KR20230040875A - Electronic apparatus for encrypted communication and method for controlling thereof - Google Patents

Abstract

Disclosed are an electronic device for encryption communication and a control method thereof. In accordance with the present disclosure, the electronic device for encryption communication includes a communication interface performing communication connection with a server, a memory storing at least one instruction, and a processor executing the at least one instruction. The processor, when an instruction for encryption communication is inputted, transmits nation information corresponding to the electronic device and a key exchange algorithm list for the encryption of communication to the server; receives nation information corresponding to the server and information about at least one key exchange algorithm selected by the server from the server; and when the at least one key exchange algorithm received from the server is identified as matched with the nation information corresponding to the server and the nation information corresponding to the electronic device, performs a key exchange operation using the received at least one key exchange algorithm.

Description

Electronic device for encrypted communication and its control method {ELECTRONIC APPARATUS FOR ENCRYPTED COMMUNICATION AND METHOD FOR CONTROLLING THEREOF}

The present disclosure relates to an electronic device for encrypted communication and a control method thereof, and more particularly, to an electronic device for performing encrypted communication based on an encryption communication standard between different countries and a control method thereof.

Wireless communication exchanging information with a counterpart located at a long distance inevitably exposes radio waves including information to the outside, and there is a risk that a third party intercepts it and leaks information. In order to prevent this, an encryption communication technology has been developed that allows information included in radio waves to be checked only between subjects performing wireless communication.

Encryption communication may be performed through encryption and decryption of information using a key. The subject sending the information encrypts the information using the key, and the subject receiving the information uses the key to decrypt the encrypted information. Even if a third party intercepts the radio wave containing the information on the way, the information is decrypted without knowing the key. way to make it impossible.

Here, the key includes a symmetric key, an asymmetric key, and the like. An encryption method using a symmetric key means an encryption method in which the key used for encryption and the key used for decryption are the same. The used encryption method means an encryption method in which a key used for encryption and a key used for decryption are different.

When subjects belonging to different countries perform the above encryption communication, security requirements set by country may be different, and if encryption communication standards between countries are different, there are cases in which communication between countries is difficult.

Therefore, when subjects belonging to different countries perform encrypted communication, it is requested to find a way to smoothly perform encrypted communication by coordinating encryption communication standards for each country.

An electronic device for encryption communication according to the present embodiment for achieving the above object includes a communication interface for performing a communication connection with a server, a memory for storing at least one instruction, and a processor for executing the at least one instruction, , When a command for performing encrypted communication is input, the processor transmits country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication to the server, and the country information corresponding to the server and the information on at least one key exchange algorithm selected by a server is received from the server, and the at least one key exchange algorithm received from the server corresponds to country information corresponding to the server and country information corresponding to the electronic device. If identified, a key exchange operation may be performed using the received at least one key exchange algorithm.

Meanwhile, the processor may transmit information indicating whether to perform encryption communication based on country-specific encryption communication standards to the server.

Meanwhile, the processor may perform a key exchange operation using a key exchange algorithm received from the server while the server performs a key exchange operation using at least one key exchange algorithm selected by the server.

Meanwhile, a session key for encrypting one communication session may be formed by a combination of a key exchange result of the server and a key exchange result of the electronic device.

An electronic device for encryption communication according to an embodiment of the present disclosure includes a communication interface for performing a communication connection with a server, a memory for storing at least one instruction, and a processor for executing the at least one instruction, wherein the processor comprises: , When a command for performing encrypted communication is input, country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication are transmitted to the server, and the country corresponding to the electronic device among the list of key exchange algorithms is transmitted. A first key exchange algorithm corresponding to the information is identified, country information corresponding to the server and information on at least one second key exchange algorithm selected from the server are received from the server, and the identified first key exchange algorithm is identified. A third key exchange algorithm may be identified based on the algorithm and the second key exchange algorithm received from the server, and a key exchange operation may be performed using the identified third key exchange algorithm.

A server for encryption communication according to an embodiment of the present disclosure includes a communication interface for performing a communication connection with an electronic device, a memory for storing at least one instruction, and a processor for executing the at least one instruction, the processor comprising: , Receiving country information corresponding to the electronic device and a key exchange algorithm list for encryption of communication, matching the received country information corresponding to the electronic device and country information corresponding to the server among the received key exchange algorithm list A key exchange algorithm to be used may be identified, and country information corresponding to the server and information on the identified key exchange algorithm may be transmitted to the electronic device.

Meanwhile, the processor receives information indicating whether to perform encrypted communication with the electronic device based on country-specific encryption communication standards, and performs encryption communication with the electronic device based on country-specific encryption communication standards. If identified, a key exchange algorithm matching the received country information corresponding to the electronic device and the country information corresponding to the server from the received key exchange algorithm list may be identified.

A control method of an electronic device for encryption communication according to the present disclosure includes the steps of transmitting country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication to the server when a command for performing encryption communication is input. Receiving, from the server, country information corresponding to a server and information on at least one key exchange algorithm selected in the server, and at least one key exchange algorithm received from the server is country information corresponding to the server and the and performing a key exchange operation using the received at least one key exchange algorithm if it is identified as matching the country information corresponding to the electronic device.

Meanwhile, the transmitting may further include transmitting, to the server, information indicating whether to perform encryption communication based on country-specific encryption communication standards.

Meanwhile, the performing of the key exchange operation may include performing a key exchange operation using a key exchange algorithm received from the server while a key exchange operation of the server is performed using at least one key exchange algorithm selected by the server. can do.

Meanwhile, a session key for encrypting one communication session may be formed by a combination of a key exchange result of the server and a key exchange result of the electronic device.

In the control method of an electronic device for encryption communication according to the present disclosure, when a command for performing encryption communication is input, transmitting country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication to a server. Step of identifying a first key exchange algorithm corresponding to country information corresponding to the electronic device from among the key exchange algorithm list, based on country information corresponding to the server and at least one second key exchange algorithm selected from the server. Receiving information about the key from the server, identifying a third key exchange algorithm based on the identified first key exchange algorithm and the second key exchange algorithm received from the server, and the identified third key exchange algorithm It may include performing a key exchange operation using

A method for controlling a server for encrypted communication according to the present disclosure, comprising: receiving country information corresponding to an electronic device and a list of key exchange algorithms for encryption of communication, the received electronic device among the list of received key exchange algorithms identifying a key exchange algorithm corresponding to the country information corresponding to the server and the country information corresponding to the server, and transmitting country information corresponding to the server and information on the identified key exchange algorithm to the electronic device. can include

Meanwhile, the receiving may further include receiving information indicating whether or not to perform encrypted communication with the electronic device based on country-specific encrypted communication standards, and the identifying may further include: If it is identified that encryption communication is performed based on country-specific encryption communication standards, a key exchange algorithm corresponding to country information corresponding to the received electronic device and country information corresponding to the server among the received key exchange algorithm list is selected. can be identified.

Aspects, features, and advantages of specific embodiments of the present disclosure will become more apparent from the following description with reference to the accompanying drawings.
1 is a diagram for explaining cross-border encrypted communication according to an embodiment of the present disclosure.
2 is a block diagram illustrating a configuration of an electronic device according to an embodiment of the present disclosure.
3 is a sequence diagram illustrating operations of an electronic device and a server according to an embodiment of the present disclosure.
4 is a sequence diagram illustrating operations of an electronic device and a server according to an embodiment of the present disclosure.
5 is a flowchart illustrating an operation of an electronic device according to an embodiment of the present disclosure.

Since the present embodiments can apply various transformations and have various embodiments, specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the scope to the specific embodiments, and should be understood to include various modifications, equivalents, and/or alternatives of the embodiments of the present disclosure. In connection with the description of the drawings, like reference numerals may be used for like elements.

In describing the present disclosure, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the gist of the present disclosure, a detailed description thereof will be omitted.

In addition, the following embodiments may be modified in many different forms, and the scope of the technical idea of the present disclosure is not limited to the following embodiments. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the spirit of the disclosure to those skilled in the art.

Terms used in this disclosure are only used to describe specific embodiments, and are not intended to limit the scope of rights. Singular expressions include plural expressions unless the context clearly dictates otherwise.

In the present disclosure, expressions such as “has,” “can have,” “includes,” or “can include” indicate the presence of a corresponding feature (eg, numerical value, function, operation, or component such as a part). , which does not preclude the existence of additional features.

In this disclosure, expressions such as “A or B,” “at least one of A and/and B,” or “one or more of A or/and B” may include all possible combinations of the items listed together. . For example, “A or B,” “at least one of A and B,” or “at least one of A or B” (1) includes at least one A, (2) includes at least one B, Or (3) may refer to all cases including at least one A and at least one B.

Expressions such as "first," "second," "first," or "second," used in the present disclosure may modify various elements regardless of order and/or importance, and may refer to one element as It is used only to distinguish it from other components and does not limit the corresponding components.

A component (e.g., a first component) is "(operatively or communicatively) coupled with/to" another component (e.g., a second component); When referred to as "connected to", it should be understood that an element may be directly connected to another element, or may be connected through another element (eg, a third element).

On the other hand, when an element (eg, a first element) is referred to as being "directly connected" or "directly connected" to another element (eg, a second element), it is referred to as a component different from a component. It may be understood that there are no other components (eg, third components) between the elements.

The expression “configured to (or configured to)” as used in this disclosure means, depending on the situation, for example, “suitable for,” “having the capacity to.” ," "designed to," "adapted to," "made to," or "capable of." The term "configured (or set) to" may not necessarily mean only "specifically designed to" hardware.

Instead, in some contexts, the phrase "device configured to" may mean that the device is "capable of" in conjunction with other devices or components. For example, the phrase "a processor configured (or configured) to perform A, B, and C" may include a dedicated processor (eg, embedded processor) to perform the operation, or by executing one or more software programs stored in a memory device. , may mean a general-purpose processor (eg, CPU or application processor) capable of performing corresponding operations.

In an embodiment, a 'module' or 'unit' performs at least one function or operation, and may be implemented with hardware or software, or a combination of hardware and software. In addition, a plurality of 'modules' or a plurality of 'units' may be integrated into at least one module and implemented by at least one processor, except for 'modules' or 'units' that need to be implemented with specific hardware.

Meanwhile, various elements and regions in the drawings are schematically drawn. Therefore, the technical spirit of the present invention is not limited by the relative size or spacing drawn in the accompanying drawings.

Hereinafter, with reference to the accompanying drawings, an embodiment according to the present disclosure will be described in detail so that those skilled in the art can easily implement it.

1 is a diagram for explaining cross-border encrypted communication according to an embodiment of the present disclosure.

Referring to FIG. 1, when a subject located in the Republic of Korea 10 and a subject located in the United States 20 mutually perform wireless communication, the Republic of Korea 10 and the United States 20 are different countries and use different encryption communication standards. can request

Here, country-specific encryption communication standards followed by the electronic device or server may be represented as country information corresponding to the electronic device or server.

At this time, an electronic device or server conforming to the encryption communication standard of the Republic of Korea 10 and an electronic device or server conforming to the encryption communication standard of the United States 20 exchange encryption keys with each other through a key exchange algorithm to perform encryption communication.

Here, the key exchange algorithm means an algorithm in which the sender and the receiver share a key for encrypting and decrypting communication, and the communication can be encrypted and decrypted using a key known only to the sender and the receiver. there is.

Therefore, if different key exchange algorithms corresponding to standards for each country to which each subject belongs are used, encryption keys cannot be easily exchanged, making encryption communication difficult.

Therefore, when performing cross-border encryption communication using an electronic device, it is necessary to define a method for selecting a key exchange algorithm that can be commonly used while meeting the standard of the country where each subject is located.

Here, the electronic device 100 may be implemented as various devices capable of information processing and computation, such as a desktop computer, a laptop computer, a tablet computer, a smart phone, and a server.

The electronic device 100 according to the present disclosure is not limited to the above devices, and the electronic device 100 may be implemented as an electronic device having two or more functions of the above devices. In addition, the electronic device 100 may perform an operation for performing one or more functions by being connected to an external device.

2 is a block diagram illustrating a configuration of an electronic device 100 according to an embodiment of the present disclosure.

Referring to FIG. 2 , the electronic device 100 may include a communication interface 110 , a memory 120 and a processor 130 . However, it is not limited to this configuration, and the electronic device 100 may include various electronic device configurations such as a display, a sensor, a user interface, and an input/output interface.

The communication interface 110 may be a wireless communication interface. The wireless communication interface may perform communication with various external devices using wireless communication technology or mobile communication technology. Such wireless communication technologies include, for example, Bluetooth, Bluetooth Low Energy, CAN communication, Wi-Fi, Wi-Fi Direct, ultra-wideband communication (UWB, ultrawide band), Zigbee, infrared data association (IrDA), or NFC (Near Field Communication) may be included, and as mobile communication technologies, 3GPP, Wi-Max , LTE (Long Term Evolution), 5G, etc. may be included. The wireless communication interface may be implemented using an antenna, a communication chip, a substrate, or the like capable of transmitting electromagnetic waves to the outside or receiving electromagnetic waves transmitted from the outside.

Any one of the plurality of wireless communication interfaces may be omitted according to embodiments. The electronic device 100 is not limited to the case of including one communication interface 110 performing a communication connection of one type, and may include a plurality of communication interfaces 110 performing communication connection in a plurality of ways. can

The electronic device 100 may include only a wireless communication interface or may have an integrated communication interface supporting both a wireless connection through a wireless communication interface and a wired connection through a wired communication interface.

The processor 130 according to various embodiments of the present disclosure may communicate with various external electronic devices 100 or servers 200 located outdoors or indoors through the communication interface 110 .

Specifically, the processor 130 performs a communication connection with the server 200 through the communication interface 110, and information indicating whether to perform encryption communication based on national encryption communication standards, the electronic device 100 A list of key exchange algorithms for encryption of country information and communication corresponding to can be transmitted.

The processor 130 performs a communication connection with the server 200 through the communication interface 110 to receive country information corresponding to the server 200 and information about at least one key exchange algorithm selected by the server 200. can

In addition, the processor 130 may perform a communication connection with the server 200 through the communication interface 110 to transmit or receive a result value using a key exchange algorithm to or from the server 200 . In addition, the processor 130 may perform a communication connection with the server 200 through the communication interface 110 to transmit or receive information about a key such as an encryption key or a decryption key to or from the server 200 .

The memory 120 temporarily or non-temporarily stores various programs or data, and transfers stored information to the processor 130 according to a call of the processor 130 . In addition, the memory 120 may store various types of information necessary for calculation, processing, or control operations of the processor 130 in an electronic format.

The memory 120 may include, for example, at least one of a main memory device and an auxiliary memory device. The main memory device may be implemented using a semiconductor storage medium such as ROM and/or RAM. The ROM may include, for example, a conventional ROM, an EPROM, an EEPROM, and/or a MASK-ROM. The RAM may include, for example, DRAM and/or SRAM. The secondary storage device is a flash memory 120 device, a Secure Digital (SD) card, a solid state drive (SSD, Solid State Drive), a hard disk drive (HDD, Hard Disc Drive), a magnetic drum, a compact disc (CD), It can be implemented using at least one storage medium capable of permanently or semi-permanently storing data, such as an optical media such as a DVD or laser disk, a magnetic tape, a magneto-optical disk, and/or a floppy disk. .

The memory 120 includes information indicating whether to perform encryption communication based on country-specific encryption communication standards, country information corresponding to the electronic device 100, country information corresponding to the server 200, and at least one key exchange. Various information such as an algorithm, an encryption key, and a decryption key may be stored, and the stored information may be transmitted to the processor 130 according to a call of the processor 130 .

The processor 130 controls overall operations of the electronic device 100 . Specifically, the processor 130 is connected to the configuration of the electronic device 100 including the memory 120 as described above, and by executing at least one instruction stored in the memory 120 as described above, the electronic device ( 100) can be controlled overall. In particular, the processor 130 may be implemented as one processor 130 or as a plurality of processors 130 .

Processor 130 can be implemented in a variety of ways. For example, the processor 130 may include an application specific integrated circuit (ASIC), an embedded processor, a microprocessor, hardware control logic, a hardware finite state machine (FSM), a digital signal processor Processor, DSP) may be implemented as at least one.

Meanwhile, in the present disclosure, the processor 130 includes a central processing unit (CPU) for processing digital signals, a micro controller unit (MCU), a micro processing unit (MPU), a controller, and an application processor 130 ) (application processor (AP)), communication processor 130 (communication processor (CP)), or one or more of an ARM processor, or may be defined by the term. In addition, the processors 130 and 160 may be implemented as a system on chip (SoC) having a built-in processing algorithm, a large scale integration (LSI), or may be implemented in the form of a field programmable gate array (FPGA). The processor 130 may perform various functions by executing computer executable instructions stored in the memory 120 . In addition, the processor 130 may include at least one of a graphics-processing unit (GPU), a neural processing unit (NPU), and a visual processing unit (VPU), which are separate AI processors, in order to perform artificial intelligence functions. there is.

Specifically, when a command for performing encryption communication is input, the processor 130 of the electronic device 100 receives country information corresponding to the electronic device 100 and a key representing at least one key exchange algorithm for encryption of communication. The exchange algorithm list may be transmitted to the server 200 . Here, the processor 130 may transmit to the server 200 information indicating whether to perform encrypted communication based on national encrypted communication standards.

The processor 130 may receive country information corresponding to the server 200 and information about at least one key exchange algorithm selected by the server 200 from the server 200 .

When the processor 130 identifies that the at least one key exchange algorithm received from the server 200 corresponds to the country information corresponding to the server 200 and the country information corresponding to the electronic device 100, the processor 130 performs the at least one key exchange algorithm received from the server 200. The key exchange operation can be performed using the key exchange algorithm of Here, the processor 130 may perform a key exchange operation by combining a plurality of key exchange algorithms.

The processor 130 may encrypt or decrypt communication using the encryption key obtained by performing the key exchange operation in this way.

A cross-border encryption communication method according to the control of the electronic device 100 by the processor 130 will be described with reference to FIGS. 3 and 4 .

3 is a sequence diagram illustrating operations of the electronic device 100 and the server 200 according to an embodiment of the present disclosure.

Referring to FIG. 3 , the electronic device 100 may receive a command for performing encrypted communication (S310). Here, the electronic device 100 receives a command for performing encrypted communication through a user input through a user interface (not shown) or performs a communication connection with another external electronic device 100 through the communication interface 110. can receive

When a command for carrying out encrypted communication is input, the electronic device 100 establishes a communication connection with the server 200 or the external electronic device 100 through the communication interface 110 to establish a country corresponding to the electronic device 100. A list of key exchange algorithms for encrypting information and communication may be transmitted to the server 200 or the external electronic device 100 (S320).

When country information and a key exchange algorithm list corresponding to the electronic device 100 are received from the electronic device 100 through the communication interface 110, the server 200 determines which of the key exchange algorithm lists corresponds to the electronic device 100. At least one key exchange algorithm may be selected based on country information and country information corresponding to the server 200 (S330).

The server 200 establishes a communication connection with the electronic device 100 through the communication interface 110 to transmit country information corresponding to the server 200 and information on at least one selected key exchange algorithm to the electronic device 100. It can be transmitted (S340). Accordingly, the electronic device 100 establishes a communication connection with the server 200 through the communication interface 110 and receives information about the country corresponding to the server 200 and the selected at least one key exchange algorithm from the server 200. may be received from the server 200.

The electronic device 100 may identify whether at least one key exchange algorithm selected by the server 200 matches country information corresponding to the electronic device 100 and country information corresponding to the server 200 (S350). ).

If at least one key exchange algorithm selected by the server 200 is identified as not matching the country information corresponding to the electronic device 100 and the country information corresponding to the server 200 (S350-N), the electronic device ( 100 may perform a communication connection with the server 200 through the communication interface 110 to retransmit country information and a key exchange algorithm list corresponding to the electronic device 100 to the server 200 (S360). In this case, the server 200 selects at least one key exchange algorithm based on country information corresponding to the electronic device 100 and country information corresponding to the server 200 received through the communication interface 110. may be performed again (S330). Subsequent operations of the electronic device 100 and the server 200 are the same as described above.

However, it is not limited to this, and if at least one key exchange algorithm selected by the server 200 is identified as not matching the country information corresponding to the electronic device 100 and the country information corresponding to the server 200 ( S350-N), the electronic device 100 may transmit an error code indicating that encryption communication cannot be performed to the server 200 by performing a communication connection with the server 200 through the communication interface 110.

If at least one key exchange algorithm received from the server 200 is identified as matching country information corresponding to the server 200 and country information corresponding to the electronic device 100 (S350-Y), the electronic device 100 ) may perform a key exchange operation using at least one key exchange algorithm received (S370). Here, the electronic device 100 may perform a key exchange operation by combining a plurality of key exchange algorithms.

The electronic device 100 may encrypt or decrypt communication using the encryption key obtained by performing the key exchange operation in this way.

4 is a sequence diagram illustrating operations of the electronic device 100 and the server 200 according to an embodiment of the present disclosure.

Referring to FIG. 4 , the electronic device 100 may receive a command for performing encrypted communication (S405). Here, the electronic device 100 receives a command for performing encrypted communication through a user input through a user interface (not shown) or performs a communication connection with another external electronic device 100 through the communication interface 110. can receive

When a command for performing encryption communication is input, the electronic device 100 establishes a communication connection with the server 200 or the external electronic device 100 through the communication interface 110 to perform encryption based on country-specific encryption communication standards. Information indicating whether to perform communication, country information corresponding to the electronic device 100, and a key exchange algorithm list indicating at least one key exchange algorithm for encryption of communication are provided to the server 200 or the external electronic device 100 It can be transmitted to (S410).

Here, the electronic device 100 performs communication connection with the server 200 or the external electronic device 100 through the communication interface 110 to perform encryption communication based on country-specific encryption communication standards. is preferentially transmitted, and a response is received from the server 200 on whether or not to perform encrypted communication based on country-specific encrypted communication standards, and then country information corresponding to the electronic device 100 and a key for encryption of communication are received. The exchange algorithm list may be transmitted to the server 200 or the external electronic device 100 .

When country information and a key exchange algorithm list corresponding to the electronic device 100 are received from the electronic device 100 through the communication interface 110, the server 200 performs encryption communication based on country-specific encryption communication standards. It is possible to identify whether or not it is (S415).

If the server 200 is identified as not performing encrypted communication based on national encrypted communication standards (S415-N), the server 200 establishes a communication connection with the electronic device 100 through the communication interface 110. Thus, the error code may be transmitted to the electronic device 100 (S420).

When the electronic device 100 receives an error code from the server 200 through the communication interface 110, the electronic device 100 provides information indicating whether or not to perform encrypted communication again based on national encryption communication standards. Corresponding country information and a list of key exchange algorithms for encryption of communication may be transmitted to the server 200 or the external electronic device 100 (S410). Subsequent operations of the electronic device 100 and the server 200 are the same as described above.

However, the present invention is not limited thereto, and when receiving an error code from the server 200 through the communication interface 110, the electronic device 100 may identify that the encrypted communication connection operation with the server 200 is not in operation.

When the server 200 is identified as performing encrypted communication based on the national encrypted communication standard (S415-Y), the server 200 corresponds to the electronic device 100 from the electronic device 100 in the key exchange algorithm list. At least one key exchange algorithm may be selected based on country information and country information corresponding to the server 200 (S425).

The server 200 establishes a communication connection with the electronic device 100 through the communication interface 110 to transmit country information corresponding to the server 200 and information on at least one selected key exchange algorithm to the electronic device 100. It can be transmitted (S430). Accordingly, the electronic device 100 establishes a communication connection with the server 200 through the communication interface 110 and receives information about the country corresponding to the server 200 and the selected at least one key exchange algorithm from the server 200. may be received from the server 200.

The electronic device 100 may identify whether at least one key exchange algorithm selected by the server 200 matches country information corresponding to the electronic device 100 and country information corresponding to the server 200 (S435). ).

If at least one key exchange algorithm selected by the server 200 is identified as not matching the country information corresponding to the electronic device 100 and the country information corresponding to the server 200 (S435-N), the electronic device ( 100 may perform a communication connection with the server 200 through the communication interface 110 to retransmit country information and a key exchange algorithm list corresponding to the electronic device 100 to the server 200 (S440). In this case, the server 200 selects at least one key exchange algorithm based on country information corresponding to the electronic device 100 and country information corresponding to the server 200 received through the communication interface 110. may be performed again (S425). Subsequent operations of the electronic device 100 and the server 200 are the same as described above.

However, it is not limited to this, and if at least one key exchange algorithm selected by the server 200 is identified as not matching the country information corresponding to the electronic device 100 and the country information corresponding to the server 200 ( S435-N), the electronic device 100 may transmit an error code indicating that encryption communication cannot be performed to the server 200 by performing a communication connection with the server 200 through the communication interface 110.

If at least one key exchange algorithm received from the server 200 is identified as matching country information corresponding to the server 200 and country information corresponding to the electronic device 100 (S435-Y), the electronic device 100 ) may perform a key exchange operation using at least one key exchange algorithm received (S445). Here, the electronic device 100 uses at least one key exchange algorithm received from the server 200 while the key exchange operation of the server 200 is performed using at least one key exchange algorithm selected by the server 200. The key exchange operation can also be performed simultaneously. Here, the electronic device 100 may perform a key exchange operation by combining a plurality of key exchange algorithms.

The electronic device 100 may encrypt or decrypt communication using the encryption key obtained by performing the key exchange operation in this way.

A session key for encrypting one communication session between the electronic device 100 and the server 200 is formed by a combination of a key exchange result of the server 200 and a key exchange result of the electronic device 100. can

When a command for performing encryption communication is input, the electronic device 100 according to another embodiment of the present disclosure performs a communication connection with the server 200 through the communication interface 110 to provide the electronic device 100 with the server 200. Corresponding country information and a list of key exchange algorithms for encryption of communication may be transmitted to the server 200 . Here, when a command for performing encryption communication is input, the electronic device 100 performs a communication connection with the server 200 through the communication interface 110 to determine whether or not to perform encryption communication based on national encryption communication standards. Information indicating whether or not may be transmitted to the server 200 together.

The electronic device 100 may identify a first key exchange algorithm corresponding to country information corresponding to the electronic device 100 from the list of key exchange algorithms.

Here, the electronic device 100 performs an operation of transmitting a key exchange algorithm list for encrypting country information and communication to the server 200 through the communication interface 110 and an electronic device among the key exchange algorithm list ( The operation of identifying the first key exchange algorithm corresponding to the country information corresponding to 100) may be simultaneously performed, or one operation may be performed first and the other operations may be sequentially performed.

The server 200 may establish a communication connection with the electronic device 100 through the communication interface 110 and receive information indicating whether to perform encryption communication based on country-specific encryption communication standards.

If it is identified that encryption communication is performed based on country-specific encryption communication standards, the server 200 provides country information and server 200 corresponding to the electronic device 100 from among the list of key exchange algorithms received from the electronic device 100. A key exchange algorithm may be selected based on country information corresponding to and transmitted to the electronic device 100 through the communication interface 110 .

The electronic device 100 may receive country information corresponding to the server 200 and information about at least one second key exchange algorithm selected by the server 200 from the server 200 through the communication interface 110. .

The electronic device 100 may identify a third key exchange algorithm based on the identified first key exchange algorithm and the second key exchange algorithm received from the server 200 .

The electronic device 100 may perform a key exchange operation using the identified third key exchange algorithm.

The electronic device 100 may encrypt or decrypt communication using the encryption key obtained by performing the key exchange operation in this way.

5 is a flowchart illustrating an operation of the electronic device 100 according to an embodiment of the present disclosure.

Referring to FIG. 5 , when a command for performing encrypted communication is input, the electronic device 100 establishes a communication connection with the server 200 through the communication interface 110, and the country information corresponding to the electronic device 100 is performed. And a list of key exchange algorithms for encryption of communication may be transmitted to the server 200 (S510). Here, the electronic device 100 may transmit to the server 200 information indicating whether to perform encryption communication based on country-specific encryption communication standards.

The electronic device 100 performs a communication connection with the server 200 through the communication interface 110 to transmit country information corresponding to the server 200 and information about at least one key exchange algorithm selected from the server 200 to the server. It can be received from (200) (S520).

The electronic device 100 determines that at least one key exchange algorithm received from the server 200 through the communication interface 110 corresponds to country information corresponding to the server 200 and country information corresponding to the electronic device 100. If identified, a key exchange operation may be performed using the received at least one key exchange algorithm (S530).

The electronic device 100 may encrypt or decrypt communication using the encryption key obtained by performing the key exchange operation in this way.

According to one embodiment, the method according to various embodiments disclosed in this document may be included and provided in a computer program product. Computer program products may be traded between sellers and buyers as commodities. A computer program product is distributed in the form of a device-readable storage medium (e.g. compact disc read only memory (CD-ROM)), or through an application store (e.g. Play Store™) or on two user devices (e.g. It can be distributed (eg downloaded or uploaded) online, directly between smartphones. In the case of online distribution, at least a part of a computer program product (eg, a downloadable app) is stored on a device-readable storage medium, such as a manufacturer's server, an application store's server, or a relay server's memory. It can be temporarily stored or created temporarily.

Although the preferred embodiments of the present disclosure have been shown and described above, the present disclosure is not limited to the specific embodiments described above, and is common in the technical field belonging to the present disclosure without departing from the gist of the present disclosure claimed in the claims. Of course, various modifications and implementations are possible by those with knowledge of, and these modifications should not be individually understood from the technical spirit or perspective of the present disclosure.

100: electronic device
110: communication interface
120: memory
130: processor
200: server

Claims (14)

In an electronic device for encrypted communication,
a communication interface that establishes a communication connection with the server;
a memory storing at least one instruction; and
a processor to execute the at least one instruction;
the processor,
When a command for performing encrypted communication is input, the country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication are transmitted to the server;
Receiving country information corresponding to the server and information about at least one key exchange algorithm selected in the server from the server;
If it is identified that the at least one key exchange algorithm received from the server corresponds to country information corresponding to the server and country information corresponding to the electronic device, a key exchange operation is performed using the received at least one key exchange algorithm. An electronic device that performs According to claim 1,
the processor,
An electronic device that transmits, to the server, information indicating whether to perform encrypted communication based on country-specific encrypted communication standards. According to claim 1,
the processor,
An electronic device that performs a key exchange operation using a key exchange algorithm received from the server while a key exchange operation of the server is performed using at least one key exchange algorithm selected by the server. According to claim 3,
A session key for encrypting one communication session is
An electronic device comprising a combination of a key exchange result of the server and a key exchange result of the electronic device. In an electronic device for encrypted communication,
a communication interface that establishes a communication connection with the server;
a memory storing at least one instruction; and
a processor to execute the at least one instruction;
the processor,
When a command for performing encrypted communication is input, the country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication are transmitted to the server;
Identifying a first key exchange algorithm corresponding to country information corresponding to the electronic device from the list of key exchange algorithms;
Receiving country information corresponding to the server and information about at least one second key exchange algorithm selected in the server from the server;
Identifying a third key exchange algorithm based on the identified first key exchange algorithm and the second key exchange algorithm received from the server;
An electronic device that performs a key exchange operation using the identified third key exchange algorithm. In the server for encrypted communication,
a communication interface that establishes a communication connection with an electronic device;
a memory storing at least one instruction; and
a processor to execute the at least one instruction;
the processor,
Receive a list of key exchange algorithms for encryption of national information and communications corresponding to the electronic device;
Identifying a key exchange algorithm corresponding to country information corresponding to the received electronic device and country information corresponding to the server among the received key exchange algorithm list;
A server that transmits country information corresponding to the server and information on the identified key exchange algorithm to the electronic device. According to claim 6,
the processor,
Receiving information indicating whether to perform encrypted communication with the electronic device based on country-specific encrypted communication standards;
If it is identified that the electronic device and the electronic device are performing encrypted communication based on country-specific encrypted communication standards, country information corresponding to the received electronic device and country information corresponding to the server among the received key exchange algorithm list A server that identifies key exchange algorithms. A control method of an electronic device for encrypted communication,
transmitting country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication to the server when a command for performing encrypted communication is input;
Receiving country information corresponding to a server and information about at least one key exchange algorithm selected in the server from the server; and
If it is identified that the at least one key exchange algorithm received from the server corresponds to country information corresponding to the server and country information corresponding to the electronic device, a key exchange operation is performed using the received at least one key exchange algorithm. A control method comprising the; According to claim 8,
The sending step is
The control method further comprising transmitting information indicating whether or not to perform encrypted communication based on country-specific encrypted communication standards to the server. According to claim 8,
The step of performing the key exchange operation,
A control method for performing a key exchange operation using a key exchange algorithm received from the server while a key exchange operation of the server is performed using at least one key exchange algorithm selected by the server. According to claim 10,
A session key for encrypting one communication session is
A control method comprising a combination of a key exchange result of the server and a key exchange result of the electronic device. A control method of an electronic device for encrypted communication,
If a command for performing encrypted communication is input, transmitting country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication to a server;
identifying a first key exchange algorithm corresponding to country information corresponding to the electronic device from the list of key exchange algorithms;
Receiving country information corresponding to the server and information about at least one second key exchange algorithm selected in the server from the server;
identifying a third key exchange algorithm based on the identified first key exchange algorithm and the second key exchange algorithm received from the server; and
and performing a key exchange operation using the identified third key exchange algorithm. In the server control method for encrypted communication,
Receiving country information corresponding to the electronic device and a list of key exchange algorithms for encryption of communication;
identifying a key exchange algorithm corresponding to country information corresponding to the electronic device and country information corresponding to the server from among the received key exchange algorithm list; and
and transmitting country information corresponding to the server and information on the identified key exchange algorithm to the electronic device. According to claim 13,
In the receiving step,
Receiving information indicating whether or not to perform encrypted communication with the electronic device based on country-specific encrypted communication standards;
The identification step is
If it is identified that the electronic device and the electronic device are performing encrypted communication based on country-specific encrypted communication standards, country information corresponding to the received electronic device and country information corresponding to the server among the received key exchange algorithm list A control method for identifying key exchange algorithms.

Images