Samsung Sds Co., Ltd.

Yonsei University

Sejong University

Sds America, Inc.

Hyo-Jin Yoon

Sung-Min Kim

Min Jung Kim

Kyu-Young Choi

Ji-Hoon Cho

Duk-Jae Moon

Ki-Young Kim

Young-Hyun Kim

Eun-Kyung Kim

Tae-Kyoung Kwon

Jang-Hyuk Ahn

Jung-Hoon Sohn

Sang-Ho Park

Seon-Young Lee

Mi-Ran Kim

Nam-Soo Jeon

Ji-Hoon Kwon

Young Seon Lee

Won-Kyoung Kim

Madjid Nakhjiri

Min-Woo Jeong

Hun-Hee Yu

Hee-Hyeon Park

Min-Kang Song

Seo-Yeon Park

Ji Hoon Choi

An apparatus for sharing data according to one embodiment includes a first combined data generator configured to generate first combined data by combining target data to be shared and a random bit string, a data encryptor configured to generate a ciphertext for the first combined data, a key encryptor configured to generate one or more ciphertexts for a decryption key of the ciphertext for the first combined data using one or more public keys, a second combined data generator configured to generate second combined data by combining the ciphertext for the first combined data, the one or more ciphertexts for the decryption key, and the random bit string, and a data discloser configured to disclose the second combined data to one or more entities to share the target data to be shared.

Apparatus and method for sharing data

An apparatus for encryption according to an embodiment of the present disclosure comprises a classifier configured to classify each data included in an original data set into one of encryption target data and non-encryption target data on the basis of at least one of determination on whether or not an operation to be applied to each data included in the original data set for an analysis of the original data set is a preset operation and determination on whether or not each data included in the original data set is sensitive information; and an encryptor configured to encrypt the encryption target data among the data included in the original data set using a homomorphic encryption algorithm.

Encryption apparatus and method for encrypting encryption target data in data based on homomorphic encryption algorithm

A ciphertext comparison method uses homomorphic encryption. An apparatus performs the ciphertext comparison method using the homomorphic encryption. The ciphertext comparison method using homomorphic encryption includes acquiring a first ciphertext obtained by encrypting first real-number data using a homomorphic evaluation algorithm and a second ciphertext obtained by encrypting second real-number data using the homomorphic evaluation algorithm, and generating a ciphertext for a result for comparison in size between the first real-number data and the second real-number data using homomorphic evaluation for the first ciphertext, the second ciphertext, and an approximation function for approximating a signum function.

Ciphertext comparison method using homomorphic encryption and apparatus for performing the same

An apparatus and method for performing an operation which are secure against side-channel attack are provided. According to one embodiment of the present disclosure, the apparatus includes a first outputter configured to output a first output value corresponding to a seed value using a first parameter candidate value set, a second outputter configured to output a second output value using a second parameter candidate value set wherein the second output value corresponds to the seed value and is capable of being generated using the first output value, a third outputter configured to output a third output value using the seed value and the first output value, and a fourth outputter configured to output a fourth output value using the second output value and the third output value, wherein the fourth output value is capable of being generated using the seed value.

Apparatus and method for performing operation being secure against side channel attack

A method of provisioning key information and a device using the method are provided. The method of provisioning key information according to one embodiment of the present disclosure includes generating key information for encryption and decryption from seed information using a key information generation algorithm and deleting code that corresponds to the key information generation algorithm from the device based on the generation of the key information.

Method of provisioning key information and apparatus using the method

A system and method for communication between devices are provided. According to the embodiments of the present disclosure, it is possible to easily authenticate a counterpart device using a one-time key H(T) for a D2D communication between a first device and a second device, without using a separate secure channel (e.g., secure sockets layer (SSL), transport layer security (TLS), or the like) in an environment where it is difficult to synchronize the first device with the second device without intervention of a server.

System and method for communication between devices

An authentication system and method are provided. According to the embodiments of the present disclosure, it is possible to provide a secure authentication service capable of maintaining personal privacy by enabling authentication while preventing personal information used for personal authentication, such as biometric information, from being exposed in the authentication process.

System and method for authentication

An apparatus and method for performing operation being secure against side channel attack are provided. The apparatus and method generate values equal to values obtained through an exponentiation operation or a scalar multiplication operation of a point using values extracted from previously generated parameter candidate value sets and an operation secure against side-channel attack, thereby improving security against side-channel attack without degrading performance.

An apparatus and method for performing an operation which are secure against side-channel attack are provided. According to one embodiment of the present disclosure, the apparatus includes a first extractor configured to extract one or more first parameter candidate values corresponding to a seed value from a first parameter candidate value set, a first outputter configured to output a first output values using the extracted first parameter candidate values, a second extractor configured to extract one or more second parameter candidate values corresponding to the seed value from a second parameter candidate value set, and a second outputter configured to output a second output value using the extracted second parameter candidate values wherein the second output value is capable of being generated using the first output value.

A method of managing a token and a server for performing the same are provided. According to the embodiments of the present disclosure, it is possible to easily authenticate a counterpart device using a one-time key H(T) for a D2D communication between a first device and a second device, without using a separate secure channel (e.g., secure sockets layer (SSL), transport layer security (TLS), or the like) in an environment where it is difficult to synchronize the first device with the second device without intervention of a server.

Method of managing token and server for performing the same

Disclosed are a system and method for key exchange based on user authentication information. The system for key exchange based on user authentication information includes a client configured to generate ciphertext corresponding to authentication information of a user of the client using a random number for the client and server identification information, and a server configured to decrypt the ciphertext received from the client using a private key for the server corresponding to the server identification information to restore the authentication information, authenticate the client using the restored authentication information, and generate a session key for the server corresponding to the authenticated client.

System and method for key exchange based on authentication information

There are provided a message communication device and method. A message communication device according to an exemplary embodiment includes a header modifying unit configured to modify a message header by adding additional information used together with an identity when a public key corresponding to the identity of a recipient is generated to be the message header, and a message transmitting unit configured to transmit a message including data encrypted based on the public key and the modified message header.

Apparatus and method for message communication

A system and method for identity (ID)-based key management are provided. The ID-based key management system includes an authentication server configured to authenticate a terminal through key exchange based on an ID and a password of a user of the terminal, set up a secure channel with the terminal, and provide a private key based on the ID of the user to the terminal through the secure channel, and a private-key generator configured to generate the private key corresponding to the ID of the terminal user according to a request of the authentication server.

Growing community of inventors

Seoul, South Korea

Hyo-Jin Yoon