System and method of transmitting/receiving security data

• US 8,549,283 B2
• Filed: 02/21/2008
• Issued: 10/01/2013
• Est. Priority Date: 02/23/2007
• Status: Active Grant

• Current Assignee: Connectwave Co., Ltd.
• Original Assignee: KoreaCenter Co., Ltd. (Connectwave Co., Ltd.)
• Inventors: Lim, Jin Seong
• Primary Examiner(s): CHOUDHURY, AZIZUL Q
• Application Number:
  US12/097,382
• Publication Number:
  US 20100161962A1
• Time in Patent Office: 2,049 Days
• Field of Search: None
• US Class Current: 713/153
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

There are provided a security server for intermediating transmission/reception of security data between a service providing server and a user terminal, a security data transmission/reception system and a method. In order to intermediate the transmission/reception of security data between the service providing server and the user terminal, the security server may generate a session key corresponding to a secret key provided from a user terminal, receive security data together with the session key from a security data transmitter, encode the security data with the secret key corresponding to the session key, store the encoded security data, provide a data encryption key to the security data transmitter, decode the encoded security data with the secret key corresponding to the session key when the session key is received together with a security data request key from a security data receiver, and provide the decoded security data to the security data receiver.

Claims

1. A system including a user terminal, a service providing server and a security server for intermediating at least one of transmission and reception of security data between the user terminal and the service providing server, comprising:

the security server configured to generate a session key corresponding to a secret key provided from the user terminal, receive security data together with the session key from a security data transmitter, which is one of the user terminal and the service providing server, encode the security data with the secret key corresponding to the session key, store the encoded security data, generate a data key of the security data, generate a data encryption key by encoding the data key with the secret key, provide the data encryption key to a security data transmitter, decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from the security data receiver, which is the other one of the user terminal and the service providing server, and provide the decoded security data to the security data receiver;

the user terminal configured to generate the secret key, transmit the session key and the security data and provide the data encryption key to the service providing server in case of the security data transmitter, and receive the data encryption key from the service providing server, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver; and

the service providing server configured to transmit the session key and the security data to the security server and provide the data encryption key transmitted from the security server in case of the security data transmitter, receive the session key and the data encryption key from the user terminal, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver.

2. The system of claim 1, wherein the security data request key is the data encryption key transmitted from the service providing server or the data key extracted from the data encryption key decoded with the secret key, and wherein the data encryption key is received by the user terminal from the service providing server.

3. The system of claim 2, wherein the security server includes:

a session key generation unit configured to generate the session key corresponding to the secret key provided from the user terminal;

an encoding unit configured to encode the security data received together with the session key from the security data transmitter, which is one of the user terminal or the service providing server, with the secret key corresponding to the session key;

a data encryption key generation unit configured to generate a data key of the encoded security data and encode the data key with the secret key to generate the data encryption key;

a storage unit configured to store the secret key, the session key, the data key and the encoded security data, which are associated with each other;

a decoding unit configured to decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from a security data receiver, which is one of the service providing server and the user terminal; and

a first data communication unit configured to at least one of transmit and receive the session key and the secret key to or from the user terminal, at least one of transmit and receive the security data and the data encryption key to or from the security data transmitter, and at least one of transmit and receive the security data, the session key and the security data request key to or from the security data receiver.

4. The system of claim 3, wherein the user terminal includes:

a secret key generation unit configured to generate the secret key;

a storage unit configured to store the secret key, the session key and the security data;

a decoding unit configured to decode the data encryption key provided from the service providing server with the secret key to extract the data key; and

a second data communication unit configured to at least one of transmit and receive at least one of the secret key, the session key, the security data, the data encryption key and the security data request key to or from the security server, and at least one of transmit and receive at least one of the session key and the security data request key to or from the service providing server.

5. The system of claim 3, wherein the service providing server includes:

a third data communication unit configured to at least one of transmit and receive the session key, the data encryption key and the security data to or from the security server, and at least one of transmit and receive the session key and the data encryption key to or from the user terminal;

a storage unit configured to store the security data to be provided to the user terminal via the security server, the data encryption key provided from the security server, the data encryption key transmitted from the user terminal and the security data transmitted from the security server; and

a control unit configured to control the third data communication unit and the storage unit.

6. The system of claim 3, wherein the user terminal and the service providing server are configured to communicate with the security server based on secure sockets layer (SSL), and wherein the user terminal and the service providing server are configured to communicate with each other based on transmission/control protocol/Internet protocol.