전자상거래 사이트의 원타임 패스워드 접속 장치 및 방법
    1.
    发明公开
    전자상거래 사이트의 원타임 패스워드 접속 장치 및 방법 无效
    提供电子商务网站一次通信的系统和方法

    公开(公告)号:KR1020080042669A

    公开(公告)日:2008-05-15

    申请号:KR1020070077983

    申请日:2007-08-03

    Abstract: A system and a method for connecting to an EC(Electronic Commerce) site with an OTP(One-Time Password) are provided to perform authentication by connecting a password module, such as a USB(Universal Serial Bus) or PC card, to a PC, obtaining the available OTP from the password module with a program downloaded from the system, and inserting the OTP into a user ID/password. A password module(100) outputs a password by executing an encoding algorithm when a plain sentence for generating the password is received. A terminal(300) requests authentication to a user authentication server(400) through the network, extracts an OTP from the password module by communicating with the password module through password module operation software downloaded from an EC site, and transmits the extracted OTP to the user authentication server. The password module comprises an interface connected to the terminal in a USB or PCI(Peripheral Component Interconnect) mode, an encoder encoding the extracted OTP, and a key storing part storing public certificate and secret keys.

    Abstract translation: 提供一种用于连接到具有OTP(一次性密码)的EC(电子商务)站点的系统和方法,以通过将诸如USB(通用串行总线)或PC卡的密码模块连接到 PC,从系统中下载的程序从密码模块获取可用的OTP,并将OTP插入用户ID /密码。 当接收到用于生成密码的简单句子时,密码模块(100)通过执行编码算法输出密码。 终端(300)通过网络向用户认证服务器(400)请求认证,通过从EC站点下载的密码模块操作软件与密码模块通信,从口令模块提取OTP,并将提取的OTP发送到 用户认证服务器。 密码模块包括以USB或PCI(外围组件互连)模式连接到终端的接口,编码所提取的OTP的编码器以及存储公共证书和秘密密钥的密钥存储部分。

    보안 도메인 환경에서의 암/복호화 프로그램 및 대칭키의 안전 배포 방법 및 이를 위한 데이터 분할 및 주입 장치
    2.
    发明公开
    보안 도메인 환경에서의 암/복호화 프로그램 및 대칭키의 안전 배포 방법 및 이를 위한 데이터 분할 및 주입 장치 有权
    用于分发编码/解码程序的方法和对称密钥以及用于在安全域名环境中进行安全分发和注销的方法

    公开(公告)号:KR1020100057314A

    公开(公告)日:2010-05-31

    申请号:KR1020080116301

    申请日:2008-11-21

    CPC classification number: H04L9/085

    Abstract: PURPOSE: A method for distributing encoding/decoding programs and a symmetric key and devices for partitioning and injecting data for the same in a security domain environment are provided to improve the safety of the distribution method by dividing the encoding/decoding programs and the symmetric key in a top level security domain and subsequently distributing the divided encoding/decoding programs and symmetric key to a lower level domain. CONSTITUTION: A data base(310) stores encoding/decoding programs and a symmetric key. A data base administrator(320) performs a communication with the data base in order to store or access the encoding/decoding programs and the key. A program selection module(330) selects the encoding/decoding programs from the data base through a user interface. A key selection module(340) selects the key from the data base through the user interface. A division module(350) divides the selected encoding/decoding programs and key into the number of lower level security domains.

    Abstract translation: 目的:提供一种用于分发编码/解码程序和对称密钥的方法和用于在安全域环境中对其分配和注入数据的设备,以通过划分编码/解码程序和对称密钥来提高分发方法的安全性 在顶级安全域中,随后将分割的编码/解码程序和对称密钥分发到较低级别的域。 构成:数据库(310)存储编码/解码程序和对称密钥。 数据库管理员(320)执行与数据库的通信,以便存储或访问编码/解码程序和密钥。 程序选择模块(330)通过用户界面从数据库中选择编码/解码程序。 密钥选择模块(340)通过用户界面从数据库中选择密钥。 分割模块(350)将所选择的编码/解码程序和密钥划分为较低级别的安全域数。

Patent Agency Ranking