Abstract: A smart badge of the present invention comprises a communication unit capable of performing wireless communication, an OTP (one-time password) storage unit configured to store therein OTP information for generating one-time password (OTP), a display unit configured to display information, an image storage unit configured to store therein at least two images to be displayed on the display unit, a personal information storage unit configured to store therein user's personal information, an input unit that is to be used for selecting an image to be displayed on the display unit, and a control unit configured to control the respective constitutional elements.

Abstract: A method of transferring a rights object (RO) and an electronic device are provided. The method includes generating a secure RO by encrypting an RO including usage rights information regarding digital content and transferring the secure RO from a first device to a second device.

Abstract: There are provided a device for detecting a cyber attack and a method thereof. The device for detecting a cyber attack includes an event receiving unit configured to receive an event generated in at least one user terminal according to a behavior of a user who accesses a web server and uses web services provided from a web page, a model generating unit configured to generate an event model by extracting an event pattern corresponding to a behavior of the user based on the received event, and an attack detecting unit configured to detect whether access of the web server by a specific user terminal is an attack by comparing the event model with an event received from the specific user terminal. Therefore, various forms of cyber attacks are rapidly and accurately detected, and it is possible to provide a security service having high availability and reliability.

Abstract: Disclosed is a technology related to a method of generating an OTP and an apparatus for performing the same. The method includes receiving user secret information that is input according to execution of a process of providing an OTP; authenticating the user secret information by generating a response value based on the received user secret information and a challenge value received from a user verification apparatus, and transmitting the response value to the user verification apparatus; and generating an OTP using at least one of the user secret information, the challenge value and the response value as the user secret information is authenticated, thereby effectively dealing with loss or appropriation of a user terminal and also improving the security of an OTP.

Abstract: A method for issuing a certificate signing request (CSR) certificate in a vehicle-to-anything (V2X) communication environment includes: receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle; determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and determining, by the second server, whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.

Abstract: A method of transferring a rights object (RO) and an electronic device are provided. The method includes generating a secure RO by encrypting an RO including usage rights information regarding digital content and transferring the secure RO from a first device to a second device.

Abstract: A method for issuing a reliable certificate to a vehicle for a vehicle-to-anything (V2X) communication in a server on a network comprises receiving a certificate issue request including vehicle identification information and road-side unit (RSU) identification information from an RSU. Log information for the certificate issue request is extracted from a database. Normality or abnormality is determined according to whether a predetermined certificate issue criteria is satisfied by analyzing the certificate issue request and the log information. The certificate is issued and the certificate is transmitted to a vehicle communication module according to determination of normality, or certificate revocation information is registered according to determination of abnormality.

Abstract: A method for issuing a certificate signing request (CSR) certificate in a vehicle-to-anything (V2X) communication environment includes: receiving, at a first server, a certificate issuance request message including vehicle identification information transmitted from a communication module of the vehicle; determining, by a second server, whether a CSR certificate corresponding to the vehicle identification information has already been issued with reference to a database; and determining, by the second server, whether to issue the corresponding CSR certificate or whether to generate an error message, based on the determination of whether the corresponding CSR certificate has already been issued.

Abstract: A device and a portable storage device which are capable of transferring a rights object (RO) and a method of transferring an RO are provided. The method includes enabling a device to transmit an installation request message to a portable storage device for installing a copy of an original RO present in the device in the portable storage device, enabling the device to install the copy of the original RO in the portable storage device, and enabling the device to receive an installation response message indicating that the copy of the original RO has been successfully installed in the portable storage device from the portable storage device.

Abstract: A device and a portable storage device which are capable of transferring a rights object (RO) and a method of transferring an RO are provided. The method includes enabling a device to transmit an installation request message to a portable storage device for installing a copy of an original RO present in the device in the portable storage device, enabling the device to install the copy of the original RO in the portable storage device, and enabling the device to receive an installation response message indicating that the copy of the original RO has been successfully installed in the portable storage device from the portable storage device.

Abstract: Disclosed is a technology related to a method of generating an OTP and an apparatus for performing the same. The method includes receiving user secret information that is input according to execution of a process of providing an OTP; authenticating the user secret information by generating a response value based on the received user secret information and a challenge value received from a user verification apparatus, and transmitting the response value to the user verification apparatus; and generating an OTP using at least one of the user secret information, the challenge value and the response value as the user secret information is authenticated, thereby effectively dealing with loss or appropriation of a user terminal and also improving the security of an OTP.

Abstract: Provided are an apparatus and method for providing a genuine certification service. The apparatus includes a certification information issuing unit configured to issue genuine certification information including at least one piece of certification chip identification (ID) information, product ID information, certification secret information, and certification verification information to a verification target product in response to an issuance request by a terminal operated by a producer of the verification target product, and a genuine certification executing unit configured to verify validity of the genuine certification information issued to the verification target product and execute genuine certification for the verification target product using the genuine certification information of which the validity is verified in response to a certification request by the terminal operated by the producer of the verification target product.

Abstract: There are provided a device for detecting a cyber attack and a method thereof. The device for detecting a cyber attack includes an event receiving unit configured to receive an event generated in at least one user terminal according to a behavior of a user who accesses a web server and uses web services provided from a web page, a model generating unit configured to generate an event model by extracting an event pattern corresponding to a behavior of the user based on the received event, and an attack detecting unit configured to detect whether access of the web server by a specific user terminal is an attack by comparing the event model with an event received from the specific user terminal. Therefore, various forms of cyber attacks are rapidly and accurately detected, and it is possible to provide a security service having high availability and reliability.

Abstract: There are provided a device for determining a counterfeit and a method thereof. The device for determining a counterfeit includes a certification information receiving unit configured to receive certification identification information including at least one piece of certification chip identification information, product identification information, and certification verification information of a verification target product and state information of a device for performing genuine product certification from the device for performing genuine product certification, and a counterfeit determining unit configured to determine a counterfeit based on the received certification identification information or the state information of the device for performing genuine product certification. Therefore, genuine product certification of the verification target product is verified. As a result, it is possible to effectively protect intellectual property rights of producers and easily and accurately determine a counterfeit.

Abstract: A device and a portable storage device which are capable of transferring a rights object (RO) and a method of transferring an RO are provided. The method includes enabling a device to transmit an installation request message to a portable storage device for installing a copy of an original RO present in the device in the portable storage device, enabling the device to install the copy of the original RO in the portable storage device, and enabling the device to receive an installation response message indicating that the copy of the original RO has been successfully installed in the portable storage device from the portable storage device.

Abstract: A device and a portable storage device which are capable of transferring a rights object (RO) and a method of transferring an RO are provided. The method includes enabling a device to transmit an installation request message to a portable storage device for installing a copy of an original RO present in the device in the portable storage device, enabling the device to install the copy of the original RO in the portable storage device, and enabling the device to receive an installation response message indicating that the copy of the original RO has been successfully installed in the portable storage device from the portable storage device.

Abstract: An apparatus and method are provided for securely managing security data between a host device and a secure multimedia card. A host device includes an access mode setting unit which sets an access mode for security data that is stored in a secure multimedia card, a transmitting and receiving unit which transmits an access request message that includes the set access mode, and an access information managing unit which receives, if connection between the host device and the secure multimedia card is separated, access information stored in the secure multimedia card, and compares the access information.

Abstract: A device and a portable storage device which are capable of transferring a rights object (RO) and a method of transferring an RO are provided. The method includes enabling a device to transmit an installation request message to a portable storage device for installing a copy of an original RO present in the device in the portable storage device, enabling the device to install the copy of the original RO in the portable storage device, and enabling the device to receive an installation response message indicating that the copy of the original RO has been successfully installed in the portable storage device from the portable storage device.

Abstract: Disclosed are a method and apparatus for efficiently providing a location of a contents encryption key. A method of efficiently providing a location of a contents encryption key according to an embodiment of the present invention includes generating metadata containing information regarding a location of a contents encryption key in a rights object, and setting the generated metadata and the rights object in a portable storage device.

Abstract: Provided are a digital rights management (DRM) method and apparatus, and more particularly, a DRM method and apparatus which can support different DRMs and use various digital content. The DRM method includes receiving a hello message request from a host device; comparing information included in the hello message request to information stored in advance; generating an error code when the hello message request contains unsupported information; and generating a hello message response that contains the error code.