KR20170111152A - Apparatus and method for contents sharing based on the social trust - Google Patents

Abstract

A trust-based content sharing apparatus and method are disclosed. The trust-based content sharing apparatus according to the present invention includes an information collecting unit that receives user information and terminal information from at least one of a sender terminal, a receiver terminal, and a service providing apparatus; A trust relationship confirmation unit for confirming a trust relationship corresponding to the recipient and the sender and for comparing a trust level of the receiver with a threshold value; And a decryption key allocator for delivering a decryption key corresponding to the content to the receiver terminal, wherein the service provider apparatus relays the sender terminal and the receiver terminal to provide the content sharing service .

Description

[0001] APPARATUS AND METHOD FOR CONTENTS SHARING BASED ON THE SOCIAL TRUST [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technology for sharing contents based on a trust relationship between a sender and a receiver, and more particularly, to a receiver for confirming and using the content based on a trust relationship between an original content sharer or a first- Lt; / RTI >

The digital contents industry is expanding due to the increase of interactive communication such as the spread of online video, the spread of mobile terminals, and social network services. In addition, as the spread of smartphones and the proliferation of the Internet have made it possible for the majority of devices to use the Internet, the proportion of content consumption through the wired and wireless Internet has also surged.

As a result, users can create, register, or share information such as images, photographs, and text anytime and anywhere. In addition, the expansion of media services, such as social network services, enables content to be shared and delivered to a large number of users in a short period of time.

However, due to the simple transmission and sharing of contents, contents that are different from the intention of the original creator or the sharer who produced the contents are exposed to third parties and used.

In order to prevent the harmfulness of such a social network, Snapchat of the United States and Franklin Messenger of the domestic SKT automatically delete the letters and files sent by the sender from the receiver terminal after a predetermined time, As shown in FIG.

In recent years, trust and trust have been analyzed and managed using user behavior data or user relationship data in Europe and the United States. Prior studies on various services using trust information have been conducted in several areas such as offices, schools, and automobiles .

Therefore, it is necessary to develop a technology for sharing contents based on the trust relationship between users.

Korean Patent Publication No. 10-2014-0076667, published on June 23, 2014 (name: trust-based social media sharing system)

SUMMARY OF THE INVENTION An object of the present invention is to provide a trust-based content sharing and outflow blocking service that can prevent leakage of private contents and smoothly perform services.

It is also an object of the present invention to minimize the inconvenience that the user feels due to encryption and decryption by automatically encrypting or decrypting the content according to the result of the trust relationship determination.

It is also an object of the present invention to prevent damages to unintentional disclosure of private contents to a third party.

According to an aspect of the present invention, there is provided an apparatus for sharing content based on trust, comprising: an information collecting unit for receiving user information and terminal information from at least one of a sender terminal, a receiver terminal and a service providing apparatus; A trust relationship confirmation unit for confirming a trust relationship corresponding to the recipient and the sender and comparing the trust level of the receiver with a threshold value, And a decryption key assigning unit for delivering a decryption key corresponding to the content to the recipient terminal when the received content is equal to or greater than the threshold value, wherein the service providing apparatus relays the sender terminal and the recipient terminal, Special offer It shall be.

The method may further include the steps of receiving user information and terminal information from at least one of a sender terminal, a recipient terminal, and a service providing device, The method comprising the steps of: receiving a trust relationship confirmation request from the recipient terminal having received content from a terminal; confirming a trust relationship corresponding to the recipient and the sender; comparing the trust level of the recipient with a threshold; And transmitting the decryption key corresponding to the content to the recipient terminal when the level is equal to or greater than the threshold value, wherein the service providing apparatus relays the sender terminal and the recipient terminal, .

According to the present invention, it is possible to provide a trust-based content sharing and outflow blocking service that can block the outflow of private content and smoothly perform the service.

According to the present invention, it is possible to minimize the inconvenience that the user feels due to encryption and decryption by automatically encrypting or decrypting the content according to the result of the trust relationship determination.

Further, according to the present invention, it is possible to prevent damage that private contents are unintentionally disclosed to a third party.

FIG. 1 is a diagram schematically illustrating an environment to which a trust-based content sharing apparatus according to an embodiment of the present invention is applied.
2 is a block diagram illustrating a configuration of a trust-based content sharing apparatus according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a trust-based content sharing method according to an embodiment of the present invention.
4 is a flowchart illustrating an operation of a trust-based content sharing system according to an embodiment of the present invention.
5 is a block diagram illustrating a computer system in accordance with one embodiment of the present invention.

The present invention will now be described in detail with reference to the accompanying drawings. Hereinafter, a repeated description, a known function that may obscure the gist of the present invention, and a detailed description of the configuration will be omitted. Embodiments of the present invention are provided to more fully describe the present invention to those skilled in the art. Accordingly, the shapes and sizes of the elements in the drawings and the like can be exaggerated for clarity.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram schematically illustrating an environment to which a trust-based content sharing apparatus according to an embodiment of the present invention is applied.

1, the trust-based content sharing system includes a sender terminal 110, an authorized recipient terminal 120, a first unauthorized recipient terminal 130, a second unauthorized recipient terminal 140, And a content sharing device 200. [

The content-based content sharing device 200 may include a file sharing service such as a social network service (SNS), e-mail, P2P, or the like. Alternatively, the content- As shown in FIG.

The sender terminal 110 refers to a content creator who has produced or created a content, or a terminal possessed by a sender who wants to share the content. Here, the sender means a user who wishes to transmit contents such as private images, voice, documents produced by himself / herself to only the recipients who can trust him / herself, and to prevent private contents from being leaked to the outside.

In order to use the trust-based content sharing service, the sender terminal 110 transmits content to be shared to the authorized recipient terminal 120. At this time, the content that the sender terminal 110 shares with the authorized recipient terminal 120 may be the encrypted content.

In addition, the sender terminal 110 may transmit the content to the directly-received recipient terminal 120, or may share the content with the recipient terminal 120 through a social network service, e-mail, file sharing, It is not limited.

The authorized recipient terminal 120 means a recipient terminal that is allowed to share contents from a sender.

The authorized recipient terminal 120 requests the trust-based content sharing device 200 to confirm the trust level between the sender and the recipient. The authorized recipient terminal 120 receives the decryption key in response to the trust relationship from the trust-based content sharing device 200.

In addition, the authorized recipient terminal 120 may decrypt the encrypted content shared by the sender terminal 110 using the received decryption key.

Next, the first unauthorized recipient terminal 130 and the second unauthorized recipient terminal 140 are unauthorized terminals that are not allowed to share contents from the sender.

The first unauthorized recipient terminal 130 using the trust-based content sharing service receives a notification indicating that there is no trust relationship as a result of making a trust relationship confirmation request to the trust-based content sharing device 200. [ Accordingly, since the first unauthorized receiver terminal 130 can not receive the decryption key of the encrypted content from the trust-based content sharing device 200, the corresponding content can not be used.

Also, since the second unauthorized recipient terminal 140 that does not use the trust-based content sharing service can not receive the decryption key of the content from the trust-based content sharing device 200, the content obtained through the unusual path is decrypted and used I can not.

Here, the abnormal path may be shared by a person other than the sender without the sender's consent, illegally captured and acquired by the content, and the type of the abnormal path is not limited thereto.

The sender terminal 110, the authorized receiver terminal 120 and the first unauthorized receiver terminal 130 using the trust-based content sharing service can be classified into the service use description of the user and the terminal using the trust-based content sharing service, And a trust agent that collects the data and transmits the collected data to the trust-based content sharing device 200. [

In addition, the sender terminal 110, the authorized recipient terminal 120, and the first unauthorized recipient terminal 130 that use the trust-based content sharing service can notify the sender that the content is shared by the trust-based content sharing device 200, Based content sharer 200 to request confirmation of the trust information so that the trust relationship between the intended recipient and the intended recipient can be confirmed. At this time, the trust broker can be used in the form of an API (Application Program Interface).

Next, the trust-based content sharing device 200 provides a trust-based content sharing service such that a user can share various types of files with other users, such as a general social network service and a file sharing service.

And receives user information and terminal information from the sender terminal 110, the authorized recipient terminal 120 and the first unauthorized recipient terminal 130. Also, the trust-based content sharing apparatus 200 receives a trust relationship confirmation request from the authorized recipient terminal 120.

The trust-based content sharing apparatus 200 confirms the trust relationship between the sender and the recipient corresponding to the content to be shared, and when the trust level of the recipient is determined to be equal to or greater than the threshold value, As shown in FIG.

At this time, the trust-based content sharing apparatus 200 may use at least one of the user information and the terminal information to use the intimacy, reputation, past contents leakage usage history, etc. between the sender who wants to share the content and the receiver who receives the content , The trust relationship between users is analyzed and the trust level is judged.

On the other hand, upon receiving the trust relationship confirmation request from the first unauthorized recipient terminal 130, the trust-based content sharing apparatus 200 notifies the first unauthorized recipient terminal 130 of the unreliability, (130) can not use the content.

In addition, the trust-based content sharing apparatus 200 transmits the receiver information of the first unauthorized receiver terminal 130 or the information of the first unauthorized receiver terminal 130 determined to be less than the threshold value to the sender To the terminal 110, and may provide the distribution and sharing status information of the contents to the sender.

Here, the trust-based content sharing device 200 may be implemented in a form such that it is added to a general social network service, a file sharing service, or the like. In order to correspond to the intention of the first content sharer to share the content, It is possible to allow the recipient to use the contents based on the trust relationship of intention, reputation, etc. between the intended recipient.

2 is a block diagram illustrating a configuration of a trust-based content sharing apparatus according to an embodiment of the present invention.

2, the trust-based content sharing apparatus 200 includes an information collecting unit 210, an authentication request receiving unit 220, a trust relationship checking unit 230, and a decryption key assigning unit 240. [

First, the information collecting unit 210 receives and stores user information and terminal information from at least one of the sender terminal 110, the authorized receiver terminal 120 and the first unauthorized receiver terminal 130.

For convenience of explanation, the information collecting unit 210 receives user information and terminal information from each of the terminals 110, 120, and 130. However, the present invention is not limited thereto. For example, And may collect user information and terminal information corresponding to each terminal from the service providing apparatus.

The confirmation request receiving unit 220 receives the trust relationship confirmation request from the authorized recipient terminal 120. Here, the authorized recipient terminal 120 means a terminal of an authorized recipient who has received contents from the sender terminal 110 or has been granted the right to use contents from the sender.

Next, the trust relationship checking unit 230 confirms the trust relationship corresponding to the receiver and the sender, compares the trust level of the receiver with the threshold, and confirms the trust relationship of the receiver.

Finally, when the trust level of the receiver is equal to or greater than the threshold value, the decryption key assigning unit 240 delivers the decryption key corresponding to the content to the receiver terminal 110. [ On the other hand, if it is determined that the trust level of the receiver is less than the threshold value, the decryption key assigning unit 240 does not transmit the decryption key corresponding to the content to the recipient terminal 110.

Hereinafter, a trust-based content sharing method according to an exemplary embodiment of the present invention will be described in detail with reference to FIG.

FIG. 3 is a flowchart illustrating a trust-based content sharing method according to an embodiment of the present invention.

3, the trust-based content sharing apparatus 200 collects user information and terminal information from a sender terminal, an authorized receiver terminal, and an unauthorized receiver terminal (S310).

The trust-based content sharing device 200 can receive and store user information of the terminal and corresponding terminal information from all terminals using the trust-based content sharing service. In particular, the trust-based content sharing device 200 may perform step S310 when the user subscribes to or registers a trust-based content sharing service or when executing a trust-based content sharing service.

The trust-based content sharing apparatus 200 collects data for confirming the trust relationship between the sender and the receiver from the sender terminal and the receiver terminals. At this time, the data collected by the trust-based content sharing apparatus 200 may include service usage details of the terminal (the sender terminal and the receiver terminal) and information of the terminal, and the data collected by the trust- The kind is not limited thereto.

Next, the trust-based content sharing apparatus 200 receives a trust relationship confirmation request from the receiver terminal (S320).

The trust-based content sharing apparatus 200 receives a trust relationship confirmation request from a recipient terminal that has received a content from a sender. At this time, the recipient terminal can request at least one of the sender information, recipient information, the trust relationship confirmation request between the sender terminal and the recipient terminal, and the content reception history of the recipient terminal to the trust-based content sharing device 200 to request the trust relationship confirmation .

Then, the trust-based content sharing apparatus 200 compares the trust level of the receiver with a threshold (S330).

The trust-based content sharing apparatus 200 confirms the trust relationship between the sender terminal of the content corresponding to the trust relationship confirmation request with the receiver terminal requesting the trust relationship check in step S320.

Then, the trust level of the receiver, which is the result of the trust relationship check, is compared with the threshold value. Here, the threshold value may be a predetermined value, or may be a value set from the original author of the content or the original content sharer.

If the trust level of the receiver is equal to or greater than the threshold value as a result of the comparison of the trust level, the trust-based content sharing apparatus 200 delivers the decryption key to the receiver terminal corresponding to the receiver (S340).

On the other hand, when it is determined that the trust level of the receiver is less than the threshold, the trust-based content sharing apparatus 200 may terminate the trust-based content sharing service or notify the trustee of the trustee to the receiver terminal.

Hereinafter, the operation of the trust-based content sharing system according to an embodiment of the present invention will be described in detail with reference to FIG.

4 is a flowchart illustrating an operation of a trust-based content sharing system according to an embodiment of the present invention.

First, the trust-based content sharing apparatus 200 receives user information and terminal information from the sender terminal, the authorized receiver terminal, and the first authorized receiver terminal (S410).

The sender terminal, the authorized recipient terminal and the first authorized recipient terminal may transmit data on the service utilization details to the trust-based content sharing device 200 through the trust agent.

For convenience of explanation, the trust-based content sharing apparatus 200 receives user information and terminal information at a time from the sender terminal, the authorized receiver terminal, and the first authorized receiver terminal. However, The content sharing apparatus 200 may receive user information and terminal information from the sender terminal, the receiver terminal, and the first authorized receiver terminal, respectively.

Then, the sender terminal encrypts the content to be shared (S420).

The sender terminal can encrypt the file itself corresponding to the content by applying the encryption function of the e-mail, file sharing, and the social network service itself. In addition, if the encryption function is not incorporated in the social commerce, file sharing, e-mail, or the like, or if the use of the encryption function is not permitted, the sender terminal may use the encryption function installed in the trust- OS) encryption function, another encryption application program, and other encryption algorithms.

In step S420, when the sender terminal does not manually request the sender to apply encryption, but receives a content sharing command from the sender, the sender terminal can automatically apply encryption of the corresponding content.

In addition, the sender terminal can selectively select the trust level of the recipient who can use the content from the sender as needed, and the trust level of the selected recipient can be used as a threshold value in S330 of FIG.

Next, the sender terminal transmits the encrypted content to the authorized recipient terminal (S430).

For convenience of explanation, it has been described that the sender terminal transmits the encrypted content to the authorized recipient terminal to which the content is to be shared. However, the sender terminal is not limited to this, and the sender terminal may share the content through the social network service, .

The authorized recipient terminal having received the encrypted content requests the trust-based content sharing device 200 to confirm the trust relationship (S440).

At this time, the authorized recipient terminal can request confirmation of the trust relationship between the sender which is the first contents sharer and the present receiver himself, through the mounted trust broker.

In addition, the trust-based content sharing apparatus 200 that has been requested to confirm the trust relationship confirms the trust relationship (S450).

The trust-based content sharing apparatus 200 confirms a trust relationship between a sender corresponding to a content to be shared with a receiver corresponding to an authorized receiver terminal. Then, the trust-based content sharing apparatus 200 determines whether or not the trust level of the sender and the receiver is equal to or higher than a threshold value, which is a confidence level initially set by the sender, as a result of the trust relationship check.

Here, the threshold value may mean a threshold trust level set for each content that is shared by the first content sharer when the content is shared, or may mean a threshold trust level preset in the trust-based content sharing device 200. [

At this time, the process of confirming the trust relationship by the trust-based content sharing apparatus 200 that received the trust relationship confirmation request in step S450 is substantially the same as that in step S330 of FIG. 3, and redundant description is omitted

If it is determined that the trust level of the recipient corresponding to the authorized recipient terminal is equal to or greater than the threshold value, the trust-based content sharing device 200 delivers the decryption key corresponding to the content to the authorized recipient terminal at step S460.

The process of transmitting the decryption key to the authorized recipient terminal by the trust-based content sharing device 200 is substantially the same as that of step S340 of FIG. 3, and a duplicate description will be omitted.

In addition, the authorized recipient terminal having received the decryption key from the trust-based content sharing apparatus 200 decrypts the content using the decryption key (S470).

In this case, the authorized recipient terminal does not decrypt the content manually by the authorized recipient, but automatically releases the content encryption using the decryption key received in step S460, and executes the decrypted content so that the authorized recipient can decrypt the content It can be made available.

In step S480, the authorized recipient who has received the content from the first contents sharer through the social network service, e-mail, or file sharing application can share the contents shared by the various application services with other users.

At this time, the contents transmitted or shared by the authorized recipient terminal to another user terminal may be encrypted contents.

As in step S480, when an authorized recipient terminal forwards content to unauthorized recipient terminals, the conventional technique may cause a problem of being shared with other unauthorized recipient terminals regardless of the intention of the original content sharer.

However, the trust-based content sharing apparatus 200 according to the embodiment of the present invention can prevent the contents from being shared or leaked to the unauthorized receiver terminals through steps S490 to S520 to be described later.

The first unauthorized recipient terminal that has forwarded the content from the terminal (authorized recipient terminal) of the user other than the first content sharer requests the trust-based content sharing apparatus 200 to confirm the trust relationship in order to decrypt the encrypted content ( S490).

The process of confirming the trust relationship with the trust-based content sharing device 200 by the first unauthorized recipient terminal in step S490 is substantially the same as the step S440 performed by the authorized recipient terminal, and redundant description will be omitted.

However, the trust-based content sharing apparatus 200 notifies the first unauthorized receiver terminal of the unreliability as a result of checking the trust relationship of the first unauthorized receiver (S500).

In step S500, the trust-based content sharing apparatus 200 confirms the trust relationship between the first unauthorized recipient and the sender who is the first content sharer of the content. As a result, since the trust level is below the threshold, Notify.

Accordingly, since the first unauthorized receiver terminal can not receive the decryption key corresponding to the content from the trust-based content sharing device 200, the corresponding content can not be used (S510).

If the second unauthorized recipient terminal that has forwarded the content from the user other than the first content sharer does not use the trust-based content sharing service, the second unauthorized recipient terminal can not receive the decryption key corresponding to the content, The content can not be used (S520).

Since the second unauthorized receiver terminal can not receive the decryption key from the trust-based content sharing device 200 and thus can not decrypt the encrypted content, the second unauthorized receiver terminal receives the content shared from the authorized receiver terminal Can not be used.

That is, an authorized recipient terminal that directly receives content from a sender terminal, which is the first content sharer, through various services or methods satisfies the trust level with the sender, and thus can use the shared content.

However, the content shared by the authorized recipient terminal, which is shared with the first unauthorized recipient terminal and the second unauthorized recipient terminal, different from the intention of the first content sharer, is different from the sender terminal which is the first contents sharer and the first unauthorized recipient terminal The first unauthorized recipient terminal and the second unauthorized recipient terminal can not use the content because the trust relationship between the second unauthorized recipient terminals is inconsistent.

In this case, when the first content sharer shares or transmits his or her private content through e-mail, a social network, or a file sharing service, the trust-based content sharing device transmits the trust level between the user who receives the content and the first content sharer The user can allow or block the use of the content.

In addition, the trust-based content sharing device can automatically minimize the inconvenience of the users due to the encryption and decryption of the content by allowing the users to automatically encrypt and decrypt the content according to the trust relationship determination result. And it can prevent the accidental disclosure of private contents to third parties.

5 is a block diagram illustrating a computer system in accordance with one embodiment of the present invention.

Referring to FIG. 5, embodiments of the present invention may be implemented in a computer system 500, such as a computer-readable recording medium. 5, the computer system 500 includes one or more processors 510, a memory 530, a user input device 540, a user output device 550, 560 < / RTI > In addition, the computer system 500 may further include a network interface 570 connected to the network 580. The processor 510 may be a central processing unit or a semiconductor device that executes the processing instructions stored in the memory 530 or the storage 560. [ The memory 530 and the storage 560 may be various types of volatile or non-volatile storage media. For example, the memory may include a ROM 531 or a RAM 532.

Thus, embodiments of the invention may be embodied in a computer-implemented method or in a non-volatile computer readable medium having recorded thereon instructions executable by the computer. When computer readable instructions are executed by a processor, the instructions readable by the computer are capable of performing the method according to at least one aspect of the present invention.

As described above, the apparatus and method for sharing a trust-based content according to the present invention are not limited to the configurations and methods of the embodiments described above, All or a part of the above-described elements may be selectively combined.

110: sender terminal 120: authorized receiver terminal
130: first unauthorized receiver terminal
140: the second unauthorized receiver terminal
200: Trust-based content sharing device
210: information collection unit 220: confirmation request reception unit
230: trust relationship checking unit 240: decryption key assigning unit
500: computer system 510: processor
520: bus 530: memory
531: ROM 532: RAM
540: User input device 550: User output device
560: Storage 570: Network Interface
580: Network

Claims (1)

An information collecting unit for receiving user information and terminal information from at least one of a sender terminal, a receiver terminal and a service providing apparatus;
A confirmation request receiving unit for receiving a trust relationship confirmation request from the receiver terminal that has received the content from the sender terminal,
A trust relationship confirmation unit for confirming a trust relationship corresponding to the receiver and the sender, for comparing the trust level of the receiver with a threshold value, and
When the trust level of the receiver is equal to or greater than the threshold value, transmitting a decryption key corresponding to the content to the receiver terminal,
/ RTI >
The service providing apparatus includes:
And the relay server relays the sender terminal and the receiver terminal to provide the content sharing service.

Images