-
公开(公告)号：KR100453685B1
公开(公告)日：2004-10-20
申请号：KR1020020068139
申请日：2002-11-05
Applicant: 한국전자통신연구원
IPC: H04L9/30
Abstract: PURPOSE: An apparatus and a method for verifying a modified certificate path including root key verification and CRL pre-verification are provided to enhance the reliability of a root key by verifying the root key in a process for verifying a certificate path. CONSTITUTION: An apparatus for verifying a modified certificate path including root key verification and CRL pre-verification includes a root key verification unit(210), a CRL pre-verification unit(220), and a general certificate path verification unit(230). The root key verification unit(210) verifies a root key of a certificate authority of the highest level. The CRL pre-verification unit(220) identifies abolishing states of certificates on a certificate path. The general certificate path verification unit(230) verifies general items of the certificates.
Abstract translation: 目的：提供一种用于验证包括根密钥验证和CRL预验证的修改的证书路径的设备和方法，以通过在验证证书路径的验证过程中验证根密钥来提高根密钥的可靠性。 用于验证包括根密钥验证和CRL预验证的修改证书路径的装置包括根密钥验证单元（210），CRL预验证单元（220）和普通证书路径验证单元（230）。 根密钥验证单元（210）验证最高级别的证书颁发机构的根密钥。 CRL预先验证单元（220）识别证书路径上的证书的废除状态。 一般证书路径验证单元（230）验证证书的一般项目。
-
公开(公告)号：KR1020040040784A
公开(公告)日：2004-05-13
申请号：KR1020020069035
申请日：2002-11-08
Applicant: 한국전자통신연구원
IPC: G06F1/00
CPC classification number: H01R13/641
Abstract: PURPOSE: A portable USB(Universal Serial Bus) storage is provided to increase usability, mobility, convenience by making an USP port put in the inside of an external case without a cap for protecting the USB port. CONSTITUTION: A data storage is embedded into the external case(11). The USB port(12) is slid/installed into the inside of the external case. A controlling tool(13) selectively controls the reception of the USB port. The controlling tool comprises a controlling switch(16) performing the seesaw movement, a stopper(18), and an elastic part(19) restoring the received USB port by installing between the external case and the USB port.
Abstract translation: 目的：提供便携式USB（通用串行总线）存储，以通过将USP端口放在外部外壳的内部而没有用于保护USB端口的盖来提高可用性，移动性和便利性。 构成：数据存储器嵌入到外壳（11）中。 USB端口（12）滑入/安装到外壳的内部。 控制工具（13）有选择地控制USB端口的接收。 控制工具包括执行跷跷板运动的控制开关（16），止动器（18）和弹性部件（19），通过安装在外壳和USB端口之间来恢复所接收的USB端口。
-
公开(公告)号：KR1020040033531A
公开(公告)日：2004-04-28
申请号：KR1020020062659
申请日：2002-10-15
Applicant: 한국전자통신연구원
Abstract: PURPOSE: A method for generating a certification path using a verification server on the PKI(Public Key Infrastructure) is provided to reduce client's load by making the verification server process a certification path generating work instead of the client, and effectively perform the certification path generation by previously generating/storing the certification path and reusing the certification path. CONSTITUTION: The verification server connecting to the client collects a certificate from a linkable certification organization, and generates/stores the certification path realized by the certificate. When the client requests certification by providing the certificate to the verification server(321), the verification server checks that the certification path for the certificate is stored(322). In case that the certification path is existed(323), the verification server verifies the certificate by using the existed certification path, and transmits a verification result to the client.
Abstract translation: 目的：提供一种使用PKI（公钥基础设施）上的验证服务器生成认证路径的方法，通过使验证服务器处理认证路径生成工作而不是客户端，有效地执行认证路径生成 通过先前生成/存储认证路径并重新使用认证路径。 构成：连接客户端的验证服务器从可链接的认证机构收集证书，生成/存储证书实现的认证路径。 当客户端通过向验证服务器（321）提供证书来请求认证时，验证服务器检查证书的认证路径是否被存储（322）。 在认证路径存在的情况下（323），验证服务器通过使用现有认证路径来验证证书，并将验证结果发送给客户端。
-
公开(公告)号：KR1020030032423A
公开(公告)日：2003-04-26
申请号：KR1020010064187
申请日：2001-10-18
Applicant: 한국전자통신연구원
IPC: G06K9/00
CPC classification number: H04L9/006 , H04L9/3231 , H04L9/3263
Abstract: PURPOSE: A method for issuing a certificate using living body information in a public key infrastructure authenticating system is provided to directly issue a certificate without inputting a complex approval code and improve a security of a certificate issuing procedure. CONSTITUTION: A certificate issuing request message is received from a user system, which connects to an authentication system through the Internet(S500). A reference number and living body information of the corresponding user are extracted for a user authentication(S502). It is checked whether the transmitted living body information of the user is identified with living body information of a member registration user corresponded to a reference number registered and stored in a database storage(S504). If the living body information is identified with the registered living body information, an approval code of the user is created and supplied to the user system(S510). A public key created from the user system is received(S516) and a certificate is issued(S524).
Abstract translation: 目的：提供一种在公共密钥基础设施认证系统中发布使用生物体信息的证书的方法，以直接发布证书而不输入复杂的认证码并提高证书颁发过程的安全性。 构成：从通过因特网连接到认证系统的用户系统接收证书发行请求消息（S500）。 提取用于用户认证的相应用户的参考号码和生物体信息（S502）。 检查用户的传送的生物体信息是否与对应于登记并存储在数据库存储器中的参考号码的成员登记用户的生物体信息进行识别（S504）。 如果生物体信息用注册的生物体信息识别，则创建用户的批准代码并将其提供给用户系统（S510）。 接收从用户系统创建的公共密钥（S516），并发出证书（S524）。
-
公开(公告)号：KR100529550B1
公开(公告)日：2005-11-22
申请号：KR1020010064186
申请日：2001-10-18
Applicant: 한국전자통신연구원
IPC: H04L9/30
CPC classification number: H04L9/3231 , H04L9/006 , H04L9/3268 , H04L63/0823 , H04L63/0861 , H04L2209/76
Abstract: 본 발명은 공개키 기반 구조 인증시스템에서 생체정보를 이용한 인증서의 권한 변경 방법에 관한 것이다. 즉, 본 발명은 공개키 기반 구조 인증시스템에서 인증서의 폐지, 중지, 회복 등과 같은 인증서의 권한 변경을 위한 사용자 인증 필요시 생체정보를 이용하여 신뢰성이 보장된 사용자 인증을 수행할 수 있게 됨으로써, 종래와 같이 인증서 권한 변경을 위해 사용자가 등록기관이나 인증기관을 직접 찾아가지 않아도 되며, 인증기관과 온라인 연결된 각자의 사용자 시스템을 이용하여 쉽게 인증서 권한 변경 작업을 수행할 수 있게 되는 이점이 있다.
-
Patent Agency Ranking
公开(公告)号：KR1020030032421A
公开(公告)日：2003-04-26
申请号：KR1020010064185
申请日：2001-10-18
Applicant: 한국전자통신연구원
IPC: G06K9/00
Abstract: PURPOSE: A method for a user registration is provided to solve an inconvenience of a complex approval code use and prevent a member authentication fraud through other person by using living body information in public key infrastructure. CONSTITUTION: An authentication system receives a request of member register from a registration institution(S600) and checks confidentiality and integrity of user information(S602). If the user information is normal(S604), inherent living body information of a user is recognized. In addition, it is checked whether living body information identified with the inputted living body information exists in database storage of the registration institution(S606). If identical living body information does not exist(S608), the user is approved as a member, the user information and living body information are stored and registered in the database storage by linking with a corresponding user table(S610,S617).
Abstract translation: 目的：提供一种用户注册的方法，以解决复杂的批准代码使用的不便，并通过在公共密钥基础设施中使用生物体信息防止其他人的成员身份验证欺诈。 构成：验证系统从注册机构（S600）接收会员注册请求，并检查用户信息的机密性和完整性（S602）。 如果用户信息正常（S604），则识别用户的固有生物体信息。 此外，检查在登记机构的数据库存储中是否存在与输入的生物体信息识别的生物体信息（S606）。 如果不存在相同的生物体信息（S608），则通过与相应的用户表（S610，S617）的连接，将用户认可为成员，将用户信息和生物体信息存储并登记在数据库存储器中。
-
公开(公告)号：KR1020030021778A
公开(公告)日：2003-03-15
申请号：KR1020010055190
申请日：2001-09-07
Applicant: 한국전자통신연구원
IPC: H04L9/30
CPC classification number: H04L9/3268
Abstract: PURPOSE: A method and apparatus of verifying validity of certificate of authentication using a verification server at a public key infrastructure are provided, which are capable of securing mutual interlocking of a public key infrastructure of different systems and of reducing a load of a client for verification. CONSTITUTION: The first verification server(28) receives validity verification request of a certificate of authentication from a verification request means(27) and judges whether or not of a reliable domain. The first verification server(28) compares and judges a routing server list to perform the validity verification of the certificate of authentication. The second verification server(29) receives validity verification request of a certificate of authentication from the first verification server and judges whether or not of an access allowance server list. The second verification server(29) performs the validity verification of the certificate of authentication.
Abstract translation: 目的：提供一种使用公钥基础设施上的验证服务器来验证认证证书的有效性的方法和装置，其能够确保不同系统的公钥基础设施的相互互锁，并减少客户端的负载以进行验证 。 构成：第一验证服务器（28）从验证请求装置（27）接收认证证书的有效性验证请求，并判断是否为可靠域。 第一验证服务器（28）比较并判断路由服务器列表以执行认证证书的有效性验证。 第二验证服务器（29）从第一验证服务器接收验证证书的有效性验证请求，并判断访问许可服务器列表。 第二验证服务器（29）执行认证证书的有效性验证。
-
公开(公告)号：KR100487741B1
公开(公告)日：2005-05-06
申请号：KR1020020062659
申请日：2002-10-15
Applicant: 한국전자통신연구원
Abstract: 본 발명은 인증서를 기반으로 하는 정보 보호 분야에 관한 것으로, 특히 공개키 기반구조에서 인증서 검증의 한 과정인 인증경로 생성에 검증서버를 이용함으로써, 클라이언트가 수행해야하는 작업들을 검증서버를 통해 대행하도록 하여 보다 효율적으로 인증경로 생성을 가능하게 하는, 공개키 기반구조에서 검증서버를 이용한 인증경로 생성방법에 관한 것으로, 본 발명에 따른 인증경로 생성방법은,
공개키 기반구조에서 인증 경로를 생성하는 방법에 있어서, 클라이언트(100)에 연결된 검증서버(300)에서 상기 클라이언트의 요청에 상관없이 연동가능한 인증기관의 인증서를 수집하고, 상기 인증기관의 인증서로 이루어질 수 있는 인증경로를 생성하며, 상기 인증기관 인증서 인증경로를 저장하는 제1 단계(311, 312, 313)와, 상기 클라이언트가 상기 검증서버에 검증대상 인증서를 제공하여 상기 검증 대상 인증서의 검증을 요청 시, 상기 검증서버는 기존에 저장된 상기 검증대상 인증서의 인증경로가 존재하는지 확인하는 제2 단계(321, 322)와, 상기 제2 단계에서 확인 결과 상기 검증대상 인증서의 인증경로가 존재하는 경우, 상기 검증서버는 상기 존재하는 인증경로를 사용하여 상기 검증대상 인증서를 검증하고 검증결과를 상기 클라이언트에 전송하는 � ��3 단계(323, 327)와, 상기 제2 단계에서 확인 결과 인증경로가 존재하지 않는 경우, 상기 검증서버는, 상기 제1 단계에서 저장된 인증기관 인증서 인증경로에서 상기 검증대상 인증서의 검증에 합당한 인증기관 인증서 인증경로를 선택하고, 상기 선택된 인증기관 인증서 인증경로와 상기 검증대상 인증서를 결합하여 인증경로의 생성을 시도하는 제4 단계(323, 324) 및 상기 제4 단계에서 인증경로 생성에 성공하는 경우, 상기 검증서버는 상기 성공한 인증경로를 저장하고 상기 생성된 인증경로를 사용하여 상기 검증대상 인증서를 검증하고 검증결과를 상기 클라이언트로 전송하며, 상기 제4 단계에서 인증경로 생성에 실패하는 경우, 상기 검증서버는 실패처리를 수행하고 그 결과에 대한 로그 및 응답을 생성하여 클라이언트로 전송하는 제5 단계(325, 326, 32 7, 328)를 구비함을 요지로 한다.-
公开(公告)号：KR100449484B1
公开(公告)日：2004-09-21
申请号：KR1020010064187
申请日：2001-10-18
Applicant: 한국전자통신연구원
IPC: G06K9/00
CPC classification number: H04L9/006 , H04L9/3231 , H04L9/3263
Abstract: A method for issuing a certificate using biometric information in a public key infrastructure-based authentication system is provided. In the present invention, an authentication code used to protect a certificate issuance request message is assigned to a user by a certificate authority not at a registration step but at a certificate issuance request step where a user authentication is performed with user's biometric information. Therefore, there is no need for a user to remember and enter the complex authentication code to be issued the certificate, thereby simplifying certificate issuance procedures. Further, in the present invention, the authentication code is assigned to the user at the certificate issuance step only after a real-time authentication using the user's biometric information is performed. For this reason, even though a reference code of the user is revealed to a third party before the certificate issuance step, it can be prevented that the third party tries to be issued the certificate, thereby maintaining higher reliability when the certificate is issued.
Abstract translation: 提供了一种在基于公钥基础设施的认证系统中使用生物信息发布证书的方法。 在本发明中，用于保护证书颁发请求消息的认证码由不是在注册步骤的认证机构分配给用户，而是在用用户生物信息执行用户认证的证书颁发请求步骤。 因此，用户不需要记住并输入复杂的认证码来发布证书，从而简化了证书颁发程序。 此外，在本发明中，仅在执行使用用户的生物信息的实时认证之后，才在证书发布步骤向用户分配认证码。 因此，即使在证书发行步骤之前将用户的参考代码泄露给第三方，也可以防止第三方试图发布证书，从而在发布证书时保持更高的可靠性。
-
公开(公告)号：KR1020040013668A
公开(公告)日：2004-02-14
申请号：KR1020020046693
申请日：2002-08-08
Applicant: 한국전자통신연구원
IPC: H04L9/30
CPC classification number: H04L63/0823 , H04L9/3265 , H04L9/3268
Abstract: PURPOSE: A method for verifying the certificate in a certification verification server by using a public-key infrastructure certificate policy and a certificate policy is provided to concentrically manage the certification policy in the domain by processing the verification of the certificate in the certificate verification server. CONSTITUTION: A method for verifying the certificate in a certification verification server by using a public-key infrastructure certificate policy and a certificate policy includes a first step of: receiving the verification request of the verification target by receiving the certification policy to be applied to the verification target certificate from the clients(100,200), the certificate of authenticate agency and the verification target certificate; a second step of generating the certificate path of the verification target certificate corresponding to the request by the certificate verification server(300); a third step of determining the verification status of the verification target certificate by using the certificate policy table; a fourth step of performing the certificate path verification created by using the certificate policy table in the certificate verification server(300); and a fifth step of transmitting the success message when the result of the certificate path verification is successful and transmitting the failure message when the result of the certificate path verification is fail.
Abstract translation: 目的：提供一种通过使用公钥基础设施证书策略和证书策略来验证认证验证服务器中的证书的方法，以通过处理证书验证服务器中的证书的验证来同心管理域中的认证策略。 构成：通过使用公共密钥基础设施证书策略和证书策略来验证认证验证服务器中的证书的方法包括：第一步：通过接收认证策略来接收验证目标的验证请求， 客户验证目标证书（100,200），认证机构认证证书和验证目标证书; 第二步骤，生成与证书验证服务器（300）的请求对应的验证对象证书的证书路径; 通过使用证书策略表来确定验证目标证书的验证状态的第三步骤; 执行通过使用证书验证服务器（300）中的证书策略表创建的证书路径验证的第四步骤; 以及当证书路径验证的结果成功时发送成功消息的第五步骤，并且当证书路径验证的结果失败时发送失败消息。
-
-
-
-
-
-
-
-
-
Search Results
17
records
(took 0.017 seconds)
