PORTABLE INTEGRATED SECURITY STORAGE DEVICE AND SERVICE PROCESSING APPARATUS, AND SERVICE PROCESSING METHOD USING THE SAME

• US 20120124370A1
• Filed: 11/11/2011
• Published: 05/17/2012
• Est. Priority Date: 11/12/2010
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: CHOI, Byeong Cheol, LIM, Jae Deok, HAN, Seung Wan
• Application Number:
  US13/294,326
• Publication Number:
  US 20120124370A1
• Time in Patent Office: Days
• US Class Current: 713/159
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A portable integrated security storage device includes: a password generation module for generating a password; a universal authentication module for storing universal authentication information; a communication interface connected to an external system for transmitting and receiving data with the external system; and a memory for storing the received data received through communication with the external system. The password and universal authentication information are transmitted to the external system for user authentication and device authentication, and encrypted data and a service secret key are received from the external system and stored in the memory.

Claims

1. A portable integrated security storage device comprising:

a password generation module for generating a password;

a universal authentication module for storing universal authentication information;

a communication interface connected to an external system for transmitting and receiving data with the external system; and

a memory for storing the received data received through communication with the external system,

wherein the password and universal authentication information are transmitted to the external system for user authentication and device authentication, and encrypted data and a service secret key are received from the external system and stored in the memory.

2. The device of claim 1, wherein, in the device, the universal authentication information and one-time password are transmitted to the external system and the service secret key is received therefrom by using a Diffie-Hellman key exchange method.

3. The device of claim 1, wherein the password generated by the password generation module is OTP.

4. The device of claim 1, wherein the universal authentication module uses a universal subscriber identity module (USIM).

5. The device of claim 1, wherein the memory supports a universal serial bus (USB) interface or a secure digital (SD) card interface.

6. The device of claim 1, wherein the communication interface is a wired or wireless communication interface.

7. The device of claim 1, further comprising a power control module for supplying power to the device.

8. A service processing apparatus using a portable integrated security storage device comprising:

a service request unit for receiving a password and universal authentication information from the portable integrated security storage device which manages the password and the universal authentication information, and then providing the password, the universal authentication information and user encryption information for generation of a service secret key to a service providing server connected through a wired/wireless communications network to request a service;

a secret key processing unit for receiving the encryption information used for the generation of the service secret key from the service providing server, and then generating the service secret key by using the encryption information, and storing the generated service secret key in the portable integrated security storage device; and

a data processing unit for receiving encrypted data from the service providing server in response to a service request from the service request unit, decoding the encrypted data by using the service secret key stored in the portable integrated security storage device or storing the encrypted data in the portable integrated security storage device.

9. The apparatus of claim 8, wherein the apparatus is connected to the portable integrated security storage device through a wired or wireless communication interface.

10. The apparatus of claim 8, wherein the apparatus requests authentication by using the universal authentication information and password and receives the service secret key generated by the secret key processing unit through the portable integrated security storage device and a Diffie-Hellman key exchange method.

11. The apparatus of claim 8, wherein the apparatus includes a mobile device.

12. A service processing method using a portable integrated security storage device comprising:

receiving a password and universal authentication information when the portable integrated security storage device which manages the password and the universal authentication information is connected;

providing the password, the universal authentication information and user encryption information for generation of a service secret key to a service providing server connected through a wired/wireless communications network to request a service;

receiving encryption information used for the generation of the service secret key from the service providing server;

generating the service secret key by using the received encryption information, and storing the generated service secret key in the portable integrated security storage device;

receiving data encrypted by using the service secret key from the service providing server; and

decoding the encrypted data by using the service secret key stored in the portable integrated security storage device or storing the encrypted data in the portable integrated security storage device.