SYSTEM AND METHOD OF TRANSMITTING/RECEIVING SECURITY DATA

• US 20100161962A1
• Filed: 02/21/2008
• Published: 06/24/2010
• Est. Priority Date: 02/23/2007
• Status: Active Grant

• Current Assignee: Connectwave Co., Ltd.
• Original Assignee: KoreaCenter Co., Ltd. (Connectwave Co., Ltd.)
• Inventors: Lim, Jin Seong
• Granted Patent: US 8,549,283 B2
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

There are provided a security server for intermediating transmission/reception of security data between a service providing server and a user terminal, a security data transmission/reception system and a method. In order to intermediate the transmission/reception of security data between the service providing server and the user terminal, the security server may generate a session key corresponding to a secret key provided from a user terminal, receive security data together with the session key from a security data transmitter, encode the security data with the secret key corresponding to the session key, store the encoded security data, provide a data encryption key to the security data transmitter, decode the encoded security data with the secret key corresponding to the session key when the session key is received together with a security data request key from a security data receiver, and provide the decoded security data to the security data receiver.

Claims

1. A security server for intermediating transmission/reception of security data between a service providing server and a user terminal, wherein the security server is configured to:

generate a session key corresponding to a secret key provided from a user terminal;

receive security data together with the session key from a security data transmitter;

encode the security data with the secret key corresponding to the session key;

store the encoded security data;

provide a data encryption key to the security data transmitter;

decode the encoded security data with the secret key corresponding to the session key when the session key is received together with a security data request key from a security data receiver; and

provide the decoded security data to the security data receiver.

2. The security server of claim 1, comprising:

a session key generation unit configured to generate the session key corresponding to the secret key provided from the user terminal;

an encoding unit configured to encode the security data received together with the session key from the security data transmitter, which is one of the user terminal or the service providing server, with the secret key corresponding to the session key;

a data encryption key generation unit configured to generate a data key of the encoded security data and encode the data key with the secret key to generate the data encryption key;

a storage unit configured to store the secret key, the session key, the data key and the encoded security data, which are associated with each other;

a decoding unit configured to decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from a security data receiver, which is one of the service providing server and the user terminal; and

a data communication unit configured to transmit/receive the session key and the secret key to/from the user terminal, transmit/receive the security data and the data encryption key to/from the security data transmitter, and transmit/receive the security data, the session key and the security data request key to/from the security data receiver.

3. The security server of claim 2, wherein the security data request key is the data encryption key transmitted from the service providing server or the data key extracted from the data encryption key decoded with the secret key, and wherein the data encryption key is received by the user terminal from the service providing server.

4. The security server of claim 2, wherein the encoding unit encodes the security data in a Rijndael encryption way.

5. The security server of claim 2, wherein the data communication unit communicates with the user terminal and the service providing server based on a secure sockets layer.

6. A system including a user terminal, a service providing server and a security server for intermediating transmission/reception of the security data between the user terminal and the service providing server, comprising:

the security server configured to generate a session key corresponding to a secret key provided from the user terminal, receive security data together with the session key from a security data transmitter, which is one of the user terminal and the service providing server, encode the security data with the secret key corresponding to the session key, store the encoded security data, generate a data key of the security data, generate a data encryption key by encoding the data key with the secret key, provide the data encryption key to a security data transmitter, decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from the security data receiver, which is the other one of the user terminal and the service providing server, and provide the decoded security data to the security data receiver;

the user terminal configured to generate the secret key, transmit the session key and the security data and provide the data encryption key to the service providing server in case of the security data transmitter, and receive the data encryption key from the service providing server, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver; and

the service providing server configured to transmit the session key and the security data to the security server and provide the data encryption key transmitted from the security server in case of the security data transmitter, receive the session key and the data encryption key from the user terminal, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver.

7. The system of claim 6, wherein the security data request key is the data encryption key transmitted from the service providing server or the data key extracted from the data encryption key decoded with the secret key, and wherein the data encryption key is received by the user terminal from the service providing server.

8. The system of claim 7, wherein the security server includes:

a session key generation unit configured to generate the session key corresponding to the secret key provided from the user terminal;

an encoding unit configured to encode the security data received together with the session key from the security data transmitter, which is one of the user terminal or the service providing server, with the secret key corresponding to the session key;

a data encryption key generation unit configured to generate a data key of the encoded security data and encode the data key with the secret key to generate the data encryption key;

a storage unit configured to store the secret key, the session key, the data key and the encoded security data, which are associated with each other;

a decoding unit configured to decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from a security data receiver, which is one of the service providing server and the user terminal; and

a data communication unit configured to transmit/receive the session key and the secret key to/from the user terminal, transmit/receive the security data and the data encryption key to/from the security data transmitter, and transmit/receive the security data, the session key and the security data request key to/from the security data receiver.

9. The system of claim 8, wherein the user terminal includes:

a secret key generation unit configured to generate the secret key;

a storage unit configured to store the secret key, the session key and the security data;

a decoding unit configured to decode the data encryption key provided from the service providing server with the secret key to extract the data key; and

a second data communication unit configured to transmit/receive at least one of the secret key, the session key, the security data, the data encryption key and the security data request key to/from the security server, and transmit/receive at least one of the session key and the security data request key to/from the service providing server.

10. The system of claim 8, wherein the service providing server includes:

a third data communication unit configured to transmit/receive the session key, the data encryption key and the security data to/from the security server, and transmit/receive the session key and the data encryption key to/from the user terminal;

a storage unit configured to store the security data to be provided to the user terminal via the security server, the data encryption key provided from the security server, the data encryption key transmitted from the user terminal and the security data transmitted from the security server; and

a control unit configured to control the third data communication unit and the storage unit.

11. The system of claim 8, wherein the user terminal and the service providing server communicate with the security server based on SSL, and wherein the user terminal and the service providing server communicate with each other based on transmission/control protocol/Internet protocol.

12. A method of intermediating transmission/reception of security data between a service providing server and a user terminal, comprising:

generating a session key corresponding to a secret key provided from the user terminal;

providing the session key to the user terminal;

receiving security data together with the session key from a security data transmitter, which is one of the user terminal and the service providing server;

encoding the security data with the security key corresponding to the session key;

generating a data key of the encoded security data;

encoding the data key with the secret key to generate a data encryption key;

providing the data encryption key to the security data transmitter;

associating and storing the secret key, the session key, the data key and the encoded security data;

decoding the encoded security data with the secret key corresponding to the session key when the session key and a security data request key are received from a security data receiver, which is one of the service providing server and the user terminal; and

providing the security data to the security data receiver.

13. The method of claim 12, wherein the security data request key is the data encryption key transmitted from the service providing server or the data key extracted from the data encryption key decoded with the secret key, and wherein the data encryption key is received by the user terminal from the service providing server.

14. The method of claim 12, wherein the security data are encoded in a Rijndael encryption way.

15. The method of claim 12, wherein the user terminal and the service providing server communicate with the security server based on SSL, and wherein the user terminal and the service providing server communicate with each other based on transmission/control protocol/Internet protocol.

16. A storage medium storing computer readable instructions for performing a method of intermediating transmission/reception of security data between a service providing server and a user terminal, wherein the method comprises:

generating a session key corresponding to a secret key provided form the user terminal;

providing the session key to the user terminal;

receiving security data together with the session key from a security data transmitter, which is one of the user terminal and the service providing server;

encoding the security data with the security key corresponding to the session key;

generating a data key of the encoded security data;

encoding the data key with the secret key to generate a data encryption key;

providing the data encryption key to the security data transmitter;

associating and storing the secret key, the session key, the data key and the encoded security data;

decoding the encoded security data with the secret key corresponding to the session key when the session key and a security data request key are received from a security data receiver, which is one of the service providing server and the user terminal; and

providing the security data to the security data receiver.

17. The storage medium of claim 16, wherein the security data request key is the data encryption key transmitted from the service providing server or the data key extracted from the data encryption key decoded with the secret key, and wherein the data encryption key is received by the user terminal from the service providing server.

18. The storage medium of claim 16, wherein the security data are encoded in a Rijndael encryption way.

19. The storage medium of claim 16, wherein the user terminal and the service providing server communicate with the security server based on SSL, and wherein the user terminal and the service providing server communicate with each other based on transmission/control protocol/Internet protocol.