Electronic device for encrypting content and operation method therefor

Abstract

This electronic device (101) may comprise: at least one communication interface (190); a camera (180) or at least one sensor (176); at least one processor (120) connected to the at least one communication interface and the camera or the at least one sensor; and a memory (130) including instructions, wherein the instructions, when executed by the at least one processor, instruct the at least one processor to: generate first information related to the location of the electronic device on the basis of first data acquired by means of the camera or the at least one sensor; generate second information related to the location on the basis of second data acquired by means of the at least one communication interface; generate an encryption key used to encrypt content and data used to restore the encryption key on the basis of the first information and the second information; and encrypt the content on the basis of the encryption key.

Description

Electronic device for encrypting content and method of operation thereof

[0001] The present disclosure relates to an electronic device for encrypting content and a method of operating the same.

[0002] The damage to individuals and businesses caused by information leaks has been increasing exponentially. For businesses in particular, the costs associated with information leaks, such as response procedures and lost sales, are correspondingly high, which can lead to price increases for services or products. This means that companies are unable to address the costs of information leaks on their own, and this can lead to a loss of customers due to a decline in competitiveness.

[0003] Although various measures have been introduced to prevent damage caused by such information leaks, not only direct damages such as the amount of damage caused by information leaks, but also indirect damages such as decreased trust and competitiveness due to information leaks are continuously increasing.

[0004] The above information may be provided as background information to aid in understanding this document. None of the above is claimed to be prior art related to this document or can be used to determine prior art.

[0005] One or more embodiments of the present disclosure may provide an electronic device for encrypting content and a method of operating the same.

[0006] One or more embodiments of the present disclosure may provide an electronic device and a method of operating the same for encrypting content based on data associated with a location.

[0007] According to one or more example embodiments of the present disclosure, an electronic device may include: at least one communication interface; a camera or at least one sensor; at least one processor connected to the at least one communication interface and the camera or the at least one sensor; and a memory including instruction(s), which, when executed by the at least one processor, cause the at least one processor to: generate first information related to a location of the electronic device based on first data acquired through the camera or the at least one sensor; generate second information related to the location based on second data acquired through the at least one communication interface; generate an encryption key used to encrypt content and data used to restore the encryption key based on the first information and the second information; and encrypt the content based on the encryption key.

[0008] The above instructions may further cause the at least one processor to transmit the encrypted content and data used to recover the encryption key to a server via the at least one communication interface.

[0009] The instructions may further cause the at least one processor to: apply a first encryption scheme to the first information to generate a first encryption key and data used to restore the first encryption key; apply the first encryption scheme to the second information to generate a second encryption key and data used to restore the second encryption key; and apply a second encryption scheme to the first encryption key and data used to restore the second encryption key to generate data used to restore the encrypted second encryption key. The encryption key may include the second encryption key, and the data used to restore the encryption key may include data used to restore the first encryption key and the data used to restore the encrypted second encryption key.

[0010] The instructions may further cause the at least one processor to: extract feature information including feature points from the image based on the first data being an image acquired through the camera, and set one of the feature points as a reference feature point, determine a position value and a color value of the reference feature point based on a position and a color of the reference feature point, determine position values ​​of the remaining feature points other than the reference feature point among the feature points based on the position of the reference feature point, determine color values ​​of the remaining feature points, and generate the first information including the position values ​​and color values ​​of the feature points.

[0011] The instructions may further cause the at least one processor to: identify an identifier of another electronic device transmitting the at least one signal based on the second data being at least one signal obtained through the at least one communication interface; measure a received signal strength of the at least one signal; and generate the second information including the identifier of the other electronic device and the received signal strength.

[0012] The at least one signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0013] The at least one signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0014] According to one or more example embodiments, an electronic device may include: at least one communication interface; a camera or at least one sensor; at least one processor connected to the at least one communication interface and the camera and the at least one sensor; and a memory including instructions, which when executed by the at least one processor cause the at least one processor to: generate first information related to a location of the electronic device based on first data acquired through the camera or the at least one sensor; generate second information related to the location based on second data acquired through the at least one communication interface; recover an encryption key used to encrypt content based on the first information, the second information, and data used to recover the encryption key; and decrypt the encrypted content based on the encryption key.

[0015] The instructions may further cause the at least one processor to: receive, from a server via the at least one communication interface, the encrypted content and data used to recover the encryption key.

[0016] The data used to restore the encryption key may include data used to restore a first encryption key and data used to restore an encrypted second encryption key, and the instructions may further cause the at least one processor to: restore the first encryption key by applying a first decryption method to the first information and the data used to restore the first encryption key; restore the data used to restore the second encryption key by applying a second decryption method to the data used to restore the first encryption key and the encrypted second encryption key; and restore the second encryption key by applying the first decryption method to the data used to restore the second encryption key and the second information. The encryption key may include the second encryption key.

[0017] The data used to restore the first encryption key may be generated by applying a first encryption method corresponding to the first decryption method to the first information, the data used to restore the encrypted second encryption key may be generated by applying a second encryption method corresponding to the second decryption method to the data used to restore the first encryption key and the data used to restore the second encryption key, the data used to restore the first encryption key may be generated by applying the first encryption method to the first information, and the data used to restore the second encryption key may be generated by applying the first encryption method to the second information.

[0018] The instructions may further cause the at least one processor to: extract feature information including feature points from the image based on the first data being an image acquired through the camera; and set one of the feature points as a reference feature point; determine a position value and a color value of the reference feature point based on a position and a color of the reference feature point; determine position values ​​of feature points other than the reference feature point among the feature points based on a position of the reference feature point, and determine color values ​​of the remaining feature points; and generate the first information including the position values ​​and color values ​​of the feature points.

[0019] The instructions may further cause the at least one processor to: identify an identifier of another electronic device transmitting the at least one signal based on the second data being at least one signal obtained through the at least one communication interface; measure a received signal strength of the at least one signal; and generate the second information including the identifier of the other electronic device and the received signal strength.

[0020] The at least one signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0021] The at least one signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0022] According to one or more example embodiments, the method may include: generating first information related to a location of an electronic device based on first data acquired through a camera or at least one sensor; generating second information related to the location based on second data acquired through at least one communication interface; generating an encryption key used to encrypt content and data used to reproduce the encryption key based on the first information and the second information; and encrypting the content based on the encryption key.

[0023] The method may further include: transmitting, to a server, the encrypted content and data used to restore the encryption key.

[0024] The operation of generating the encryption key and the data used to restore the encryption key may include: an operation of applying a first encryption method to the first information to generate a first encryption key and data used to restore the first encryption key; an operation of applying the first encryption method to the second information to generate a second encryption key and data used to restore the second encryption key; and an operation of applying a second encryption method to the data used to restore the first encryption key and the second encryption key to generate data used to restore the encrypted second encryption key. The encryption key may include the second encryption key, and the data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0025] The operation of generating the first information may include: an operation of extracting feature information including feature points from the image based on the first data being an image acquired through the camera, and setting one of the feature points as a reference feature point; an operation of determining a position value and a color value of the reference feature point based on a position and a color of the reference feature point; an operation of determining position values ​​of the remaining feature points other than the reference feature point among the feature points based on a position of the reference feature point, and determining color values ​​of the remaining feature points; and an operation of generating the first information including the position values ​​and color values ​​of the feature points.

[0026] The operation of generating the second information may include: an operation of identifying an identifier of another electronic device transmitting the at least one signal based on the second data being at least one signal obtained through the at least one communication interface; an operation of measuring a received signal strength of the at least one signal; and an operation of generating the second information including the identifier of the other electronic device and the received signal strength.

[0027] The above and other aspects, features, and advantages of the present disclosure will become more apparent from the following detailed description, taken in conjunction with the accompanying drawings, in which:

[0028] FIG. 1 is a block diagram schematically illustrating an electronic device within a network environment according to one embodiment;

[0029] FIG. 2 is a diagram schematically illustrating a wireless communication system according to one or more embodiments of the present disclosure;

[0030] FIG. 3 is a block diagram schematically illustrating a configuration of a server according to one or more embodiments of the present disclosure;

[0031] FIG. 4 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure;

[0032] FIG. 5 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure;

[0033] FIG. 6 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure;

[0034] FIG. 7 is a diagram illustrating the operation of a key generator and restorer according to one or more embodiments of the present disclosure;

[0035] FIG. 8 is a diagram illustrating location-related data used to encrypt content according to one or more embodiments of the present disclosure;

[0036] FIG. 9 is a diagram illustrating an operation of generating information related to a location corresponding to an image according to one or more embodiments of the present disclosure;

[0037] FIG. 10 is a diagram illustrating an operation of generating information related to a location corresponding to a first signal according to one or more embodiments of the present disclosure;

[0038] FIG. 11 is a diagram illustrating an operation of generating information related to a location corresponding to a second signal according to one or more embodiments of the present disclosure;

[0039] FIG. 12 is a diagram illustrating a method for encrypting content according to one or more embodiments of the present disclosure;

[0040] FIG. 13 is a diagram illustrating a method of decrypting content according to one or more embodiments of the present disclosure;

[0041] FIG. 14 is a flowchart schematically illustrating a method of operating an electronic device according to one or more embodiments of the present disclosure; and

[0042] FIG. 15 is a flowchart schematically illustrating a method of operating an electronic device according to one or more embodiments of the present disclosure.

[0043] Hereinafter, one or more embodiments of the present disclosure will be described in detail with reference to the accompanying drawings. In addition, when describing one or more embodiments of the present disclosure, if it is determined that a specific description of a related known function or configuration may unnecessarily obscure the gist of one or more embodiments of the present disclosure, the detailed description thereof will be omitted. In addition, the terms described below are terms defined in consideration of the functions in one embodiment of the present disclosure, and these may vary depending on the intention or custom of the user or operator. Therefore, the definitions should be made based on the contents throughout this specification.

[0044] It should be noted that the technical terms used herein are merely used to describe specific embodiments and are not intended to limit one or more embodiments of the present disclosure. Alternatively, unless specifically defined otherwise herein, the technical terms used herein should be interpreted as having a meaning generally understood by a person skilled in the art to which the present disclosure pertains, and should not be interpreted in an excessively broad or narrow sense. Alternatively, if a technical term used herein is an incorrect technical term that does not accurately express the spirit of the present disclosure, it should be replaced with a technical term that can be correctly understood by a person skilled in the art. Alternatively, general terms used in one or more embodiments of the present disclosure should be interpreted as defined in a dictionary or according to the context, and should not be interpreted in an excessively narrow sense.

[0045] Alternatively, the singular expressions used herein include plural expressions unless the context clearly dictates otherwise. In this application, terms such as "consist of" or "comprises" should not be construed to necessarily include all of the various components or various operations described in the specification, and should be construed to mean that some of the components or some of the operations may not be included, or that additional components or operations may be included.

[0046] Alternatively, terms including ordinal numbers, such as "first," "second," etc., used herein may be used to describe various components, but the components should not be limited by these terms. These terms are used solely to distinguish one component from another. For example, without departing from the scope of the present disclosure, a first component could be referred to as a "second component," and similarly, a second component could also be referred to as a "first component."

[0047] When a component is referred to as being "connected" or "connected" to another component, it may be directly connected or connected to that other component, but there may also be other components intervening. Conversely, when a component is referred to as being "directly connected" or "connected" to another component, it should be understood that there are no other components intervening.

[0048] Hereinafter, one or more embodiments of the present disclosure will be described in detail with reference to the attached drawings. Regardless of the drawing numbers, identical or similar components will be given the same reference numbers and redundant descriptions thereof will be omitted. Alternatively, when describing one or more embodiments of the present disclosure, if it is determined that a detailed description of a related known technology may obscure the gist of the present disclosure, the detailed description thereof will be omitted. Alternatively, it should be noted that the attached drawings are only intended to facilitate easy understanding of the spirit of the present disclosure and should not be construed as limiting the spirit of the present disclosure by the attached drawings. The spirit of the present disclosure should be construed to extend to all modifications, equivalents, and substitutes other than those shown in the attached drawings.

[0049] Hereinafter, one or more embodiments of the present disclosure will describe an electronic device, which may be referred to as a terminal, a mobile station, mobile equipment (ME), user equipment (UE), a user terminal (UT), a subscriber station (SS), a wireless device, a handheld device, or an access terminal (AT). Alternatively, in one or more embodiments of the present disclosure, the electronic device may be a device having a communication function, such as a mobile phone, a personal digital assistant (PDA), a smartphone, a wireless MODEM, or a laptop. Alternatively, in one or more embodiments of the present disclosure, the electronic device may be a device that can be connected to a plurality of electronic devices, such as a server (e.g., a cloud server).

[0050] FIG. 1 is a block diagram schematically illustrating an electronic device (101) within a network environment (100) according to one embodiment.

[0051] Referring to FIG. 1, in a network environment (100), an electronic device (101) may communicate with an electronic device (102) via a first network (198) (e.g., a short-range wireless communication network), or may communicate with an electronic device (104) or a server (108) via a second network (199) (e.g., a long-range wireless communication network). According to one embodiment, the electronic device (101) may communicate with the electronic device (104) via the server (108). According to one embodiment, the electronic device (101) may include a processor (120), a memory (130), an input module (150), an audio output module (155), a display module (160), an audio module (170), a sensor module (176), an interface (177), a connection terminal (178), a haptic module (179), a camera module (180), a power management module (188), a battery (189), a communication module (190), a subscriber identification module (196), or an antenna module (197). In some embodiments, the electronic device (101) may omit at least one of these components (e.g., the connection terminal (178)), or may have one or more other components added. In some embodiments, some of these components (e.g., the sensor module (176), the camera module (180), or the antenna module (197)) may be integrated into one component (e.g., the display module (160)).

[0052] The processor (120) may control at least one other component (e.g., a hardware or software component) of the electronic device (101) connected to the processor (120) by executing, for example, software (e.g., a program (140)), and may perform various data processing or calculations. According to one embodiment, as at least a part of the data processing or calculation, the processor (120) may store a command or data received from another component (e.g., a sensor module (176) or a communication module (190)) in a volatile memory (132), process the command or data stored in the volatile memory (132), and store the resulting data in a non-volatile memory (134). According to one embodiment, the processor (120) may include a main processor (121) (e.g., a central processing unit or an application processor) or a secondary processor (123) (e.g., a graphics processing unit, a neural processing unit (NPU), an image signal processor, a sensor hub processor, or a communication processor) that can operate independently or together therewith. For example, if the electronic device (101) includes a main processor (121) and a secondary processor (123), the secondary processor (123) may be configured to use less power than the main processor (121) or to be specialized for a specified function. The secondary processor (123) may be implemented separately from the main processor (121) or as a part thereof.

[0053] The auxiliary processor (123) may control at least a part of functions or states associated with at least one component (e.g., a display module (160), a sensor module (176), or a communication module (190)) of the electronic device (101), for example, on behalf of the main processor (121) while the main processor (121) is in an inactive (e.g., sleep) state, or together with the main processor (121) while the main processor (121) is in an active (e.g., application execution) state. In one embodiment, the auxiliary processor (123) (e.g., an image signal processor or a communication processor) may be implemented as a part of another functionally related component (e.g., a camera module (180) or a communication module (190)). In one embodiment, the auxiliary processor (123) (e.g., a neural network processing device) may include a hardware structure specialized for processing an artificial intelligence model. The artificial intelligence model may be generated through machine learning. This learning can be performed, for example, in the electronic device (101) itself where artificial intelligence is performed, or can be performed through a separate server (e.g., server (108)). The learning algorithm can include, for example, supervised learning, unsupervised learning, semi-supervised learning, or reinforcement learning, but is not limited to the examples described above. The artificial intelligence model can include multiple artificial neural network layers.The artificial neural network may be one of a deep neural network (DNN), a convolutional neural network (CNN), a recurrent neural network (RNN), a restricted Boltzmann machine (RBM), a deep belief network (DBN), a bidirectional recurrent deep neural network (BRDNN), a deep Q-network, or a combination of two or more of the above, but is not limited to the examples described above. In addition to, or alternatively to, a hardware structure, an artificial intelligence model may include a software structure.

[0054] The memory (130) can store various data used by at least one component (e.g., processor (120) or sensor module (176)) of the electronic device (101). The data can include, for example, software (e.g., program (140)) and input data or output data for commands related thereto. The memory (130) can include volatile memory (132) or non-volatile memory (134).

[0055] The program (140) may be stored as software in memory (130) and may include, for example, an operating system (142), middleware (144), or an application (146).

[0056] The input module (150) can receive commands or data to be used in a component of the electronic device (101) (e.g., a processor (120)) from an external source (e.g., a user) of the electronic device (101). The input module (150) can include, for example, a microphone, a mouse, a keyboard, a key (e.g., a button), or a digital pen (e.g., a stylus pen).

[0057] The audio output module (155) can output audio signals to the outside of the electronic device (101). The audio output module (155) can include, for example, a speaker or a receiver. The speaker can be used for general purposes, such as multimedia playback or recording playback. The receiver can be used to receive incoming calls. According to one embodiment, the receiver can be implemented separately from the speaker or as part of the speaker.

[0058] The display module (160) can visually provide information to an external party (e.g., a user) of the electronic device (101). The display module (160) may include, for example, a display, a holographic device, or a projector and a control circuit for controlling the device. In one embodiment, the display module (160) may include a touch sensor configured to detect a touch, or a pressure sensor configured to measure the intensity of a force generated by the touch.

[0059] The audio module (170) can convert sound into an electrical signal, or vice versa, convert an electrical signal into sound. According to one embodiment, the audio module (170) can acquire sound through the input module (150), output sound through the sound output module (155), or an external electronic device (e.g., electronic device (102)) (e.g., speaker or headphone) directly or wirelessly connected to the electronic device (101).

[0060] The sensor module (176) can detect the operating status (e.g., power or temperature) of the electronic device (101) or the external environmental status (e.g., user status) and generate an electrical signal or data value corresponding to the detected status. According to one embodiment, the sensor module (176) can include, for example, a gesture sensor, a gyro sensor, a barometric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an IR (infrared) sensor, a biometric sensor, a temperature sensor, a humidity sensor, or an illuminance sensor.

[0061] The interface (177) may support one or more designated protocols that may be used to directly or wirelessly connect the electronic device (101) with an external electronic device (e.g., the electronic device (102)). In one embodiment, the interface (177) may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

[0062] The connection terminal (178) may include a connector through which the electronic device (101) may be physically connected to an external electronic device (e.g., electronic device (102)). According to one embodiment, the connection terminal (178) may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (e.g., a headphone connector).

[0063] A haptic module (179) can convert electrical signals into mechanical stimuli (e.g., vibration or movement) or electrical stimuli that a user can perceive through tactile or kinesthetic sensations. According to one embodiment, the haptic module (179) can include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

[0064] The camera module (180) can capture still images and videos. According to one embodiment, the camera module (180) may include one or more lenses, image sensors, image signal processors, or flashes.

[0065] The power management module (188) can manage power supplied to the electronic device (101). According to one embodiment, the power management module (188) can be implemented as, for example, at least a part of a power management integrated circuit (PMIC).

[0066] A battery (189) may power at least one component of the electronic device (101). In one embodiment, the battery (189) may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

[0067] The communication module (190) may support the establishment of a direct (e.g., wired) communication channel or a wireless communication channel between the electronic device (101) and an external electronic device (e.g., electronic device (102), electronic device (104), or server (108)), and the performance of communication through the established communication channel. The communication module (190) may operate independently from the processor (120) (e.g., application processor) and may include one or more communication processors that support direct (e.g., wired) communication or wireless communication. According to one embodiment, the communication module (190) may include a wireless communication module (192) (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module (194) (e.g., a local area network (LAN) communication module, or a power line communication module). Among these communication modules, the corresponding communication module can communicate with an external electronic device (104) via a first network (198) (e.g., a short-range communication network such as Bluetooth, Wi-Fi (wireless fidelity) direct, or IrDA (infrared data association)) or a second network (199) (e.g., a long-range communication network such as a legacy cellular network, a 5G network, a next-generation communication network, the Internet, or a computer network (e.g., a LAN or WAN)). These various types of communication modules can be integrated into a single component (e.g., a single chip) or implemented as a plurality of separate components (e.g., multiple chips). The wireless communication module (192) can verify or authenticate the electronic device (101) within a communication network such as the first network (198) or the second network (199) by using subscriber information (e.g., an international mobile subscriber identity (IMSI)) stored in the subscriber identification module (196).

[0068] The wireless communication module (192) can support 5G networks and next-generation communication technologies following the 4G network, such as NR access technology (new radio access technology). The NR access technology can support high-speed transmission of high-capacity data (eMBB (enhanced mobile broadband)), minimization of terminal power and connection of multiple terminals (mMTC (massive machine type communications)), or high reliability and low latency (URLLC (ultra-reliable and low-latency communications)). The wireless communication module (192) can support, for example, a high-frequency band (e.g., mmWave band) to achieve a high data transmission rate. The wireless communication module (192) can support various technologies for securing performance in a high-frequency band, such as beamforming, massive multiple-input and multiple-output (MIMO), full dimensional MIMO (FD-MIMO), array antenna, analog beam-forming, or large scale antenna. The wireless communication module (192) can support various requirements specified in the electronic device (101), an external electronic device (e.g., the electronic device (104)), or a network system (e.g., the second network (199)). According to one embodiment, the wireless communication module (192) can support a peak data rate (e.g., 20 Gbps or more) for eMBB realization, a loss coverage (e.g., 164 dB or less) for mMTC realization, or a U-plane latency (e.g., 0.5 ms or less for downlink (DL) and uplink (UL), or 1 ms or less for round trip) for URLLC realization.

[0069] The antenna module (197) can transmit or receive signals or power to or from an external device (e.g., an external electronic device). According to one embodiment, the antenna module (197) may include an antenna including a radiator formed of a conductor or a conductive pattern formed on a substrate (e.g., a PCB). According to one embodiment, the antenna module (197) may include a plurality of antennas (e.g., an array antenna). In this case, at least one antenna suitable for a communication method used in a communication network, such as the first network (198) or the second network (199), may be selected from the plurality of antennas, for example, by the communication module (190). A signal or power may be transmitted or received between the communication module (190) and an external electronic device via the selected at least one antenna. According to some embodiments, in addition to the radiator, another component (e.g., a radio frequency integrated circuit (RFIC)) may be additionally formed as a part of the antenna module (197).

[0070] In one embodiment, the antenna module (197) may form a mmWave antenna module. In one embodiment, the mmWave antenna module may include a printed circuit board, an RFIC disposed on or adjacent a first side (e.g., a bottom side) of the printed circuit board and capable of supporting a designated high-frequency band (e.g., a mmWave band), and a plurality of antennas (e.g., an array antenna) disposed on or adjacent a second side (e.g., a top side or a side side) of the printed circuit board and capable of transmitting or receiving signals in the designated high-frequency band.

[0071] At least some of the above components can be interconnected and exchange signals (e.g., commands or data) with each other via a communication method between peripheral devices (e.g., a bus, GPIO (general purpose input and output), SPI (serial peripheral interface), or MIPI (mobile industry processor interface)).

[0072] According to one embodiment, commands or data may be transmitted or received between the electronic device (101) and an external electronic device (104) via a server (108) connected to a second network (199). Each of the external electronic devices (102 or 104) may be the same or a different type of device as the electronic device (101). According to one embodiment, all or part of the operations executed in the electronic device (101) may be executed in one or more of the external electronic devices (102, 104, or 108). For example, when the electronic device (101) is to perform a certain function or service automatically or in response to a request from a user or another device, the electronic device (101) may, instead of or in addition to executing the function or service itself, request one or more external electronic devices to perform the function or at least a part of the service. One or more external electronic devices that receive the request may execute at least a portion of the requested function or service, or an additional function or service related to the request, and transmit the result of the execution to the electronic device (101). The electronic device (101) may process the result as is or additionally and provide it as at least a portion of a response to the request. For this purpose, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology may be used, for example. The electronic device (101) may provide an ultra-low latency service by using distributed computing or mobile edge computing, for example. In one embodiment, the external electronic device (104) may include an Internet of Things (IoT) device. The server (108) may be an intelligent server using machine learning and / or a neural network. According to one embodiment, the external electronic device (104) or the server (108) may be included in the second network (199).The electronic device (101) can be applied to intelligent services (e.g., smart home, smart city, smart car, or healthcare) based on 5G communication technology and IoT-related technology.

[0073] FIG. 2 is a diagram schematically illustrating a wireless communication system according to one or more embodiments of the present disclosure.

[0074] Referring to FIG. 2, the wireless communication system may include an electronic device (101) (e.g., the electronic device (101) of FIG. 1) and a server (108) (e.g., the server (108) of FIG. 1).

[0075] In one or more embodiments, the electronic device (101) generates input data (e.g., real data). In one or more embodiments, the real data may include data relating to a location where the electronic device (101) is located (e.g., a location of the electronic device (101). The data relating to a location where the electronic device (101) is located may include images, signal strength, sound, and / or global positioning system (GPS) data. In one or more embodiments, the real data may include biometric data, such as facial data, voice data, fingerprint data, palm data, iris data, and / or vascular data, of a user of the electronic device (101).

[0076] In one or more embodiments, the electronic device (101) may include a camera (e.g., the camera module (180) of FIG. 1). The electronic device (101) may acquire an image related to a location through the camera and generate real-world data corresponding to the acquired image.

[0077] In one or more embodiments, the electronic device (101) may include at least one sensor (e.g., the sensor module (176) of FIG. 1). The electronic device (101) may sense biometric data from the user's body through the at least one sensor. The electronic device (101) may acquire sounds related to a location through the at least one sensor.

[0078] In one or more embodiments, the electronic device (101) may include at least one communication circuit or communication interface (e.g., the communication module (190) of FIG. 1). The electronic device (101) may receive a signal related to a location (e.g., a WiFi signal and / or a Bluetooth signal) through the at least one communication circuit, and obtain a signal strength (e.g., a received signal strength indicator (RSSI)) based on the received signal. The electronic device (101) may obtain GPS data related to a location through the at least one communication circuit.

[0079] In one or more embodiments, the electronic device (101) may generate an encryption key (e.g., a secret key) and data (e.g., helper data) used to reproduce the encryption key based on a fuzzy extractor method. The electronic device (101) may generate the helper data and / or the encryption key based on the generated input data. In one or more embodiments, the encryption key may be a key used to encrypt content. In one or more embodiments, the helper data may be data used to reproduce the encryption key, and the helper data may be implemented in the form of a helper matrix, for example.

[0080] In one or more embodiments, the encryption key includes a plurality of elements (e.g., 512), and a set number of elements (e.g., 16) of the plurality of elements may be non-zero elements, and the remaining number of elements may be zero elements. For example, each of the 16 non-zero elements may have a size of 1 / 4 (i.e., a value of ±1 / 4), and each of the remaining elements (e.g., zero elements) may have a value of 0. In this way, since each of the 16 elements has a value of ±1 / 4, the size of the generated encryption key may have a value of 1.

[0081] In one or more embodiments, a helper matrix may be a matrix used to relatively translate values ​​on the surface of a sphere (e.g., a hypersphere) on the sphere surface. The helper matrix may be used to transform input data (e.g., real-valued data (e.g., images, signal strengths, sounds, and / or GPS data related to a location)) into an encryption key, and may also be referred to as "public helper data." In one or more embodiments, the helper matrix may be constructed based on a single translation operation, or may be constructed by multiple translation operations. The construction of the helper matrix will be described below with reference to FIG. 6 or FIG. 7.

[0082] In one or more embodiments, the electronic device (101) may encrypt content based on the generated encryption key to generate encrypted content, and may store (e.g., upload) the encrypted content and helper data used to restore the encryption key in a memory (e.g., a database) of the server (108).

[0083] In one or more embodiments, the electronic device (101) may perform a decryption operation on encrypted content. The electronic device (101) may receive (e.g., download) the encrypted content and helper data used to restore the encryption key used to encrypt the content from the server (108). The electronic device (101) may generate location-related data (e.g., location-related images, signal strength, sound, and / or GPS data) and apply the generated location-related data to the received helper data to restore the encryption key. The electronic device (101) may decrypt the encrypted content based on the restored encryption key.

[0084] In one or more embodiments, the electronic device (101) may perform an error correcting operation on the restored encryption key. The electronic device (101) may approximate the element value of each of the elements constituting the restored encryption key to a set value or a zero (0) value. For example, if only 16 elements out of 512 elements included in the codeword are non-zero elements, the restored codeword generated by the helper matrix and the input data may have a size of 1, and each element may have an approximate value for ±1 / 4 or 0 (e.g., + 0.25012, - 0.0034).

[0085] In this case, the electronic device (101) can perform an error correction operation by approximating an element having a value approximated to 0.25 to 1 / 4, an element having a value approximated to -0.25 to -1 / 4, and an element having a value approximated to 0 to 0. When the error correction operation is performed, the restored encryption key can have 16 elements among 512 elements each having a value of ±1 / 4, and the remaining elements can each have a value of 0.

[0086] In one or more embodiments, the electronic device (101) may be implemented as, for example, but not limited to, a biometric scanner, a smart phone, a tablet PC, a mobile phone, a video phone, a camera, an infrared (IR) sensor device, a microphone device, a desktop PC, a laptop PC, a netbook computer, a workstation, a personal digital assistant (PDA), a portable multimedia player (PMP), an MP3 player, a medical device, and / or a wearable device.

[0087] In one or more embodiments, the server (108) may receive encrypted content from the electronic device (101) and data (e.g., helper data) used to restore an encryption key used to encrypt the content, and may store the received encrypted content and helper data in a memory (e.g., a database).

[0088] FIG. 3 is a block diagram schematically illustrating a configuration of a server according to one or more embodiments of the present disclosure.

[0089] Referring to FIG. 3, a server (108) (e.g., server (108) of FIG. 1 or FIG. 2) may include a communication circuit (310), a processor (320), and / or a memory (330).

[0090] According to one embodiment, the communication circuit (310) can transmit and receive signals and / or data with an electronic device (e.g., the electronic device (101) of FIG. 1 or 2). The communication circuit (310) can receive encrypted content from the electronic device and data (e.g., helper data) used to restore an encryption key used to encrypt the content. The encrypted content can be generated by the electronic device, and the electronic device can generate the encrypted content by encrypting the content based on the encryption key. The encryption key can be generated based on data related to the location where the electronic device is located, and the operation of the electronic device encrypting the content can be similar to or substantially the same as that described in FIG. 2, and therefore, a detailed description thereof will be omitted herein.

[0091] Meanwhile, in FIG. 3, a case is described as an example in which a server (108) includes three components, such as a communication circuit (310), a processor (320), and a memory (330), but the server (108) may further include other components other than the components described in FIG. 3, or the server (108) may be implemented in a form in which some of the components described in FIG. 3 are omitted.

[0092] FIG. 4 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure.

[0093] Referring to FIG. 4, there may be various ways to generate an encryption key based on input data (e.g., data related to a location), and the fuzzy extractor method may be a way to extract an encryption key from the input data itself.

[0094] In the fuzzy extractor method, a helper matrix (p) can be generated based on location-related data (x), and the helper matrix (p) can be used to restore an encryption key when location-related data similar to previously registered (or previously stored) location-related data is presented later. For example, as illustrated in FIG. 4, it can be assumed that the helper matrix (p) is generated based on the first real data (10) at the time of initial registration. When second real data (20) that is not identical to but similar to the first real data (10) is presented at the time of performing a decryption operation, the encryption key (sk) can be restored based on the second real data (20) and the helper matrix (p) (this operation is illustrated as “Reproduce” in FIG. 4). In one or more embodiments, the helper matrix (p) can be expressed as p = f (sk), where sk can represent the restored encryption key.

[0095] In the present disclosure, an error correction technique applicable to real data may be used, and the error correction technique applicable to real data may be described as follows.

[0096] According to one or more embodiments, an error correction operation on input data (e.g., real data) may operate on an n-dimensional sphere (e.g., a hypersphere) satisfying the following mathematical expression 1.

[0097] [Mathematical Formula 1]

[0098] S n = {x = (x1, x2, ... , x n ) l x1 2 + x2 2 + ... + x n 2 = 1}

[0099] In mathematical expression 1, S n can represent an n-dimensional sphere.

[0100] n-dimensional sphere S n The distance between two vectors (e.g., two secret keys) can be calculated using the cosine function, and operations on the two vectors can be performed based on spherical coordinates through the cosine function. Then, the closest vector can be found based on rectangular coordinates. In this case, the encryption key can be expressed as in the following mathematical expression 2.

[0101] [Equation 2]

[0102]

[0103] In mathematical expression 2, C represents the encryption key, and C i Is For example, a four-dimensional sphere S 4 In , C1 is It can be, and C2 is And C3 is It could be.

[0104] For convenience of explanation, the encryption key is S 512 In C 16 Let us assume, but it may not be limited thereto. According to one or more embodiments, there may be no restrictions on the dimension of the sphere in which the encryption key is generated, the number of elements included in the encryption key, or the encryption key selected from the sphere of the corresponding dimension.

[0105] Referring back to Equation 2, C i The minimum distance between two vectors in It can be, C i Wow C j The minimum distance between two vectors in (i <j인 경우)일 수 있다. 따라서, C iDecryption can be performed by finding the closest encryption key for each element included.

[0106] FIG. 5 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure.

[0107] Referring to FIG. 5, an encryption key (C) may first be generated. Specifically, among a plurality of elements (e.g., 512 elements), some of the elements (e.g., 16 elements) have preset values ​​(e.g., non-zero values ​​or values ​​of ±1 / 4), the remaining elements have values ​​of 0, and one of the sets having a preset size may be selected as the encryption key (C). The generated encryption key may be output by applying a hash function. According to one or more embodiments, in the fuzzy extractor method, a helper matrix (p) may be generated that moves the input real data (10) (e.g., the first real data (W) (10)) to the encryption key (C).

[0108] In such a sphere environment, when the same rotation processing is performed on the input real data (e.g., the first real data (W) (10)), the value (C') for the second real data (W') (20) may be the same as the value obtained by adding the difference value between the first real data (W) (10) and the second real data (W') (20) to the encryption key (C).

[0109] According to one or more embodiments, since the encryption key has values ​​set for only some of the elements included in the encryption key, not all surfaces of the sphere are available as the encryption key, and thus there may be positionable coordinates, and a vector for the second real number data can be used as the secret key by finding the adjacent corresponding coordinates.

[0110] As described above, since the real data moved by the helper matrix (i.e., the restored encryption key) is not identical to the data associated with the location (i.e., the encryption key), the helper matrix can be used as a kind of public data (e.g., a public key). In Fig. 5, the case where the encryption key is restored by moving the input data (e.g., real data) only once is described as an example, but the encryption key can also be restored by moving the input data (e.g., real data) multiple times.

[0111] FIG. 6 is a diagram illustrating a fuzzy extractor method according to one or more embodiments of the present disclosure.

[0112] Referring to Fig. 6, in the fuzzy extractor method, an encryption key can be randomly selected from a set that satisfies the condition of mathematical expression 1. In the fuzzy extractor method, A random orthogonal matrix satisfying may be selected. Here, the random orthogonal matrix may be a matrix used to move input data (e.g., real data) in a random direction.

[0113] In the fuzzy extractor method, a rotation matrix used to rotate real data can be produced. According to one or more embodiments, When real data (z) satisfying , is input, the first intermediate data (u = Qz) can be obtained by matrix multiplying the real data (z) by the selected random orthogonal matrix (Q). The second intermediate data (v = cu) can be obtained by performing a unit orthogonalization process (e.g., Gram-Schmidt process) on the code word (C) and the first intermediate data (u). T cu) can be obtained.

[0114] Afterwards, the rotation angle (Θ) between the codeword (C) and the first intermediate data (u) can be obtained. Using the calculated rotation angle (Θ), the first intermediate data (u), and the second intermediate data (v), the rotation matrix (R = I - uu T - vv T + [uv]R Θ [uv] T ) can be obtained. Finally, a helper matrix (H = RQ) can be generated using the obtained rotation matrix and the random orthogonal matrix.

[0115] FIG. 7 is a diagram illustrating the operation of a key generator and restorer according to one or more embodiments of the present disclosure.

[0116] Referring to FIG. 7, a key generator (711) and a restorer (713) are disclosed. The key generator (711) and the restorer (713) may be a hardware configuration (e.g., an operation block within an ASIC) within a processor (e.g., a processor (120) of FIG. 1) included in an electronic device (e.g., an electronic device (101) of FIG. 1 or 2), or may be a software module.

[0117] According to one or more embodiments, the key generator (711) may generate keys related to encryption. In one or more embodiments, the keys related to encryption may include at least one of an encryption key, a helper matrix (or helper data), or an encrypted secret key. According to one or more embodiments, the key generator (711) may include a plurality of elements and select one of vectors having a set size as an encryption key. For example, if only 16 elements out of 512 elements included in the secret key have a set value and the remaining elements have a value of 0, the encryption key may be generated by randomly selecting 16 elements out of 512 elements having the set value.

[0118] According to one or more embodiments, the key generator (711) may generate a helper matrix (p) by reflecting real data (W0) to the generated encryption key. Such a helper matrix may be implemented in a form of moving the real data once on a spherical surface, or may be implemented in a form of moving the real data multiple times on the spherical surface. According to one or more embodiments, when the helper matrix is ​​implemented in a form of moving the real data once on a spherical surface, the helper matrix may be obtained by matrix multiplying the generated encryption key by the real data. According to one or more embodiments, when the helper matrix is ​​obtained in a form of moving the real data twice on a spherical surface, a random orthogonal matrix for moving the real data in a random direction may be selected, a rotation matrix for rotating the real data may be obtained, and the helper matrix may be generated using the real data, the selected random orthogonal matrix, and the obtained rotation matrix.

[0119] According to one or more embodiments, the key generator (711) may be implemented with instructions for performing the operations described above. According to one or more embodiments, the key generator (711) may be implemented with hardware (e.g., an ASIC) capable of performing the operations described above.

[0120] According to one or more embodiments, the restorer (713) can generate a restored encryption key when real data (W1) is input. Specifically, the restorer (713) can obtain a restored encryption key by multiplying the real data (W1) by a helper matrix. In addition, the restorer (713) can restore the same encryption key when real data (W1) similar to the real data (W0) used when generating the helper matrix is ​​input, such that each element included in the obtained restored encryption key has a set value or a value of 0.

[0121] According to one or more embodiments, when real data with noise is input, the restorer (713) can restore a unique encryption key within a range where the angle difference between the encryption key and the input real data satisfies the condition of the following mathematical expression 3.

[0122] [Equation 3]

[0123]

[0124] According to one or more embodiments, the restorer (713) may be implemented as a set of instructions (e.g., a program) for performing the operations described above. According to one or more embodiments, the restorer (713) may be implemented as hardware (e.g., an ASIC) capable of performing the operations described above.

[0125] FIG. 8 is a diagram illustrating location-related data used to encrypt content according to one or more embodiments of the present disclosure.

[0126] Referring to FIG. 8, an electronic device (e.g., the electronic device (101) of FIG. 1 or 2) generates input data (e.g., real-valued data). In one or more embodiments, the input data may include data related to a location where the electronic device is located. The data related to the location where the electronic device is located may include images, signal strength, sounds, and / or GPS data. In one or more embodiments, it is assumed that the data related to the location includes first information, second information, and / or third information. The first information may be information generated based on an image related to the location, the second information may be information generated based on a signal strength (e.g., RSSI) of a first signal (e.g., a WiFi signal) related to the location, and the third information may be information generated based on a signal strength (e.g., RSSI) of a second signal (e.g., a Bluetooth signal) related to the location. In one or more embodiments, the data related to a location will be described as an example where the data related to the location includes first information, second information, and / or third information, but the data related to the location may include additional information in addition to the first information, second information, and / or third information.

[0127] In one or more embodiments, the electronic device may acquire an image (811) related to a location (810) where the electronic device is located through a camera (e.g., the camera module (180) of FIG. 1) and generate first information corresponding to the acquired image (811). An operation of the electronic device generating the first information corresponding to the acquired image (811) may be described as follows with reference to FIG. 9.

[0128] FIG. 9 is a diagram illustrating an operation of generating information related to a location corresponding to an image according to one or more embodiments of the present disclosure.

[0129] Referring to FIG. 9, an electronic device (e.g., an electronic device (101) of FIG. 1 or FIG. 2) can obtain an image (811) (e.g., an image (811) of FIG. 8) related to a location (810) where the electronic device (101) is located through a camera (e.g., a camera module (180) of FIG. 1).

[0130] An electronic device can extract feature information from an image (811) and obtain location-related information (e.g., first information) based on the extracted feature information. In one or more embodiments, the feature information may include feature points (812, 813, 814, 815, 816) included in the image (811). In one or more embodiments, the feature points may be points that represent features of the image (811), such as corners. The electronic device can generate first information based on the extracted feature points (812, 813, 814, 815, 816), which may be described as follows.

[0131] The electronic device can extract a total of five feature points (812, 813, 814, 815, 816) from the image (811), and set a specific feature point (for example, the first feature point (812)) among the total of five feature points (812, 813, 814, 815, 816) as a reference feature point. The electronic device can set the value of the reference feature point (812) based on the position and color of the reference feature point (812). For example, the position value of the reference feature point (812) may be set to a value of (0,0), and the color value of the reference feature point (812) may be set to a real / rational number value of the RGB (red, green, blue) type. The position values ​​of each of the remaining feature points (813, 814, 815, 816) may be set according to a relative position with respect to the reference feature point. In this case, the electronic device can generate first information in the form of a vector containing real numbers, such as (0,0,R1,G1,B1, 0,3, R2,G2,B2, 0,5,R3,G3,B3, 0,7,R4,G4,B4, 0,9,R5,G5,B5) from the image (811). Here, R* can represent a real / rational number value of a color corresponding to Red, G* can represent a real / rational number value of a color corresponding to Green, and B* can represent a real / rational number value of a color corresponding to Blue.

[0132] Referring again to FIG. 8, the electronic device may receive a first signal (820) (e.g., a WiFi signal) related to a location (810) where the electronic device is located via at least one communication circuit (e.g., the communication module (190) of FIG. 1), and may generate second information corresponding to the signal strength (e.g., RSSI) of the first signal. An operation of the electronic device generating the second information corresponding to the received first signal may be described as follows with reference to FIG. 10.

[0133] FIG. 10 is a diagram illustrating an operation of generating information related to a location corresponding to a first signal according to one or more embodiments of the present disclosure.

[0134] Referring to FIG. 10, an electronic device (e.g., an electronic device (101) of FIG. 1 or FIG. 2) can receive a first signal (e.g., a WiFi signal) related to a location where the electronic device is located via at least one communication circuit (e.g., a communication module (190) of FIG. 1). The electronic device can receive a WiFi signal from each of a plurality of access points (APs) at a measurement location (1000).

[0135] An electronic device may extract feature information from WiFi signals received from each of a plurality of APs, and obtain location-related information (e.g., second information) based on the extracted feature information. In one or more embodiments, the feature information may include an identifier of an AP included in the received WiFi signal (e.g., a service set identifier (SSID)) and a signal strength (e.g., an RSSI) of the received WiFi signal. The electronic device may generate second information based on the extracted feature information, which may be described as follows.

[0136] The electronic device can extract the SSID and RSSI of the AP from the WiFi signal received from each of the plurality of APs, and can generate information related to a location (e.g., second information) based on the extracted SSID and RSSI. The electronic device can generate the second information in the form of a vector including the SSID and the RSSI of the WiFi signal received from the AP corresponding to the SSID in the order of the SSIDs (e.g., in ascending order). When the plurality of APs include a total of five APs (1011, 1012, 1013, 1014, 1015), the electronic device can generate the second information in the form of a vector including real numbers, such as (SSID1, 22, SSID2, 31, SSID3, 45, SSID4, 22, SSID5, 31).

[0137] Referring again to FIG. 8, the electronic device may receive a second signal (e.g., a Bluetooth signal) related to a location (810) where the electronic device is located via at least one communication circuit, and may generate third information corresponding to the signal strength (e.g., RSSI) of the second signal. The operation of the electronic device generating the third information corresponding to the received second signal may be described as follows with reference to FIG. 11.

[0138] FIG. 11 is a diagram illustrating an operation of generating information related to a location corresponding to a second signal according to one or more embodiments of the present disclosure.

[0139] Referring to FIG. 11, an electronic device (e.g., an electronic device (101) of FIG. 1 or 2) can receive a second signal (830) (e.g., a Bluetooth signal) related to a location where the electronic device is located through at least one communication circuit (e.g., a communication module (190) of FIG. 1). The electronic device can receive a Bluetooth signal (e.g., an advertising signal) from each of a plurality of Bluetooth terminals (BTs) at a measurement location (1000). The BTs can periodically transmit advertising signals through an advertising operation, and the electronic device can receive advertising signals periodically transmitted from the BTs through a scanning operation.

[0140] An electronic device may extract feature information from an advertising signal received from each of a plurality of BTs, and obtain location-related information (e.g., third information) based on the extracted feature information. In one or more embodiments, the feature information may include an identifier of a BT included in the received advertising signal (e.g., a universally unique identifier (UUID)) and a signal strength (e.g., an RSSI) of the received advertising signal. The electronic device may generate third information based on the extracted feature information, which may be described as follows.

[0141] An electronic device can extract a UUID and RSSI of a BT from an advertising signal received from each of a plurality of BTs, and can generate location-related information (e.g., third information) based on the extracted UUID and RSSI. The electronic device can generate the third information in the form of a vector including the UUID and the RSSI of the advertising signal received from the BT corresponding to the UUID, in the order of the UUIDs (e.g., in ascending order). When the plurality of BTs include a total of five BTs (1111, 1112, 1113, 1114, 1115), the electronic device can generate the third information in the form of a vector including real numbers, such as (UUID1,22, UUID2,32, UUID3,45, UUID4,22, UUID5,32).

[0142] Referring again to FIG. 8, an electronic device that generates location-related information, including first information, second information, and / or third information, may apply a first encryption method (e.g., a fuzzy extractor method) to the location-related information to generate an encryption key used to encrypt the content. In FIG. 8, it is assumed that the electronic device generates all of the first information, second information, and third information as location-related information.

[0143] In one or more embodiments, the electronic device may generate first helper data and a first encryption key by applying a first encryption method set in the first information. In one or more embodiments, the first helper data may be data used to restore the first encryption key.

[0144] In one or more embodiments, the electronic device may generate second helper data and a second encryption key by applying a first encryption method to the second information. In one or more embodiments, the second helper data may be data used to restore the second encryption key. The electronic device may generate modified second helper data by applying a second encryption method (e.g., a rotation method) to the first encryption key and the second helper data. In one or more embodiments, the rotation method may be a method based on a set rotation matrix. The second helper data may be based only on the second information, but the modified second helper data may be based on the first encryption key and the second information based on the first information. Therefore, the modified second helper data may be advantageous in terms of security compared to the second helper data.

[0145] In one or more embodiments, the electronic device may apply a first encryption method to third information to generate third helper data and a third encryption key. The electronic device may apply a second encryption method to the second encryption key and the third helper data to generate modified third helper data. The third helper data may be based solely on the third information, but the modified third helper data may be based on the second encryption key and the third information based on the second information. Therefore, the modified third helper data may be advantageous in terms of security compared to the third helper data.

[0146] In one or more embodiments, the electronic device may encrypt content using a third encryption key to generate encrypted content. The electronic device may transmit (e.g., upload) the encrypted content, and first helper data, modified second helper data, and modified third helper data related to encrypting the content to a server (e.g., server (108) of FIG. 1) via at least one communication circuit.

[0147] In FIG. 8, an example in which an electronic device generates modified second helper data and modified third helper data is described, but the electronic device may transmit encrypted content, first helper data, second helper data, and third helper data to a server without generating modified second helper data and modified third helper data.

[0148] FIG. 12 is a diagram illustrating a method for encrypting content according to one or more embodiments of the present disclosure.

[0149] Referring to FIG. 12, an electronic device (e.g., the electronic device (101) of FIG. 1 or 2) may generate input data (e.g., real number data). In one or more embodiments, the input data may include information related to a location where the electronic device is located. The information related to the location where the electronic device is located may include images, signal strength, sounds, and / or GPS information. In one or more embodiments, it is assumed that the information related to the location includes first information, second information, and / or third information. The first information may be information generated based on first data related to the location (e.g., an image), the second information may be information generated based on second data related to the location (e.g., a first signal (e.g., a WiFi signal)), and the third information may be information generated based on third data related to the location (e.g., a second signal (e.g., a Bluetooth signal)). In one or more embodiments, the second information may be information generated based on the signal strength (e.g., RSSI) of the first signal, and the third information may be information generated based on the signal strength (e.g., RSSI) of the second signal. In one or more embodiments, the location-related information will be described as including the first information, the second information, and / or the third information as an example, but the location-related information may further include additional information in addition to the first information, the second information, and / or the third information. The first information, the second information, and / or the third information may be implemented similarly or substantially identically to those described with reference to FIGS. 8 to 11, and thus, a detailed description thereof will be omitted herein.

[0150] The electronic device may generate first helper data and a first encryption key by applying a first encryption method (e.g., a fuzzy extractor method) set to the first information in operation 1210.

[0151] The electronic device that generated the first helper data and the first encryption key can generate the second helper data and the second encryption key by applying the first encryption method (e.g., fuzzy extractor method) to the second information in operation 1220.

[0152] The electronic device that generates the second helper data and the second encryption key may, in operation 1230, apply a second encryption method (e.g., a rotation method) to the first encryption key and the second helper data to generate encrypted second helper data. In one or more embodiments, the rotation method may be a method based on a set rotation matrix. The second helper data may be based only on the second information, but the encrypted second helper data may be based on the first encryption key and the second information based on the first information. Therefore, the encrypted second helper data may be advantageous in terms of security compared to the second helper data.

[0153] The electronic device that generated the encrypted second helper data can generate third helper data and a third encryption key by applying a first encryption method (e.g., a fuzzy extractor method) to the third information in operation 1240.

[0154] The electronic device that generates the third helper data and the third encryption key can, in operation 1250, generate encrypted third helper data by applying a second encryption method (e.g., rotation method) to the second encryption key and the third helper data.

[0155] The electronic device that generated the encrypted third helper data can, at operation 1260, generate encrypted content by encrypting the content using the third encryption key.

[0156] An electronic device that generates encrypted content can transmit (e.g., upload) the encrypted content, and first helper data, encrypted second helper data, and encrypted third helper data related to the content to a server (e.g., server (108) of FIG. 1) via at least one communication circuit (e.g., communication module (190) of FIG. 1). The third helper data may be based solely on the third information, but the encrypted third helper data may be based on a second encryption key based on the second information and the third information. Therefore, the encrypted third helper data may be advantageous in terms of security compared to the third helper data.

[0157] In FIG. 12, an example in which an electronic device generates encrypted second helper data and encrypted third helper data is described, but the electronic device may transmit encrypted content, first helper data, second helper data, and third helper data to a server without generating encrypted second helper data and encrypted third helper data.

[0158] FIG. 13 is a diagram illustrating a method for decrypting content according to one or more embodiments of the present disclosure.

[0159] Referring to FIG. 13, an electronic device (e.g., the electronic device (101) of FIG. 1 or 2) may generate input data (e.g., real number data). In one or more embodiments, the input data may include information related to a location where the electronic device is located. The information related to the location where the electronic device is located may include images, signal strength, sounds, and / or GPS information. In one or more embodiments, it is assumed that the information related to the location includes first information, second information, and / or third information. The first information may be information generated based on first data related to the location (e.g., an image), the second information may be information generated based on second data related to the location (e.g., a first signal (e.g., a WiFi signal)), and the third information may be information generated based on third data related to the location (e.g., a second signal (e.g., a Bluetooth signal)). In one or more embodiments, the second information may be information generated based on the signal strength (e.g., RSSI) of the first signal, and the third information may be information generated based on the signal strength (e.g., RSSI) of the second signal. In one or more embodiments, the location-related information will be described as including the first information, the second information, and / or the third information as an example, but the location-related information may further include additional information in addition to the first information, the second information, and / or the third information. The first information, the second information, and / or the third information may be implemented similarly or substantially identically to those described with reference to FIGS. 8 to 11, and thus, a detailed description thereof will be omitted herein.

[0160] The electronic device can receive (e.g., download) encrypted content, first helper data related to the content, encrypted second helper data, and encrypted third helper data from a server (e.g., server (108) of FIG. 1) via at least one communication circuit (e.g., communication module (190) of FIG. 1).

[0161] An electronic device that receives encrypted content, first helper data related to the content, encrypted second helper data, and encrypted third helper data may, in operation 1310, restore a first encryption key by applying a first decryption method (e.g., a fuzzy extractor method) set to the first information and the first helper data. In one or more embodiments, the first decryption method may be a decryption method corresponding to the first encryption method.

[0162] The electronic device that has restored the first encryption key may, in operation 1320, apply a second decryption method (e.g., a rotation method) to the restored first encryption key and the encrypted second helper data to generate second helper data. In one or more embodiments, the second decryption method may be a decryption method corresponding to the second encryption method.

[0163] The electronic device that generated the second helper data can, at operation 1330, restore the second encryption key by applying a first decryption method (e.g., a fuzzy extractor method) to the second information and the second helper data.

[0164] The electronic device that has restored the second encryption key can, in operation 1340, apply a second decryption method (e.g., rotation method) to the restored second encryption key and the encrypted third helper data to generate third helper data.

[0165] The electronic device that generated the third helper data can, at operation 1350, restore the third encryption key by applying a decryption method (e.g., a fuzzy extractor method) to the third information and the third helper data.

[0166] The electronic device that has restored the third encryption key can, at operation 1360, decrypt the encrypted content using the third encryption key.

[0167] As described in FIG. 13, in order to decrypt the encrypted content, the restored first encryption key, second encryption key, and third encryption key may be identical to the first encryption key, second encryption key, and third encryption key used to encrypt the content. If any of the restored first encryption key, second encryption key, and third encryption key is different from the first encryption key, second encryption key, and third encryption key used to encrypt the content, the encrypted content cannot be decrypted. The restored first encryption key, second encryption key, and third encryption key may be based on the first information, second information, and third information related to the location where the electronic device is located, and thus the encrypted content cannot be decrypted in a location other than the location where the content was encrypted. Therefore, when using the encryption / decryption method for content proposed in one or more embodiments of the present disclosure, the security of the content can be improved based on the location.

[0168] If any one of the restored first encryption key, second encryption key, and third encryption key is different from the first encryption key, second encryption key, and third encryption key used to encrypt the content, the encrypted content cannot be decrypted, and in this case, the electronic device can output a message indicating that decryption of the encrypted content has failed through a display (e.g., display module (160) of FIG. 1).

[0169] According to one or more embodiments of the present disclosure, an electronic device (101) may include at least one communication circuit (190), a camera (180) or at least one sensor (176), and at least one processor (120) connected to the at least one communication circuit and the camera or the at least one sensor.

[0170] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate first information related to a location where the electronic device is located based on first data acquired through the camera or the at least one sensor.

[0171] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate second information related to the location based on second data obtained via the at least one communication circuit.

[0172] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate an encryption key used to encrypt content and data used to reproduce the encryption key based on the first information and the second information.

[0173] According to one or more embodiments of the present disclosure, the at least one processor may be configured to encrypt the content based on the encryption key.

[0174] According to one or more embodiments of the present disclosure, the at least one processor may be configured to transmit, via the at least one communication circuit, to a server (108), the encrypted content and data used to recover the encryption key.

[0175] According to one or more embodiments of the present disclosure, the at least one processor may be configured to apply a first encryption method to the first information to generate a first encryption key and data used to restore the first encryption key.

[0176] According to one or more embodiments of the present disclosure, the at least one processor may be configured to apply the first encryption method to the second information to generate a second encryption key and data used to restore the second encryption key.

[0177] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate data used to restore an encrypted second encryption key generated by applying a second encryption method to data used to restore the first encryption key and the second encryption key.

[0178] According to one or more embodiments of the present disclosure, the encryption key may include the second encryption key, and data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0179] According to one or more embodiments of the present disclosure, the at least one processor may be configured to extract feature information including feature points from the image when the first data is an image acquired through the camera.

[0180] According to one or more embodiments of the present disclosure, the at least one processor may be configured to set any one of the feature points as a reference feature point.

[0181] According to one or more embodiments of the present disclosure, the at least one processor may be configured to determine a position value and a color value of the reference feature point based on the position and color of the reference feature point.

[0182] According to one or more embodiments of the present disclosure, the at least one processor may be configured to determine position values ​​of feature points other than the reference feature point among the feature points based on the position of the reference feature point, and to determine color values ​​of the remaining feature points.

[0183] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate the first information including position values ​​and color values ​​of the feature points.

[0184] According to one or more embodiments of the present disclosure, the at least one processor may be configured to identify an identifier of another electronic device transmitting the at least one signal, when the second data is at least one signal obtained via the at least one communication circuit.

[0185] According to one or more embodiments of the present disclosure, the at least one processor may be configured to measure a received signal strength of the at least one signal.

[0186] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate the second information including an identifier of the other electronic device and the received signal strength.

[0187] According to one or more embodiments of the present disclosure, the signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0188] According to one or more embodiments of the present disclosure, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0189] According to one or more embodiments of the present disclosure, an electronic device (101) includes at least one communication circuit (190), a camera (180) or at least one sensor (176), and at least one processor (120) connected to the at least one communication circuit and the camera or the at least one sensor.

[0190] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate first information related to a location where the electronic device is located based on first data acquired through the camera or the at least one sensor.

[0191] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate second information related to the location based on second data obtained via the at least one communication circuit.

[0192] According to one or more embodiments of the present disclosure, the at least one processor may be configured to recover the encryption key based on data used to recover the encryption key used to encrypt the content, the first information, and the second information.

[0193] According to one or more embodiments of the present disclosure, the at least one processor may be configured to decrypt the encrypted content based on the encryption key.

[0194] According to one or more embodiments of the present disclosure, the at least one processor may be configured to receive, from a server (108) via the at least one communication circuit, the encrypted content and data used to restore the encryption key.

[0195] According to one or more embodiments of the present disclosure, the data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0196] According to one or more embodiments of the present disclosure, the at least one processor may be configured to restore the first encryption key by applying a first decryption method to the first information and data used to restore the first encryption key.

[0197] According to one or more embodiments of the present disclosure, the at least one processor may be configured to restore data used to restore the second encryption key by applying a second decryption method to data used to restore the first encryption key and the encrypted second encryption key.

[0198] According to one or more embodiments of the present disclosure, the at least one processor may be configured to restore the second encryption key by applying the first decryption method to the data and the second information used to restore the second encryption key.

[0199] According to one or more embodiments of the present disclosure, the encryption key may include the second encryption key.

[0200] According to one or more embodiments of the present disclosure, data used to restore the first encryption key may be generated by applying a first encryption method corresponding to the first decryption method to the first information.

[0201] According to one or more embodiments of the present disclosure, the data used to restore the encrypted second encryption key may be generated by applying a second encryption method corresponding to the second decryption method to the data used to restore the first encryption key and the data used to restore the second encryption key.

[0202] According to one or more embodiments of the present disclosure, data used to restore the first encryption key may be generated by applying the first encryption method to the first information.

[0203] According to one or more embodiments of the present disclosure, data used to restore the second encryption key may be generated by applying the first encryption method to the second information.

[0204] According to one or more embodiments of the present disclosure, the at least one processor may be configured to extract feature information including feature points from the image when the first data is an image acquired through the camera.

[0205] According to one or more embodiments of the present disclosure, the at least one processor may be configured to set any one of the feature points as a reference feature point.

[0206] According to one or more embodiments of the present disclosure, the at least one processor may be configured to determine a position value and a color value of the reference feature point based on the position and color of the reference feature point.

[0207] According to one or more embodiments of the present disclosure, the at least one processor may be configured to determine position values ​​of feature points other than the reference feature point among the feature points based on the position of the reference feature point, and to determine color values ​​of the remaining feature points.

[0208] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate the first information including position values ​​and color values ​​of the feature points.

[0209] According to one or more embodiments of the present disclosure, the at least one processor may be configured to identify an identifier of another electronic device transmitting the at least one signal, when the second data is at least one signal obtained via the at least one communication circuit.

[0210] According to one or more embodiments of the present disclosure, the at least one processor may be configured to measure a received signal strength of the at least one signal.

[0211] According to one or more embodiments of the present disclosure, the at least one processor may be configured to generate the second information including an identifier of the other electronic device and the received signal strength.

[0212] According to one or more embodiments of the present disclosure, the signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0213] According to one or more embodiments of the present disclosure, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0214] FIG. 14 is a flowchart schematically illustrating a method of operating an electronic device according to one or more embodiments of the present disclosure.

[0215] Referring to FIG. 14, an electronic device (e.g., an electronic device (101) of FIG. 1 or FIG. 2) (e.g., a processor (120) of FIG. 1) may, in operation 1411, generate first information related to a location where the electronic device is located based on first data acquired through a camera (e.g., a camera module (180) of FIG. 1) or at least one sensor (e.g., a sensor module (176) of FIG. 1).

[0216] In one or more embodiments, when the first data is an image acquired through a camera, the electronic device may extract feature information including feature points from the image, set one of the feature points as a reference feature point, determine a position value and a color value of the reference feature point based on a position and a color of the reference feature point, determine position values ​​of the remaining feature points excluding the reference feature point among the feature points based on the position of the reference feature point, determine color values ​​of the remaining feature points, and generate first information including the position values ​​and the color values ​​of the feature points. A method of generating the first information based on the first data may be similar to or substantially the same as that described with reference to FIG. 9, and thus a detailed description thereof will be omitted herein.

[0217] An electronic device that has generated first information related to a location where the electronic device is located can generate second information related to a location where the electronic device is located based on second data obtained through at least one communication circuit (e.g., communication module (190) of FIG. 1) in operation 1413.

[0218] In one or more embodiments, when the second data is at least one signal obtained through at least one communication circuit, the electronic device may identify an identifier of another electronic device transmitting at least one signal, measure a received signal strength of the at least one signal, and generate second information including the identifier and the received signal strength of the other electronic device. As an example, the signal may be a Wi-Fi signal, the identifier of the other electronic device may be an SSID, and the received signal strength may be an RSSI. As another example, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a UUID, and the received signal strength may be an RSSI. The method of generating the second information based on the second data may be similar to or substantially the same as that described with reference to FIGS. 10 and 11, and thus a detailed description thereof will be omitted herein.

[0219] The electronic device, which has generated second information related to the location where the electronic device is located, may, in operation 1415, generate an encryption key used to encrypt content based on the first information and the second information, and data used to restore the encryption key. Hereinafter, for convenience of explanation, the data used to restore the encryption key will be referred to as "restoration-related data."

[0220] In one or more embodiments, the electronic device may generate first restoration-related data and a first encryption key by applying a first encryption scheme (e.g., a fuzzy extractor scheme) to first information, generate second restoration-related data and a second encryption key by applying the first encryption scheme to second information, and generate encrypted second restoration-related data by applying a second encryption scheme (e.g., a rotation scheme) to the first encryption key and the second restoration-related data. In one or more embodiments, the encryption key may include the second encryption key, and the restoration-related data may include the first restoration-related data and the encrypted second restoration-related data.

[0221] An electronic device that generates an encryption key used to encrypt content and data used to restore the encryption key can encrypt the content based on the encryption key in operation 1417.

[0222] The electronic device may transmit (e.g., upload) encrypted content and restoration-related data to a server (e.g., server (108) of FIG. 1) via at least one communication circuit, so that the encrypted content and restoration-related data are stored on the server.

[0223] FIG. 15 is a flowchart schematically illustrating a method of operating an electronic device according to one or more embodiments of the present disclosure.

[0224] Referring to FIG. 15, an electronic device (e.g., an electronic device (101) of FIG. 1 or FIG. 2) (e.g., a processor (120) of FIG. 1) may, in operation 1511, generate first information related to a location where the electronic device is located based on first data acquired through a camera (e.g., a camera module (180) of FIG. 1) or at least one sensor (e.g., a sensor module (176) of FIG. 1).

[0225] In one or more embodiments, when the first data is an image acquired through a camera, the electronic device may extract feature information including feature points from the image, set one of the feature points as a reference feature point, determine a position value and a color value of the reference feature point based on a position and a color of the reference feature point, determine position values ​​of the remaining feature points excluding the reference feature point among the feature points based on the position of the reference feature point, determine color values ​​of the remaining feature points, and generate first information including the position values ​​and the color values ​​of the feature points. A method of generating the first information based on the first data may be similar to or substantially the same as that described with reference to FIG. 9, and thus a detailed description thereof will be omitted herein.

[0226] An electronic device that has generated first information related to a location where the electronic device is located can generate second information related to a location where the electronic device is located based on second data obtained through at least one communication circuit (e.g., communication module (190) of FIG. 1) in operation 1513.

[0227] In one or more embodiments, when the second data is at least one signal obtained through at least one communication circuit, the electronic device may identify an identifier of another electronic device transmitting at least one signal, measure a received signal strength of the at least one signal, and generate second information including the identifier and the received signal strength of the other electronic device. As an example, the signal may be a Wi-Fi signal, the identifier of the other electronic device may be an SSID, and the received signal strength may be an RSSI. As another example, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a UUID, and the received signal strength may be an RSSI. The method of generating the second information based on the second data may be similar to or substantially the same as that described with reference to FIGS. 10 and 11, and thus a detailed description thereof will be omitted herein.

[0228] The electronic device, which has generated second information related to the location where the electronic device is located, may, in operation 1515, restore the encryption key based on the data used to restore the encryption key used to encrypt the content, the first information, and the second information. Hereinafter, for convenience of explanation, the data used to restore the encryption key will be referred to as "restoration-related data," and the encryption key may include the second encryption key.

[0229] One or more embodiments herein may improve computer functionality (i.e., enhance the functionality of the computer itself) by providing a novel encryption method based on device location. This improves data security and addresses issues with the scope of computer networks.

[0230] In one or more embodiments, the data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0231] In one or more embodiments, the electronic device may restore the first encryption key by applying a first decryption method to data used to restore the first information and the first encryption key. The electronic device may restore the data used to restore the second encryption key by applying a second decryption method to data used to restore the first encryption key and the encrypted second encryption key. The electronic device may restore the second encryption key by applying the first decryption method to data used to restore the second encryption key and the second information.

[0232] In one or more embodiments, data used to restore the first encryption key may be generated by applying a first encryption method corresponding to the first decryption method to the first information. In one or more embodiments, data used to restore the encrypted second encryption key may be generated by applying a second encryption method corresponding to the second decryption method to the data used to restore the first encryption key and the data used to restore the second encryption key. In one or more embodiments, data used to restore the first encryption key may be generated by applying the first encryption method to the first information. In one or more embodiments, data used to restore the second encryption key may be generated by applying the first encryption method to the second information.

[0233] The electronic device that has recovered the encryption key can, in operation 1517, decrypt the encrypted content based on the encryption key.

[0234] According to one or more embodiments of the present disclosure, a method may be provided.

[0235] According to one or more embodiments of the present disclosure, the method may include an operation of generating first information related to a location where the electronic device (101) is located based on first data acquired through a camera (180) or at least one sensor (176).

[0236] According to one or more embodiments of the present disclosure, the method may include generating second information related to the location based on second data obtained via at least one communication circuit (190).

[0237] According to one or more embodiments of the present disclosure, the method may include generating an encryption key used to encrypt content and data used to reproduce the encryption key based on the first information and the second information.

[0238] According to one or more embodiments of the present disclosure, the method may include an action of encrypting the content based on the encryption key.

[0239] According to one or more embodiments of the present disclosure, the method may include transmitting, to a server (108), the encrypted content and data used to restore the encryption key.

[0240] According to one or more embodiments of the present disclosure, the operation of generating the encryption key and data used to restore the encryption key may include an operation of applying a first encryption method to the first information to generate the first encryption key and data used to restore the first encryption key.

[0241] According to one or more embodiments of the present disclosure, the operation of generating the encryption key and data used to restore the encryption key may include an operation of applying the first encryption method to the second information to generate a second encryption key and data used to restore the second encryption key.

[0242] According to one or more embodiments of the present disclosure, the operation of generating the encryption key and the data used to restore the encryption key may include the operation of generating data used to restore the encrypted second encryption key, the data being generated by applying a second encryption method to the data used to restore the first encryption key and the second encryption key.

[0243] According to one or more embodiments of the present disclosure, the encryption key may include the second encryption key, and data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0244] According to one or more embodiments of the present disclosure, the operation of generating the first information may include, when the first data is an image acquired through the camera, an operation of extracting feature information including feature points from the image.

[0245] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of setting any one of the feature points as a reference feature point.

[0246] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of determining a position value and a color value of the reference feature point based on the position and color of the reference feature point.

[0247] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of determining position values ​​of feature points other than the reference feature point among the feature points based on the position of the reference feature point, and determining color values ​​of the remaining feature points.

[0248] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of generating the first information including position values ​​and color values ​​of the feature points.

[0249] According to one or more embodiments of the present disclosure, the operation of generating the second information may include, when the second data is at least one signal obtained through the at least one communication circuit, the operation of identifying an identifier of another electronic device transmitting the at least one signal.

[0250] According to one or more embodiments of the present disclosure, the operation of generating the second information may include the operation of measuring a received signal strength of the at least one signal.

[0251] According to one or more embodiments of the present disclosure, the operation of generating the second information may include an operation of generating the second information including an identifier of the other electronic device and the received signal strength.

[0252] According to one or more embodiments of the present disclosure, the signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0253] According to one or more embodiments of the present disclosure, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0254] According to one or more embodiments of the present disclosure, a method may be provided.

[0255] According to one or more embodiments of the present disclosure, the method may include an operation of generating first information related to a location where the electronic device (101) is located based on first data acquired through a camera (180) or at least one sensor (176).

[0256] According to one or more embodiments of the present disclosure, the method may include generating second information related to the location based on second data obtained via at least one communication circuit (190).

[0257] According to one or more embodiments of the present disclosure, the method may include an operation of restoring an encryption key based on data used to restore an encryption key used to encrypt content, the first information, and the second information.

[0258] According to one or more embodiments of the present disclosure, the method may include an operation of decrypting the encrypted content based on the encryption key.

[0259] According to one or more embodiments of the present disclosure, the method may include receiving, from a server (108), the encrypted content and data used to restore the encryption key.

[0260] According to one or more embodiments of the present disclosure, the data used to restore the encryption key may include data used to restore the first encryption key and data used to restore the encrypted second encryption key.

[0261] According to one or more embodiments of the present disclosure, the operation of restoring the encryption key may include an operation of restoring the first encryption key by applying a first decryption method to the first information and data used to restore the first encryption key.

[0262] According to one or more embodiments of the present disclosure, the operation of restoring the encryption key may include an operation of restoring data used to restore the second encryption key by applying a second decryption method to the data used to restore the first encryption key and the encrypted second encryption key.

[0263] According to one or more embodiments of the present disclosure, the operation of restoring the encryption key may include an operation of restoring the second encryption key by applying the first decryption method to the data used to restore the second encryption key and the second information.

[0264] According to one or more embodiments of the present disclosure, the encryption key may include the second encryption key.

[0265] According to one or more embodiments of the present disclosure, data used to restore the first encryption key may be generated by applying a first encryption method corresponding to the first decryption method to the first information.

[0266] According to one or more embodiments of the present disclosure, the data used to restore the encrypted second encryption key may be generated by applying a second encryption method corresponding to the second decryption method to the data used to restore the first encryption key and the data used to restore the second encryption key.

[0267] According to one or more embodiments of the present disclosure, data used to restore the first encryption key may be generated by applying the first encryption method to the first information.

[0268] According to one or more embodiments of the present disclosure, data used to restore the second encryption key may be generated by applying the first encryption method to the second information.

[0269] According to one or more embodiments of the present disclosure, the operation of generating the first information may include, when the first data is an image acquired through the camera, an operation of extracting feature information including feature points from the image.

[0270] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of setting any one of the feature points as a reference feature point.

[0271] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of determining a position value and a color value of the reference feature point based on the position and color of the reference feature point.

[0272] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of determining position values ​​of feature points other than the reference feature point among the feature points based on the position of the reference feature point, and determining color values ​​of the remaining feature points.

[0273] According to one or more embodiments of the present disclosure, the operation of generating the first information may include an operation of generating the first information including position values ​​and color values ​​of the feature points.

[0274] According to one or more embodiments of the present disclosure, the operation of generating the second information may include, when the second data is at least one signal obtained through the at least one communication circuit, the operation of identifying an identifier of another electronic device transmitting the at least one signal.

[0275] According to one or more embodiments of the present disclosure, the operation of generating the second information may include the operation of measuring a received signal strength of the at least one signal.

[0276] According to one or more embodiments of the present disclosure, the operation of generating the second information may include an operation of generating the second information including an identifier of the other electronic device and the received signal strength.

[0277] According to one or more embodiments of the present disclosure, the signal may be a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device may be a service set identifier (SSID), and the received signal strength may be a received signal strength indicator (RSSI).

[0278] According to one or more embodiments of the present disclosure, the signal may be a Bluetooth signal, the identifier of the other electronic device may be a universally unique identifier (UUID), and the received signal strength may be a received signal strength indicator (RSSI).

[0279] According to one or more embodiments of the present disclosure, a storage medium storing at least one computer-readable instruction may be provided.

[0280] According to one or more embodiments of the present disclosure, the at least one instruction, when executed by at least one processor (120) of the electronic device (101), may be configured to cause the electronic device to perform at least one operation.

[0281] According to one or more embodiments of the present disclosure, the at least one operation may include an operation of generating first information related to a location where the electronic device (101) is located based on first data acquired through a camera (180) or at least one sensor (176).

[0282] According to one or more embodiments of the present disclosure, the at least one operation may include generating second information related to the location based on second data obtained via at least one communication circuit (190).

[0283] According to one or more embodiments of the present disclosure, the at least one operation may include generating an encryption key used to encrypt content based on the first information and the second information and data used to reproduce the encryption key.

[0284] According to one or more embodiments of the present disclosure, the at least one operation may include encrypting the content based on the encryption key.

[0285] According to one or more embodiments of the present disclosure, a storage medium storing at least one computer-readable instruction may be provided.

[0286] According to one or more embodiments of the present disclosure, the at least one instruction, when executed by at least one processor (120) of the electronic device (101), may be configured to cause the electronic device to perform at least one operation.

[0287] According to one or more embodiments of the present disclosure, the at least one operation may include an operation of generating first information related to a location where the electronic device (101) is located based on first data acquired through a camera (180) or at least one sensor (176).

[0288] According to one or more embodiments of the present disclosure, the at least one operation may include generating second information related to the location based on second data obtained via at least one communication circuit (190).

[0289] According to one or more embodiments of the present disclosure, the at least one operation may include an operation of restoring the encryption key based on data used to restore the encryption key used to encrypt the content, the first information, and the second information.

[0290] According to one or more embodiments of the present disclosure, the at least one operation may include an operation of decrypting the encrypted content based on the encryption key.

Claims

1. In an electronic device (101), At least one communication interface (190); a camera (180) or at least one sensor (176); At least one processor (120) connected to the at least one communication interface and the camera and the at least one sensor; and A memory (130) comprising instructions, wherein when the instructions are executed by the at least one processor, the at least one processor: Generating first information related to the location of the electronic device based on first data acquired through the camera or at least one sensor; Generating second information related to the location based on second data obtained through at least one communication interface; Generating an encryption key used to encrypt content based on the first information and the second information and data used to reproduce the encryption key; and The electronic device configured to encrypt the content based on the encryption key.

2. In paragraph 1, The above instructions cause at least one processor to: The electronic device further causes the encrypted content and data used to restore the encryption key to be transmitted to a server (108) via at least one communication interface.

3. In paragraph 1 or 2, The above instructions cause at least one processor to: Applying a first encryption method to the first information to generate a first encryption key and data used to restore the first encryption key; Applying the first encryption method to the second information to generate a second encryption key and data used to restore the second encryption key; and Further causing data to be generated to be used to restore the encrypted second encryption key by applying a second encryption method to the data used to restore the first encryption key and the second encryption key, The electronic device wherein the encryption key includes the second encryption key, and the data used to restore the encryption key includes data used to restore the first encryption key and data used to restore the encrypted second encryption key.

4. In any one of paragraphs 1 to 3, The above instructions cause at least one processor to: Based on the fact that the first data is an image acquired through the camera, feature information including feature points is extracted from the image, and Set one of the above feature points as a reference feature point, Determine the position value and color value of the reference feature point based on the position and color of the reference feature point, Based on the location of the above reference feature point, the location values ​​of the remaining feature points other than the reference feature point are determined, and the color values ​​of the remaining feature points are determined, and The electronic device further causes the first information to be generated, the first information including the position values ​​and color values ​​of the feature points.

5. In any one of paragraphs 1 to 4, The above instructions cause at least one processor to: Identifying an identifier of another electronic device transmitting the at least one signal based on the second data being at least one signal obtained through the at least one communication interface; measuring the received signal strength of at least one signal; and The electronic device further causes the second information to be generated, the second information including the identifier of the other electronic device and the received signal strength.

6. In paragraph 5, The electronic device wherein the at least one signal is a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device is a service set identifier (SSID), and the received signal strength is a received signal strength indicator (RSSI).

7. In paragraph 5, The electronic device wherein the at least one signal is a Bluetooth signal, the identifier of the other electronic device is a universally unique identifier (UUID), and the received signal strength is a received signal strength indicator (RSSI).

8. In the electronic device (101), At least one communication interface (190); a camera (180) or at least one sensor (176); At least one processor (120) connected to the at least one communication interface and the camera and the at least one sensor; and A memory (130) comprising instructions, wherein when the instructions are executed by the at least one processor, the at least one processor: Generating first information related to the location of the electronic device based on first data acquired through the camera or at least one sensor; Generating second information related to the location based on second data obtained through at least one communication interface; Data used to restore an encryption key used to encrypt content, restoring the encryption key based on the first information and the second information; and An electronic device that causes the encrypted content to be decrypted based on the encryption key.

9. In paragraph 8, The above instructions cause at least one processor to: The electronic device further causes the server (108) to receive, through at least one communication interface, the encrypted content and data used to restore the encryption key.

10. In any one of paragraphs 8 to 9, The data used to restore the above encryption key includes data used to restore the first encryption key and data used to restore the encrypted second encryption key, and The above instructions cause at least one processor to: Applying a first decryption method to the data used to restore the first information and the first encryption key to restore the first encryption key; Applying a second decryption method to the data used to restore the first encryption key and the encrypted second encryption key to restore the data used to restore the second encryption key; and Further causing the second encryption key to be restored by applying the first decryption method to the data used to restore the second encryption key and the second information, The electronic device including the second encryption key.

11. In paragraph 10, The data used to restore the first encryption key is generated by applying a first encryption method corresponding to the first decryption method to the first information, The data used to restore the encrypted second encryption key is generated by applying a second encryption method corresponding to the second decryption method to the data used to restore the first encryption key and the data used to restore the second encryption key, The data used to restore the first encryption key is generated by applying the first encryption method to the first information, and The electronic device wherein the data used to restore the second encryption key is generated by applying the first encryption method to the second information.

12. In any one of paragraphs 8 to 11, The above instructions cause at least one processor to: Based on the fact that the first data is an image acquired through the camera, feature information including feature points is extracted from the image; and Set any one of the above feature points as a reference feature point; Determine the position value and color value of the reference feature point based on the position and color of the reference feature point; Based on the location of the above reference feature point, the location values ​​of the remaining feature points excluding the reference feature point among the above feature points are determined, and the color values ​​of the remaining feature points are determined; and The electronic device further causes the first information to be generated, the first information including the position values ​​and color values ​​of the feature points.

13. In any one of paragraphs 8 to 12, The above instructions cause at least one processor to: Identifying an identifier of another electronic device transmitting the at least one signal based on the second data being at least one signal obtained through the at least one communication interface; measuring the received signal strength of at least one signal; and The electronic device further causes the second information to be generated, the second information including the identifier of the other electronic device and the received signal strength.

14. In paragraph 13, The electronic device wherein the at least one signal is a Wi-Fi (wireless fidelity) signal, the identifier of the other electronic device is a service set identifier (SSID), and the received signal strength is a received signal strength indicator (RSSI).

15. In paragraph 13, The electronic device wherein the at least one signal is a Bluetooth signal, the identifier of the other electronic device is a universally unique identifier (UUID), and the received signal strength is a received signal strength indicator (RSSI).

Images