KR101379711B1 - Method for file encryption and decryption using telephone number - Google Patents

Abstract

A method for encoding and decoding a file using a telephone number is disclosed. A method for decoding an encoded file by a computing device according to one aspect of the present invention comprises the steps of: transmitting a push message to a personal terminal according to a telephone number included in an encoding key by executing a decoding module which is included in an encoded file, when the encoded file is executed; authenticating the personal terminal using an authentication key transmitted from the personal terminal; and decoding the encoded file by the decoding module when the authentication of the personal terminal succeeds. According to the present invention, the method enables a receiver to decode an encoded file even when not knowing a decoding key only with a personal terminal according to a corresponding telephone number by performing file encoding using the telephone number of the receiver. [Reference numerals] (10) Create an encoding file; (20) Execute the encoding file; (AA) Provide the encoding file; (BB) Network

Description

Method for file encryption and decryption using telephone number}

The present invention relates to the encryption and decryption of a file, and more particularly, to a file encryption and decryption method using a telephone number of a personal terminal.

Recently, various types of computing devices such as computers and mobile communication terminals have been used, and communication between devices has become possible anytime and anywhere due to the development of a communication network such as a mobile communication network as well as an internet network. For this reason, transmission and reception of files through the communication network is actively performed, and therefore, maintaining security of important files has become an issue.

In general, a cryptographic system is used to secure files. That is, the person providing the file (called the sender) encrypts the file and transmits the file, and the receiving side (called the receiver) decrypts and uses the encrypted file. An encryption system that encrypts and decrypts a file requires an encryption key used to encrypt the file and a decryption key used to decrypt the file. Here, the encryption key and the decryption key may be the same as each other, or different keys may be used.

In a conventional encryption system, a receiver receiving an encrypted file must know the decryption key or possess it as a separate file in order to decrypt the corresponding file. As an easy example, the sender of the file must encrypt the file with the encryption key, provide it to the recipient, and then tell the recipient separately which decryption key to use. In addition, there is a inconvenience that the receiver must enter a decryption key such as, for example, a password in order to decrypt the file. In addition, even if encrypted, anyone who knows the decryption key may have a security problem that anyone can decrypt and open the file.

Republic of Korea Patent Publication No. 2002-0025343 (published April 04, 2002) File encryption and decryption method using the primary key and one-time key and device

Accordingly, the present invention has been made to solve the above-mentioned problems, the file encryption and decryption method using a phone number that can decrypt the encrypted file even if the receiving side does not know the decryption key and a program for executing the method To provide a recorded recording medium.

Another object of the present invention is to provide a file encryption and decryption method using a phone number capable of decrypting an encrypted file by minimizing user input in order to provide user convenience.

In addition, the present invention is to provide a file encryption and decryption method using a phone number that can conveniently perform the selection of the recipient, file encryption using the recipient's phone number and file transfer using contact information.

Other objects of the present invention will become more apparent through the following preferred embodiments.

According to an aspect of the present invention, in a method for decrypting an encrypted file performed in a computing device, when the encrypted file is executed, the individual according to the phone number included in the encryption key by executing the decryption module included in the encrypted file. Transmitting a push message to a terminal; Performing personal terminal authentication using an authentication key sent from the personal terminal; And a file decryption method using a phone number, and a recording medium on which a program for executing the method is recorded, wherein when the personal terminal authentication succeeds, the decryption module decrypts the encrypted file.

Here, the push message includes network information of the computing device, and the personal terminal may check the user before transmitting the authentication key if the computing device does not exist in the same network by using the network information.

In addition, the push message includes a sender's telephone number present in the encryption key, and the personal terminal can transmit the authentication key without inquiring to the user only when the sender's telephone number is registered in the provided contact information. .

In addition, when a deletion message is received from the personal terminal together with the authentication key, the encrypted file may be deleted, and may be transmitted to the personal terminal before the encrypted file is deleted.

A file encryption method performed in a computing device, the method comprising: encrypting a selected file by using an encryption key including an input recipient telephone number; And generating an encryption file including the decryption module and the encrypted file, which decrypts the file encrypted by authentication with the personal terminal to which the recipient phone number has been assigned. The push number is transmitted to the personal terminal according to the receiver's telephone number by execution of the decryption module, and if the personal terminal authentication using the authentication key received from the personal terminal is successful, the phone number characterized in that the decryption of the encrypted file. Provided are a file encryption method using a recording medium and a recording medium having recorded thereon a program for executing the method.

Here, if the receiver according to the provided contact information is selected, including the step of extracting the telephone number and the e-mail address according to the recipient from the contact information, using the telephone number as the recipient telephone number to generate the encryption file And send the encrypted file to the email address.

The encryption key may further include a sender's telephone number, but the personal terminal may transmit the authentication key to the receiver computer without inquiring a user only when the sender's telephone number is registered in the provided contact information. .

According to the present invention, by performing file encryption using the receiver's telephone number, the receiver can decrypt the encrypted file even if he does not know the decryption key just by having his or her personal terminal according to the telephone number.

In addition, according to the present invention, it is possible to decrypt an encrypted file without a separate input simply by having a personal terminal according to a network situation, thereby providing user convenience.

In addition, according to the present invention, the file encrypting side can conveniently perform the selection of the recipient, the file encryption suitable for the recipient, and the file transfer using the contact information.

1 is a schematic diagram showing an overall system for file encryption and decryption using a telephone number according to an embodiment of the present invention.
2 is a flowchart illustrating a file encryption process performed in a sender computer according to an embodiment of the present invention.
3 is a flowchart illustrating a decryption process of an encryption file performed at a receiver computer according to an embodiment of the present invention.
4 is a flowchart illustrating an authentication process for decrypting an encrypted file in a personal terminal according to an embodiment of the present invention.
5 is a diagram illustrating a configuration of an encryption key according to an embodiment of the present invention.
6 is an exemplary diagram illustrating a file decryption process using an authentication key certified by a personal terminal according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout the specification and claims. The description will be omitted.

1 is a schematic diagram showing an entire system for file encryption and decryption using a telephone number according to an embodiment of the present invention, Figure 5 shows the configuration of an encryption key according to an embodiment of the present invention Drawing.

Referring to FIG. 1, the entire system according to the present embodiment includes a sender computer 10, a receiver computer 20, and a personal terminal 30.

The sender computer 10 is a computing device of a user who encrypts a file (hereinafter referred to as a sender), and the sender encrypts the file and sends it to the receiver (a user of the recipient computer 20), which is owned by the receiver when encrypting the file. A telephone number (hereinafter referred to as a recipient's telephone number) of one personal terminal 30 (e.g., a smartphone) is used.

Referring to FIG. 5 together, an encryption key used to encrypt a file according to an example includes a unique key and a recipient's telephone number. That is, the sender computer 10 uses a common key encryption algorithm when encrypting a file. The sender computer 10 encrypts the file using an encryption key including the receiver's telephone number. This encrypted file will be referred to as an encrypted file, which will be described in detail later. As shown in the drawings, the encryption key may be classified into a type including a unique key and a recipient's telephone number and a b type further including a sender's telephone number. The method of using the sender's telephone number will be described later.

When the receiver executes the encrypted file acquired using the receiver computer 20 which is his computing device, the receiver can decrypt and use the file due to authentication using his personal terminal 30.

Hereinafter, the file encryption process and the decryption process will be described.

2 is a flowchart illustrating a file encryption process performed in the sender computer 10 according to an embodiment of the present invention.

Referring to FIG. 2, the sender computer 10 receives a file to be encrypted (S210), and receives a receiver's telephone number to generate an encryption key (S220). Here, according to an example, the sender computer 10 may input the recipient phone number using contact information stored in a user account in a server device stored in itself or coupled through a communication network. As an easy example, the sender computer 10 outputs a user interface screen for viewing the contacts of each person according to the stored contact information, and when the user selects any one person as the recipient, the sender computer 10 receives the recipient's mobile phone number. Select as a phone number and process it.

As described with reference to FIG. 5, the selected file is encrypted using an encryption key including the input recipient phone number (S230).

An encryption file, which is an automatic decryption execution file including an encryption key, an encrypted file, and a decryption module, is generated (S240). As will be described later, the decryption module decrypts the encrypted file by authentication with the personal terminal 30 according to the receiver's telephone number. The sender transmits the generated encryption file to the receiver. According to an example, when using the contact information in S220, the sender may automatically transmit the generated encryption file to the email address according to the contact information of the receiver. In other words, the sender simply selects the recipient by using the contact information, thereby providing easy operation by encrypting the file with the recipient's telephone number and automatically transmitting the encrypted file to the recipient's e-mail address.

Hereinafter, the decryption process of the encryption file performed in the receiver computer 20 will be described.

3 is a flowchart illustrating a decryption process of an encryption file performed in a receiver computer 20 according to an embodiment of the present invention.

Referring to FIG. 3, when the receiver computer 20 executes the encryption file (S310), the decryption module of the encryption file is executed to push messages to the phone number included in the encryption key (ie, to the receiver's personal terminal 30). Transmit (S320).

When the personal terminal 30 receives the push message, the personal terminal 30 uses the network information (for example, IP address, port number, subnet mask, etc.) of the receiver computer 20 included in the message. The authentication key is sent to the computer 20. Here, according to an example, the personal terminal 30 may provide the authentication key directly to the receiver terminal without any limitation upon receiving the push message. According to another example, the personal terminal 30 immediately provides the authentication key without any other procedure only when a specific condition is satisfied. If not, the user verification procedure may be performed. This will be described in detail with reference to the related drawings (FIG. 4).

The receiver computer 20 determines whether an authentication key is received from the personal terminal 30 (S330), and when the authentication key is received, performs terminal authentication using the corresponding authentication key (that is, the personal terminal according to the receiver's telephone number ( 30) to determine whether the authentication succeeds (S340) and if successful, decrypts the password of the file (S360).

Of course, if the authentication key is not received or authentication key authentication fails, the decryption process is failed (S350). According to an example, when the decryption failure process is performed a predetermined number or more, the receiver computer 20 may delete the corresponding encryption file.

According to the present embodiment, the user using the encrypted file simply decrypts the encrypted file simply by executing the encrypted file, so there is no need to perform any other operation. As with the existing card company specification file, the contents can be viewed only by executing the attached file (spec file) without the hassle of inputting the digit after the social security number.

Hereinafter, a description will be given of the processing in the personal terminal 30 according to the phone number included in the encryption key of the encryption file.

4 is a flowchart illustrating an authentication process for decrypting an encrypted file in the personal terminal 30 according to an embodiment of the present invention.

Referring to FIG. 4, when the personal terminal 30 receives a push message from the receiver computer 20 through the network (S410), the personal terminal 30 recognizes network information of the receiver computer 20 (S415).

As a result of analyzing the network information, it is determined whether it is the same network as the network to which it is currently connected (S420). As an example of determining the same network here, whether the network class is the same may be used. Network classes can be distinguished by the first structure of IP addresses in IPv4, which will be apparent to those skilled in the art, and thus a detailed description thereof will be omitted. In other words, the personal terminal 30 determines whether it is the same network as its own using an IP address, a port number, a subnet mask, and the like, which are network information of the receiver computer 20.

In the present embodiment, if it is recognized that the network is the same, if the encryption key described with reference to FIG. 5 is of type b, it is determined whether the sender's telephone number included in the encryption key is registered in the contact information (address book, etc.) (S425). ). That is, it is determined whether the receiver is registered as a person who knows the sender, since the encrypted file may be a file containing a virus or a spam file when received by a person who does not know the recipient. Here, the contact information may be information by an address book or a phone book which is generally used in a device having a telephone function such as a smart phone, which will be apparent to those skilled in the art, and thus, further description thereof will be omitted. However, the contact information does not necessarily need to be stored in the personal terminal 30, but may be information stored as a user account of the personal terminal 30 in the server device. Recently, many services using a specific storage space on the web in the form of a cloud service (cloud service) rather than storing the data on the terminal device itself, so the contact information is stored in a specific server device combined through the communication network accordingly The personal terminal 30 may communicate with the corresponding server device as needed to use the contact information in real time. This will also be apparent to those skilled in the art, and thus a detailed description thereof will be omitted.

If the sender phone number included in the encryption key is registered in advance as the contact information, the personal terminal 30 transmits the authentication key to the recipient computer 20 using the network information about the recipient computer 20 included in the push message. (S430).

Of course, according to another embodiment, if the encryption key is a type S425 may be omitted.

If it is determined in S420 or S425 that the network is not the same network or the sender's telephone number is registered as a contact, the personal terminal 30 performs user verification processing (S435). For example, the personal terminal 30 displays the authentication request information including the file information (file name, etc.) and the sender information (sender's telephone number, etc.) included in the push message on the screen, so that the user can confirm this and also In response, an authentication confirmation command or an authentication rejection command can be input.

The personal terminal 30 confirms the confirmation result according to the user input (S440), and if an authentication confirmation command is input, proceeds to S430 and transmits an authentication key. On the contrary, when the authentication rejection command is input, the personal terminal 30 does not transmit the authentication key. In this case, the user may input a delete command for the corresponding encryption file. Therefore, the personal terminal 30 determines whether a delete command is input from the user (S445), and if the delete command is input, transmits a delete command for the encrypted file to the receiver computer 20 (S450). At this time, the personal terminal 30 may transmit an authentication key together with the delete command, for the reason that the receiver computer 20 processes only the command from the authenticated personal terminal 30 that can decrypt the encryption file. This is because it is preferable.

When the user computer receives the delete command together with the authentication key, if the authentication according to the authentication key is successful, the user computer deletes the encrypted file according to the delete command, which is a command from the corresponding personal terminal 30. At this time, according to another example, the user computer may transmit the encrypted file to the personal terminal 30 before deleting the encrypted file. Therefore, the receiver can prevent another person from using the encrypted file, and can also immediately check the encrypted file with his or her personal terminal 30 and later use it.

Here, the authentication key utilized by the personal terminal 30 is because the personal terminal 30 is a telephone device having a telephone number, unique identification information (for example, SIM (Subscriber Identification Module) information) given to the corresponding personal terminal 30. Etc.) may be utilized.

According to another example, the authentication key provided from the personal terminal 30 to the recipient computer 20 may use an authentication key authorized by a specific server.

6 is an exemplary diagram illustrating a file decryption process using a personalized authentication key according to an embodiment of the present invention.

In the present embodiment, it is assumed that the personal terminal 30 uses the Android operating system provided by Google, and the personal terminal 30 is an authentication key (for example, a device personal identification ID of the personal terminal) previously obtained from the Google server. ) Can be performed by registering the web server with the web server. GCM stands for Google Cloud Messaging and is a free service provided by Google to send data from server to client (Android Application). Therefore, the personal terminal 30 generates an authentication key using the GCM of the Google server, and registers it in advance in the web server. The recipient computer 20 processes the authentication of the authentication key of the personal terminal 30 in association with the web server.

The above-described file encryption and decryption method using the telephone number according to the present invention can be embodied as computer readable codes on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording media storing data that can be decoded by a computer system. For example, it may be a ROM (Read Only Memory), a RAM (Random Access Memory), a magnetic tape, a magnetic disk, a flash memory, an optical data storage device, or the like. In addition, the computer-readable recording medium may be distributed and executed in a computer system connected to a computer network, and may be stored and executed as a code readable in a distributed manner.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention as defined in the appended claims. It will be understood that various modifications and changes may be made.

10: sender computer
20: recipient computer
30: personal terminal

Claims (9)

In the file decoding method performed in the computing device,
When the encryption file is executed, transmitting a push message to a personal terminal according to a phone number included in the encryption key by executing the decryption module included in the encryption file;
Performing personal terminal authentication using an authentication key sent from the personal terminal; And
And decrypting the encrypted file by the decryption module if the personal terminal authentication succeeds.
The method according to claim 1,
The push message includes network information of the computing device, and if the computing device does not exist in the same network using the network information, a personal message is displayed on the screen before the authentication key is transmitted to confirm the user. A file decoding method comprising performing a procedure.
The method according to claim 1,
The push message includes a sender's telephone number present in the encryption key, and the personal terminal transmits the authentication key without inquiring to the user only when the sender's telephone number is registered in the provided contact information. File decryption method.
The method according to claim 1,
And when the delete message is received from the personal terminal together with the authentication key, deleting the encrypted file.
The method of claim 4,
And transmitting the encrypted file to the personal terminal before deleting the encrypted file.
A file encryption method performed on a computing device,
Encrypting the selected file using an encryption key containing the input recipient phone number; And
Generating an encryption file including the decryption module and the decryption module for decrypting the file encrypted by authentication with the personal terminal to which the recipient telephone number is assigned,
The receiver computer acquiring the encryption file transmits a push message to the personal terminal according to the receiver telephone number by executing the decryption module, and if the personal terminal authentication using the authentication key received from the personal terminal is successful, the receiver file is transmitted. File encryption method, characterized in that the decoding.
The method of claim 6,
If the recipient according to the provided contact information is selected, including the step of extracting the telephone number and the e-mail address according to the recipient from the contact information,
And generating the encrypted file using the telephone number as the recipient telephone number and transmitting the encrypted file to the email address.
The method of claim 6,
The encryption key further includes a sender's telephone number, wherein the personal terminal transmits the authentication key to the receiver computer without inquiring a user only when the sender's telephone number is registered in the provided contact information. File password method.
A recording medium having a computer-readable recording program for performing the method of any one of claims 1 to 8.

Images