JP2018142955A - Method and system of managing key chain for message end-to-end encryption - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method and system of managing a key chain for message end-to-end encryption.SOLUTION: A key chain management method is performed in a server which provides mutually independent message services to each company for a plurality of companies. The key chain management method includes the steps of: issuing an end-to-end encryption key for electronic equipment that uses a message service of a specified company; and encrypting the end-to-end encryption key by an administrator encryption key that is given to an administrator of the specified company, and storing an encrypted end-to-end encryption key on the server.SELECTED DRAWING: Figure 4

Description

  The following description relates to an end-to-end encryption technique.

  Recent message services go beyond the mere exchange of messages between individuals, and are widely used for extremely diverse applications such as inter-group transmission, personal credit information management, and financial information notification.

  As the use of such messages has increased and their importance has increased, techniques for performing message encryption for message security have become necessary.

  With regard to message encryption, Patent Document 1 (publication date: Feb. 08, 2010), which is a prior art, secures a text message transmitted and received between a transmission-side mobile terminal and a reception-side mobile terminal from being exposed to others. Disclosed is a text message transmission / reception system and method.

  End-to-end encryption, which is one of the message security techniques, is a method of encrypting a message in the whole process rather than storing the message in plain text. For example, communication using a messenger is simply communicated in the form of a client (smartphone) ⇔server⇔client (smartphone). When a user A inputs a message using the smartphone messenger application, the message is transmitted to the user's smartphone messenger application B via the corresponding messenger service server. At this time, end-to-end encryption means that the message is encrypted in the entire area that passes between the smartphone of user A and the smartphone of user B.

  In general, end-to-end encryption manages the encryption key at the personal terminal at the end, so in the case of corporate message services, the security level of the company is monitored, such as monitoring the outflow of confidential information and materials. It has become difficult to manage messages at.

Korean Published Patent Publication No. 2010-0012567

  Provided is a method and system capable of providing a message management environment in an enterprise security dimension for an enterprise message service.

  Provided are a method and system capable of managing end-to-end encryption keys at a server to manage an enterprise message service.

  A key chain management method executed by a server realized by a computer, wherein the server provides a message service independent of each other to a plurality of companies, and the chain management method includes a message of a specific company. Issuing an end-to-end encryption key to an electronic device that uses the service, and encrypting the end-to-end encryption key on the server by an administrator encryption key assigned to an administrator of the specific company A key chain management method including a storing step is provided.

  According to an embodiment of the present invention, in an enterprise message service, an end-to-end encryption key that has been approved by the enterprise administrator at the time when a key for end-to-end encryption is issued is received from the server. By managing with, the company administrator can audit the encrypted messages of users belonging to the company in question using the end-to-end encryption key stored on the server. A message management environment can be provided.

It is the figure which showed the example of the network environment in one Embodiment of this invention. It is a block diagram for demonstrating the internal structure of the electronic device and server in one Embodiment of this invention. It is the figure which showed the example of the component which the processor of the server in one Embodiment of this invention can contain. 6 is a flowchart illustrating an example of a method that can be executed by a server according to an exemplary embodiment of the present invention. It is the figure which showed an example of the process which manages the end-to-end encryption key of the message for enterprises in one Embodiment of this invention. It is the figure which showed the example of the message management environment according to company in one Embodiment of this invention. It is the figure which showed the example of the message management environment according to company in one Embodiment of this invention. It is the figure which showed the example of the message management environment according to company in one Embodiment of this invention. It is the figure which showed the example of the message management environment according to company in one Embodiment of this invention.

<Outline of the invention>
According to one aspect, the issuing step includes receiving an end-to-end encryption key issuance request from the electronic device, requesting the administrator terminal to issue an encryption key issuance, and the administrator When issuance of the encryption key is approved from the terminal, the method may include a step of issuing an end-to-end encryption key for the electronic device.

  According to another aspect, the storing step stores the end-to-end encryption key on the server by matching with user information for identifying at least one of the electronic device and the user of the electronic device. You can do it.

  According to another aspect, the storing step may store the end-to-end encryption key on the server according to the validity of the administrator encryption key according to the validity period.

  According to another aspect, the key chain management method receives an audit request for the electronic device from the administrator's terminal, and uses the administrator encryption key for the audit request. Obtaining the end-to-end encryption key from the server; and providing the administrator terminal with a message encrypted with the end-to-end encryption key among messages transmitted and received through the message service. May include.

  According to another aspect, the step of providing to the administrator's terminal includes a message encrypted by the end-to-end encryption key according to whether the administrator encryption key is valid according to a validity period. May be provided to other terminals.

  According to another aspect, the key chain management method further includes a step of transmitting the acquired end-to-end encryption key to the administrator terminal in response to the audit request. The message encrypted with the end-to-end encryption key may be decrypted with the end-to-end encryption key transmitted in response to the audit request.

  A computer program recorded on a computer-readable recording medium for executing a key chain management method, wherein the key chain management method provides independent message services to a plurality of companies. Issuing an end-to-end encryption key to an electronic device using a message service of a specific company in an environment, and the end-to-end encryption key by an administrator encryption key assigned to an administrator of the specific company A computer program is provided that includes the step of encrypting and storing.

  A computer-implemented key chain management system comprising at least one processor implemented to execute computer-readable instructions, said at least one processor being independent of each other for a plurality of companies In an environment for providing a message service, an end-to-end encryption key is issued to an electronic device that uses a message service of a specific company, and then the termination is performed by an administrator encryption key given to an administrator of the specific company. A key chain management system including a key management unit that encrypts and stores an inter-encryption key is provided.

<Details of the invention>
Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  Embodiments described herein relate generally to a technique for managing a key chain for end-to-end encryption for an enterprise message service.

  In recent message services, end-to-end encryption technology is used, and security for messages is strengthened. In the case of an enterprise message service, central management of the message service is required for auditing and security purposes.

  In this specification, the message service is a service for exchanging messages in various formats such as text, video, audio, etc. between users, such as instant messenger (SNS), social network service (SNS), e-mail. (E-mail), SMS (short message service), MMS (multi-media message service) and the like. Here, the corporate message service means a message service specialized for a company such as an in-house messenger. As an example, a user belonging to the company based on an Internet account related to the company can be used. A service for exchanging messages.

  An embodiment including matters specifically disclosed in the present specification may manage a key chain for end-to-end encryption of enterprise messages in a cloud environment, and provide a message service that meets the requirements of the enterprise. Yes, but this achieves significant advantages in aspects such as improved service quality and utilization, security, efficiency, and cost savings.

  The plurality of electronic devices 110, 120, 130, and 140 may be fixed terminals or mobile terminals that are realized by a computer device. Examples of the plurality of electronic devices 110, 120, 130, and 140 include smartphones, mobile phones, navigation, PCs (personal computers), notebook pancons, digital broadcasting terminals, PDAs (Personal Digital Assistants), and PMPs (Portable Multimedia Players). ) And tablets. As an example, the first electronic device 110 may communicate with other electronic devices 120, 130, 140 and / or servers 150, 160 via the network 170 using a wireless or wired communication method.

  The communication method is not limited, and not only a communication method using a communication network (for example, a mobile communication network, a wired Internet, a wireless Internet, a broadcast network) that can be included in the network 170, but also a short distance between devices. Wireless communication may be included. For example, the network 170 includes a PAN (personal area network), a LAN (local area network), a MAN (metropolitan area network, etc.), a WAN (wide area network, etc.), a WAN (wide area network, etc.), and a WAN (wide area network, etc.). One or more of any of the networks may be included. Further, network 170 may include any one or more of network topologies including, but not limited to, bus networks, star networks, ring networks, mesh networks, star-bus networks, tree or hierarchical networks, and the like. It will never be done.

  Each of the servers 150 and 160 is realized by a computer device or a plurality of computer devices that communicate with a plurality of electronic devices 110, 120, 130, and 140 via a network 170 to provide instructions, codes, files, contents, services, and the like. It's okay.

  As an example, the server 160 may provide a file for installing an application to the first electronic device 110 connected via the network 170. In this case, the first electronic device 110 may install an application using a file provided from the server 160. In addition, a service provided by the server 150 by connecting to the server 150 according to control of an operating system (OS) included in the first electronic device 110 and at least one program (for example, a browser and the installed application). And may be provided with content. For example, when the first electronic device 110 transmits a service request message to the server 150 via the network 170 according to application control, the server 150 may transmit a code corresponding to the service request message to the first electronic device 110. The first electronic device 110 may provide content to the user by configuring and displaying a screen based on the code according to the control of the application.

  FIG. 2 is a block diagram for explaining the internal configuration of the electronic device and the server in one embodiment of the present invention. In FIG. 2, an internal configuration of the first electronic device 110 will be described as an example for one electronic device, and an internal configuration of the server 150 will be described as an example for one server. Other electronic devices 120, 130, 140 and server 160 may also have the same or similar internal configuration.

  The first electronic device 110 and the server 150 may include memories 211 and 221, processors 212 and 222, communication modules 213 and 223, and input / output interfaces 214 and 224. The memories 211 and 221 are computer-readable recording media, and include a RAM (Random Access Memory), a ROM (Read Only Memory), and a permanent mass storage device (permanent mass storage device) such as a disk drive. It's okay. The memories 211 and 221 may store an operating system and at least one program code (for example, a code for an application installed and driven in the first electric device 110). Such software components may be loaded from a computer-readable recording medium different from the memories 211 and 221. Such another computer-readable recording medium may include a computer-readable recording medium such as a floppy (registered trademark) drive, a disk, a tape, a DVD / CD-ROM drive, and a memory card. In another embodiment, the software component may be loaded into the memories 211 and 221 through the communication modules 213 and 223 that are not computer-readable recording media. For example, at least one program is a program (for example, as described above) that is installed by a file provided by a file distribution system (for example, the server 160 described above) that distributes an installation file of a developer or an application via the network 170. May be loaded into the memory 211, 221 based on the application.

  The processors 212, 222 may be configured to process computer program instructions by performing basic arithmetic, logic, and input / output operations. The instructions may be provided to the processors 212, 222 by the memories 211, 221 or the communication modules 213, 223. For example, the processors 212, 222 may be configured to execute instructions received according to program code stored in a recording device such as the memories 211, 221.

  The communication modules 213 and 223 may provide a function for the first electronic device 110 and the server 150 to communicate with each other via the network 170, or other electronic devices (for example, the electronic device 2 (120)). ) Or other server (for example, server 160) may be provided. As an example, a request (for example, a search request) generated by the processor 212 of the first electronic device 110 according to a program code stored in a recording device such as the memory 211 is transmitted via the network 170 according to the control of the communication module 213. May be transmitted to the server 150. On the other hand, control signals, commands, contents, files, etc. provided in accordance with the control of the processor 222 of the server 150 are transmitted through the communication module 223 and the network 170 through the communication module 213 of the first electronic device 110 to the first electronic device. It may be received by the device 110. For example, the control signal or command of the server 150 received by the communication module 213 may be transmitted to the processor 212 or the memory 211, and the content and file are stored in a storage medium that can be further included in the first electronic device 110. It may be stored.

  Input / output interfaces 214, 224 may be a means for interfacing with input / output devices 215. For example, the input device may include a device such as a keyboard or mouse, and the output device may include a device such as a display for displaying an application communication session. As another example, the input / output interface 214 may be a means for interfacing with a device that integrates functions for input and output, such as a touch screen. As a more specific example, the processor 212 of the first electronic device 110 is configured using data provided by the server 150 or the second electronic device 120 when processing instructions of the computer program loaded in the memory 211. Service screens and contents may be displayed on the display through the input / output interface 214.

  In other embodiments, the first electronic device 110 and the server 150 may include more components than the components of FIG. However, most prior art components need not be clearly illustrated in the figure. For example, the first electronic device 110 may be realized so as to include at least a part of the input / output device 215 described above, a transceiver, a GPS (Global Positioning System) module, a camera, various sensors, a database, and the like. It may further include other components such as As a more specific example, when the first electronic device 110 is a smartphone, generally an acceleration sensor or gyro sensor included in the smartphone, a camera, various physical buttons, buttons using a touch panel, an input / output port It will be appreciated that various components such as a vibrator for vibration may be further included in the first electronic device 110.

  In the following, a specific embodiment of a method and system for managing a key chain for end-to-end encryption of enterprise messages will be described.

  FIG. 3 is a diagram illustrating an example of components that can be included in the processor of the server according to the embodiment of the present invention. FIG. 4 is a diagram that can be executed by the server according to the embodiment of the present invention. It is the flowchart which showed the example of the method.

  The server 150 serves as a platform for providing a message service to a plurality of electronic devices 110, 120, 130, and 140 that are clients. Here, the server 150 provides a message service specialized for each company for a plurality of companies, and may provide a message service having an independent structure that does not infringe between the companies. The key chain for end-to-end encryption of enterprise messages may be managed in a cloud environment as a central management server for message services for a plurality of enterprises.

  As shown in FIG. 3, the processor 222 of the server 150 may include a key management unit 310 and a message management unit 320 as components. Such processor 222 and components of processor 222 may control server 150 to perform steps S410-S440 included in the method of FIG. At this time, the processor 222 and the components of the processor 222 may be implemented so as to execute an instruction based on an operating system code included in the memory 221 and at least one program code. Further, the components of the processor 222 may be expressions of different functions executed by the processor 222 in accordance with control instructions provided by the operating system or at least one program. For example, the key management unit 310 may be used as a functional expression for the processor 222 to manage the end-to-end encryption key according to the control command described above.

  In step S410, the key management unit 310 responds to the request for issuing the end-to-end encryption key from the first electronic device 110 that uses the message service of the specific company, and the second electronic terminal is an administrator terminal associated with the company. When the approval is received from the device 120, an end-to-end encryption key for the first electronic device 110 may be generated. In other words, when the key management unit 310 receives a request for issuing an encryption key for a corporate message from the first electronic device 110, the key management unit 310 sends the first electronic device to the manager terminal of the corresponding enterprise, that is, the second electronic device 120. 110 may request approval of issuance of an encryption key for 110. At this time, if approval for issuance of an encryption key is received from the second electronic device 120, an end-to-end encryption key for the first electronic device 110 is generated. Good. Accordingly, the key management unit 310 generates a key for end-to-end encryption of a message exchanged through the enterprise message service by the first electronic device 110 upon approval from the corresponding enterprise administrator.

  In step S420, the key management unit 310 encrypts the end-to-end encryption key generated in step S410 with the administrator encryption key of the corresponding company administrator, and the encrypted end-to-end encryption key is stored in the server. It may be stored in a key chain database, which is a database associated with 150. The key management unit 310 may receive an administrator encryption key that is a unique key given in advance to the company administrator from the second electronic device 120 when the company administrator approves the issuance of the encryption key. The end-to-end encryption key generated in step S410 may be encrypted with the administrator encryption key and stored in the key chain database. Here, the key chain database may be realized as a component included in the server 150 or may be realized on another system connected to the server 150. That is, the key management unit 310 stores and manages the end-to-end encryption key of the electronic device that uses the message service of a specific company by using the administrator encryption key of the corresponding company administrator when the key is issued. become. The key management unit 310 identifies the first electronic device and / or the user of the first electronic device with the end-to-end encryption key of the first electronic device 110 encrypted with the administrator encryption key of the company administrator. The user information (for example, ID etc.) may be matched and stored. At this time, the key management unit 310 determines the validity of the administrator encryption key based on the validity period assigned to the administrator encryption key, and stores and manages the end-to-end encryption key if it is valid. It's okay. In addition, the key management unit 310 may transmit the end-to-end encryption key generated in step S410 to the first electronic device 110 in response to a request for issuing the end-to-end encryption key from the first electronic device 110. The first electronic device 110 may encrypt and transmit a message created by the user with an end-to-end encryption key issued with the approval of the company administrator. Messages encrypted with the end-to-end encryption key in the enterprise message service may be stored in a message database that is a database associated with the server 150. Here, the message database may be realized as a component included in the server 150 or may be realized on another system connected to the server 150.

  In step S430, when the audit request for the first electronic device 110 is received from the company administrator, the key management unit 310 uses the administrator encryption key of the company administrator to generate the first request from the key chain database. The end-to-end encryption key of the electronic device 110 may be acquired. The audit request may include user information for identifying the first electronic device and / or the user of the first electronic device together with the administrator encryption key of the company administrator. Of the end-to-end encryption keys stored in the key chain database and encrypted with the administrator encryption key of the company manager, the key management unit 310 corresponds to the end-to-end encryption key corresponding to the user information, that is, the first end key. The end-to-end encryption key of the electronic device 110 may be acquired. At this time, the key management unit 310 decrypts the end-to-end encryption key of the first electronic device 110 stored in an encrypted state with the administrator encryption key of the company administrator, and decrypts the second electronic of the company administrator. It may be transmitted to the device 120.

  In step S440, the message manager 320 accesses the message database in response to the audit request from the company manager, and manages the message encrypted by the end-to-end encryption key of the first electronic device 110 acquired in step S430. The second electronic device 120 may be provided. At this time, the second electronic device 120 of the company administrator may decrypt the message using the end-to-end encryption key of the first electronic device 110, so that the company administrator can check the message content of the corresponding user. become. Therefore, the server 150 checks the end-to-end encryption key stored in the keychain database by the company administrator in response to the audit request of the company manager for the user who uses the message service for the company, and encrypts the corresponding user. Access rights to the received messages may be provided to the enterprise administrator, which allows the enterprise administrator to audit and manage messages exchanged by the user through the enterprise message service. Message auditing may also provide a company administrator with access rights to a user's encrypted message, depending on whether the administrator encryption key is valid or not.

  FIG. 5 is a diagram illustrating an example of a process for managing an end-to-end encryption key of an enterprise message according to an embodiment of the present invention.

  As shown in FIG. 5, the key management unit 310 responds to a request for issuing an end-to-end encryption key (S11) on the user side (ie, the first electronic device) 110 (ie, the second electronic device). ) When an administrator encryption key (master_key) based on the approval of the encryption key issuance is received from 120 (S12), an end-to-end encryption key (user_key) on the user side 110 may be generated (S13).

  At this time, the key management unit 310 encrypts the end-to-end encryption key (user_key) of the user side 110 with the administrator encryption key (master_key), thereby encrypting the end-to-end encryption key (master_key) in an encrypted state. , User_key) may be stored in the key chain database (S14). Further, the key management unit 310 may transmit the end-to-end encryption key (user_key) generated in step S13 to the user side 110 in response to a request for issuing the end-to-end encryption key from the user side 110 (S15). .

  On the user side 110, the message is encrypted by the end-to-end encryption key (user_key) issued by the approval of the company administrator side 120, and then encrypted by the end-to-end encryption key (user_key) on the message database. The received message (user_key, message) may be stored (S21).

  Thereafter, when an audit request for the user side 110 is received together with the administrator encryption key (master_key) from the company administrator side 120 (S31), the key management unit 310 receives the end-to-end encryption of the user side 110 from the key chain database. After obtaining the encryption key (user_key) (S32), the end-to-end encryption key (user_key) on the user side 110 is decrypted with the administrator encryption key (master_key) (S33) and transmitted to the company administrator side 120. Good (S34).

  Accordingly, the company administrator side 120 may obtain the end-to-end encryption key (user_key) of the user side 110 from the key management unit 310 and access the message database, and the end-to-end encryption key (user_key) of the user side 110 may be accessed. ) May be decrypted and audited (S35).

  As described above, by centrally managing the key chain for end-to-end encryption of enterprise messages with the server 150 in the cloud environment, a message management environment in the enterprise security dimension can be provided.

  6 to 9 are diagrams showing examples of message management environments according to companies in an embodiment of the present invention.

  A user named alice and a user named bob belong to a company called foo, and a corporate message service called @foo is used. A user named carol and a user named dave belong to a company called bar, and a corporate message service called @bar is used. Assume that.

  Referring to FIG. 6, when a foo company's alice and bob want to use the @foo message service, first, an application for a key issuance for end-to-end encryption is made from the alice terminal to the server 150 (S601). In response to this, the key management unit 310 may request and receive a key issue approval for alice from an administrator (admin) of a foo company (S602).

  When the foo company manager approves the issuance of the encryption key, the key management unit 310 may issue the end-end encryption key (Ka) of alice, but at this time, it is issued by the approval of the foo company manager. Also, the end-to-end encryption key (Ka) of alice may be encrypted with the administrator encryption key (#foo) (Ka # foo) and stored in the key chain database (S603).

  The key management unit 310 may transmit the end-to-end encryption key (Ka) of the alice issued by the approval of the foo company manager to the alice terminal in response to the application for issuing the encryption key on the alice side (S604). ).

  The end-to-end encryption key issuing processes S 605 to S 608 for bob are the same as the processes S 601 to S 604 described above.

  When the message service is used between alice and bob after the end-to-end encryption key issuance process S601 to S608 for alice and bob is completed, the end-to-end encryption issued by foo company manager on the side of alice and bob The message may be sent and received by encrypting the message with the encryption key (Ka, Kb) (S609 to S610), whereby the message management unit 320 is encrypted with the end-to-end encryption key (Ka, Kb) of alice and bob. Messages may be stored in a message database.

  Referring to FIG. 7, when carol and dave of a bar company intend to use the @bar message service, first, a request for issuing a key for end-to-end encryption is made from the carol side terminal to the server 150 side (S701). Accordingly, the key management unit 310 may request and receive a key issuance approval for carol from the manager (admin) of the bar company (S702).

  The key management unit 310 may issue a carol end-to-end encryption key (Kc) when the bar company administrator approves the issuance of the encryption key. At this time, the key management unit 310 is issued by the approval of the bar company administrator. The end-to-end encryption key (Kc) of carol may be encrypted with the administrator encryption key (#bar) (Kc # bar) and stored in the key chain database (S703).

  In response to the application for issuing the encryption key on the carol side, the key management unit 310 may transmit the end-to-end encryption key (Kc) of carol issued by the approval of the bar company administrator to the terminal on the carol side (S704). ).

  The processes S705 to S708 for issuing the end-to-end encryption key for the “dave” are the same as the processes S701 to S704 described above.

  After the end-to-end encryption key issuance process S701 to S708 for carol and dave is completed, when using the message service between carol and dave, the end-to-end issued by bar company administrator on the side of carol and dave The message may be transmitted / received by encrypting the message with the encryption key (Kc, Kd) (S709 to S710), whereby the message management unit 320 is encrypted with the end-to-end encryption key (Kc, Kd) of carol and dave. Messages may be stored in a message database.

  After this, the manager of the foo company may audit the messages exchanged between alice and bob through the @foo message service, and the manager of the bar company exchanges between carol and dave through the @bar message service. Messages may be audited.

  Describing in detail with reference to FIG. 8, when a message audit request between alice and bob is received from the administrator of the foo company (S801), the key management unit 310 uses the administrator encryption key (#foo). Get the end-to-end encryption key (Ka) of alice and the end-to-end encryption key (Kb) of bob from the end-to-end encryption keys (Ka # foo, Kb # foo) stored in the encrypted keychain database May be transmitted to the manager of the foo company (S802).

  When the manager of the foo company accesses the message exchanged between alice and bob using the end-to-end encryption keys (Ka, Kb) of alice and bob acquired from the key management unit 310, A message encrypted with the end-to-end encryption keys (Ka, Kb) of alice and bob may be provided, and the administrator of the foo company encrypts with the end-to-end encryption keys (Ka, Kb) of alice and bob The encrypted message may be decrypted and audited (S803).

  Referring to FIG. 9, when a message audit request between carol and dave is received from the manager of the bar company (S901), the key management unit 310 encrypts the message using the administrator encryption key (#bar). The end-to-end encryption key (Kc) of carol and the end-to-end encryption key (Kd) of dave are obtained from the end-to-end encryption keys (Kc # bar, Kd # bar) stored in the generated keychain database. The information may be transmitted to the manager of the company (S902).

  When the manager of the bar company accesses the message exchanged between carol and dave using the end-to-end encryption keys (Kc, Kd) of carol and dave acquired from the key manager 310, The message encrypted by the end-to-end encryption keys (Kc, Kd) of carol and dave may be provided, and the manager of the bar company encrypts by the end-to-end encryption keys (Kc, Kd) of carol and dave The encrypted message may be decrypted and audited (S903).

  In this way, the @foo message service and the @bar message service have independent structures that do not infringe each other by the message service used in different companies, while the administrator of each company makes it between the end of the message for the company. In a cloud environment in which the encryption key is centrally managed by the server 150, it is possible to audit and manage the encrypted messages of users belonging to the company.

  As described above, according to the embodiment of the present invention, the end-to-end encryption approved by the company administrator is approved by the company administrator when the key for end-to-end encryption is issued in the enterprise message service. By managing the encryption key on the server, the company administrator can audit the encrypted messages of the users belonging to the company using the end-to-end encryption key stored on the server. A message management environment in the security dimension can be provided.

  The apparatus described above may be realized by hardware components, software components, and / or a combination of hardware and software components. For example, the apparatus and components described in the embodiments include a processor, a controller, an ALU (arithmetic logic unit), a digital signal processor, a microcomputer, an FPGA (field programmable gate array), a PLU (programmable logic unit), a microprocessor, Or it may be implemented using one or more general purpose or special purpose computers, such as various devices capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the OS. The processing device may also respond to software execution, access data, and store, manipulate, process, and generate data. For convenience of understanding, one processing device may be described as being used, but those skilled in the art may include a plurality of processing elements and / or multiple types of processing elements. You can understand. For example, the processing device may include a plurality of processors or a processor and a controller. Other processing configurations such as parallel processors are also possible.

  The software may include computer programs, code, instructions, or a combination of one or more of these, configuring the processor to operate as desired, or instructing the processor independently or collectively. You may do it. Software and / or data may be embodied on any type of machine, component, physical device, virtual device, computer storage medium or device to be interpreted based on the processing device or to provide instructions or data to the processing device. May be used. The software may be distributed over computer systems connected by a network and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

  The method according to the embodiment may be realized in the form of program instructions executable by various computer means and recorded on a computer-readable medium. At this time, the medium may continuously store a computer-executable program, or may be temporarily stored for execution or download. Further, the medium may be various recording means or storage means in a form in which a single piece or a plurality of pieces of hardware are combined. However, the medium is not limited to a medium that is directly connected to a computer system, but is distributed over a network. May exist. Examples of the medium include a magnetic medium such as a hard disk, a floppy (registered trademark) disk, and a magnetic tape, an optical medium such as a CD-ROM and a DVD, a magneto-optical medium such as a floppy disk, Further, it may be configured to store program instructions including ROM, RAM, flash memory, and the like. Other examples of the medium may be an application store that distributes applications, a site that supplies or distributes various other software, a recording medium that is managed by a server, or a storage medium.

  As mentioned above, although embodiment was described based on limited embodiment and drawing, those skilled in the art will be able to perform various correction and deformation | transformation from the above-mentioned description. For example, the described techniques may be performed in a different order than the described method and / or components of the described system, structure, apparatus, circuit, etc. may be different from the described method. Appropriate results can be achieved even when combined or combined, or opposed or replaced by other components or equivalents.

  Accordingly, even different embodiments belong to the appended claims as long as they are equivalent to the claims.

222: Processor 310: Key management unit 320: Message management unit

Claims (15)

A keychain management method executed on a server realized by a computer,
The server provides a message service independent of each other for a plurality of companies,
The key chain management method is:
Issuing an end-to-end encryption key for an electronic device using a message service of a specific company; and encrypting the end-to-end encryption key with an administrator encryption key given to an administrator of the specific company A keychain management method that includes the step of storing above. The issuing step includes:
Receiving a request for issuing an end-to-end encryption key from the electronic device;
Requesting the administrator's terminal to issue an encryption key, and issuing an end-to-end encryption key for the electronic device when the administrator's terminal approves the encryption key issuance. The key chain management method according to claim 1. The storing step includes
2. The end-to-end encryption key is stored on the server by matching with user information for identifying at least one of the electronic device and a user of the electronic device. Keychain management method. The storing step includes
The key chain management method according to claim 1, wherein the end-to-end encryption key is stored on the server in accordance with whether or not the administrator encryption key is valid according to a validity period. The key chain management method is:
Receiving an audit request for the electronic device from the administrator terminal;
In response to the audit request, obtaining the end-to-end encryption key from the server using the administrator encryption key, and encrypting with the end-to-end encryption key among messages transmitted and received through the message service The key chain management method according to claim 1, further comprising: providing a converted message to the administrator's terminal. Providing to the administrator's terminal comprises:
The key according to claim 5, wherein a message encrypted by the end-to-end encryption key is provided to the administrator's terminal according to whether or not the administrator encryption key is valid according to a validity period. Chain management method. The key chain management method is:
In response to the audit request, further comprising the step of transmitting the acquired end-to-end encryption key to the administrator's terminal,
The terminal of the administrator decrypts a message encrypted by the end-to-end encryption key using the end-to-end encryption key transmitted in response to the audit request. Keychain management method. A computer program recorded on a computer readable recording medium for executing a key chain management method,
The key chain management method is:
In an environment that provides independent message services to multiple companies,
Issuing an end-to-end encryption key to an electronic device using a message service of a specific company; and encrypting the end-to-end encryption key with an administrator encryption key assigned to an administrator of the specific company A computer program that includes a storing step. A key chain management system realized by a computer,
Including at least one processor implemented to execute computer readable instructions;
The at least one processor comprises:
In an environment where a message service that is independent of each other is provided to a plurality of companies, an end-to-end encryption key is issued to an electronic device that uses the message service of a specific company, and then given to the administrator of the specific company. A key chain management system comprising: a key management unit that encrypts and stores the end-to-end encryption key with an administrator encryption key. The key management unit
When a request to issue an end-to-end encryption key is received from the electronic device, the administrator terminal is requested to issue an encryption key issuance approval, and the administrator terminal is approved to issue an encryption key. The key chain management system according to claim 9, wherein an end-to-end encryption key is issued to the electronic device. The key management unit
The key chain management according to claim 9, wherein the end-to-end encryption key is stored by matching with user information for identifying at least one of the electronic device and a user of the electronic device. system. The key management unit
The key chain management system according to claim 9, wherein the end-to-end encryption key is stored according to whether the administrator encryption key is valid according to a validity period. The key management unit
When receiving an audit request for the electronic device from the administrator's terminal, the end-to-end encryption key is acquired using the administrator encryption key in response to the audit request;
The at least one processor comprises:
10. The key chain management system according to claim 9, further comprising: a message management unit that provides a message encrypted with the end-to-end encryption key among messages transmitted and received through the message service to the administrator terminal. The message manager is
14. The key according to claim 13, wherein a message encrypted by the end-to-end encryption key is provided to the administrator terminal according to whether or not the administrator encryption key is valid according to a validity period. Chain management system. The key management unit
In response to the audit request, the obtained end-to-end encryption key is transmitted to the administrator's terminal,
14. The administrator terminal according to claim 13, wherein the administrator terminal decrypts the message encrypted by the end-to-end encryption key using the transmitted end-to-end encryption key in response to the audit request. Keychain management system.

Images