Penta Security Systems Inc.

Autocrypt Co., Ltd.

Penta Security Inc.

Hyundai Motor Company

Penta Security System Inc.

Sang Gyoo Sim

Seok Lee

Duk Soo Kim

Eui Seok Kim

Seung Young Park

Myung Woo Chung

Jin Hyeok Oh

Keon Yun

Sang Min Lee

Myung Jin Kim

Jong Guk Lee

Sang Seok Lee

Jun Yong Lee

You Sik Lee

Jung Ook Kim

Minchul Kim

Tae Gyun Kim

Su Lyun Sung

Jong Rok Park

Hahk Rel Noh

Dae Sung Hwang

Cho Rong Ryu

Young Seok Oh

Chel Woo Park

Yeon Tae Kim

Jung Wook Kim

Min Woo Nam

Hyun Min Choi

Sang Jun Lee

Dong Kyun Noh

Wan Yeon Lee

Kyung Moon Nam

Jin Hyuk Jung

Sun Woo Yun

Jung Won Lee

Sook Jun Gweon

Ki Ho Joo

Heesun Yun

Hyun Kyung Park

Myong Cheol Lim

Byung Gwan Kim

Eun Ho Shin

Jae Yeon Yoon

Sung Ok Choi

Young In Park

Jung Bai Kim

Gi Young Joo

Jeong Eun Ki

Sang Won Seo

Dong Hoon Ko

Kwon Koo Kwak

Seung Hoon Lee

An information protection method based on software-defined perimeter (SDP) for Internet of Things (IoT) cloud security may comprise: receiving, at an SDP controller, an onboarding request message with an identity (ID) token from an SDP client acting as an initiating host, the onboarding request message comprising information requesting authentication of the SDP client and a handshake parameter specifying a handshake protocol for use in an SDP access process; and issuing, at the SDP controller, an SDP client credential corresponding to the handshake parameter.

SDP-based information protection method and apparatus for IoT cloud security

A ship network access control method may comprise: receiving, from an agent installed in a specific sub-network among sub-networks of the ship network, a registration request message requesting registration based on an agent certificate, and verifying the agent certificate; in response to determining that the agent certificate is valid, transmitting, to the agent, agent registration information for the agent; receiving, from the agent, a connection request message generated based on the agent registration information, and verifying the agent registration information; in response to determining that the agent registration information is successfully verified, performing a mutual authentication protocol with the agent; and determining whether to allow a connection between the first terminal and a second terminal located in another sub-network of the ship network or an external network according to an authority of the agent.

Method and apparatus for access control on ship network

A vehicle-to-everything (V2X) communication-based electronic toll collection system (ETCS) according to an embodiment of the present invention includes at least one roadside unit (RSU), a token issuer checking a de-identified token of a vehicle by communicating with an on-board unit (OBU) of the vehicle via the at least one roadside unit, and a clearing house communicating with the token issuer and charging a toll to a driver/owner of the vehicle. The token issuer generates toll information of the vehicle based on the de-identified token of the vehicle and location information of the at least one roadside unit involved in checking the de-identified token.

V2X-based electronic toll collection system and method

Provided are a driving negotiation method and apparatus for supporting stability against a blind spot, an unexpected situation, etc. and a rapid judgment and response of an autonomous vehicle in various driving environments. The driving negotiation apparatus includes a wireless communication module configured to support vehicle to everything (V2X) communication and at least one processor connected to the wireless communication module. The at least one processor receives a cooperative request message from a first vehicle, broadcasts a cooperative request message and additional information required for a negotiation to surrounding vehicles, receives a cooperative response message from at least one second vehicle among the surrounding vehicles, and transmits a message indicating that the negotiation is possible or impossible to the first vehicle on the basis of the cooperative response message.

Driving negotiation method and apparatus

A device for secure and automated enrollment-certificate bootstrapping on keys and certificates for a vehicle to everything (V2X) environment of a V2X end entity in a security credential management system (SCMS) for V2X communication, the device comprising: a processor; and a memory configured to store at least one instruction to be performed by the processor, the at least one instruction is configured to instruct the processor to perform steps of: by a secure bootstrapping service (SBS) agent, checking, for an SSB server, configuration information; by the SBS agent, making a request for bootstrapping data to the SBS server; and by the SBS agent, installing the bootstrapping data in the SBS server.

Method of secure and automated bootstrapping on keys and certificates for V2X environment and device thereof

An encryption key management method includes: receiving a data registration request from a supplier terminal, determining a data identifier associated with the content data, encrypting a master key with a public key of the supplier terminal, and providing the supplier terminal with the master key encrypted with the public key of the supplier terminal, the data identifier, and a key update count value; receiving a subscription application related to the data identifier from a first subscriber terminal, encrypting the master key with a public key of the first subscriber terminal, and providing the first subscriber terminal with the master key encrypted with the public key of the first subscriber terminal and the key update count value; receiving encrypted content data encrypted with the symmetric key and a hash for the content data from the supplier terminal; and transmitting the encrypted content data and the hash to the first subscriber terminal.

Encryption key management method in data subscription system

A method of distributedly storing data in a system comprising a plurality of edge nodes communicatively coupled to an end device and a central cloud. The method includes: receiving, by a first edge node, data transmitted by the end device; assigning, by the first edge node, a data tag to received data according to attributes of the received data and duplicating the received data to generate a tagged data copy; and transmitting, by the first edge node, the tagged data copy to at least one second edge node determined by a data distribution policy determined by the central cloud directly or through the central cloud, so that the at least one second edge node store the tagged data copy in a storage.

Method and device for distributed data storage

A Merkle tree-based data management method may comprise: aligning data into two-dimensional square matrix; calculating a hash value of each node of the two-dimensional square matrix; calculating hash values of each row of the two-dimensional square matrix; generating an additional column with nodes having the hash values of each row; calculating hash values of each column of the two-dimensional square matrix; generating an additional row with nodes having hash values of each column; and calculating a Merkle root by concatenating the hash values of the additional column and the hash values of the additional row.

Merkle tree-based data management method and apparatus

A method of detecting an anomaly of a road side unit, which is performed by an anomaly detecting apparatus interworking with one or more road side units, may comprise: receiving traffic data from each of the one or more road side units; performing grouping on the one or more road side units based on the traffic data; generating input data of an artificial neural network based on a result of the performing of the grouping; generating output data of the artificial neural network based on the input data; and detecting an anomaly of each of the one or more road side units based on the output data.

Method of detecting anomaly of road side unit and apparatus therefor

Provided is a method for detecting a driver's abnormalities based on a CAN (Controller Area Network) bus network communicating with an ECU (Electronic Control Unit) of a vehicle. The method may include: acquiring a CAN bus signal related to an operation of the vehicle from the CAN bus network; extracting a detection vector from the CAN bus signal using an auto encoder; and detecting a driver's abnormality based on the detection vector.

Method and apparatus for detecting driver's abnormalities based on machine learning using vehicle can bus signal

A pseudonym certificate management method, performed by a pseudonym certificate management apparatus interworking with an external server, may comprise: receiving, from the external server, a pseudonym certificate in a state locked based on a root value identifiable only by the external server; periodically receiving an unlocking key for the pseudonym certificate from the external server; activating the pseudonym certificate with the unlocking key; and when the activated pseudonym certificate is abnormal, deactivating the pseudonym certificate.

Apparatus and method for managing pseudonym certificates and preventing tracking thereof

An operation method of a communication node in a communication network may comprise receiving CAN signals from a plurality of CAN communication nodes; generating forward input data by performing forward preprocessing on the received CAN signals based on forward sampling times; generating forward mask data for the forward input data and forward time interval data according to the forward sampling times; generating backward input data by performing backward preprocessing on the CAN signals based on backward sampling times; generating backward mask data for the backward input data and backward time interval data according to the backward sampling times; and detecting an abnormal signal among the CAN signals by inputting the forward input data, forward mask data, forward time interval data, backward input data, backward mask data, and backward time interval data into a gated recurrent unit-decay (GRU-D) neural network.

Method for detecting signal in communication network based on controller area network, and apparatus therefor

A data tracking method, which is performed by a data tracking apparatus in an edge cloud environment including at least one edge node communicating with an end device and a central cloud, includes receiving data from the end device by a first edge node, creating, by the first edge node, a tracing history and distributing the data to a plurality of edge nodes so as to allow the plurality of edge nodes to create tracing histories, transmitting the created tracing histories to the central cloud by the first edge node and the plurality of edge nodes, and verifying, by the central cloud, linkability of the tracing histories transmitted to the central cloud, storing the tracing histories, analyzing the tracing histories, and providing a data tracking function.

Apparatus and method for tracking data in edge cloud environment

Disclosed is a method of detecting whether a groupware user's behavior is an abnormal behavior. The method includes acquiring a uniform resource identifier (URI) from the user's behavior, generating a URI sequence from the URI on the basis of a predetermined time interval, preprocessing the URI sequence to generate a primitive URI sequence, calculating a log probability value from the primitive URI sequence, and detecting whether the user's behavior is an abnormal behavior on the basis of the log probability value and a predetermined threshold value.

Method and apparatus for detecting abnormal behavior of groupware user

Provided are a method and device for performing authentication using a hardware security module (HSM) in a one machine-to-machine (oneM2M) environment. The method of performing authentication using an HSM in a oneM2M environment includes extracting a symmetric key stored in the HSM using a security application programming interface (API), generating a first value and a second value using the extracted symmetric key, and performing mutual authentication with an M2M enrolment function (MEF) server through transport layer security pre-shared key ciphersuites (TLS-PSK) using the first value and the second value.

Method of and device for performing authentication using hardware security module in oneM2M environment

Growing community of inventors

Seoul, South Korea

Sang Gyoo Sim