METHOD AND APPARATUS FOR PROVIDING SECURED NETWORK ROBOT SERVICES

• US 20100228976A1
• Filed: 11/16/2009
• Published: 09/09/2010
• Est. Priority Date: 03/05/2009
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: OH, Seung-Hee, JANG, Chol Soon, HAN, Jong-Wook, LEE, Hyung Kyu, KIM, Geon Woo
• Application Number:
  US12/619,150
• Publication Number:
  US 20100228976A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

At least one client robot in a domain are connected to a domain security management unit and a root security management unit is connected to at least one external server outside the domain and the domain security management unit via a network. A method for providing secured network robot services includes generating, at the domain security management unit, a shared key between the client robot and the external server when the client robot requests key distribution; generating, at the domain security management unit, a key distribution request message containing the shared key; and transmitting, at the domain security management unit, the key distribution request message to the external server.

Claims

1. A method for providing secured network robot services in a system having a domain security management unit and a root security management unit, wherein at least one client robot in a domain are connected to the domain security management unit and the root security management unit is connected to at least one external server outside the domain and the domain security management unit via a network, the method comprising:

generating, at the domain security management unit, a shared key between the client robot and the external server when the client robot requests key distribution;

generating, at the domain security management unit, a key distribution request message containing the shared key; and

transmitting, at the domain security management unit, the key distribution request message to the external server.

2. The method of claim 1, wherein the client robot requests the key distribution by transmitting a first key distribution request message to the domain security management unit.

3. The method of claim 2, wherein the first key distribution request message includes an identification of the client robot and an identification of the external server, and is protected by a shared key between the client robot and the domain security management unit.

4. The method of claim 1, wherein said transmitting the key distribution request message to the external server includes:

generating, at the domain security management unit, a second key distribution request message;

transmitting, at the domain security management unit, the second key distribution request message to the root security management unit via the network;

generating, at the root domain security management unit, a third key distribution request message; and

transmitting, at the root domain security management unit, the third key distribution request message to the external server.

5. The method of claim 4, wherein the second key distribution request message includes an identification of the domain security management unit, an identification of the client robot, an identification of the external server and the shared key between the external server and the client robot, and is protected by a shared key between the domain security management unit and the root security management unit.

6. The method of claim 4, wherein the third key distribution request message includes an identification of the root security management unit, an identification of the client robot and the shared key between the external server and the client robot, and is protected by a shared key between the root security management unit and the root security management unit.

7. The method of claim 1, further comprising:

receiving, at the root security management unit, from the external server a first response message in response to the key distribution request message;

generating, at the root security management unit, a second response message in response to the first response message;

transmitting, at the root security management unit, the second response message to the domain security management unit;

generating, at the domain security management unit, a third response message in response to the second response message; and

transmitting, at the domain security management unit, the third response message to the client robot.

8. The method of claim 7, wherein the first response message includes an identification of the external server, an identification of the client robot and a key distribution success message, and is protected by a shared key between the external server and the root security management unit.

9. The method of claim 7, wherein the second response message includes an identification of the root security management unit, an identification of the external server, an identification of the client robot and a key distribution success message, and is protected by a shared key between the domain security management unit and the root security management unit.

10. The method of claim 7, wherein the third response message includes an identification of the domain security management unit, an identification of the external server and the shared key between the external server and the client robot, and is protected by a shared key between the client robot and the domain security management unit.

11. The method of claim 1, wherein the shared key is used as an authentication key for use in secured communications between the external server and the client robot.

12. The method of claim 3, wherein the shared key between the client robot and the domain security management unit is a symmetric key based shared key.

13. An apparatus for providing secured network robot services, comprising:

a domain security management unit to which at least one client robot in a domain is connected; and

a root security management unit connected to at least one external server outside the domain and the domain security management unit via a network,

wherein the domain security management unit and the root security management unit distributes a shared key for use in secured communications between the client robot and the external server.

14. The apparatus of claim 13, wherein the client robot is a rich-client robot which shares a domain key with the domain security management unit.

15. The apparatus of claim 13, further comprising:

a local server sharing a domain key with the domain security management unit.

16. The apparatus of claim 15, wherein the client robot is a thin-client robot and connected to the local server.

17. The apparatus of claim 13, wherein the root security management unit transmits a key distribution request message received from the domain security management unit to the external server and receives a key distribution success message transmitted by the external server in response to the key distribution request message, and wherein the key distribution request message and the key distribution success message are transmitted while being protected by respective keys shared by a transmitter side and a receiver side of the messages.

18. The apparatus of claim 17, wherein the external server is a content server providing the client robot with content for use in intelligent robot services.

19. The apparatus of claim 17, wherein the external server is a remote robot control server remote-controlling the client robot.

20. The apparatus of claim 13, wherein the shared key is a symmetric key.