-06-08
Applicant: 삼성전자주식회사
Inventor： 김대엽
CPC classification number: H04L9/3242 , H04L63/126 , H04L2209/60
Abstract: 데이터송수신장치및 방법이개시된다. 데이터송신장치는전송하고자하는메시지에대한메시지인증코드를복수의암호키로암호화하여제1 암호문및 제2 암호문을생성하고, 생성된제1 암호문및 제2 암호문을데이터수신장치로송신한다.
-
-
-
-
-
-
-
-
-
Search Results
76
records
(took 0.03 seconds)
