Mobile terminal for sharing resources, method of sharing resources within mobile terminal and method of sharing resources between web server and terminal

• US 8,504,832 B2
• Filed: 07/22/2011
• Issued: 08/06/2013
• Est. Priority Date: 08/27/2010
• Status: Expired due to Fees

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Kim, Seung Hyun, Choi, Dae Seon, Kim, Soo Hyung, Noh, Jong Hyouk, Cho, Sang Rae, Cho, Young Seob, Jin, Seung Hun
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US13/189,352
• Publication Number:
  US 20120054492A1
• Time in Patent Office: 746 Days
• Field of Search: None
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

Provided are a mobile terminal for sharing resources, a method of sharing resources within a mobile terminal and a method of sharing resources between a web server and a terminal. The mobile terminal for sharing resources includes a web browser using a web standard protocol to display a first random value, an authentication number, and a Distinguished Name (DN) of web server transferred from the web server after it has been determined that there is no key information in a cookie; and a resource when the first random value and the DN are received from the web browser, being terminated after storing the first random value and the DN, and when the resource is re-executed and the authentication number is input by a user, verifying the first random value, generating a second random value and a shared key from the first random value and generating a symmetric key using a part of the shared key, wherein the shared key is generated from the second random value based on the symmetric key, and the symmetric key is identical to a symmetric key of the web server generated from a part of the symmetric key, and the web browser and the resources are operated by an execution unit.

Claims

1. A mobile terminal for sharing resources comprising:

a web browser using a web standard protocol to display a first random value, an authentication number, and a Distinguished Name (DN) of web server transferred from the web server after it has been determined that there is no key information in a cookie; and

a resource when the first random value and the DN are received from the web browser, being terminated after storing the first random value and the DN, and when the resource is re-executed and the authentication number is input by a user, verifying the first random value, generating a second random value and a shared key from the first random value and generating a symmetric key using a part of the shared key,

wherein the shared key is generated from the second random value based on the symmetric key, and the symmetric key is identical to a symmetric key of the web server generated from a part of the symmetric key, and

the web browser and the resources are operated by an execution unit.

2. The mobile terminal of claim 1, wherein the web server and the resource generate the shared key using different algorithms.

3. The mobile terminal of claim 1, wherein the web server uses the web standard protocol to also display an endpoint information.

4. The mobile terminal of claim 1, wherein, when the web server transmits a message encrypted with the symmetric key and a Hash-based Message Authentication Code (HMAC) calculated from the symmetric key, the resources decrypt the message encrypted with the symmetric key and verify an identity of the web server by verifying the HMAC.

5. A method of sharing resources within a mobile terminal, in which the mobile terminal, equipped with one or more resources and a web browser using a web standard protocol, shares the resources with a web server, the method comprising:

when the web server generates a first random value and an authentication number and transfers them along with a Distinguished Name (DN) to the web browser after it is determined that there is no key information in a cookie, displaying the authentication number, the first random value and the DN on the web browser;

storing, by the resources, the first random value, and the DN and being terminated when the first random value and the DN are received from the web browser;

verifying, by the resources, the first random value when the authentication number is input by a user; and

generating, by the resources, a second random value and a shared key from the first random value, then generating a symmetric key using a part of the shared key and transferring the second random value to the web server.

6. The method of claim 5, wherein the web server and the resources generate the shared key using different algorithms.

7. The method of claim 5, wherein the web server uses the web standard protocol to also display an endpoint information.

8. The method of claim 5, further comprising generating, by the web server, the shared key from the second random value, generating the symmetric key using a part of the shared key and securely communicating with the mobile terminal.

9. The method of claim 5, wherein, the displaying includes transferring and displaying endpoint information of the web server and a screen display name of the web server, and the being terminated includes storing the endpoint information of the web server and the screen display name of the web server.

10. A method of sharing resources within a mobile terminal, comprising:

when a service is requested by a web browser, reading a symmetric key from a cookie of the web browser, encrypting a message and calculating a Hash-based Message Authentication code (HMAC) by a web server;

transferring the encrypted message and the HMAC to the web browser and calling the resources through the web browser; and

verifying, by the resources, the encrypted message and the HMAC using the symmetric key, performing a process requested by the message, and transferring a resulting value of the process.

11. The method of claim 10, further comprising verifying an identity of the web server by verifying the HMAC calculated from the message using the symmetric key.

12. The method of claim 10, wherein the resources generate the symmetric key by using a part of a shared key based on a random value using a first algorithm and wherein the web server generates the shared key based on the random value using a second algorithm.

13. The method of claim 10, wherein the HMAC is calculated from the message using a part of the symmetric key.

14. The method of claim 10, wherein verifying the encrypted message and the HMAC comprises:

decrypting, by the resources, the encrypted message with a symmetric key k1; and

verifying, by the resources, the HMAC with a symmetric key k2.