Electronics and Telecommunications Research Institute

Seok-Hyun Kim

Jong-Hyouk Noh

Jin-Man Cho

Sang-Rae Cho

Soo-Hyung Kim

Young-Seob Cho

Young-Sam Kim

Seung-Hun Jin

Seung-hyun Kim

Kwan-Tae Cho

Jung-Yeon Hwang

Geon-Woo Kim

Dae-Seon Choi

Se-Young Huh

Disclosed herein is a method for user-centered visitor access management, which may include issuing, by a management office server, a digital certificate to a householder terminal; registering, by a wall-pad, a householder in response to a request to register the householder based on the digital certificate; requesting, by the householder terminal, the management office server to register a visitor based on a visit request from a visitor terminal and delegating the digital certificate to the visitor terminal; making an entry request to a management terminal based on the digital certificate; verifying, by the wall-pad, the digital certificate based on a request for verification for entry from a wall-pad management terminal and providing a verification result to the wall-pad management terminal when the management terminal is the wall-pad management terminal; and managing and controlling, by the wall-pad, permission to use home devices based on delegated permission information of the digital certificate.

Method and system for user-centered visitor access management

Disclosed herein are an apparatus and method for issuing delegated credentials between digital wallets possessed by multiple users connected to a Decentralized Identifier (DID) registry through wired/wireless communication. The method includes receiving, by a digital wallet of a first user, a delegated credential issuance request message including a newly created DID document from a digital wallet of a second user, generating, by the digital wallet of the first user, a delegated credential using both the delegated credential issuance request message, received from the digital wallet of the second user, and an original credential, previously issued by the digital wallet of the first user, and transmitting, by the digital wallet of the first user, the generated delegated credential and the original credential, together with a delegated credential registration request message, to the digital wallet of the second user.

Apparatus and method for issuing delegated credentials in decentralized identifier-based service

Disclosed herein are an apparatus and method for user authentication based on multiple pieces of biometric information. The apparatus may include one or more processors and executable memory for storing at least one program executed by the one or more processors. The at least one program receives multiple pieces of biometric information from the client device of a user, generates the personal identifier of the user using a neural network and a Bloom filter algorithm, and checks the similarity between the personal identifier of the user and each of personal identifiers previously registered in a database, thereby authenticating the user.

Apparatus and method for authenticating user based on multiple biometric information

Disclosed herein are an apparatus and method for managing personal information. The method includes a step in which a user terminal device registers the decentralized identification information of a user in a blockchain, receives the personal information of the user, stores the same in an endpoint for managing the personal information, and registers a personal information access policy for the personal information in a first server; a step in which the apparatus receives the decentralized identifier of the user, retrieves the decentralized identification information of the user, corresponding to the decentralized identifier, from the blockchain, and requests a personal information access token for accessing the personal information from the first server using the decentralized identification information; and a step in which the apparatus identifies the endpoint from the personal information access token, which is generated based on the personal information access policy, and retrieves the personal information from the endpoint.

Apparatus and method for managing personal information

Disclosed herein are an apparatus and method for recommending privacy control. A privacy control server includes multiple common privacy control recommendation models learned based on personal information provision histories of multiple users, a user preference determination unit for generating at least one question item based on the multiple common privacy control recommendation models and determining a privacy control preference of a user based on a result of a user answer to the at least one question item, and a common privacy control recommendation model provision unit for providing a common privacy control recommendation model selected to match the privacy control preference of the user to the user.

Apparatus and method for recommending user privacy control

Disclosed herein are a terminal apparatus, a server apparatus, and a method for FIDO universal authentication using a blockchain. The method includes sending, by the terminal apparatus, a FIDO service request for any one of FIDO registration, FIDO authentication, and FIDO deregistration for an application service provided by the server apparatus to the server apparatus; verifying, by the blockchain, a FIDO service response message, which is created as a result of local authentication of a user in the terminal apparatus in response to the FIDO service request; and processing, by the server apparatus, the FIDO service request based on whether the FIDO service response message is successfully verified by the blockchain.

Terminal apparatus, server apparatus, blockchain and method for FIDO universal authentication using the same

Disclosed herein are an apparatus and method for authenticated key exchange using a password and an identity-based signature, by which robustness is provided in order to prevent a server impersonation attack when a password is exposed, and by which a client may be provided with convenient authentication using an ID and a password.

Method and apparatus for authenticated key exchange using password and identity-based signature

Disclosed are an apparatus and method for providing a digital signature. The apparatus includes a certificate unit, an input unit receives a selection input for a certificate related to signature content received from a signature-requesting terminal, and a control unit for determining whether the certificate unit is capable of performing a digital signature function corresponding to a selected certificate. If the certificate unit is capable of performing the digital signature function, the certificate unit creates a digital signature based on a private key corresponding to the selected certificate when the control unit commands the certificate unit to create a digital signature. Further, if the certificate unit is not capable of performing the digital signature function, the control unit creates a digital signature based on a private key corresponding to a certificate selected from the certificate unit. The control unit transmits the digital signature to the signature-requesting terminal.

Growing community of inventors

Daejeon, South Korea

Seok-Hyun Kim