Patent ID: 8549283

Claim:
A system including a user terminal, a service providing server and a security server for intermediating at least one of transmission and reception of security data between the user terminal and the service providing server, comprising: the security server configured to generate a session key corresponding to a secret key provided from the user terminal, receive security data together with the session key from a security data transmitter, which is one of the user terminal and the service providing server, encode the security data with the secret key corresponding to the session key, store the encoded security data, generate a data key of the security data, generate a data encryption key by encoding the data key with the secret key, provide the data encryption key to a security data transmitter, decode the encoded security data with the secret key corresponding to the session key when the session key is received together with the security data request key from the security data receiver, which is the other one of the user terminal and the service providing server, and provide the decoded security data to the security data receiver; the user terminal configured to generate the secret key, transmit the session key and the security data and provide the data encryption key to the service providing server in case of the security data transmitter, and receive the data encryption key from the service providing server, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver; and the service providing server configured to transmit the session key and the security data to the security server and provide the data encryption key transmitted from the security server in case of the security data transmitter, receive the session key and the data encryption key from the user terminal, transmit the session key and the security data request key to the security server and receive the decoded security data from the security server in case of the security data receiver.