Electronics and Telecommunications Research Institute

Doo Ho Choi

Yong-Je Choi

You Sung Kang

Ju Han Kim

Kyunghee Oh

Taesung Kim

Kyo Il Chung

Ho Won Kim

Heyung Sub Lee

Sang Yeoun Lee

Hyunsook Cho

Seung Kwang Lee

Cheol Sig Pyo

Jong-Suk Chae

Tae Il Kim

Kang Bok Lee

Hyun Ju Cho

Ik Kyun Kim

Jeong Nyeo Kim

Su Na Choi

Hyunseok Kim

Hyun Seok Kim

Seung Hun Jin

Jae-Young Jung

Mi Kyung Oh

Dong-Beom Shin

Dong Beom Shin

Byung Gil Lee

Hae Dong Lee

Sang Jae Lee

Tae Sung Kim

Jonghyun Kim

Kyung Hee Oh

Disclosed is a method of generating secret information on the basis of a ring oscillator. According to an embodiment of the present disclosure, there is provided an apparatus for generating secret information on the basis of a ring oscillator, the apparatus including: multiple PUF information generation units each including at least one ring oscillator cell and generating physically unclonable function (PUF) information generated by the at least one ring oscillator cell; a phase checking unit cross-checking phases for the multiple pieces of the PUF information that are output from the multiple PUF information generation units, respectively; and a secret key generation unit outputting secret key information based on a result of comparing the multiple phases received from the phase checking unit.

Apparatus for generating secret information on basis of ring oscillator architecture and method of same

Disclosed is a function masking apparatus in a symmetric cryptographic algorithm for preventing side channel attacks, including: a controller creating lookup tables for one or more internal functions included in a high security and light weight (HIGHT) algorithm, respectively based on a plurality of non-linear functions, a plurality of linear functions, and a plurality of constants which are randomly generated; and a storage unit storing the lookup tables for one or more internal functions included in the generated HIGHT algorithm.

Function masking apparatus in symmetric cryptographic algorithm for preventing side channel attacks and method thereof

A side channel analysis apparatus based on a profile includes a waveform collection unit configured to collect leaked information from a target device of a side channel analysis; and a preprocessing unit configured to preprocess a waveform data correspond to the leaked information collected from the waveform collection unit before analyzing same. Further, the side channel analysis apparatus includes an analysis unit configured to analyze the waveform data preprocessed in the preprocessing unit; and a profile configuration unit configured to make each process of the waveform collection unit, the preprocessing unit, and the analysis unit into a process and configure a profile for managing each process by connection of each process.

Side-channel analysis apparatus and method based on profile

In accordance with an embodiment, the logical exclusive operation on the random number RAND and the OPc value are performed several times, the logical operation and encryption processing using a random number RAND and logical operation and encryption processing using a random number S are done in any order, which brings an increase of an attack complexity as to whether to calculate the correlation coefficient from the power consumption waveform at any point when analyzing the correlation power, whereby it is possible to defend the CPA attack effectively.

Block encryption method and apparatus

A communication data protection method based on symmetric key encryption, and an apparatus for enabling the method are provided. A communication data protection method using a Radio Frequency Identification (RFID) reader, the method including: receiving, from a tag, tag information including security parameter information and an encrypted Unique Item Identifier (UII); extracting the UII based on the security parameter information; transmitting, to the tag, a request message including a challenge value for replay prevention; and performing a tag authentication by receiving, from the tag, a response message including a handle and the challenge value.

Communication data protection method based on symmetric key encryption in RFID system, and apparatus for enabling the method

A masking addition operation apparatus for prevention of a side channel attack, includes a random value generation unit generating a first random value for a first input, second random value for a second input, and a summation random value. The masking addition operation apparatus includes an operation part performing an operation on the first and second random values, a previous carry input, and first and second masked random values generated based on the first and second random values. The masking addition operation apparatus includes a carry generator generating a carry input using a result of the operation part; and a summation bit generator generating a summation bit using the summation random value, the first and second random values, the previous carry input and the first and second masked random values.

Masking addition operation device for prevention of side channel attack

A masking operation method for a symmetric key encryption system includes, when at least two Substitution-boxes (S-boxes) are input, generating a masking S-box table for one S-box which was input; and performing an operation on one masking S-box by referring to the generated masking S-box table. Further, the masking operation method for the symmetric key encryption system includes performing an operation on a remaining masking S-box for a remaining S-box, which was input, by referring to the masking S-box table.

Masking operation method and device for symmetric key encrypted system

An apparatus for processing an F-function in a SEED encryption system includes: an arithmetic operation masking conversion unit for converting a logical operation mask value obtained by performing a logical operation of a SEED F-function input value and a random mask value into an arithmetic operation mask value; and a masking G-function unit for taking the arithmetic operation mask value from the arithmetic operation masking conversion unit as an input and producing an arithmetic operation output.

Method and apparatus for processing F-function in seed encryption system

Disclosed are a radio frequency identification (RFID) security apparatus and a method thereof. According to the RFID security method, a secure tag reader performs determining an AES key using security information received from a secure tag and generating an output key using the determined AES key, decrypting AES data received from the secure tag using the output key, and encrypting data to be transmitted to the secure tag using the output key and transmitting the data, and a secure tag performs generating an output key using an AES key and security information, and transmitting the security information to a secure tag reader, encrypting data to be transmitted to the secure tag reader using the output key, and transmitting the encrypted data to the secure tag reader, and decrypting data received from the secure tag reader using the output key.

Radio frequency identification (RFID) security apparatus having security function and method thereof

Disclosed are a radio secure reader and a radio secure tag for supporting a secure mode and a normal mode. The radio secure reader for controlling an operation mode of the radio secure tag may include a reader modem to receive the operation mode from the radio secure tag, and a reader processing unit to identify the received operation mode as a normal mode or a secure mode, and to control the radio secure tag based on the identified operation mode.

Radio security leader controlling operation mode, and radio security tag supporting security mode and normal mode

Disclosed is a method for implementing a symmetric key encryption algorithm against power analysis attacks, including: generating and storing an affine transform table; generating and storing a masked inversion table; and operating a masked S-box using the affine transform table and the masked inversion table.

Method for implementing symmetric key encryption algorithm against power analysis attacks

Provided are a secure device and method for preventing a side channel attack. The secure device includes a secure module converting plaintext data received from the outside into ciphertext data to thereby store the converted ciphertext data, or converting stored ciphertext data into plaintext data to thereby output the converted plaintext data, and a side channel attack sensing module sensing a side channel attack upon the secure module, and, according to the sensing result, allowing the secure module to stop operating, inducing malfunctions of the secure module, delaying operations of the secure module, or making the secure module a device having the secure module disabled. The secure device can safely protect an internal security algorithm and data from the side channel attack.

Secure device and method for preventing side channel attack

An apparatus for generating a secret key generates the secret key by using information of a mobile RFID terminal, transmits the generated secret key to an RFID tag attached on an article, and decrypts a unique item identifier of the article encrypted by using the generated secret key after receiving the unique item identifier of the article encrypted by using the secret key from the RFID tag. By this configuration, it is possible to protect user's personal privacy of the mobile RFID terminal in a state where user's intervention is minimized.

Apparatus and method for generating secret key

Provided is an RFID tag. When no external pressure is applied to a packaging structure, a wire for transmitting power and data from an antenna is separated from an RFID chip by an air layer. When external pressure is applied to the packaging structure, the wire is connected to the RFID chip to transmit the power and data between the antenna and the RFID chip.

Pressure activated passive RFID tag

An electronic tag including privacy level information, and a privacy protection apparatus and method using the electronic tag are provided. The privacy protection apparatus using an electronic tag includes: an information storing unit storing recognition information of an electronic tag and privacy information on the electronic tags; an information request/response processing unit receiving the recognition information of electronic tags and information on a user that requests information on the electronic tags through a predetermined communication network; a privacy policy managing unit determining whether the privacy information on the electronic tags corresponding to the recognition information of electronic tags is stored in the information storing unit; and an information disclosure determination processing unit, if it is determined that the privacy information on the electronic tags is stored in the information storing unit, comparing the information on the user and a predetermined standard for publishing the privacy information, determining how much of the privacy information on the electronic tags is provided to the user, and providing the determined privacy information to the user.

Growing community of inventors

Cheonan-si, South Korea

Doo Ho Choi