Electronics and Telecommunications Research Institute

Seung-Yong Yoon

Yong-Sung Jeon

Jeong-Nyeo Kim

Young-Sae Kim

Hong-Il Ju

Byoung-Koo Kim

Dae-Won Kim

Hyun-Sook Cho

Yong-Hyuk Moon

Jae-Deok Lim

Jin-Hee Han

Ik-Kyun Kim

Tae-Sung Kim

You-Sung Kang

Mi-Kyung Oh

Doo-Ho Choi

Sang-Jae Lee

Disclosed herein are an apparatus and method for authenticating an IoT device. The method, performed by the IoT device authentication apparatus, includes transmitting, by the IoT device authentication apparatus, a random number to the IoT device and encrypting, by the IoT device authentication apparatus, the random number using a previously registered first white-box cryptography value through a white-box cryptography method; generating, by the IoT device, a first device response value from a previously registered first device challenge value using a Physical Unclonable Function (PUF) and encrypting, by the IoT device, the random number, received from the IoT device authentication apparatus, using the first device response value; and performing, by the IoT device authentication apparatus, authentication of the IoT device by checking whether the random number encrypted using the white-box cryptography method matches the random number encrypted using the PUF, which is received from the IoT device.

Apparatus and method for authenticating IoT device based on PUF using white-box cryptography

Disclosed herein are an apparatus and method for detecting a malicious device based on swarm intelligence. The method includes detecting a malicious device by causing at least one exploration ant to access a device swarm along movement routes in which pheromone trail values are taken into consideration, wherein the exploration ant is generated in response to a detection request received from a security management server, when the at least one exploration ant detects a suspicious device that is suspected to be a malicious device, causing the exploration ant to return along the movement routes in reverse order, and returning pheromone trail values generated by devices on the return movement routes to a malicious device detection apparatus, and identifying whether the suspicious device is the malicious device by calculating an optimal solution based on a local information set generated by aggregating the pheromone trail values returned for movement routes.

Apparatus and method for detecting malicious device based on swarm intelligence

Disclosed herein are a fixed-location Internet-of-Things (IoT) device for protecting secure storage access information and a method for protecting secure storage access information of the fixed-location IoT device. The fixed-location IoT device includes a unique hardware information analysis unit for generating a hardware hash value by analyzing unique hardware information corresponding to the fixed-location IoT device for protecting the secure storage access information, a network environment information collection unit for collecting network environment information from neighboring fixed-location IoT devices, a network environment information analysis unit for generating a network hash value by analyzing the network environment information, an access information encryption key generation unit for generating an access information encryption key corresponding to the secure storage access information using the hardware hash value and the network hash value, and an encryption/decryption unit for encrypting or decrypting the secure storage access information using the access information encryption key.

Fixed-location IoT device for protecting secure storage access information and method for protecting secure storage access information of fixed-location IoT device

The present invention relates to an apparatus and a method for transferring a data signal between a smartcard interface and an interface of a processor within an embedded system. According to an exemplary embodiment of the present invention, an interface conversion device communicating between a processor and a smartcard IC chip includes: an input/output signal conversion logic configured to transfer a signal between a first interface of the processor and a second interface of the smartcard IC chip; a clock generator configured to generate a clock signal driving the smartcard IC chip depending on a first control signal received from the processor and provide the generated clock signal to the smartcard IC chip; and a reset controller configured to generate a reset signal depending on a second control signal received from the processor and provide the generated reset signal to the smartcard IC chip.

Smartcard interface conversion device, embedded system having the same device and method for transferring data signal used in the same device

A mobile computing system for providing a high-security execution environment is provided. The mobile computing system separates execution environments in the same mobile device on the basis of virtualization technology and manages user-specific execution environments using the same hardware security module, thereby facilitating protection of personal privacy.

Mobile computing system for providing high-security execution environment

Disclosed herein are a universal subscriber identification module card and a communication method using the same. The universal subscriber identification module card includes a Universal Subscriber Identification Module (USIM) chip, a pad, and a security chip. The USIM chip performs the user authentication of a mobile terminal. The pad electrically connects the USIM chip to the mobile terminal when the USIM chip is inserted into the mobile terminal. The security chip performs a security function for the mobile terminal independently of the USIM chip and shares the two power terminals of the pad with the USIM chip.

Universal subscriber identification module card, including security chip, for mobile terminal and communication method using the same

A server receives a first echo request message which complies with an Internet control message protocol, extracts filtering information from hear information of the received first echo request message, and when a second echo request message which complies with the Internet control message protocol is received, compares header information of the received second echo request message and the extracted filtering information so as to determine whether to block an attacking packet for the received second echo request message. According to the present invention, the server blocks the attacking packet using the Internet control message protocol, thereby blocking a denial-of-service attack.

Method for blocking a denial-of-service attack

Disclosed herein is a Transmission Control Protocol (TCP) flooding attack prevention method. The TCP flooding attack prevention method includes identifying the type of a packet received at an intermediate stage between a client and a server; determining the direction of the packet; defining a plurality of session states based on the type and the direction of the packet; detecting a TCP flooding attack by tracking the session states for each flow; and responding to the TCP flooding attack based on the type of the TCP flooding attack.

Growing community of inventors

Daejeon, South Korea

Seung-Yong Yoon