公开(公告)号：US11431499B2

公开(公告)日：2022-08-30

申请号：US16717028

申请日：2019-12-17

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sang-Woo Lee ,  Hyeok-Chan Kwon

IPC: H04L9/30 ,  G06F7/72

Abstract: Disclosed herein are a finite-field division operator, an elliptic curve cryptosystem having the finite-field division operator, and a method for operating the elliptic curve cryptosystem. The method for operating an elliptic curve cryptosystem may include, setting, by a key setting unit, a length of a key of a cryptographic algorithm, generating, by the key setting unit, first setup information that indicates a number of words corresponding to the key length, and generating, by the key setting unit, second setup information that indicates a number of repetitions of an operation by a finite-field division operator corresponding to the key length.

公开(公告)号：US08966609B2

公开(公告)日：2015-02-24

申请号：US13687187

申请日：2012-11-28

Applicant: Electronics and Telecommunications Research Institute

Inventor： Sang-Woo Lee ,  Dong IL Seo

IPC: G06F9/00 ,  H04L29/06

CPC classification number: H04L63/1408 ,  H04L63/0823 ,  H04L63/101 ,  H04L63/1458 ,  H04L2463/146

Abstract: An authentication apparatus for detecting and preventing a source address spoofing packet, includes a packet reception unit configured to receive a packet from a previous node or a user host; a self-assurance type ID generation unit configured to generate a self-assurance type ID of a source node of the received packet; and a self-assurance type ID verification unit configured to determine whether the source address of the received packet has been spoofed. Further, the authentication apparatus includes a white list storage unit configured to store a reliable source node; a black list storage unit configured to store an unreliable source node; and a packet transmission unit configured to transmit the packet whose source has been verified through the self-assurance type ID verification unit to a next network node.

Abstract translation: 一种用于检测和防止源地址欺骗分组的认证装置，包括：分组接收单元，被配置为从前一个节点或用户主机接收分组; 被配置为生成所接收的分组的源节点的自保证型ID的自保证型ID生成单元; 以及自身类型ID验证单元，被配置为确定所接收的分组的源地址是否已被欺骗。 此外，认证装置包括被配置为存储可靠源节点的白名单存储单元; 配置为存储不可靠源节点的黑名单存储单元; 以及分组发送单元，被配置为将来自已经通过自保证型ID验证单元验证的源的分组发送到下一个网络节点。

公开(公告)号：US11516194B2

公开(公告)日：2022-11-29

申请号：US16945120

申请日：2020-07-31

Applicant: Electronics and Telecommunications Research Institute

Inventor： Dae-Won Kim ,  Dong-Wook Kang ,  Sang-Woo Lee ,  Jin-Yong Lee ,  Boo-Sun Jeon ,  Bo-Heung Chung ,  Hong-Il Ju ,  Byeong-Cheol Choi ,  Joong-Yong Choi

IPC: H04L9/32 ,  H04L9/40 ,  H04W4/48 ,  H04B3/56 ,  H04W12/06

Abstract: Disclosed herein are an in-vehicle network apparatus and method. The in-vehicle network apparatus includes one or more processors and executable memory for storing at least one program executed by the one or more processors. The at least one program is configured to verify the integrity of software stored in advance in the executable memory, to generate a key table by sharing authentication information with a communication target, and to exchange an encrypted message with the communication target using the key table.

公开(公告)号：US09230433B2

公开(公告)日：2016-01-05

申请号：US13675502

申请日：2012-11-13

Applicant: Electronics and Telecommunications Research Institute

Inventor： Sang-Woo Lee ,  Byung-Gil Lee

IPC: G08G1/00 ,  G08G1/01

CPC classification number: G08G1/0125 ,  G08G1/20 ,  G08G1/22

Abstract: A method authenticates a group driving service of a moving object. The method includes authenticating the moving object when an authentication request for the registration of the group driving service is received from the moving object, generating a certain group having group driving service registration information based on group driving registration information when a registration request for the group driving service is received from the moving object, the registration request including the group driving registration information, and transmitting the group driving service registration information of the certain group to the moving object.

Abstract translation: 一种方法来认证移动物体的组驾驶服务。 该方法包括当从移动对象接收到用于组驾驶服务的注册的认证请求时，对移动对象进行认证，当组驾驶的注册请求时，基于组驾驶注册信息生成具有组驾驶服务注册信息的特定组 从移动对象接收服务，注册请求包括组驱动注册信息，并将该特定组的组驱动服务注册信息发送到移动对象。

公开(公告)号：US11968312B2

公开(公告)日：2024-04-23

申请号：US17527861

申请日：2021-11-16

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sang-Woo Lee ,  Dae-Won Kim ,  Jin-Yong Lee ,  Boo-Sun Jeon ,  Bo-Heung Chung ,  Hong-Il Ju ,  Joong-Yong Choi

IPC: H04L9/32 ,  H04L9/08

CPC classification number: H04L9/3247 ,  H04L9/0825 ,  H04L9/0866 ,  H04L9/3263

Abstract: Disclosed herein are an apparatus and method for processing vehicle data security based on a cloud. The method may include requesting, by a vehicle, a cloud center device to register a cloud-based vehicle data security service; generating, by the cloud center device, cloud-based vehicle data security policies and a pseudonym for the vehicle; requesting, by the cloud center device, an authentication center to generate a pseudonym certificate for the pseudonym and receiving the pseudonym certificate; transmitting, by the cloud center device, the cloud-based vehicle data security policies, the pseudonym, and the pseudonym certificate to the vehicle; generating, by the vehicle, vehicle state information, including accident record information and driving entity information, based on the cloud-based vehicle data security policies and transmitting the same to the cloud center device; and storing, by the cloud center device, the accident record information and the driving entity information in a database for each vehicle.

公开(公告)号：US11502870B2

公开(公告)日：2022-11-15

申请号：US17077702

申请日：2020-10-22

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Joong-Yong Choi ,  Dong-Wook Kang ,  Dae-Won Kim ,  Sang-Woo Lee ,  Jin-Yong Lee ,  Boo-Sun Jeon ,  Bo-Heung Chung ,  Hong-Il Ju ,  Byeong-Cheol Choi

IPC: H04L12/28 ,  H04L12/40 ,  H04L67/12

Abstract: Disclosed herein are a method for managing an access control list based on an automotive Ethernet and an apparatus for the same. The method includes analyzing a new access control rule that is input to a vehicle in which the automotive Ethernet is applied, searching for any one target unit to manage the new access control rule in consideration of at least one of a destination and an application target corresponding to the new access control rule, and storing the new access control rule by transmitting a storage request message corresponding to the new access control rule to the target unit.