CN1148035C - User information security device and method in mobile communication system connected to Internet - Google Patents

Abstract

Provided is an apparatus for keeping confidential user secret information transmitted from a mobile station in a mobile communication system communicating with a web server through an Internet web server, wherein selection related to The data of the user's secret information, selected data is encrypted in a given format, and the encrypted data is directly sent to the web server and/or mobile station without any additional processing operation by the service server.

Description

User information security device and method in mobile communication system connected to Internet

technical field

The invention relates to a user information security device and method used in a mobile communication system communicating with the Internet.

Background technique

In mobile communications, recent developments have enabled users to carry out so-called electronic commerce via the Internet, using radiocommunication technology. In order to promote electronic commerce on the Internet, when he or she is connected with an Internet web (network) server, which provides the contents of electronic commerce, the most important thing is to prevent leakage of customer's personal information. According to this, when using the Internet, the purpose of the security system is to keep the user's personal information secret, so that unwanted users do not steal the user's personal information, such as passwords to access web servers, credit card numbers with associated passwords to conduct transactions etc.

The traditional security system used for protecting secret information in wired Internet communication generally adopts Secure Socket Layer (Secure Socket Layer) (SSL), which is proposed by Netscape Company of the United States. The SSL system encodes information from the customer in a manner known to be readable only by web servers. However, for reasons discussed below, SSL systems are not suitable for use in wireless or mobile Internet communication systems.

First, mobile stations have a limited storage capacity, which is not suitable for implementing web applications in SSL systems. Therefore, conventional mobile stations are not designed to implement such web applications. Second, in order to perform a wireless connection to an Internet web server, the mobile station must first connect to a relevant Internet service server to request a web content service. In this case, in order to properly implement and protect personal information throughout the network, the security system between the web server and the service server should have the same standard as the security system between the service server and the mobile station. However, conventional security systems cannot provide the same standard among them. As an illustrative example, FIG. 1 depicts a conventional mobile communication network system provided in a conventional security system. As shown in the figure, the SSL system is adopted between the service server and the web server, but a wireless security system having a different system is adopted between the mobile station and the service server. Therefore, the entire network does not have the same standard between them. Accordingly, prior art security systems have different systems and standards, and are not suitable for providing a security device for user's personal information.

As described above, conventional security systems designed for wired Internet communication systems are not suitable for wireless Internet communication systems, thus hindering the rapid development of electronic commerce markets through the Internet using mobile communication technology.

Contents of the invention

An object of the present invention is to provide an apparatus and method for keeping confidential user information confidential when implementing electronic commerce using a mobile Internet communication system in which a prior art system uses an SSL system employed in wired Internet communication.

Another object of the present invention is to provide a security device and method for confidential user information, which uses the same standard to achieve end-to-end security from the mobile station to the web server to generate security between the mobile station, the service server and the web server. Data flow between web servers.

In order to achieve one aspect of the above object of the present invention, the present invention provides a security system for personal information exchanged during a secure transaction in a mobile Internet communication system, including a mobile station, a service server and a web (network) server, wherein: A mobile station for storing the public key of the service server, receiving the certificate of the web server from the service server, decrypting the certificate by using the public key of the service server, so as to check the version of the certificate, by using the certificate included in the certificate, the web server public key to generate a session key used in secure transactions, and to encrypt/decrypt personal information according to security by using the generated session key and the public key of the web server; The service server provides credentials, generates a security key for decrypting data encrypted in the mobile station, decrypts the session key encrypted to the public key by using the security key, and encrypts the decrypted session key in the mobile station and the personal information sent is decrypted; and the business server, located between the mobile station and the web server, is used to receive the certificate from the web server, and when the mobile station requests a secure connection to the web server, sends the certificate to the mobile station, and for the mobile station Provides an interface for encrypted data sent/received between the station and the web server.

In order to achieve another aspect of the above object of the present invention, the present invention provides a security system for personal information exchanged during a secure transaction in a mobile Internet communication system, comprising: a mobile station receiving a public key of a web server from a service server; key, by using the public key of the business server to generate a session key used in secure transactions, and by using the generated session key and the public key of the web server to encrypt/encrypt personal information according to security; The web server is used to generate a public key, provides the public key to the service server, generates a security key for decrypting data encrypted in the mobile station, and decrypts the session key encrypted to the public key by using the security key. key, to decrypt the personal information encrypted and sent in the mobile station through the decrypted session key; and the service server, located between the mobile station and the web server, for receiving the public key from the web server, when the mobile station requests a secure connection When going to the web server, the public key is sent to the mobile station, and an interface is provided for encrypted data sent/received between the mobile station and the web server.

In yet another aspect to achieve the above-mentioned purpose of the present invention, the present invention provides a method for keeping secrets of personal information sent from a mobile station of a mobile communication system communicating with a web server via a service server, comprising the steps of: When the mobile station requests a secure connection to the web server, sending a credential from the service server to the mobile station; receiving a request for sending said personal information from said mobile station or said web server; optionally encrypting said personal information in a predetermined format said personal information for transmission to one of said mobile station or web server; and said encrypted personal information is decrypted by said mobile station or said web server without any intervention by said service server .

In yet another aspect to achieve the above object of the present invention, the present invention provides a personal information security method used in a mobile Internet communication system having a mobile station, a service server, and a web server, wherein the web The server is used to generate a security key and a public key, the service server is located between the web server and the mobile station, and is used to receive the public key from the web server, and the method includes the steps: when the mobile station requests the web server During the secure transaction, the public key is sent from the service server to the mobile station; by using the public key, the mobile station generates a session key used in the secure transaction, and by using the generated session key and public key, to Encrypt personal information according to security, and send the encrypted personal information to the web server through the business server; key to decrypt personal information.

In yet another aspect to achieve the above object of the present invention, the present invention provides a method for securing data sent in a mobile Internet communication system, this type of communication system has a web server, used for and said a mobile station exchanging data with the web server, and a proxy service server communicating with said mobile station and said web server, the method comprising the steps of: requesting a connection by said mobile station to receive from said web server via said service server server receives electronic data; generates a public key and a secret key by said web server in response to said request of said mobile station; sends said public key to said mobile station by said web server to Register in the mobile station; send a new credential to the mobile station by the service server; decide whether the credential previously registered in the mobile station is the same as the new credential received from the service server by the mobile station are the same; if the new credential is the same as the previously registered credential, a session key generated by the public key received from the web server is used by the mobile station to encrypt a personal information, and encrypt said public key to generate a symmetric key, and send said encrypted personal information and said generated symmetric key to said web server via said business server; and by said web server decrypting the symmetric key received from the mobile station to transform back to the session key, and decrypting the encrypted personal information using the transformed session key and the secret key.

The invention will now be more specifically described, by way of example only, with reference to the accompanying drawings.

Description of drawings

FIG. 1 is a schematic diagram for illustrating a conventional mobile Internet communication system with a conventional mobile security system;

Figure 2 is a schematic diagram similar to Figure 1 illustrating a mobile security system according to the present invention;

Fig. 3 is a schematic diagram, is used to explain the process that sends a common web document and secret data according to the safety system of the present invention in mobile Internet communication; With

FIG. 4 is a flowchart for explaining the process of securing user information in mobile Internet communication according to the present invention.

Detailed ways

In the following description, for purposes of explanation rather than limitation, specific details are set forth, such as specific structures, interfaces, techniques, etc., in order to provide a precise understanding of the invention. It will be apparent, however, to those skilled in the art that the present invention may be practiced in other embodiments without these specific details. For the purpose of conciseness, descriptions of known devices, circuit details and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.

To provide a standard of assurance that the purported sender of the message is in fact the real sender, the digital/electronic signature can be encrypted using various known methods. An encryption algorithm suitable for use according to the present invention is the Riverst-Shamier-Adleman (RSA) public key algorithm, which is the most widely used algorithm in current electronic commerce security systems. Based on prime factorization, the RSA algorithm provides both encryption and electronic signatures (or encryption keys). That is, the principle of the RSA algorithm is based on the fact that it is easier to calculate the product of two prime numbers "p" and "q", but it is difficult to extract "p" and "q" from the product "n", "n" is obtained by multiplying "p" and "q". That is, use two keys, one public and the second secret, so that whenever you encrypt with the secret key, you only decrypt with the public key, and vice versa. In an embodiment of the present invention, the RSA algorithm generates public and secret keys for encrypting/decrypting a session key. The public key is used by the customer to encrypt the session key and then send the encrypted session key back to the server. The server decrypts the session key with its secret key and establishes a secure connection with the customer.

In addition, in the embodiment of the present invention, the algorithm for generating the session key uses the SEED (seed) symmetric key algorithm, which is based on the Korean Data Encryption Standard and uses the symmetric key algorithm developed by the Korean Information Security Agency (KISA). The 128-bit block encryption algorithm for public electronic commerce. The SEED symmetric algorithm has optional 8, 16, and 32-bit data processing, decrypted in block encryption, and the input/output phrase (phrase) and input key are 128 bits. It is also designed to enable differential cryptanalysis (DC)/linear cryptanalysis (LC), including encryption/decryption speeds three times faster than Data Encryption Standard (DES). Its structure is based on Feistel, and the internal functions are designed to use look-up tables obtained by transforming nonlinear functions. In the present invention, the SEED symmetric key algorithm is applied for 12 rounds to generate the session key by which the user's message data is encrypted.

According to the present invention, in mobile Internet communication, a mobile station, an Internet service server, and a web server can operate as described below.

First, the mobile phone is provided with a security program of the invention required to connect to the web server, to receive the public key and internally generate the session key for use in secure transactions. Session keys are used to encrypt and decrypt data. Encryption is realized according to RSA algorithm and 128-bit SEED algorithm. The web server uses the RSA algorithm to generate a public key and a secret key. By sending the public key to the mobile station, the mobile station can realize secure transactions. The received public key is used to generate a session key to encrypt data sent by the mobile station, and the mobile station uses the SEED algorithm to generate the session key. The web server then uses the secret key to decrypt the session key used to encrypt data sent by the mobile station. That is, data encrypted with the public key can only be decrypted using the secret key, and vice versa. Therefore, the web server uses the RSA secret key to decrypt the session key generated by the SEED algorithm, and according to the encryption and decryption of the 128-bit symmetric key SEED, the decrypted session key is used to decrypt the encrypted data.

According to an embodiment of the present invention, data processing between the mobile station and the web server begins when the web server generates a pair of its own public key and secret key. The public key is sent to the service server, which is then amended on request and sent as a certificate to the mobile station. For this, the mobile station is authorized for use, and the service server acts as an intermediary between the mobile station and the web server by forwarding the required data. The mobile station then stores the public key to internally generate a session key to encrypt confidential data to be sent to the web server. To generate the session key, the mobile station encrypts the received public key to generate a symmetric key to be sent to the web server. Thereafter, the web server decrypts the symmetric key with its own secret key. Using the decrypted symmetric key, the web server decrypts the encrypted data received from the mobile station. In the reverse transmission, the web server encrypts the data to be sent to the mobile station using the symmetric key received from the mobile station. The mobile station then decrypts the encrypted data received from the web server using the symmetric key previously sent to the web server. In the embodiment of the present invention, the business server is configured as a proxy server.

The data format on each path of mobile Internet communication is described in conjunction with accompanying drawing 2, wherein the security system between the mobile station, service server and web server uses the mobile micro security system (MMS) of the present invention. That is, the same standard MMS is used between the mobile station and the web server. Since the public key of the web server is electronically signed with the secret key of the web server when the public key is sent to the mobile station for the first time, the path between the mobile station and the mobile communication network cannot be forged by computer hackers public key tampering. In addition, the data packets encrypted by the mobile station are in a 128-bit coded format so that computer hackers cannot understand the content of the original file. Further, when a computer hacker moves from a mobile network to a service server via the Internet, it does not steal data packets. This is possible because the path between the mobile communication network and the service server is such that the data packets encrypted by the mobile station are given to the service server in 128-bit format via the Internet, thus preventing computer hackers from stealing its content.

In addition, the internal network of the service server is protected by using the firewall of the hacker detection system of the present invention. The service server simply transfers the encrypted data from the mobile station to the web server without any processing therein. In addition, a dedicated line through which 128-bit encrypted data is transmitted is usually used to connect the business server and the web server, thereby making it difficult for hackers to access.

Further, since the web server receives the symmetric key randomly generated by the mobile station according to the 128-bit SEED algorithm, the computer theft detection system according to the present invention is realized. The web server then securely decrypts the 128-bit encrypted data received from the mobile station using the RSA secret key. In this way, encrypted data of the mobile station can only be decrypted by the web server, and encrypted data from the web server can only be decrypted by the mobile station. The latter is possible because the web server's SEED symmetric key can also be sent to the mobile station in reverse.

When communicating between the mobile station and the web server before being sent, each message is encrypted by a session key before sending and decrypted at the receiving end by a session key generated from the mobile station using a public The key is encrypted and generated as a symmetric key. For this purpose, the mobile station is installed with a security program for connection with a security service server. The role of the security program is to receive the public key from the web server and then internally generate a session key to encrypt personal information and send it from the mobile station to the web server. That is, session keys are used to encrypt and decrypt secret data in accordance with RSA encryption and 128-bit SEED symmetric keys.

Figure 3 illustrates the transmission of a normal web document without any encryption, and the transmission of encrypted secret data according to the present invention. That is, the service server transmits an ordinary web document through a proxy server between the mobile station and the web server, and transmits personal data between them without any additional processing operations. As shown in FIG. 3, since a limited amount of data can be transmitted and processed in wireless Internet communication, according to the present invention, two different data transmissions are operable. Therefore, only personal/secret data that needs to be kept secret from an unwanted third party is sent directly between the mobile station and the web server.

According to the embodiment of the present invention, use Fig. 4 to describe the security process of user information when the mobile station attempts to connect with the web server, wherein in step 310 the mobile station registers the public key received by the service server, which is hard-coated (hard-coated) on the mobile station's web browser. The service server registers the public key, the certificate and the address of the web server along with its certificate version information, which are periodically updated according to the corresponding data delivered by the web server. In step 312, the mobile station requests connection with the web page in response to the user's request to receive the electronic file. This request is sent directly to the web server via a "GET" command for requesting that the electronic file have access to personal/private information. At this time, the business server does not perform any additional processing operations on the GET command being sent to the web server. Here, the web server may be a bank server, a stock trading server, or the like.

In step 314, when a request is received from the mobile phone, the web server requested to connect decides the data to be encrypted, and then notifies the mobile phone of the result through the service server. Data to be encrypted includes personal/secret information such as a password and a credit card number. Other data such as user's registration ID, ordinary character information, etc. do not need to be encrypted, so that the amount of encrypted data can be reduced. This is useful because the amount of data to be handled in mobile Internet communications is very limited compared to wired Internet communications. In step 316, the service server sends the currently registered credential version revised periodically by the web server to the mobile station. The credential version provides updated information about the web server's hostname, IP address and public key that can be used to confirm the source of the message. Then, the mobile station decides whether the received certificate version is the same as the previously registered version. The previously registered version is downloaded by the mobile station from the same web server previously accessed. If they are the same, encryption is performed using its previously registered version.

On the other hand, if not the same, the mobile station requests the service server to send a new version of the certificate. This request is made by a "CERT" command, which is a pre-arranged protocol between the mobile station and the service server for sending credentials. In response to the command "CERT", at step 320, the service server sends the credentials of the currently registered web server. That is, if there is a mobile station's request for a new certificate version, the service server (or proxy server) with the updated information downloaded from the web server (content server) periodically sends a response message, including the header ) and the text. In the header, the digital SIGN (signed by the public key of the web server requested by the mobile station) is appended, and the credentials (hostname, IP address and public key) are appended in the body part.

In step 322, the mobile station receives the response message from the service server, authenticating the text of the voucher by verifying the digital SIGN in the header. That is, the mobile station checks whether the digital SIGN corresponds to the public key of the web server, and also checks whether the text is corrupted. If the digital SIGN is confirmed, the mobile station recovers the public key contained in the certificate and updates its certificate table therein. In step 324, using the public key included in the certificate, a session key is generated for secure transmission of the user's information. As described above, a session key is generated according to the 128-bit SEED algorithm, which is used to encrypt personal data sent by the user of the mobile station. At step 326, the user's information is encrypted with the session key to secure data. At step 328, the session is encrypted with the public key to generate a symmetric key.

In step 330, the symmetric key obtained by using the public key to encrypt the session key and the data encrypted by the session key are sent to the web server via the service server, of course, the service server does not perform any additional processing on the data being sent to the web server Then, in step 332, the web server uses the secret key to decrypt the symmetric key contained in the user information received from the mobile station to generate a session key. In step 334, the web server decrypts the user information, ie, the security data encrypted by the mobile station, using the generated session key, so that the original data can be restored so that the original data can be processed by the web server.

Meanwhile, at step 320, a hash value (ie, Message Digest 5 (MD5)) is generated using a hash function. MD5 is a functional protocol used for encryption, wherein if the result matches the certificate, the data transmission is considered to have been completed normally without any external computer hacking. A 128-bit hash value (that is, a sequence of 128-bit letters) is generated for the content of the certificate, encrypted with the secret key of the service server, and then added to the certificate. When the mobile station receives the certificate, the mobile station takes the encrypted hash value and decrypts it with the service server's public key. Then, to verify that the credential has not been stolen, the mobile station again generates the credential hash value and compares it with the decrypted hash value, if the two match, the credential is valid. Accordingly, a secure hash value is used to authenticate the message, ensuring that the data sent from the service server is not stolen on the way, and then, verify that the public key of the web server is valid, and execute step 324 .

Although the previous description referred to the transmission of user information from the mobile station to the web server, it also applies to the reverse transmission of user information requiring security. In this case, the mobile station can also decrypt the encrypted information from the web server using the public key and the secret key.

Additionally, secure transaction applications for mobile stations and web servers are prepared as described below.

First, an HTML file for protecting user information by encryption/decryption is prepared and uploaded to the web server. HTML files requiring encryption/decryption are distinguished from normal HTML files by Internet search engines by using class attributes defined in the Internet Protocol. This is achieved by specifying the class as the security indicator "SCURE", which indicates the corresponding field to be encrypted.

Therefore, the present invention provides a device for securing user information for electronic commerce in the mobile Internet.

Although the present invention has been described in conjunction with the accompanying drawings, it will be apparent to those skilled in the art that various changes and modifications can be made without departing from the spirit of the present invention.

Claims (18)

1. the secrecy system of the personal information that exchanges during the Secure Transaction in the mobile Internet communication system comprises travelling carriage, and service server and Web (network) server is characterized in that, wherein:

Travelling carriage, the public keys that is used for the storage service server, receive the voucher of web server from service server, decipher voucher by the public keys that uses service server, so that check the version of voucher, be included in public keys in the voucher, the web server by use, produce the session key that is used in the Secure Transaction, and, come according to fail safe encrypt/decrypt personal information by using the session key produced and the public keys of web server;

The web server, be used for providing voucher to service server, generation is used for deciphering the safe key in the travelling carriage ciphered data, by key safe in utilization, come decrypt encrypted to arrive the session key of public keys, the session key personal information of encrypting and transmitting in travelling carriage by deciphering is decrypted; And

Service server, between travelling carriage and web server, be used for receiving voucher, when travelling carriage request safety is connected to the web server from the web server, send voucher to travelling carriage, and provide interface for the enciphered data of transmission/reception between travelling carriage and web server.

2. the system as claimed in claim 1 is characterized in that, wherein, when detecting the safety indication that comprises the predetermined class attribute in data, just is defined as the situation that travelling carriage request safety is connected to the web server.

3. system as claimed in claim 2, it is characterized in that, the encrypt/decrypt of wherein said data realizes according to Riverst-Shamier-Adleman (RSA) public key algorithm RSA Algorithm and SEED symmetric key algorithm, and described SEED symmetric key algorithm is based on by Korea S's data encryption standard of Korea S information security mechanism (KISA) exploitation.

4. the secrecy system of the personal information that exchanges during the Secure Transaction in the mobile Internet communication system is characterized in that, comprising:

Travelling carriage, receive the public keys of web server from service server, by using the public keys of service server, produce the session key that is used in the Secure Transaction, and, come according to fail safe encrypt/decrypt personal information by using the session key produced and the public keys of web server;

The web server, be used to produce public keys, provide public keys to service server, generation is used for deciphering the safe key in the travelling carriage ciphered data, by key safe in utilization, come decrypt encrypted to arrive the session key of public keys, the session key personal information of encrypting and transmitting in travelling carriage by deciphering is decrypted; And

Service server, between travelling carriage and web server, be used for receiving public keys, when travelling carriage request safety is connected to the web server from the web server, send public keys to travelling carriage, and provide interface for the enciphered data of transmission/reception between travelling carriage and web server.

5. system as claimed in claim 4 is characterized in that, also comprises a service server, is used for directly sending the personal information of described encryption between described travelling carriage and described web server, and need not carries out other interference by described service server.

6. system as claimed in claim 4, it is characterized in that, wherein the encrypt/decrypt of the described personal information of being undertaken by described session key is realized according to Riverst-Shamier-Adleman (RSA) public key algorithm RSA Algorithm and SEED symmetric key algorithm, and described SEED symmetric key algorithm is based on by Korea S's data encryption standard of Korea S information security mechanism (KISA) exploitation.

7. a time slot scrambling that is used for the personal information that sends from the travelling carriage with the mobile communication system of a web server communication through a service server is characterized in that, comprises step:

When travelling carriage request safety is connected to the web server, send voucher to travelling carriage from service server;

Reception is used for sending from described travelling carriage or described web server the request of described personal information;

Selectively encrypt described personal information with a predetermined form, to send in described travelling carriage or the web server to; With

By the personal information of one in described travelling carriage or the described web server described encryption of deciphering, and need not carry out any interference by described service server.

8. method as claimed in claim 7 is characterized in that, and is further comprising the steps of, after receiving the described request that sends described personal information, sends a voucher to described travelling carriage from described Internet service server.

9. method as claimed in claim 8, it is characterized in that, wherein said service server is registered the voucher of the described web server that will be sent to described travelling carriage in advance, when being connected with described web server with the described travelling carriage request of box lunch, the voucher that is stored in the previous registration in the described travelling carriage is updated.

10. method as claimed in claim 7 is characterized in that, wherein according to the generic attribute of the described request of the described personal information of transmission of being undertaken by described travelling carriage or described web server, and described data of encrypt/decrypt selectively.

11. method as claimed in claim 7, it is characterized in that, wherein the described encrypt/decrypt of the described personal information of being undertaken by described travelling carriage or described web server is realized according to Riverst-Shamier-Adleman (RSA) public key algorithm RSA Algorithm and SEED symmetric key algorithm, and described SEED symmetric key algorithm is based on by Korea S's data encryption standard of Korea S information security mechanism (KISA) exploitation.

12. one kind be used for have travelling carriage, service server, with personal information privacy's method of the mobile Internet communication system of web server, wherein, described web server is used to produce safe key and public keys, described service server is between web server and travelling carriage, be used for receiving public keys from the web server, it is characterized in that described method comprises step:

When the Secure Transaction of web server is arrived in the travelling carriage request, send public keys to travelling carriage from service server;

By using public keys, produce the session key that is used in the Secure Transaction by travelling carriage, by using session key and the public keys that is produced, come to encrypt personal information, and send the personal information of encrypting to the web server by service server according to fail safe; And

By the web server, the personal information that receives by service server, encrypt is deciphered encrypted session key, and personal information is decrypted by the session key of deciphering.

13. method as claimed in claim 12, it is characterized in that, also comprise the steps, between described travelling carriage and described web server, send the personal information of described encryption by described service server, and need not carry out other interference by described service server.

14. method as claimed in claim 12, it is characterized in that, wherein adopt the described encrypt/decrypt of the described personal information that described session key carries out to realize according to Riverst-Shamier-Adleman (RSA) public key algorithm RSA Algorithm and SEED symmetric key algorithm, described SEED symmetric key algorithm is based on by Korea S's data encryption standard of Korea S information security mechanism (KISA) exploitation.

15. time slot scrambling that is used for the data that send in the mobile Internet communication system, such communication system has a web server, be used for travelling carriage of described web server exchange data and with an agent service server of described travelling carriage and described web server communication, it is characterized in that the method comprising the steps of:

Connect by described travelling carriage request, to receive electronic data from described web server through described service server;

In response to the described request of described travelling carriage, produce a public keys and a privacy key by described web server;

Send described public keys to described travelling carriage by described web server, in described travelling carriage, to register;

Send a new voucher to described travelling carriage by described service server;

Whether the voucher by described travelling carriage decision previous registration in described travelling carriage is the same with the new voucher that receives from described service server;

If described new voucher is the same with the voucher of described previous registration, then use a session key that produces by the described public keys that receives from described web server to encrypt personal information by described travelling carriage, with the described public keys of encryption, to produce a symmetric key and to send the symmetric key of the personal information of described encryption and described generation to described web server through described service server; With

The described symmetric key that is received from described travelling carriage by the deciphering of described web server is got back to described session key and is used the session key and the described privacy key of described conversion with conversion, deciphers the personal information of described encryption.

16. method as claimed in claim 15 is characterized in that, also comprise the steps, if the described new voucher and the voucher of described previous registration are different, then by described travelling carriage from the described new voucher of described service server request.

17. method as claimed in claim 15 is characterized in that, also comprises step, is used the data that send to described travelling carriage from the described symmetric key encryption of described travelling carriage reception by described web server; Send described enciphered data to described travelling carriage and, use the described symmetric key before sent to described web server by travelling carriage, the described ciphered data that deciphering receives from described web server.

18. method as claimed in claim 15, it is characterized in that, wherein adopt the described encrypt/decrypt of the described personal information that described session key carries out to realize according to Riverst-Shamier-Adleman (RSA) public key algorithm RSA Algorithm and SEED symmetric key algorithm, described SEED symmetric key algorithm is based on by Korea S's data encryption standard of Korea S information security mechanism (KISA) exploitation.

Images