DEVICE, SERVER AND METHOD FOR PROVIDING SECRET KEY ENCRYPTION AND RESTORATION

• US 20160323105A1
• Filed: 04/28/2016
• Published: 11/03/2016
• Est. Priority Date: 04/28/2015
• Status: Active Grant

• Current Assignee: Korea University Research and Business Foundation
• Original Assignee: Korea University Research and Business Foundation
• Inventors: Park, Hyundo, Lee, Heejo
• Granted Patent: US 10,020,939 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

The present disclosure includes: a communication module; a memory that stores a secret key encryption and restoration program; and a processor that executes the program, wherein when a request for restoration of a secret key is received from a user, the processor restores the secret key of which restoration is requested on the basis of restoration information received from each of a key management server and one or more trusted devices according to execution of the program, the secret key of the user is generated and encrypted by the processor in response to the request from the user, and the restoration information is generated corresponding to the secret key and then transmitted to each of the key management server and the one or more trusted devices through the communication module.

Claims

1. A secret key encryption and restoration device, comprising:

a communication module;

a memory that stores a secret key encryption and restoration program; and

a processor that executes the program,

wherein when a request for restoration of a secret key is received from a user, the processor restores the secret key of which restoration is requested on the basis of restoration information received from each of a key management server and one or more trusted devices according to execution of the program,

the secret key of the user is generated and encrypted by the processor in response to the request from the user, and

the restoration information is generated corresponding to the secret key and then transmitted to each of the key management server and the one or more trusted devices through the communication module.

2. The secret key encryption and restoration device of claim 1,

wherein the restoration information includes one or more restoration coordinate information and parameters generated on the basis of the secret key, and

the processor transmits the restoration coordinate information to the trusted devices and transmits the parameters to the key management server.

3. The secret key encryption and restoration device of claim 2,

wherein the processor transmits the restoration coordinate information to the trusted devices in the number equal to or higher than the number of the one or more restoration coordinate information.

4. The secret key encryption and restoration device of claim 1,

wherein the password defines a password when generating the secret key, and

when the restoration is requested, the processor decrypts the encrypted secret key on the basis of the defined password.

5. The secret key encryption and restoration device of claim 4,

wherein after the secret key is restored, the processor generates the encrypted secret key on the basis of the password.

6. The secret key encryption and restoration device of claim 4,

wherein after the secret key is restored, the processor generates a local key, and

the processor generates the encrypted secret key on the basis of the password and the generated local key.

7. The secret key encryption and restoration device of claim 4,

wherein when the secret key is generated, the processor generates a local key and transmit the generated local key to the key management server, and

when a request for resetting of the password is made, the processor transmits the resetting request to the key management server, receives the local key from the key management server, and decrypts the encrypted secret key on the basis of the received local key and regenerates the encrypted secrete key and the password on the basis of the decrypted secret key.

8. The secret key encryption and restoration device of claim 7, further comprising:

an input module,

wherein the processor performs decryption of the encrypted secret key on the basis of the local key and a temporary key input by the user through the input module, and

the temporary key is generated by the key management server and then received by the user from the key management server.

9. A secret key encryption and restoration method in a device, comprising:

receiving, by the device, each restoration information from a key management server and one or more trusted devices in response to a request for restoration of a secret key of a user; and

performing, by the device, restoration of the secret key of which restoration is requested on the basis of the received restoration information,

wherein the secret key is generated by the device and then encrypted, and

the restoration information is generated corresponding to the secret key and then transmitted to the key management server and the one or more trusted devices.

10. The secret key encryption and restoration method of claim 9,

wherein the restoration information includes one or more restoration coordinate information and parameters generated on the basis of the secret key, and

transmitting, by the device, the restoration information to the key management server and the one or more trusted devices includes:

transmitting the restoration coordinate information to the one or more trusted devices; and

transmitting the parameters to the key management server.

11. The secret key encryption and restoration method of claim 9, further comprising:

prior to the receiving of each restoration information,

defining a password when the device generates the secret key;

encrypting, by the device, the secret key on the basis of the password; and

decrypting, by the device, the encrypted secret key on the basis of the password.

12. The secret key encryption and restoration method of claim 11, further comprising:

after the performing of restoration of the secret key,

generating, by the device, the encrypted secret key on the basis of the restored secret key and the password.

13. The secret key encryption and restoration method of claim 11, further comprising:

after the performing of restoration of the secret key,

generating, by the device, a local key; and

generating, by the device, the encrypted secret key on the basis of the password and the generated local key.

14. The secret key encryption and restoration method of claim 11, further comprising:

after the encrypting of the secret key on the basis of the password,

transmitting, by the device, a request for resetting of the password to the key management server when the resetting request is made;

receiving, by the device, a local key from the key management server;

decrypting, by the device, the encrypted secret key on the basis of the received local key; and

regenerating, by the device, the encrypted secret key and the password on the basis of the decrypted secret key,

wherein the local key is generated by the device when the secret key is generated, and then transmitted to the key management server.

15. A computer-readable storage medium that records a program for performing a method of claim 9 on a computer.

16. A key management server that provides secret key encryption and restoration, comprising:

a communication module;

a storage module;

a memory that stores a secret key encryption and restoration program; and

a processor that executes the program,

wherein the processor receives a local key and restoration information from a device and stores them in the storage module according to execution of the program, and

the processor transmits any one or more of the local key and the restoration information stored in the storage module to the device in response to a request from the device.

17. The key management server of claim 16,

wherein the processor performs authentication of a user corresponding to the device in response to a request from the device, and

when the user is authenticated, the processor transmits the encrypted local key to the device.