Background Art When a user transmits/receives data over a wired/wireless communication network, there is a chance that the user's ID/Password and (personal or important) information exchanged with others might by leaked by a third party (i. e. a cracker) using network listening and IP spoofing and so forth. What is worse is that the third part acquires encrypted user authentication information and retransmit the encrypted user authentication information to an authentication server to be authenticated, and then does wrongful things like money transaction or stock trading, spoofing as the real user.

Because the user authentication information that is transmitted after the encryption process is given to the third party and decrypted by the authentication server using the same method to be retransmitted, the purpose of encryption is lost. Therefore, there was a growing need to develop OTP (One Time Password) technologies. In general, there

are two types of OTP technologies: one is the OTP technology using a time synchronous mechanism and the other is the OTP technology using a challenge- response mechanism.

In case of the OTP technology with an application of the time synchronous mechanism, time is used as an encryption variable for creating a one time password.

To this end, an international time synchronous system had to be constructed. Even though Greenwich time could be used, in reality it is not easy to apply such system because of time difference in the intersystem and of different application times in different nations. The time difference actually causes another deadly problem to the OTP technology using the time synchronous mechanism. In other words, since the one time password is created every minute and the user is authenticated by the authentication server through the one time password, the third party who acquired the user authentication information being transmitted can retransmit the information to another authentication server within one minute and is authenticated.

Meanwhile, in case of the OTP technology with an application of the challenge - response mechanism the user, in order to create a one time password, need to purchase a separate operating system for operation processing of the one time password. Either the user has to carry around the operating system all the time or memorize a next one time password. In addition, there is always a danger of duplication of user certificate by the third party even when a PKI-based certificate, which is the most widely used data transmission method at present, is used for data transmission. If the third party copied the authentication related information only while leaving a portable storage untouched, there is no way for the user to realize his certificate has been copied by the cracker. Naturally the user does not report the certificate loss and apply for re-issuance of the certificate, leaving more room for the danger of dishonest deeds of the third party.

Finally, there is an encryption and user authentication system using biometric information of the user. In this case, however, the user has to purchase a costly biometric terminal to use the user's own biometric information so the system is not much favored by many users. Moreover, when the biometric information of the user is leaked, every security systems based on the biometric information loses its function.

Disclosure of Invention It is, therefore, an object of the present invention to provide a data transmission system and transmitting methods by using N-dimensional information to enable data exchange and user authentication at a high level of security, by applying an N- dimensional information-based operation processing to data to be transmitted/received between clients and between the client and the server over a wired/wireless communication network and thus, creating data with an application of one time encryption algorithm.

Brief Description of Drawings The above objects, features and advantages of the present invention will become more apparent from the following detailed description when taken in conjunction with the accompanying drawings, in which: Fig. 1 illustrates a basic information unit structure diagram of N-dimensional information according to the present invention; Fig. 2 illustrates a set of basic information unit structure diagram of N- dimensional information according to the present invention; Fig. 3 is a block diagram showing a Client/Server System according to the present invention;

Fig. 4 is a flow chart describing a client authentication procedure by a Server System according to the present invention; Fig. 5 is a flow chart describing a procedure for transmitting authentication information by a Client System according to the present invention; and Fig. 6 is a flow chart describing a data transmitting procedure to which data encryption algorithm of the present invention is applied.

Best Mode for Carrying Out the Invention A preferred embodiment of the present invention will now be described with reference to the accompanying drawings.

Fig. 1 illustrates a basic information unit structure diagram of N-dimensional information according to the present invention.

The basic information unit for N-dimensional information, FILEf, includes THE TOP CODE_ 100, THE MIDDLE CODEf. n 200, and THE BOTTOM CODEZ 300 (wherein'f indicates a FILE number and'n'indicates a positive integer).

For convenience of explanation, the THE TOP CODE_ 100 is denoted as 'T_f', THE MIDDLE CODEf. n 200 as'Mf. n, and THE BOTTOM CODEf 300 as 'B_f'.

For example, in case of FILE 0, THE TOP CODE_ 100 can be denoted as T_0, THE MIDDLE CODE f. n 200 as M O. n, and THE BOTTOM CODE_ 300 as B 0.

The Tf information is top layer information, constructing the basic information unit of the N-dimensional information, i. e. FILEf. The Tf information includes combined information of codes that are created when inputting keys on a keyboard or keypad for use in a computer, portable communication equipment or equipment with an entries/employee punching controller; and biometric information obtained by means of

a biometric terminal. To structure the Tf information, a user may use biometric information obtained through the biometric terminal or if the user does not own the biometric terminal, the user may combine key codes on the keyboard or keypad.

The Mf. n information is middle layer information between the top layer information (Tf information) and the bottom layer information (B_f information).

The Mf. n information functions as variable information to apply N-dimensional information-based encryption algorithm to the data to be transmitted/received between clients and between the client and the server over a wired/wireless communication network. The M_f. n includes'n'middle layer information from Mf. l to Mf. n (wherein'n'is a positive integer). The M f. l is bottom layer information related to the Tf, and Mf. n-l is upper layer information of the Mf. n information (wherein, n>2).

The Bf information is bottom layer information out of the N-dimensional basic information unit, FILEf information. Also, the Bf information is the lower layer information related to the Mf. n information. For example, a picture the user painted, the user's autograph, every kind of biometric information about the user, and combined information using random key values on the keyboard/keypad can be used as the Bf information.

To be short, the N-dimensional basic information unit, namely the FILEf information, includes the Tf information (the top layer information), the Mf. n information (the lower layer information related to the Tf information), and the Bf information (the lower layer information related to the Mf. n information).

Fig. 2 illustrates a set of the N-dimensional information, including N basic information units. The N-dimensional information is stored in a portable storage device or storage in general.

Fig. 3 illustrates a Client System 10 and a Server System 20, in accordance with the present invention.

As for the Client System 10 there are network system character based terminals having built-in wired/wireless communication functions, such as personal computers, cell phones, PDAs, and smart phones, and local system character based terminals, such as entries/employee punching control terminals. The Server System 20 indicates an authentication server for an authentication center and for a financial institution including bank and Securities Company.

As shown in Fig. 3, the Client System 10 includes a processor 15 for controlling generic functions of the Client System 10, a memory 16 connected to the processor 15 and storing activated information, a storage device 17 connected to the processor 15 and storing N-dimensional information, and a transfer part 19 connected to the processor 15 and transmitting/receiving information. The Server System 20 includes a processor 25 for controlling generic functions of the Server System, a memory 26 connected to the processor 25 and storing activated information, DBMS 27 connected to the processor 25 and managing database, DB 28 connected to the processor 25 and storing N-dimensional information, and a transfer part 29 connected to the processor 25 and transmitting/receiving information.

Both the Client System 10 and the Server System 20 are connected to a portable storage 11 or biometric terminal 22.

Functions of each of the processors 15 and 25 for the Client System 10 and the Server System 20, respectively, include: transmitting/receiving the N-dimensional Tf 100 combined information; receiving the N-dimensional Tf 100 combined information from the keyboard or keypad included in each System 10 or 20 ; searching lower layer information Mf. l 200 combined information related to the transmitted/received or

inputted N-dimensional Tf 100 combined information ; searching lower layer information Mf. n 200 combined information (n>2) related to the Mf. l 200 combined information; searching lower layer information Bf 200 combined information related to the Mf. n 200 combined information; searching lower layer information Bf 300 combined information related to the transmitted/received or inputted Tf 100 combined information; applying to the searched Bf 300 combined information an encryption processing using the searched Mf. n combined information as a variable; applying to data to be transmitted an encryption processing using the searched Mf. n combined information as a variable; and applying the received information a decryption processing using the searched Mf. n combined information as a variable. On the basis of the above-described procedure, each procedure 15 or 25 includes additional functions of searching upper layer information Mf. n 200 information related to the Bf 100 information that can be used as a variable for encryption and decryption of the upper layer information Tf 100 information having been searched by using the transmitted/received or inputted Mf. n 200 information; and searching upper layer information Tf 100 information related to the Mf. n 200 information.

The encryption and decryption processing is characterized of applying to the data to be transmitted an operation processing including octet substitute operation, bit substitute operation and a particular function using the N-dimensional Tf 100 combined information or Mf. n 200 combined information as a variable.

In the Client System 10, the memory 16 stores data that is used to search the N- dimensional information and operation data using the N-dimensional information. The storage device 17 is a fixed storage device like a hard disk and stores the N-dimensional information. The transfer part 19 transmits/receives the N-dimensional Tf information and other information on which the N-dimensional information-based

operation processing is performed.

In the Server System 20, the memory 26 stores data that is used to search the N- dimensional information and operation data using the N-dimensional information. The DBMS 27 manages the DB where the N-dimensional information is stored. The DB 28 stores the N-dimensional information. The transfer part 29 transmits the N- dimensional Tf 100 information or M f. n 200 information and receives other information on which the N-dimensional information-based operation processing is performed.

As for the portable storage 11, USB port connecting memory with a built-in memory, memory stick, and other types of portable storage including IC Chip can be employed. Similar to the DB, the portable storage 11 stores the N-dimensional information.

The biometric terminal 22 is capable of extracting user's biometric information including finger prints, iris, vein, face, voice and so on. Particularly, the biometric terminal 22 extracts biometric information of the user who registered the N-dimensional Tf information as the biometric information.

The Client System 10 is also characterized of transmitting combined information composed of N-dimensional Tf combined information; receiving combined information structure of Tf combined information; searching lower layer information Mf. n information related to the received Tf information; searching lower layer information Bf information related to the searched Mf. n information; searching lower layer information Bf information related to the Tf information that is inputted by the user through the keyboard or keypad or biometric terminal of the Client System 10; applying to data to be transmitted an encryption processing including octet substitute operation, bit substitute operation and particular function using the searched

Mf. n information as a variable and transmitting the data; and applying to the received data a decryption processing including octet substitute operation, bit substitute operation and particular function using the searched Mf. n information as a variable.

The Server System 20 is characterized of : transmitting combined information composed of N-dimensional Tf combined information; receiving combined information structure of Tf combined information; searching lower layer information Mf. n information related to the received Tf information; searching the authentication information the client registered; applying to the searched authentication information an encryption processing including octet substitute operation, bit substitute operation and particular function using the searched Mf. n information as a variable; receiving the authentication information from the client; comparing the authentication information from the client to the encrypted data and if coincident, performing the authentication processing; and applying to the received authentication information from the client a decryption processing including octet substitute operation, bit substitute operation and particular function using the searched Mf. n information as a variable, comparing the authentication information the client registered to the decrypted information and if coincident, performing the authentication processing.

Other objectives, features and advantages of the present invention will be apparent through further discussion on other embodiments illustrated in the drawings.

A preferred embodiment of the data transmission system and transmitting method using the N-dimensional information in the Client System 10 and Server System 20 will now be explained with the reference with Figs. 4 to 6.

For authentication between the Client System 10 and the Server System 20, the client creates N-dimensional information at a financial institute or an authentication center, and registers and stores the N-dimensional information in the storage device 17

of the Client System 10 and in the DB 28 and portable storage 11 of the Server System 20, respectively.

Fig. 4 is a flow chart describing one embodiment of data transmitting procedure using the N-dimensional information, which takes place in the Server System 20 and in the Client System 10 according to the present invention, the procedure including the steps of : (a) randomly extracting N-dimensional Tf 100 information to create combined information and transmitting the combined information to the Client System 20 that requests authentication (Sl) ; (b) searching lower layer information Mf. n 200 combined information related to the transmitted Tf 100 combined information (S2); (c) applying to the authentication information registered by the client an encryption processing using the searched Mf. n 200 combined information as a variable to create encrypted information (S3); (d) receiving the authentication information from the client (S4); (e) analyzing whether the encrypted information corresponds with the authentication information received from the client (S5) ; and (f) if the encrypted information corresponds with the authentication information from the client (S6), authenticating the client and processing requirement of the client (S7).

Fig. 5 is a flow chart describing another embodiment of data transmission procedure using the N-dimensional information according to the present invention, in which the Client System 10 transmits authentication information to the Server System 20, the procedure including the steps of : (g) receiving the N-dimensional Tf 100 combined information from the Server System 20 (S8); (h) searching the portable storage 11 or the storage device 17 for the lower layer information Mf. n 200 combined information related to the received Tf 100 combined information; and (i) applying to the authentication information the client needs to transmit an encryption processing using the searched Mf. n 200 combined information as a variable to create the

encrypted information, and transmitting the encrypted information being created to the Server System 20 (S 10).

If the encrypted information needs to be transmitted between different Client Systems 10, before transmitting the encrypted information the client creates N- dimensional information according to the present invention, shares the Tf 100 information and the Mf. n 200 information and stores the information in the storage device 17 and portable storage 11 of the Client System 10, respectively.

Fig. 6 is a flow chart describing one embodiment of data transmitting procedure using the N-dimensional information according to the present invention to transmit/receive encrypted information, in which the encrypted information is transmitted between different Client Systems 10, the procedure including the steps of : (j) randomly extracting N-dimensional Tf 100 information to create combined information, and transmitting the combined information to another Client System for information exchange and sharing (S 11) ; (k) searching lower layer information Mf. n 200 combined information related to the Tf 100 combined information being shared (S12) ; (1) applying to the information the client needs to transmit an encryption processing using the searched Mf. n 200 combined information as a variable to create encrypted information, and transmitting the encrypted information to the client (S13) ; and (m) applying to the information the client received a decryption processing using the searched Mf. n 200 combined information as a variable to create decrypted information.

While the invention has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

Industrial Applicability As for the authentication process between the Client System 10 and the Server System 20 and for the data transmission between Client Systems 10, the N-dimensional Tf 100 information, Mf. n 200 information and Bf300 information are used and the encryption processing, which uses the Mf. n 200 combined information related to the transmitted/received Tf 100 combined information as a variable, is applied to the information the Client System 10 or the Server System 20 needs to transmits.

Therefore, the present invention provides a unique encryption algorithm.