WO2017090789A1 - Communication security system and method using non-address network equipment - Google Patents

Abstract

Disclosed are a communication security system and method using non-address network equipment, the system and method using non-address network equipment having no IP address or account so as to enable hacking or tapping and monitoring of terminals for transmitting and receiving data through various kinds of private networks and public networks to be blocked. The disclosed communication security method using non-address network equipment, which allows a communication network to be connected through a first input/output unit, allows a terminal to be connected through a second input/output unit, and allows a security unit to be connected between the first input/output unit and the second input/output unit, comprises the steps of: (a) allowing the security unit to encrypt data, generate encrypted data, and transmit the encrypted data to the communication network, when the data is received from the terminal; (b) allowing the security unit to decrypt encrypted data, generate decrypted data, and transfer the decrypted data to the terminal, when the encrypted data is received from the communication network; and allowing the security unit to encrypt data and transfer the encrypted data to the terminal, when the data is received from the communication network. According to the present invention, security of data transmission can be maintained and hacking or tapping and monitoring can be prevented.

Description

Communication security system and method using non-address network equipment

The present invention allows the use of non-address network equipment without an IP address or account for hacking, eavesdropping, and eavesdropping of terminals transmitting and receiving data through various dedicated and public networks. A communication security system and method using network equipment.

In general, various terminals operating in a private or public network including wired or wireless, for example, PCs, laptops, VoIP phones, fax terminals, mobile phones, etc. are subjected to enormous physical or property damage due to various hacking I can wear it.

Hacking refers to all kinds of activities that illegally access the vulnerable security network of the network or adversely affect the operation of the information system or a specific terminal. Eventually, hacking is not intended by the developer who developed the application by arbitrarily manipulating the program code of the application. This is to make the application work.

Such hacking is performed through IP address and account information of various terminals, and even in the case of security devices, hackers attack the IP address and account information and disable the security device.

In the existing virtual private network (VPN) and terminal communication devices, IP address and account setting were essential. Therefore, there is a problem that the incapacitation of the security equipment occurs due to the distributed denial of service (DDoS) attack and various hacking techniques that develop day by day.

In addition, there is a possibility that the user's PC becomes a zombie PC, can be enormous damage as well as life threatening due to confidential leakage, in the case of communication equipment has the problem of eavesdropping or tapping and incapacitating.

An object of the present invention for solving the above problems is to block the hacking, eavesdropping, and eavesdropping of terminals transmitting and receiving data through various private and public networks by using non-address network equipment without an IP address or account. The present invention provides a communication security system and method using a non-address network device that maintains security and prevents hacking, eavesdropping, and eavesdropping.

Communication security system using a non-address network equipment according to the present invention for achieving the above object, the terminal for transmitting or receiving data to the communication network; And a first input / output unit connected to the communication network, a second input / output unit connected to the terminal, and when data is received from the communication network through the first input / output unit, encrypted data is encrypted to the terminal through the second input / output unit. Outputs the data to the communication network through the first input / output unit as encrypted data when the data is input through the second input / output unit from the terminal, and decrypts the data when the encrypted data is input through the first input / output unit from the communication network. It may include a non-address network equipment to generate and output to the terminal through the second input and output unit.

On the other hand, the communication security system using a non-address network equipment according to the present invention for achieving the above object, and a first terminal for receiving the data including the first address or to generate and transmit the data containing the second address; And a communication security system using a non-address network device that communicates through a communication network with a second terminal that generates and transmits data including the first address or receives data including the second address. A 1-2 input / output unit connected by a wire, a 1-1 input / output unit having one side connected by wire to the 1-2 input / output unit, and the other side connected by wire to a communication network, and the first input / output unit A first non-word including a first security unit for encrypting or decrypting data or encrypted data and encrypting data input from the 1-2 input / output unit; Les network equipment; And a 2-1 input / output unit connected to the communication network by wire, one side connected by wire to the second input / output unit, and a second input / output unit connected to the second terminal by wire, and the second terminal. -2 may include a second non-address network equipment including a second security unit for decrypting or encrypting the encrypted data or data input from the input-output unit, and encrypts the data input from the second-2 input-output unit.

On the other hand, the communication security method using a non-address network equipment according to the present invention for achieving the above object, is connected to the communication network via a first input and output unit and a terminal via a second input and output unit, the first input and output unit and the first 2. A communication security method using a non-address network device having a security unit connected between two input / output units, wherein the security unit encrypts data when the data is input from the terminal through the second input / output unit to generate encrypted data. Outputting to the communication network through an input / output unit; (b) when the security unit receives encrypted data from the communication network through the first input / output unit, decrypts the data to generate data and outputs the data to the terminal through the second input / output unit; And (c) encrypting the security unit when the data is input from the communication network through the first input / output unit and outputting the encrypted data to the terminal through the second input / output unit as encrypted data.

Meanwhile, in the communication security method using the non-address network equipment of the communication security system according to the present invention for achieving the above object, the first non-address network equipment is connected to the communication network through the 1-1 input and output unit 1-2 A first address is connected to a first terminal having a first address set through an input / output unit, a first security unit is connected between the first-first input-output unit and the first-second input / output unit, and the second non-address network device receives the second-first input. A second terminal connected to the communication network through a second terminal and having a second address set through a second input / output unit, and a second security unit is connected between the second input / output unit and the second input / output unit. A communication security method using a non-address network device of a security system, the method comprising: (a) the first terminal generating data including the second address and generating the first non-address through the 1-2 input / output unit; The step of transmitting the-less network devices; (b) in the first non-address network device, the first security unit encrypts the data including the second address, reprocesses the data according to a specific algorithm, and generates the first encrypted data to generate the first encrypted data. Sending to; (c) receiving, by the 2-1 input / output unit, the first encrypted data from the communication network and transmitting the first encrypted data to the second security unit in the second non-address network equipment; And (d) the second security unit decrypting the first encrypted data, reprocessing the data according to a specific algorithm, generating the data including the second address, and transmitting the data to the second terminal through the second-2 input / output unit. It may include.

Meanwhile, in the communication security method using the non-address network equipment of the communication security system according to the present invention for achieving the above object, the first non-address network equipment is connected to the communication network through the 1-1 input and output unit 1-2 A first address is connected to a first terminal having a first address set through an input / output unit, a first security unit is connected between the first-first input-output unit and the first-second input / output unit, and the second non-address network device receives the second-first input. A second terminal connected to the communication network through a second terminal and having a second address set through a second input / output unit, and a second security unit is connected between the second input / output unit and the second input / output unit. A communication security method using a non-address network device of a security system, the method comprising: (a) the second terminal generating data including the first address and performing the second non-transmission through the second-2 input / output unit; The step of transmitting the-less network devices; (b) in the second non-address network device, the second security unit encrypts the data including the first address, reprocesses the data according to a specific algorithm, and generates second encrypted data to generate the second encrypted data. Sending to; (c) receiving, by the first-first input / output unit, the second encrypted data from the communication network and transmitting the second encrypted data to the first security unit in the first non-address network equipment; And (d) the first security unit decrypting the second encrypted data, reprocessing the second encrypted data according to a specific algorithm, generating the data including the first address, and transmitting the data to the first terminal through the 1-2 input / output unit. It may include.

According to the present invention, it is not necessary to set an IP address or an account on the network equipment connected to each terminal, and it is possible to prevent hacking, eavesdropping, and eavesdropping of terminals communicating through various dedicated or public networks.

As a result, hackers cannot access terminals connected to non-addressed network equipment without IP addresses or accounts, and cannot leak eavesdropping, eavesdropping, and secrecy over private and public networks.

In addition, it is possible to secure the data transmission between the terminals by using a non-address network equipment that does not have an IP address or account between the terminals in the remote.

In addition, network communication between non-addressed network devices without an IP address and an account connected to a transmitting terminal or a receiving terminal has an advantage of generating a kind of virtual private network.

And by using non-addressed network equipment without IP address and account, it can provide complete security for industrial terminals to provide security solution to protect sensitive confidential information and data from malicious hackers and confidential leakers.

1 is a view showing the basic concept of a communication security system using a non-address network equipment according to an embodiment of the present invention.

Figure 2 is a schematic diagram showing the overall configuration of a communication security system using a non-address network equipment according to an embodiment of the present invention.

3 is a diagram illustrating an example of transmitting data between terminals using non-address network equipment according to an embodiment of the present invention.

4 is a diagram illustrating an example of preventing hacking of a terminal using non-address network equipment according to an embodiment of the present invention.

5 is a flowchart illustrating a communication security method using a non-address network device according to an embodiment of the present invention.

6 is a flowchart illustrating a communication security method using a non-address network equipment of a communication security system according to an embodiment of the present invention.

7 is a flowchart illustrating a communication security method using a non-address network equipment of a communication security system according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.

In order to clearly describe the present invention, parts irrelevant to the description are omitted, and like reference numerals designate like elements throughout the specification.

Throughout the specification, when a part is "connected" to another part, this includes not only "directly connected" but also "electrically connected" with another element in between. . In addition, when a part is said to "include" a certain component, which means that it may further include other components, except to exclude other components unless otherwise stated.

When a portion is referred to as being "above" another portion, it may be just above the other portion or may be accompanied by another portion in between. In contrast, when a part is mentioned as "directly above" another part, no other part is involved between them.

Terms such as first, second, and third are used to describe various parts, components, regions, layers, and / or sections, but are not limited to these. These terms are only used to distinguish one part, component, region, layer or section from another part, component, region, layer or section. Accordingly, the first portion, component, region, layer or section described below may be referred to as the second portion, component, region, layer or section without departing from the scope of the invention.

The terminology used herein is for reference only to specific embodiments and is not intended to limit the invention. As used herein, the singular forms “a,” “an,” and “the” include plural forms as well, unless the phrases clearly indicate the opposite. As used herein, the meaning of "comprising" embodies a particular characteristic, region, integer, step, operation, element and / or component, and the presence of other characteristics, region, integer, step, operation, element and / or component It does not exclude the addition.

Terms indicating relative space such as "below" and "above" may be used to more easily explain the relationship of one part to another part shown in the drawings. These terms are intended to include other meanings or operations of the device in use with the meanings intended in the figures. For example, if the device in the figure is reversed, any parts described as being "below" of the other parts are described as being "above" the other parts. Thus, the exemplary term "below" encompasses both up and down directions. The device can be rotated 90 degrees or at other angles, the terms representing relative space being interpreted accordingly.

Unless defined otherwise, all terms including technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art. Commonly defined terms used are additionally interpreted to have a meaning consistent with the related technical literature and the presently disclosed contents, and are not interpreted in an ideal or very formal sense unless defined.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.

1 is a view showing the basic concept of a communication security system using a non-address network equipment according to an embodiment of the present invention.

In FIG. 1, in the communication security system 100 using non-address network equipment according to the present invention, a terminal 110 is basically connected to a communication network 130 through a non-address network equipment 120. Include the connected configuration.

The terminal 110 is a communication terminal for transmitting or receiving data to the communication network 130, and includes a wired or wireless communication terminal. For example, the terminal 110 may be a PC, a notebook computer, a VoIP phone, a fax, a mobile phone, or the like.

The non-address network device 120 refers to a network device that does not have an IP address or MAC address required for communication for transmitting and receiving data, or does not require an account.

In addition, the non-address network equipment 120 includes a first input / output unit (Input / Output 1) 122, a second input / output unit (Input / Output 2) 124, and a security unit 135. It is connected to the communication network 130 through the 122, and is connected to the terminal 110 through the second input and output unit 124. Here, the first input / output unit 122 and the second input / output unit 124 may be a network card, for example, a local area network (LAN) card or the like.

When the security unit 125 receives data from the communication network 130 through the first input / output unit 122, the security unit 125 encrypts and outputs the encrypted data to the terminal 110 through the second input / output unit 124 and from the terminal 110. When data is received through the second input / output unit 124, the data is encrypted and output to the communication network 130 through the first input / output unit 122 as encrypted data.

In addition, when the security unit 125 receives encrypted data from the communication network 130 through the first input / output unit 122, the security unit 125 generates data by decrypting and outputs the data to the terminal 110 through the second input / output unit 124.

The communication network 130 may include a dedicated network or a public network, and may include a wired network such as the Internet or a PSTN, and a wireless network such as Zigbee and Bluetooth.

The embodiment of the present invention will be described with reference to a wired network, but the present invention is not limited thereto and may be applied to the same concept through a wireless network.

Figure 2 is a schematic diagram showing the overall configuration of a communication security system using a non-address network equipment according to an embodiment of the present invention.

2, in the communication security system 200 using the non-address network equipment according to an embodiment of the present invention, the first non-address network equipment 210 is connected to the first terminal 112, the communication network 130 The second non-address network equipment 220 is connected to the second terminal 114, and is connected to the communication network 130.

Here, the first terminal 112 is set to the first address, the second terminal 114 is set to the second address, the first terminal 112 and the second terminal 114 are set to different accounts, respectively Can be.

In addition, communication between the first non-address network device 210 and the second non-address network device 220 may have an effect such as communication through a virtual private network.

The first terminal 112 receives data including the first address from the communication network 130 or generates data including the second address and transmits the data to the communication network 130.

That is, the first terminal 112 generates data including a second address for transmission to the second terminal 114 and transmits the data to the communication network 130 or from the second terminal 114 to the first terminal 112. Receiving data from the communication network 130 including the first address sent toward the.

The data transmitted between the first terminal 112 and the second terminal 114 may include a header including a source address, a destination address, an identifier, and the like. It may be configured in the form of a payload (Payroad) including.

The second terminal 114 generates data including the first address and transmits the data to the communication network 130 or receives data including the second address from the communication network 130. That is, the second terminal 114 generates the data including the first address and transmits the data to the communication network 130 to transmit the data to the first terminal 112, or the second terminal 114 transmits the data to the second terminal ( It is to receive data from the communication network 130 including the second address sent to the 114.

The first non-address network device 210 and the second non-address network device 220 are respectively configured to operate the first security unit 215 without an IP address and an account set, that is, without an address and an account. And the operation of the second security unit 225.

In addition, the first non-address network equipment 210 and the second non-address network equipment 220 operate like a dummy hub device, and security-related functions are not only hardware but also software. Can be configured.

The first non-address network equipment 210 includes a 1-1 input / output unit 211, a 1-2 input / output unit 212, and a first security unit 215.

One side of the 1-1 input / output unit 211 is connected to the 1-2 input / output unit 212 through the first security unit 215, and the other side is connected to the communication network 130.

One side of the second input / output unit 212 is connected to the first terminal 112, and the other side thereof is connected to the first-first input / output unit 211 through the first security unit 215.

The first security unit 215 encrypts the data input from the 1-1 input / output unit 211, or decrypts the encrypted data input from the 1-1 input / output unit 211 and the 1-2 input / output unit 212. Encrypts data input from

The second non-address network equipment 220 includes a 2-1 input / output unit 221, a 2-2 input / output unit 222, and a second security unit 225.

One side of the second input / output unit 221 is connected to the communication network 130, and the other side of the second input / output unit 221 is connected to the second input / output unit 222 through the second security unit 225.

One side of the second input / output unit 222 is connected to the second input / output unit 221 through the second security unit 225, and the other side is connected to the second terminal 114.

The second security unit 225 decrypts the encrypted data input from the 2-1 input / output unit 221, or encrypts the data input from the 2-1 input / output unit 221, and the 2-2 input / output unit 222. Encrypts data input from

In this case, the connection between the 1-1 input / output unit 211 and the 1-2 input / output unit 212 and the connection between the 2-1 input / output unit 221 and the 2-2 input / output unit 222 are respectively bridged. (Bridge) can be connected.

In addition, the first security unit 215 is included in the 1-1 input / output unit 211 or the 1-2 input / output unit 212, as shown in FIG. 2, or as shown in FIG. 2. The first non-address network equipment 210 may be included separately from the first input / output unit 211 and the second input / output unit 212.

In addition, unlike the illustrated in FIG. 2, the second security unit 225 is included in the 2-1 input / output unit 221 or the 2-2 input / output unit 222, or the 2-1 input / output unit 221 and The second non-address network equipment 220 may be included separately from the second input / output unit 222.

In addition, the first security unit 215 encrypts a specific portion of the first data inputted from the first terminal 112 through the 1-2 input / output unit 212 and uses the first encrypted data reprocessed according to a specific algorithm. It generates and outputs to the communication network 130 through the first-first input-output unit 211.

In addition, the second security unit 225 encrypts a specific portion of the second data inputted from the second terminal 114 through the second-2 input / output unit 222 and reprocesses the second portion 114 with the second encrypted data according to a specific algorithm. It generates and outputs it to the communication network 130 through the 2-1 input and output unit 221.

Meanwhile, the first-first input / output unit 211 and the second-first input / output unit 221 connected to the communication network 130 have a promiscuous mode for receiving all data transmitted through the communication network 130. mode).

That is, in the promise cure mode, the first-first input / output unit 211 and the second-first input / output unit 221 receive all data including data received from the communication network 130 and encrypted data, respectively. Transfers to security unit 215 and second security unit 225.

Accordingly, when the second encrypted data is input from the communication network 130 through the first-first input / output unit 211, the first security unit 215 decrypts the input second encrypted data and reprocesses the second encrypted data according to a specific algorithm. 2 data is output to the first terminal 112 through the 1-2 input / output unit 212. That is, the second data transmitted from the second terminal 114 is generated as the second encrypted data through the second non-address network device 220 to the first non-address network device 210 via the communication network 130. And the second non-address network device 210 decrypts the second encrypted data through the first security unit 215, generates the second data, and transmits the second data to the first terminal 112. Is transmitted to the first terminal 112 in a secure manner.

In addition, when the first encrypted data is input from the communication network 130 through the 2-1 input / output unit 221, the second security unit 225 decrypts the input first encrypted data and reprocesses the data according to a specific algorithm. 1 data is output to the second terminal 114 through the second input / output unit 222. That is, the first data transmitted from the first terminal 112 is generated as first encrypted data through the first non-address network device 210 to the second non-address network device 220 via the communication network 130. And the first non-address network device 220 decrypts the first encrypted data through the second security unit 225, generates the first data, and transmits the first data to the second terminal 114. Is transmitted to the second terminal 114 in a secure manner.

As described above, according to the present invention, when transmitting data between the first terminal 112 and the second terminal 114, the first terminal 112, as shown in Figure 3, the first non-address network equipment 210 The first terminal 112 and the first non-address network are connected to the communication network 130 and the second terminal 114 is connected to the communication network 130 through the second non-address network equipment 220. The device 210 is transmitted as data, and the first non-address network device 210 and the second non-address network device 220 are transmitted as encrypted data through the communication network 130, the second terminal 114 And the second non-address network equipment 220 are transmitted as data. 3 is a diagram illustrating an example of transmitting data between terminals using non-address network equipment according to an embodiment of the present invention. In FIG. 3, the first terminal 112 and the second terminal 114 recognize only data and transmit or receive data, and do not process encrypted data because they are not recognized.

Meanwhile, the first security unit 215 encrypts the data inputted from the communication network 130 through the first-first input-output unit 211 and reprocesses the second input-output unit 212 with encrypted data reprocessed according to a specific algorithm. Output to the first terminal 112 through. That is, when the data is hacked data, the first security unit 215 generates the hacked data as encrypted data and transmits the hacked data to the first terminal 112, so that the first terminal 112 does not recognize the encrypted data and processes the data. Will not execute. Therefore, the hacking operation on the first terminal 112 is not performed.

In addition, when data is input from the communication network 130 through the 2-1 input / output unit 221, the second security unit 225 encrypts the input data and re-processes the encrypted data according to a specific algorithm. Output to the second terminal 114 through the input and output unit 222. That is, when the data is hacked data, the second security unit 225 generates the hacked data as encrypted data and transmits the hacked data to the second terminal 114, so that the second terminal 114 does not recognize the encrypted data and processes the data. Will not execute. Therefore, the hacking operation on the second terminal 114 is not performed.

As described above, when the hacker terminal 116 attempts to hack the first terminal 112 and the second terminal 114, the first terminal 112 as shown in FIG. Is connected to the communication network 130 through the first non-address network equipment 210, the second terminal 114 is connected to the communication network 130 through the second non-address network equipment 220, hacker terminal ( Although the data or hacker data transmitted from 116 to the communication network 130 is transmitted between the first non-address network device 210 and the second non-address network device 220 as data or hacked data through the communication network 130, Since the first non-address network equipment 210 is transmitted as encrypted data from the second non-address network equipment 220 to the second terminal 114, the first terminal ( 112 and the second terminal 114 is encrypted data The system does not recognize. 4 is a diagram illustrating an example of preventing hacking of a terminal using non-address network equipment according to an embodiment of the present invention. In FIG. 4, since the first terminal 112 and the second terminal 114 recognize and transmit only the data and do not recognize the encrypted data, the first terminal 112 and the second terminal 114 perform a hacking operation. This will not run.

On the other hand, when the first terminal 112 with the first address is set transmits data to the second terminal 114 with the second address, the first terminal 112 has a second address as a destination. The included data is generated and transmitted to the first non-address network device 210.

Subsequently, in the first non-address network device 210, the 1-2 input / output unit 212 receives data including the second address and transmits the data to the first security unit 215, and the first security unit 215 may include the first security unit 215. The data including the two addresses are encrypted and reprocessed according to a specific algorithm to generate first encrypted data, and transmitted to the communication network 130 through the first-first input-output unit 211.

Subsequently, the second non-address network device 22 receives the first encrypted data from the communication network 130 and transmits the first encrypted data to the second security unit 225 through the 2-1 input / output unit 221.

Subsequently, the second security unit 225 decrypts the first encrypted data and reprocesses it according to a specific algorithm to generate data including the second address, and transmits the data to the second terminal 114 through the second-2 input / output unit 222. To pass.

Therefore, the data including the second address from the first terminal 112 is securely transmitted to the second terminal 114.

On the other hand, when data is transmitted from the second terminal 114 with the second address set to the first terminal 112 with the first address set, the second terminal 114 is the first address as the destination address. Generates the data containing the and delivers the data to the second non-address network equipment 220.

Subsequently, the second non-address network device 220 receives the data including the first address from the second input / output unit 222 from the second terminal 114 and transmits the data to the second security unit 225.

Subsequently, the second security unit 225 encrypts the data including the first address, reprocesses the data according to a specific algorithm, generates the second encrypted data, and transmits the second encrypted data to the communication network 130 through the 2-1 input / output unit 221. .

Subsequently, in the first non-address network device 210 connected to the first terminal 112, the 1-1 input / output unit 211 receives the second encrypted data from the communication network 130 and transmits it to the first security unit 215. do.

Subsequently, the first security unit 215 decrypts the second encrypted data and reprocesses the data according to a specific algorithm to generate data including the first address, and transmits the data to the first terminal 112 through the 1-2 input / output unit 212. To pass.

Therefore, the first terminal 112 safely receives data including the first address transmitted from the second terminal 114.

Meanwhile, in addition to the second terminal to which the second non-address network equipment 220 is connected to the first terminal 112, hacking data transmitted from another terminal or a hacker terminal not connected to the non-address network equipment may be transmitted.

In the first non-address network device 210 connected to the first terminal 112, the first-first input / output unit 211 receives data or hacked data transmitted from another terminal or a hacker terminal from the communication network 130, and thus, the first non-address network equipment 210 receives the first data. Transfer to security unit 215.

Subsequently, the first security unit 215 encrypts the data or the hacked data transmitted from the 1-1 input / output unit 211 and generates the encrypted data according to a specific algorithm to generate the first data through the 1-2 input / output unit 212. Transfer to the terminal 112.

Therefore, the first terminal 112 does not recognize the encrypted data transmitted from the 1-2 input / output unit 212 to process a data recognition error, or does not process the encrypted data so that the hacking operation is not performed.

Meanwhile, in addition to the first terminal to which the first non-address network equipment 210 is connected, the hacking data transmitted from another terminal or a hacker terminal not connected to the non-address network equipment 210 may be transmitted to the second terminal 114.

In the non-address network device 220 connected to the second terminal 114, the 2-1 input / output unit 221 receives data or hacked data transmitted from another terminal or a hacker terminal from the communication network 130, and the second security unit ( 225).

Subsequently, the second security unit 225 encrypts the data or the hacked data received from the 2-1 input / output unit 221 and generates the encrypted data according to a specific algorithm to generate the second data through the 2-2 input / output unit 222. Transfer to terminal 114.

Therefore, the second terminal 114 does not recognize the encrypted data transmitted from the second-2 input / output unit 222 and processes it as a data recognition error, or does not process the encrypted data so that the hacking operation is not performed.

5 is a flowchart illustrating a communication security method using a non-address network device according to an embodiment of the present invention.

1 and 5, in the non-address network device 120 according to the present invention, when the security unit 125 receives data from the terminal 110 through the second input / output unit 124 (S510). In operation S520, the encrypted data is generated as encrypted data and output to the communication network 130 through the first input / output unit 122.

Subsequently, when the security unit 125 receives the encrypted data from the communication network 130 through the first input / output unit 122 (S530), the security unit 125 decrypts the generated data to generate the data through the second input / output unit 124. In step S540).

On the other hand, when the security unit 125 receives data from the communication network 130 through the first input / output unit 122 (S550), it is encrypted to the terminal 110 through the second input / output unit 124 as encrypted data. Output (S560).

In this case, the terminal 110 may not recognize the encrypted data input from the non-address network device 120 to process a data recognition error or may delete the encrypted data.

6 is a flowchart illustrating a communication security method using a non-address network equipment of a communication security system according to an embodiment of the present invention. That is, FIG. 6 is a flowchart illustrating a process of transmitting data from the first terminal 112 to the second terminal 114.

2 and 6, in the communication security system 200 according to an exemplary embodiment of the present invention, the first terminal 112 generates data including a second address to generate the 1-2 input / output unit 212. Through the first non-address network equipment 210 through (S610).

Subsequently, in the first non-address network device 210, the first security unit 215 encrypts the data including the second address, reprocesses the data according to a specific algorithm, and generates the first encrypted data. It is transmitted to the communication network 130 through the (S620).

Subsequently, in the second non-address network device 220, the 2-1 input / output unit 221 receives the first encrypted data from the communication network 130 and transmits the first encrypted data to the second security unit 225 (S630).

Subsequently, the second security unit 225 decrypts the first encrypted data and reprocesses it according to a specific algorithm to generate data including the second address, and transmits the data to the second terminal 114 through the second-2 input / output unit 222. Transfer (S640).

Accordingly, the data transmitted from the first terminal 112 is safely received by the second terminal 114.

7 is a flowchart illustrating a communication security method using a non-address network equipment of a communication security system according to an embodiment of the present invention. That is, FIG. 7 is a flowchart illustrating a process in which the first terminal 112 receives data transmitted from the second terminal 114 as data is transmitted from the second terminal 114 to the first terminal 112.

2 and 7, in the communication security system 200 according to an exemplary embodiment of the present invention, the second terminal 114 generates data including the first address to generate the second-2 input / output unit 222. It transmits to the second non-address network equipment 220 through (S710).

Subsequently, in the second non-address network device 220, the second security unit 225 encrypts the data including the first address, reprocesses the data according to a specific algorithm, and generates the second encrypted data to generate the second-1 input / output unit 221. It is transmitted to the communication network 130 through the (S720).

Subsequently, in the first non-address network equipment 210, the 1-1 input / output unit 211 receives the second encrypted data from the communication network 130 and transmits the second encrypted data to the first security unit 215 (S730).

Subsequently, the first security unit 215 decrypts the second encrypted data and reprocesses the data according to a specific algorithm to generate data including the first address, and transmits the data to the first terminal 112 through the 1-2 input / output unit 212. Transfer (S740).

Therefore, the first terminal 112 is to receive the data transmitted from the second terminal 114 safely.

As described above, according to the present invention, the security of data transmission is maintained by blocking hacking, eavesdropping, and eavesdropping of terminals transmitting and receiving data through various dedicated and public networks by using non-addressed network equipment without an IP address or account. A communication security system and method using a non-address network device can be realized to prevent hacking, eavesdropping, and eavesdropping.

As those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features, the embodiments described above should be understood as illustrative and not restrictive in all aspects. Should be. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. .

The present invention uses a non-address network equipment, which can be blocked using a non-address network equipment without an IP address or account for hacking, eavesdropping and interception of terminals transmitting and receiving data through a communication network. Applicable to communication security systems and methods.

Claims (18)

A terminal for transmitting or receiving data to a communication network; And A first input / output unit connected to the communication network, a second input / output unit connected to the terminal, and when data is received from the terminal through the second input / output unit, encrypted data is output to the communication network through the first input / output unit as encrypted data. When the encrypted data is received from the communication network through the first input / output unit, the data is decrypted to generate data and output to the terminal through the second input / output unit. If the data is received from the communication network through the first input / output unit, the data is encrypted and encrypted. Non-address network equipment for outputting data to the terminal through the second input / output unit; Communication security system using a non-address network equipment comprising a. A first terminal receiving data including a first address or generating and transmitting data including a second address, and generating and transmitting data including the first address or receiving data including the second address A communication security system using a non-address network device for communicating with a second terminal through a communication network, A 1-2 input / output unit connected to the first terminal; A 1-1 input / output unit having one side connected to the 1-2 input / output unit and the other side connected to a communication network; And a first security unit that encrypts or decrypts data or encrypted data input from the first-first input / output unit, and encrypts data input from the first-second input / output unit; And A 2-1 input / output unit connected to the communication network; A 2-2 input / output unit having one side connected to the 2-1 input / output unit and the other side connected to the second terminal; And a second security unit that decrypts or encrypts the encrypted data or data inputted from the 2-1 input / output unit, and encrypts the data inputted from the 2-2 input / output unit; Communication security system using a non-address network equipment comprising a. The method of claim 2, Each of the first non-address network device and the second non-address network device executes an operation of the first security unit and an operation of the second security unit without an IP address and an account being set. Communication security system using non-address network equipment. The method of claim 2, The connection between the 1-1 input / output unit and the 1-2 input / output unit and the connection between the 2-1 input / output unit and the second input / output unit 2 may be connected in a bridge manner, respectively. Communication security system using non-address network equipment. The method of claim 2, The first security unit is included in the 1-1 input / output unit or the 1-2 input / output unit, or the first non-address network equipment separately from the 1-1 input / output unit and the 1-2 input / output unit. Included in, Communication security system using non-address network equipment. The method of claim 2, The second security unit is included in the 2-1 input / output unit or the 2-2 input / output unit, or the second non-address network equipment separately from the 2-1 input / output unit and the 2-2 input / output unit. Included in, Communication security system using non-address network equipment. The method of claim 2, The first terminal is set to the first address, the second terminal is set to the second address, the first terminal and the second terminal has a different account, respectively, Communication security system using non-address network equipment. The method of claim 2, The 1-2 input / output unit and the 2-1 input / output unit connected to the communication network operate in a promiscuous mode for receiving all data transmitted through the communication network. Communication security system using non-address network equipment. The method of claim 2, The first security unit encrypts a specific portion of the first data inputted through the 1-2 input / output unit from the first terminal and generates the first encrypted data reprocessed according to a specific algorithm to generate the first-1 input / output unit. The second encrypted data inputted through the first-first input / output unit from the communication network or decoded to be output to the first terminal as second data reprocessed according to a specific algorithm, or the first-first from the communication network. Encrypting data input through an input / output unit and outputting the encrypted data reprocessed according to a specific algorithm to the first terminal; Communication security system using non-address network equipment. The method of claim 2, The second security unit encrypts a specific portion of the second data inputted through the second-2 input / output unit from the second terminal and generates the second encrypted data reprocessed according to a specific algorithm to generate the second-1 input / output unit. The first encrypted data inputted through the 2-1 input / output unit from the communication network or decoded and output to the second terminal as first data reprocessed according to a specific algorithm, or from the communication network. Encrypting data input through an input / output unit and outputting the encrypted data reprocessed according to a specific algorithm to the second terminal; Communication security system using non-address network equipment. The method of claim 2, When the first terminal to which the first address is set transmits data to the second terminal to which the second address is set, When the first terminal generates data including the second address and transmits the data to the first non-address network equipment, the first-second input / output unit includes data including the second address in the first non-address network equipment. Receives and transfers to the first security unit, The first security unit encrypts the data including the second address, reprocesses the data according to a specific algorithm, generates the first encrypted data, and transmits the first encrypted data to the communication network through the 1-1 input / output unit; The second non-address network equipment receives the first encrypted data from the communication network and transfers the first encrypted data to the second security unit through the second-1 input / output unit; The second security unit decrypts the first encrypted data, reprocesses the data according to a specific algorithm, generates the data including the second address, and transmits the data to the second terminal through the second-2 input / output unit. Communication security system using non-address network equipment. The method of claim 2, When the second terminal having the second address is set transmits data to the first terminal having the first address set, When the second terminal generates data including the first address and transmits the data to the second non-address network device, the second-2 input / output unit includes the first address in the second non-address network device. Receives and transfers to the second security unit, The second security unit encrypts the data including the first address, reprocesses the data according to a specific algorithm, generates second encrypted data, and transmits the second encrypted data to the communication network through the 2-1 input / output unit; In the first non-address network equipment, the first-first input-output unit receives the second encrypted data from the communication network and transfers the second encrypted data to the first security unit, The first security unit decrypts the second encrypted data and reprocesses the data according to a specific algorithm to generate data including the first address, and transmits the data to the first terminal through the 1-2 input / output unit. Communication security system using non-address network equipment. The method of claim 2, When the data transmitted from another terminal or hacker terminal other than the second terminal is input through the first-first input / output unit via the communication network, the first security unit encrypts the input data and generates the encrypted data according to a specific algorithm. The solution is transmitted to the first terminal through the 1-2 input / output unit, The second terminal does not recognize the encrypted data received from the 1-2 input and output unit to process as a data recognition error, Communication security system using non-address network equipment. The method of claim 2, When the data transmitted from another terminal or hacker terminal other than the first terminal is input through the 2-1 input / output unit via the communication network, the second security unit encrypts the input data and generates the encrypted data according to a specific algorithm. The solution is transmitted to the second terminal through the second input / output unit, The second terminal does not recognize the encrypted data received from the 2-2 input and output unit to process as a data recognition error, Communication security system using non-address network equipment. A communication security method using a non-address network device connected to a communication network through a first input / output unit, connected to a terminal through a second input / output unit, and a security unit connected between the first input / output unit and the second input / output unit, (a) when the security unit receives data from the terminal through the second input / output unit, encrypting and generating encrypted data and outputting the encrypted data to the communication network through the first input / output unit; (b) when the security unit receives encrypted data from the communication network through the first input / output unit, decrypts the data to generate data and outputs the data to the terminal through the second input / output unit; And (c) encrypting the security unit when receiving data from the communication network through the first input / output unit and outputting the encrypted data to the terminal through the second input / output unit as encrypted data; Communication security method using a non-address network equipment comprising a. The method of claim 15, In step (c), the terminal does not recognize the encrypted data received from the security unit to process as a data recognition error, Communication security method using non-address network equipment. The first non-address network equipment is connected to the communication network through the first-first input / output unit and the first terminal having the first address set through the first-second input / output unit, and the first-first input / output unit and the first-second input-output unit A first security unit is connected between the units, and a second non-address network device is connected to the communication network through a 2-1 input unit, and is connected to a second terminal having a second address set through the 2-2 input / output unit, and the second terminal. A communication security method using a non-address network device of a communication security system in which a second security unit is connected between an -1 input / output unit and the second-2 input / output unit, (a) generating, by the first terminal, data including the second address and transmitting the data to the first non-address network device through the 1-2 input / output unit; (b) in the first non-address network device, the first security unit encrypts the data including the second address, reprocesses the data according to a specific algorithm, and generates the first encrypted data to generate the first encrypted data. Sending to; (c) receiving, by the 2-1 input / output unit, the first encrypted data from the communication network and transmitting the first encrypted data to the second security unit in the second non-address network equipment; And (d) the second security unit decrypting the first encrypted data and reprocessing the data according to a specific algorithm to generate data including the second address, and transmitting the data to the second terminal through the second-2 input / output unit; Communication security method using a non-address network equipment of the communication security system comprising a. The first non-address network equipment is connected to the communication network through the first-first input / output unit and the first terminal having the first address set through the first-second input / output unit, and the first-first input / output unit and the first-second input-output unit. A first security unit is connected between the units, and a second non-address network device is connected to the communication network through a 2-1 input unit, and is connected to a second terminal having a second address set through the 2-2 input / output unit, and the second terminal. A communication security method using a non-address network device of a communication security system in which a second security unit is connected between an -1 input unit and a second input / output unit, and (a) generating, by the second terminal, data including the first address and transmitting the data to the second non-address network device through the second-2 input / output unit; (b) in the second non-address network device, the second security unit encrypts the data including the first address, reprocesses the data according to a specific algorithm, and generates second encrypted data to generate the second encrypted data. Sending to; (c) receiving, by the first-first input / output unit, the second encrypted data from the communication network and transmitting the second encrypted data to the first security unit in the first non-address network equipment; And (d) decrypting the second encrypted data by the first security unit and reprocessing the second encrypted data according to a specific algorithm to generate data including the first address and transmitting the data to the first terminal through the 1-2 input / output unit; Communication security method using a non-address network equipment of the communication security system comprising a.

Images