SYSTEM AND METHOD FOR SHARING INFORMATION BETWEEN HETEROGENEOUS SERVICE PROVIDERS

• US 20130073700A1
• Filed: 05/16/2012
• Published: 03/21/2013
• Est. Priority Date: 09/19/2011
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Yi, Sung Won, Kim, Ki Young, Kim, Jong Hyun, Seo, Dong II, SEO, Dae Hee, An, Gae II, Lim, Sun Hee
• Application Number:
  US13/473,515
• Publication Number:
  US 20130073700A1
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Disclosed are a system for sharing information between heterogeneous service providers, including: a first service provider configured to generate first situation information based on an abnormal situation of a system; a second service provider configured to receive the first situation information from the first service provider, generate second situation information corresponding to the received first situation information; and the TTP configured to receive the first situation information from the first service provider, receive the second situation information from the second service provider, generate correspondence information based on the received information, and share the generated correspondence information.

Claims

1. A method for sharing information between heterogeneous service providers, comprising:

generating, by a first service provider, first situation information based on an abnormal situation of a system of the first service provider;

transmitting the first situation information generated by the first service provider to a second service provider and a trust third party (TTP);

receiving correspondence information corresponding to the first situation information from the TTP; and

changing, by the first service provider, an information sharing setting according to the correspondence information.

2. The method of claim 1, wherein the generating of the first situation information comprises:

generating first encryption information by encrypting information on an abnormal situation of a system;

generating first unique information based on the generated first encryption information and a time variant parameter (TS;

time stamp) of the information on the abnormal situation; and

generating first situation information, including the first encryption information, the TS of the information on the abnormal situation, and the first unique information, and transmitting the first situation information.

3. The method of claim 2, wherein, in the generating of the first encryption information, the information on the abnormal situation of the system is randomly selected, and the first encryption information is generated using a public modulus and a representation function, and

in the generating of the first unique information, a hash value, to which a hash function is applied based on the first encryption information and the TS of the information on the abnormal situation, is generated as the first unique information.

4. A method for sharing information between heterogeneous service providers, comprising:

receiving, by a second service provider, first situation information from a first service provider;

generating second situation information corresponding to the first situation information received by the second service provider, and transmitting the generated second situation information to the first service provider and a TTP;

receiving correspondence information corresponding to the first situation information from the TTP; and

changing, by the first service provider, an information sharing setting according to the correspondence information.

5. The method of claim 4, wherein the receiving of the first situation information further comprises verifying integrity of the received first situation information.

6. The method of claim 4, wherein the generating of the second situation information comprises:

generating second encryption information by encrypting correspondence information corresponding to the received first situation information;

generating second unique information based on the generated second encryption information and a time variant parameter (TS;

time stamp) of the correspondence information; and

generating second situation information, including the second encryption information, the TS of the correspondence information, and the second unique information, and transmitting the second situation information.

7. The method of claim 6, wherein, in the generating of the second encryption information, correspondence information capable of recovering or preventing an abnormal situation included in the received first situation information is randomly selected, and the second encryption information is generated using a public modulus and a representation function, and

in the generating of the second unique information, a hash value, to which a hash function is applied based on the second encryption information and the TS of the correspondence information, is generated as the second unique information.

8. A method for sharing information between heterogeneous service providers, comprising:

receiving, by a TTP, first situation information from a first service provider;

receiving, by the TTP, second situation information from a second service provider;

verifying integrity of the first situation information and the second situation information received by the TTP;

generating correspondence information based on the first situation information and the second situation information received by the TTP; and

transmitting, by the TTP, the correspondence information to the first service provider and the second service provider.

9. The method of claim 8, wherein, in the generating of the correspondence information, correspondence information capable of recovering or preventing an abnormal situation included in the first situation information is generated based on the received first situation information, the received second situation information, a public key of the TTP, and a private key of the TTP.

10. A system for sharing information between heterogeneous service providers, comprising:

a first service provider configured to generate first situation information based on an abnormal situation of a system and transmit the generated first situation information to outside;

a second service provider configured to receive the first situation information from the first service provider, generate second situation information corresponding to the received first situation information, and transmit the second situation information to a trust third party (TTP); and

the TTP configured to receive the first situation information from the first service provider, receive the second situation information from the second service provider, generate correspondence information based on the received information, and share the generated correspondence information.

11. The system of claim 10, wherein the first service provider comprises:

a first encryption information generating unit configured to generate first encryption information by encrypting information on an abnormal situation of a system;

a first unique information generating unit configured to generate first unique information based on the generated first encryption information and a time variant parameter (TS;

time stamp) of the information on the abnormal situation; and

a first situation information transmitting unit configured to generate first situation information, including the first encryption information, the TS of the information on the abnormal situation, and the first unique information, and transmit the first situation information.

12. The system of claim 11, wherein the first encryption information generating unit randomly selects the information on the abnormal situation of the system and generates first encryption information using a public modulus and a representation function, and

the first unique information generating unit generates a hash value, to which a hash function is applied based on the first encryption information and the TS of the information on the abnormal situation, as the first unique information.

13. The system of claim 11, wherein the second service provider comprises:

an information receiving unit configured to receive the first situation information from the first service provider and verify integrity of the first situation information;

a second encryption information generating unit configured to generate second encryption information by encrypting correspondence information corresponding to the first situation information;

a second unique information generating unit configured to generate second unique information based on the generated second encryption information and a TS of the correspondence information corresponding to the first situation information; and

a second situation information transmitting unit configured to transmit second situation information, including the second encryption information, the TS of the correspondence information, and the second unique information.

14. The system of claim 13, wherein the second encryption information generating unit randomly selects correspondence information capable of recovering or preventing an abnormal situation included in the first situation information, and generates the second encryption information using a public modulus and a representation function, and

the second unique information generating unit generates a hash value, to which a hash function is applied based on the second encryption information and the TS of the correspondence information, as the second unique information.

15. The system of claim 10, wherein the TTP comprises:

an information receiving unit configured to receive the first situation information from the first service provider and receive the second situation information from the second service provider;

an information verifying unit configured to verify integrity of the received first situation information and the received second situation information;

a correspondence information generating unit configured to generate correspondence information based on the received first situation information and the received second situation information; and

a correspondence information transmitting unit configured to transmit the correspondence information to the first service provider and the second service provider.

16. The system of claim 15, wherein the correspondence information generating unit generates correspondence information capable of recovering or preventing an abnormal situation included in the first situation information, based on the received first situation information, the received second situation information, a public key of the TTP, and a private key of the TTP.

17. The system of claim 16, wherein the service providers further comprise a service provider information sharing setting changing unit configured to receive correspondence information corresponding to situation information from a TTP, verify the received correspondence information, and change information sharing settings of the service providers.