Electronics and Telecommunications Research Institute

Korea Atomic Energy Research Institute

Jae Deok Lim

Jeong Nyeo Kim

Young Ho Kim

Yun-Kyung Lee

Kyeong Tae Kim

Seon-Gyoung Sohn

Ki Young Kim

Dae Won Kim

Young Sae Kim

Jin Hee Han

Seung Yong Yoon

Bo Heung Chung

Yong Hyuk Moon

Yong Sung Jeon

Seung Ho Ryu

Hyun Sook Cho

Sang Woo Lee

Byeong Cheol Choi

Byung Ho Chung

Seon Gyoung Sohn

Geon Lyang Kim

Yun Kyung Lee

Su Wan Park

Dong Eun Lee

Jong Gook Ko

Sun Ju Choi

Seung Wan Han

So-Young Lee

Young-Don Hong

Joon Suk Yu

Kyung Soo Lim

Sung Kyong Eun

So Young Doo

Provided are an apparatus and method for performing remote attestation by taking into account mobility. The method includes obtaining, by each node constituting a network, a remote attestation result value by performing self-remote attestation, obtaining, by each of the nodes, remote attestation result values from the other nodes by broadcasting the obtained remote attestation result value to at least one neighboring node, and monitoring, by each of the nodes, remote attestation of each of the nodes on the basis of the obtained remote attestation result values of the nodes.

Apparatus and method for performing remote attestation by taking into account mobility

Display panel with graphical user interface

Disclosed are an apparatus and a method for Internet of Things (IoT) device security. The method includes unifying a port in a first IoT device for communication, receiving, by the first IoT device, a packet from a second IoT device through the port, identifying whether the packet in the first IoT device is in a preset packet form, verifying content of the packet in the first IoT device when the packet is in the preset packet form, and opening the port for providing a service in the first IoT device when the verifying of the packet content is successful.

Apparatus and method for security of internet of things device

A method and an apparatus for device security verification utilizing a virtual trusted computing base are provided. The validity of a key for decryption is verified by a secure memory loader running on a processor of a device after booting of the device which is a computing device, and if the key is valid, encrypted firmware stored in a memory of the device is decrypted using the key to verify the confidentiality of the firmware. Then, the security memory loader verifies the authentication and integrity of the firmware by comparing a signature value generated for the decrypted firmware with an existing signature value.

Method and apparatus for device security verification utilizing a virtual trusted computing base

A system for performing an integrity verification based on a distributed delegator and verifying an integrity of a plurality of individual devices based on a network includes: a first individual device which is an integrity verification target of the plurality of individual devices; a second individual device configured to vicariously verify the verification target device of the plurality of individual devices; and a remote device management server configured to select the second individual device of the plurality of individual devices as a verification delegator, and to receive a result of integrity verification of the first individual device by the second individual device.

Device, system and method for performing integrity verification based on distributed delegator

A system and method of verifying integrity of software for verifying the integrity of software installed on a mobile terminal is provided. The system includes the mobile terminal configured to transmit mobile terminal information including a first software hash value and a software identification (ID) with respect to the software, and an office trust software monitor server configured to transmit the software ID transmitted from the mobile terminal to a software publishing server, receive a second software hash value with respect to the software corresponding to the software ID from the software publishing server, compare the first software hash value and the second software hash value, and verify the integrity of the software.

System and method of verifying integrity of software

Novel NSchelator-folate derivatives, a preparation method thereof, and a composition for diagnosis and treatment of tumor including the same as an active ingredient are provided. The novel NSchelator-folate derivatives or a pharmaceutically acceptable salt thereof are easily introduced into the cells using receptor binding to tumor expressing &#x3b1;-folate receptor (&#x3b1;-FR). Accordingly, the folate derivatives, labeled with radioisotope such as technetium, or rhenium, can be advantageously used for the diagnosis and treatment of tumor using tumor imaging and irradiation from the isotope, and therefore, can be widely used for the purpose of labeling a variety of radiopharmaceuticals.

[object Object]

A user authentication apparatus safely uses resources by forming a communication channel between a plurality of execution environments through user authentication in a portable terminal providing the plurality of execution environments based on a virtualization solution, and prevents private information from being illegally leaked by hacking by not directly exposing a PIN number or a password a user inputs using a virtual keyboard and a keyboard coordinate when authenticating the user.

User authentication apparatus of portable terminal

A system for detecting a global harmful video includes: a video determination policy generation unit for determining harmfulness of learning video segments from video learning information to analyze occurrence information of harmful learning video segments, and generating a global harmfulness determination policy based on the occurrence information; and a video determination policy execution unit for determining harmfulness of input video segments from information of an input video to analyze occurrence information of harmful input video segments, and determining whether the input video is harmful or not based on the occurrence information of the harmful input video segments and the global harmfulness determination policy.

System and method for detecting global harmful video

A method for determining harmful multimedia content by using multimedia content playback characteristics includes: determining a local harmfulness of each basic unit section of multimedia content to generate a local determination result; and generating global determination results to complement an error of the local determination result based on the multimedia content playback characteristics. The global determination results are generated by using a continuous determination value which has a meaning of harmful or harmless and is updated depending on each local determination result and the number of continuous determination results is counted or initialized depending on continuity of the local determination results.

Method for determining harmful multimedia content using multimedia content playback characteristics

A method of blocking network attacks using information included in a packet, and an apparatus thereof are provided. The method includes: receiving a packet containing information on the packet including at least information on a source from which the packet is sent, and information on a destination to which the packet is sent; and extracting the information on the packet included in the packet, comparing the information with a predetermined access control condition, and blocking or passing the packet. By doing so, a packet being transferred with a routing header capable of bypassing a security device as in an Internet Protocol version 6 (IPv6) network can be appropriately blocked or passed. Accordingly, security problems caused by the routing header can be overcome, and as a result, usage of the routing header can be promoted. Also, since a routing header can be used for transmitting a packet along a desired path, the routing header can be widely used without security problems, and can ease network security concerns relating to IPv6 networks that are expected to come into increasingly wide use.

Method of blocking network attacks using packet information and apparatus thereof

Provided is a method of generating and searching for a single ternary content addressable memory (TCAM) entry for range search and exact-match search. First, it is determined whether an entry to be added is a range search entry or an exact-match search entry. When the entry is the range search entry, a bit at a predetermined position in the upper m bits corresponding to a range represented by the entry is set to '1' and the remaining bits including lower n bits is set to a 'don't care' bit x, based on a range table for representing position information of one of the upper m bits which is set to &#x201c;1&#x201d; in ranges. When the entry is the exact-match search entry, the upper m bits is set to &#x201c;don't care&#x201d; bit x and the lower n bits is set to the entry value. By generating and searching for a single TCAM entry for a range search and an exact-match search, a space for storing the TCAM entry can be optimized and efficiency thereof can be improved.

Method of generating TCAM entry and method and apparatus for searching for TCAM entry

Disclosed is an access control method using a token having security attributes in a computer system when a user gains access to a specific file. The computer system adopts a token having encryption, modification, execution, and provision attributes to determine access permission or access denial between a user and a file in such a way that a file access request is controlled. The access control method enciphers a file and stores the enciphered file in a storage unit, so that it can maintain security of the file even though the storage unit is stolen. The access control method enables a system manager to read only enciphered contents of the file when the system manager performs a data backup operation, thereby eliminating limitations in commonly operating a system simultaneously with maintaining file security. The access control method enables programs for executing operations on behalf of a user to automatically obtain a corresponding token, confirms authority to execute the file, and prevents that the authority is stolen or drained due to a program error.

Access control method using token having security attributes in computer system

Growing community of inventors

Sejong-si, South Korea

Jae Deok Lim