Electronics and Telecommunications Research Institute

Korea Research Institute of Chemical Technology

Dae Won Kim

Seong Woon Kim

Sun Wook Kim

Ik Kyun Kim

Jeong Nyeo Kim

Hag Young Kim

Jin Hee Han

Yong Hyuk Moon

Soo Cheol Oh

Jong Bae Moon

Jong Soo Jang

Byeong Cheol Choi

Jae Deok Lim

Jin Tae Oh

Young Sae Kim

Seung Yong Yoon

Jung Hyun Cho

Myeong Hoon Oh

Bo Heung Chung

Hong Il Ju

Jin Yong Lee

Yang Seo Choi

Boo Sun Jeon

Cheol Sig Pyo

Young Min Kim

Hyung Jin Kim

Dong Wook Kang

Jae Wook Ryu

Gweon Do Jo

Nae Soo Kim

Myeong-Hoon Oh

Seong Chul Cho

Bo-Heung Chung

Hyun Jae Kim

Ho Sung Lee

Dong Ju Jeon

Hae Sung Chang

Yeon Hee Lee

Woong Shik You

Jung-Hyun Cho

Hyun Joong Kang

Hwa Shin Moon

In Taek Hwang

Soon Hyun Kwon

Joong Yong Choi

Yong Sung Jeon

Sun Jin Kim

Hoo Young Ahn

Won-Ok Kwon

An electronic device includes a peripheral device, a processor, an interrupt controller configured to manage interrupts generated by the peripheral device and the processor on the basis of a register, and a virtualizer, wherein the virtualizer may be configured to virtualize a portion of the processor and a portion of the at least one peripheral device to generate a first partition, generate first interrupt information corresponding to an interrupt usable in the first partition, generate first processor information corresponding to a portion of the processor usable in the first partition, check whether a configuration of the register is related to at least one of the first interrupt information and the first processor information when the register is configured by the first partition, and allow the configuration of the register when the configuration of the register is related to the at least one information.

Electronic device, interrupt configuration control method, and storage medium

Disclosed is a system for performing key management of an in-vehicle network. The key management system of the in-vehicle network includes a reception unit configured to receive a shared secret key of a central gateway and a domain gateway, a memory configured to store a program for performing key management of the in-vehicle network using the shared secret key, and a processor configured to execute the program. The processor generates a secret key to be stored in a node of the in-vehicle network using the shared secret key and a unique ID of the node.

System for key control for in-vehicle network

A workflow engine framework for creating a single-domain adaptive and a cross-domain adaptive workflow performing platform is disclosed. The workflow engine framework includes: a resource management unit configured to manage resources including engine components and workflow property specification components; a system configuration unit configured to create an engine by assembling the property specification components; and a system control unit configured to drive and execute one or more engines. Further the workflow engine framework is allocated to each of two or more different signal domains and forms a cross-domain adaptive workflow engine framework.

Workflow engine framework

A method and an apparatus for device security verification utilizing a virtual trusted computing base are provided. The validity of a key for decryption is verified by a secure memory loader running on a processor of a device after booting of the device which is a computing device, and if the key is valid, encrypted firmware stored in a memory of the device is decrypted using the key to verify the confidentiality of the firmware. Then, the security memory loader verifies the authentication and integrity of the firmware by comparing a signature value generated for the decrypted firmware with an existing signature value.

Method and apparatus for device security verification utilizing a virtual trusted computing base

A system for performing an integrity verification based on a distributed delegator and verifying an integrity of a plurality of individual devices based on a network includes: a first individual device which is an integrity verification target of the plurality of individual devices; a second individual device configured to vicariously verify the verification target device of the plurality of individual devices; and a remote device management server configured to select the second individual device of the plurality of individual devices as a verification delegator, and to receive a result of integrity verification of the first individual device by the second individual device.

Device, system and method for performing integrity verification based on distributed delegator

Disclosed is a virtual desktop service method. The virtual desktop service method includes configuring and measuring users and resources according to predetermined criteria, copying operating system files and data files to be provided to the users before use request, receiving request to use a virtual machine from any one of the users and performing user authentication and work approval, and providing an operating system file and a data file of the any one of the users, among the copied operating system files and data files, to the any one of the users according to the use request to transmit a virtual desktop environment. Consequently, the virtual desktop service method performs a service to provide a virtual machine to a user in real time.

Virtual desktop service apparatus and method

Provided is a virtual desktop service, and disclosed is a system for providing a server virtual machine, including: a client configured to receive allocation of a virtual machine for using a virtual desktop service; a connection broker configured to control a type of virtual machine to be allocated to be classified according to user terminal registration information of the client, any one operation server to be selected among a plurality of operation servers, and the virtual machine to be allocated; the plurality of operation servers configured to provide the client with a virtual machine under a control of the connection broker; and a shared storage configured to store data related to the client for providing the virtual machine, and provide the stored data to the operation servers, a method of providing a server virtual machine, and a server device supporting the same.

Method and system for providing server virtual machine for real-time virtual desktop service, and server device supporting the same

Disclosed herein are a method and architecture capable of efficiently providing virtual desktop service. A service architecture for virtual desktop service according to the present invention includes a connection broker configured to perform authentication, manage virtual machines, and perform a server monitoring and protocol coordination function, a resource pool configured to manage software resources that are delivered to a specific virtual machine in a streaming form on a specific time in order to provide on-demand virtual desktop service and are executed on the specific virtual machine and to provide provision information about the managed software resources in response to a request from the connection broker, and a virtual machine infrastructure configured to support hardware resources, generate virtual machines in which the software of a user terminal is executed, and provide the generated virtual machine as virtual desktops.

Apparatus and method for virtual desktop service

An apparatus manages universal subscriber identity module (USIM) data in a terminal using a mobile trusted module (MTM). The apparatus includes a mobile information storage unit configured to store at least one key and the USIM data in a protection region, an information security unit configured to protect information stored in a USIM and the terminal using at least one of the USIM data and the key stored in the mobile information storage unit, and a USIM data manager configured to restore at least one of the USIM data and the key stored in the mobile information storage unit to the USIM, and store at least one of USIM data and the key provided from the USIM in the mobile information storage unit.

Apparatus and method for managing USIM data using mobile trusted module

An attack blocking control method uses an access control list (ACL). The method includes investigating the ACL if a packet is input, and checking whether or not the packet is registered in the ACL, comparing a current time count value with a blocking time of the packet if the packet is determined to be registered in the ACL. Further, the method includes increasing the number of blocking times of the packet by 1 if the current time count value is smaller than or equal to the blocking time. Further, the method includes automatically renewing the blocking time, and removing registration information for the packet from the ACL if the current time count value is greater than the blocking time.

Method and apparatus for controlling blocking of service attack by using access control list

Provided is a method and apparatus for managing a web based service account. The web based service account management apparatus may select, from among web based service accounts, an account undesired to be exposed to others, and may display an account set with a hiding indication only when a user authenticated through a user authentication process desires to read the account.

Apparatus and method for managing web based service account

A power control apparatus for a cluster system, includes a cluster including a plurality of nodes, each equipped with a battery; and a power control unit connected to the cluster over a network and configured to monitor power management information and performance information of the cluster and to set a power capping threshold based on the monitored power management information and performance information of the cluster. Accordingly, the power control unit enables power of the cluster to be limited by turning on and off the batteries when power of the cluster system increases up to the power capping threshold.

Power control apparatus and method for cluster system

A power management apparatus includes: a service request monitor block for receiving service requests by service groups to provide load information of service platforms belonging to the respective service groups; a platform information collection block for collecting a configuration information of the service platforms and collecting load information of the service platforms in a predetermined cycle; a platform power state alteration block for altering power states of the service platforms by request; and a management interface block for providing a setup interface for a load-based and a time-based power control and providing platform profile information generated based on the load information.

Power management apparatus and method thereof and power control system

There are provided an apparatus and method for detecting an executable code, capable of verifying reliability of an extracted signature by determining whether there is present an executable code in network data by using instruction pattern information related calling mechanism of function for distinguishing the executable code from a non-executable code, the method including: forming instructions by reverse assembling network data suspicious as an attack; comparing the respective formed instructions with instruction patterns according to calling mechanism of function; and determining whether there is present an executable code in the network data according to a result of the comparing.

Method and apparatus for detecting executable code

There are provided a network attack detection apparatus and method capable of determining even unknown network attack, the apparatus connected between two networks or connected by port mirroring of an Ethernet switch to real-time monitor all packets flowing through the networks. The apparatus decodes a payload portion of an inputted network packet into a machine code instruction, determines whether an executable code is included in the decoded machine code by analyzing relationship between instructions, and determines whether the packet is harmful based on statistics with respect to a possibility that an executable code exists in a service and a certain transaction of the service when the executable code is included.

Apparatus and method for detecting network attack

Growing community of inventors

Daejeon, South Korea

Dae Won Kim