Edge server, encryption communication control method thereof, and terminal

An encryption communication control method of an edge server, including a processor, that is disposed on an edge of a cloud network and receives a service request from a terminal, the method comprising:

• when encryption key information relating to the terminal, which requests both a connection to the edge server and the encryption key information generated before the request, is included in shared information shared between a cloud server and another edge server in the cloud network, starting, by the edge server, encryption communication with the terminal using the encryption key information,
• wherein when a public key of a service provider, a public key of a service provided by the service provider, and a public key of the edge server are shared between the edge server and the service provider, the processor performs processing of receiving a secret key of the service and a certificate of the service that having been encrypted by the service provider using the shared public key of the edge server, and
• wherein the method further comprises:
• when a public key of the terminal and the public key of the service are shared among the terminal, the edge server, and the cloud server, processing of receiving, from the terminal, a service application message which designates the terminal as a transmission source and the service as a destination, and includes a hash value and a signature of the terminal in which the hash value is encrypted using a secret key of the terminal, and including the service application message in the shared information, and
• when the service application message included in the shared information is approved, processing of transmitting, to the terminal, a service approval message which designates the service as a transmission source and the terminal as a destination, and includes information on the service application message as a hash, and a signature of the service in which the information on the service application message is encrypted using the secret key of the service.

A terminal configured to request a service to a cloud network, the terminal comprising:

• a processor configured to perform:
• processing of transmitting, to an edge server disposed on an edge of the cloud network and receiving a service request from the terminal, a request of both a connection to the edge server and designated information on encryption key information having been generated relating to the terminal before the request;
• and
• processing of starting encryption communication with the edge server, using the encryption key information acquired by the edge server, based on the designated information, from shared information shared between a cloud server and another edge server in the cloud network,
• processing of transmitting to the edge server a service application message which designates the terminal as a transmission source and the service as a destination, and includes a hash value and a signature of the terminal in which the hash value is encrypted using a secret key of the terminal, and including the service application message in the shared information, and
• processing of receiving from the edge server, a service approval message which designates the service as a transmission source and the terminal as a destination, and includes information on the service application message as a hash, and a signature of the service in which the information on the service application message is encrypted using the secret key of the service.