Server apparatus having one-time scan code issuing function, user terminal having one-time scan code recognizing function and method for processing one-time scan code

1. A server apparatus having a one-time scan code issuing function, the server apparatus comprising:

a processor and memory;

a database configured to store a Private Key (PRK) of each user;

an OTK generating unit configured to generate an One Time Key (OTK) with a valid time, and store the generated OTK and valid time information of the OTK;

an PBK generating unit configured to generate a one-time Public Key (PBK) using the PRK and the generated OTK, and store the generated one-time PBK by matching the OTK therewith;

a scan code generating unit configured to generate a scan code comprising the generated one-time PBK;

a first encrypted-message receiving unit configured to receive a first encrypted-message, which is generated using the OTK by a first encrypted-message generating unit of a user terminal, and the one-time PBK from the user terminal;

an OTK searching unit configured to verify validity of the received one-time PBK, and, in response to a verified validity of the one-time PBK, search for the OTK matched with the one-time PBK; and

a first encrypted-message decrypting unit configured to decrypt the received first encrypted-message using the found OTK.

2. The server apparatus of claim 1 , further comprising:

a scan code transmitting unit configured to transmit the scan code comprising the one-time PBK to the user terminal.

3. The server apparatus of claim 1 , further comprising:

a second encrypted-message generating unit configured to generate a second encrypted-message by encrypting a message using the OTK; and

a second encrypted-message transmitting unit configured to transmit the generated second encrypted-message and the OTK to the user terminal.

4. The server apparatus of claim 3 , further comprising:

an OTK invalidating unit configured to invalidate the OTK and the one-time PBK when all messages are completely transmitted and/or received with respect to the user terminal, when the valid time of the OTK has expired, or when a communication attempt is made using the one-time PBK that is suspected of being forged or counterfeited.

5. The server apparatus of claim 1 , wherein the scan code is a bar code or a QR code.

6. A user terminal comprising:

a processor and memory;

a scan code recognizing unit configured to recognize a scan code comprising a one-time Public Key (PBK), acquire the one-time PBK from the scan code and store the acquired one-time PBK;

an OTK acquiring unit configured to acquire an One Time Key (OTK) from the acquired one-time PBK using a Private Key (PRK), and store the acquired OTK;

a second encryption message receiving unit configured to receive a second encrypted-message, which is generated using the OTK by a second encrypted-message generating unit of a server apparatus, and the one-time PBK from the server apparatus;

an OTK searching unit configured to verify validity of the received one-time PBK, and, in response to a verified validity of the one-tine PBK, search for the OTK matched with the one-time PBK; and

a second encrypted-message decrypting unit configured to decrypt the received second encrypted-message using the found OTK.

7. The user terminal of claim 6 , further comprising:

a scan code receiving unit configured to receive the scan code comprising the one-time PBK from the server apparatus.

8. The user terminal of claim 6 , further comprising:

a first encrypted-message generating unit configured to generate a first encrypted-message by encrypting a message using the OTK; and

a first encrypted-message transmitting unit configured to transmit the generated first encrypted-message and the one-time PBK to the server apparatus.

9. The user terminal of claim 6 , further comprising

an OTK invalidating unit configured to invalidate the OTK and the one-time PBK when all messages are completely transmitted and/or received with respect to the user terminal, when the valid time of the OTK has expired, or when a communication attempt is made using the one-time PBK that is suspected of being forged or counterfeited.

10. The user terminal of claim 6 , wherein the scan code is a bar code or a QR code.

11. A method for processing a one-time scan code, the method comprising:

generating, at a server apparatus, an One Time Key (OTK) having a valid time and storing the generated OTK and valid time information of the OTK;

generating, at the server apparatus, a one-time Public Key (PBK) using the generated OTK and a Private Key (PRK) which is shared with a user terminal, and storing the generated one-time PBK by matching the OTK therewith;

generating, at the server apparatus, a scan code comprising the generated one-time PBK;

generating, at the user terminal, generating a first encrypted-message by encrypting a message using the OTK;

transmitting, at the user terminal, the generated first encrypted-message and the one-time PBK to the server apparatus;

receiving, at the server apparatus, the generated first encrypted-message and the one-time PBK from the user terminal;

verifying, at the server apparatus, validity of the received one-time PBK and, in response to a verified validity of the one-time PBK, searching for the OTK matched with the one-time PBK; and

decrypting, at the server apparatus, the received first encrypted-message using the found OTK.

12. The method of claim 11 , further comprising:

transmitting, at the server apparatus, the generated scan code comprising the one-time PBK to the user terminal.

13. The method of claim 11 , further comprising:

recognizing, at the user terminal, the scan code comprising the one-time PBK, acquiring the one-time PBK and storing the acquired one-time PBK; and

acquiring, at the user terminal, the OTK from the acquired one-time PBK and storing the acquired OTK.

14. The method of claim 11 , further comprising:

invalidating, at the server apparatus, the OTK and the one-time PBK when all messages are completely transmitted and/or received with respect to the user terminal, when the validity of the OTK has expired or when a communication attempt is made using the one-time PBK that is suspected of being forged or counterfeited.

15. The method of claim 11 , wherein the scan code is a bar code or a QR code.

16. A method for processing a one-time scan code, the method comprising:

generating, at a server apparatus, an One Time Key (OTK) having a valid time and storing the generated OTK and valid time information of the OTK;

generating, at the server apparatus, a one-time Public Key (PBK) using the generated OTK and a Private Key (PRK) which is shared with a user terminal, and storing the generated one-time PBK by matching the OTK therewith;

generating, at the server apparatus, a scan code comprising the generated one-time PBK;

generating, at the server apparatus a second encrypted-message by encrypting a message using the OTK;

transmitting, at the server apparatus, the generated second encrypted-message and the one-time PBK to the user terminal;

receiving, at the user terminal, the generated second encrypted-message and the one-time PBK from the server apparatus;

verifying, at the user terminal, validity of the received one-time PBK and, in response to a verified validity of the one-time PBK, searching for the OTK matched with the one-time PBK; and

decrypting, at the user terminal, the received second encrypted-message using the found OTK.

17. The method of claim 16 , further comprising:

invalidating, at the user terminal, the OTK and the one-time PBK when all messages are completely transmitted and/or received with respect to the server apparatus, when the validity of the OTK has expired or when a communication attempt is made using the one-time PBK that is suspected of being forged or counterfeited.

18. The method of claim 16 , further comprising:

transmitting, at the server apparatus, the generated scan code comprising the one-time PBK to the user terminal.

19. The method of claim 16 , further comprising:

recognizing, at the user terminal, the scan code comprising the one-time PBK, acquiring the one-time PBK and storing the acquired one-time PBK; and

acquiring, at the user terminal, the OTK from the acquired one-time PBK and storing the acquired OTK.

20. The method of claim 16 , wherein the scan code is a bar code or a QR code.