JP4417129B2 - Distribution system - Google Patents

Description

The present invention relates to a program for installing an application program or the like in a terminal device on which a secure OS or the like is mounted, and a distribution system for distributing and installing a security policy corresponding to the program.

Conventionally, the security technology of systems connected to the Internet has applied patches to server programs, installed firewalls, and intrusions in order to deal with attacks such as tampering, deleting, and taking out data by unauthorized intrusion. A detection / protection device was introduced (see Patent Document 1).
JP 2003-99339 A (22nd paragraph, FIG. 2)

  However, conventional security technologies for systems connected to the Internet not only focus on preventing intrusion, but also place important files (system files, log files, etc.) in place. For this reason, there is a problem that once it is invaded by a cracker or the like, it is susceptible to an automatic attack by an Exploit code or the like.

  In addition, the conventional security technology of the system connected to the Internet installs each file (execution file, configuration file, etc.) such as an application in a predetermined location, and thus is susceptible to an automatic attack by an Exploit code or the like. was there.

The present invention has been made to solve the above-described conventional problems, and its purpose is to make it difficult to find a place such as a file even if it is invaded by a cracker or the like, and to alter or delete data. Another object of the present invention is to provide a distribution system that prevents taking-out and the like.

The distribution system of the present invention includes a terminal device in which an application program is installed,
A distribution device for distributing a program for installing the application program to the terminal device,
A distribution system comprising:
The distribution device includes:
Extraction means for extracting an installation path from a program distributed to the terminal device;
Adding means for adding a random directory name to the installation path extracted by the extracting means;
Reflecting means for reflecting the installation path with the directory name added by the adding means to the program;
Distribution means for distributing a program in which an installation path is reflected by the reflection means ;
Installation path storage means for storing an installation path to which a random directory name is added by the addition means;
Dependency information storage means for storing dependency information indicating a dependency application program depending on the application program installed by the program already distributed by the distribution means;
A determination unit that determines whether or not an object to be installed by the program distributed by the distribution unit is the dependency application program based on the dependency information stored in the dependency information storage unit;
Changing means for changing the application program installed by the program based on an installation path stored in the installation path storage means when the determination means determines that the application program is a dependent application program When,
Have
The distribution means distributes a program for installing the application program changed by the changing means .

With this configuration, even if a cracker or the like has been invaded, a program that makes it difficult to find the location of a file and prevents data from being altered, deleted, and taken out, and a security policy corresponding to this program are distributed. can do.
Further, even when a program for installing an application program having a dependency relationship with an already distributed application program is distributed, the terminal device can operate normally.

  According to the embodiment of the present invention, when a secure OS is installed in the terminal device, the distribution device uses the directory name in which the distribution device adds the security policy stored therein by the adding unit. Security policy change means for changing to a security policy corresponding to the above, and the distribution means further distributes the security policy changed by the security policy change means to the terminal device.

  With this configuration, since the security policy is changed to a security policy corresponding to the directory name to which the security policy is added, it is possible to reduce the labor of setting work for changing the security policy of the terminal device on which the secure OS is installed.

Alternatively, the distribution system of the present invention includes a terminal device in which an application program is installed,
A distribution device for distributing a program for installing the application program to the terminal device,
A distribution system comprising:
The terminal device
Extraction means for extracting an installation path from a program distributed from the distribution device;
Adding means for adding a random directory name to the installation path extracted by the extracting means;
Reflecting means for reflecting the installation path with the directory name added by the adding means to the program;
Installation means for installing a program whose installation path is reflected by the reflection means ;
Installation path storage means for storing an installation path to which a random directory name is added by the addition means;
Dependency information storage means for storing dependency information indicating a dependency application program that depends on the application program already installed by the installation means;
Determination means for determining whether or not a target to be installed by the installation means is the dependence application program based on the dependence information stored in the dependence information storage means;
A changing unit that changes the application program based on an installation path stored in the installation path storage unit when the determination unit determines that the application program is a dependent application program;
Have
The installation means further installs the application program changed by the changing means .

This configuration installs a program that makes it difficult to find the location of a file, etc., even if it has been invaded by a cracker, etc., and prevents data from being altered, deleted, or taken out, and a security policy corresponding to this program can do.
Further, even when an application program having a dependency relationship with an already installed application program is installed, the terminal device can operate normally.

  According to the embodiment of the present invention, the terminal device further includes a security policy changing unit that changes the security policy corresponding to the directory name added by the adding unit when the secure OS is installed, The installation unit installs the security policy changed by the security policy changing unit.

  With this configuration, since the security policy is changed to a security policy corresponding to the added directory name, it is possible to reduce the labor of setting work for changing the security policy of the terminal device on which the secure OS is installed.

  The present invention makes it difficult to find the location of a file or the like even if it is invaded by a cracker or the like, and can prevent data alteration, deletion, and taking out.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
A distribution system according to a first embodiment of the present invention is shown in FIG.

  As shown in FIG. 1, the distribution system 1 includes a distribution device 2 that distributes a program for installing an application program and the like and a package of a security policy, and an application program and security distributed from the distribution device 2 in which a secure OS is mounted in advance. And a plurality of terminal devices 3 on which the policy is installed. The distribution device 2 and the terminal device 3 are connected to each other via the network 4 and can communicate with each other in a secure session such as encryption so as to prevent data eavesdropping and tampering. The program means an installer that includes an application program and installs the application program.

  The secure OS means TrustedOS, SELinux, TrustedBSD, and the like, and it is assumed that one or more of these secure OSs are mounted in advance on the terminal device 3. The security policy means a broad security policy, and the broad security policy (hereinafter simply referred to as a security policy) includes a security context and a narrow security policy (hereinafter simply referred to as a narrow security policy). ing.

  A security context means what kind of label is assigned to a resource such as a file. A narrowly defined security policy is what a process generated by executing an executable file with a certain label. It means something that assigns such a label or describes the definition of the label and the permission (access control) between the labels.

  The distribution device 2 includes a program / security policy DB 11 that stores a plurality of programs and security policies distributed to the terminal device 3, an extraction unit 12 that extracts an installation path from the programs stored in the program / security policy DB 11, and an extraction unit An adder 13 for adding a random directory name to the install path extracted by 12, a reflection unit 14 for reflecting the install path with the directory name added by the adder 13 in the program, and the program / security policy DB 11 A security policy changing unit 15 that changes the security policy that has been added according to the directory name added by the adding unit 13, and a program and security policy change in which the installation path is reflected by the reflecting unit 14 A package portion 16 of packaging changes security policy has been changed by 15, and a delivery unit 17 to deliver the packaged programs and changed security policy by the package 16.

  Furthermore, the distribution apparatus 2 depends on an installation path storage unit 18 that stores an installation path to which a random directory name is added by the addition unit 13 and an application program that is installed by a program that has already been distributed by the distribution unit 17. A dependency information storage unit 19 that stores dependency information indicating a dependency application program, and an application program installed by a program distributed by the distribution unit 17 based on the dependency information stored in the dependency information storage unit 19 is a dependency application. A determination unit 20 that determines whether or not the program is a program, and when the determination unit 20 determines that the program is a dependent application program, the program is determined based on the installation path stored in the installation path storage unit 18. And a changing section 21 to change the application program to be installed by the arm, the distribution unit 17 is adapted to deliver a program to install the application program that has been changed by the changing unit 21. The installation path storage unit 18 stores the terminal device and the application program.

  The program security policy DB 11 stores a program (installer) for installing an application program such as an application program, and a security policy corresponding to the application program.

  The extraction unit 12 extracts an installation path from a program stored in the program / security policy DB 11. The installation path means information indicating the installation destination of the application program.

  The adding unit 13 adds a random directory name to the installation path extracted by the extracting unit 12 in order to make it difficult for the cracker to find the program file. Note that even if the program to be distributed is the same, the adding unit 13 adds a random directory name to the installation path of each program, so that the installation path differs for each distribution. Further, although the adding unit 13 adds a random directory name, the directory name may be changed without adding the directory name. For example, when the directory name is composed of three lowercase Roman letters, one lowercase Roman letter may be changed to an uppercase letter. That is, “/ var / log” is changed to “/ var / Log”.

  When the directory name is added by the adding unit 13, the security policy changing unit 15 changes the security policy corresponding to the addition of the directory name. The reason is that the security policy defines a process for controlling and restricting access to resources of the process.

  As shown in FIG. 1, a plurality of terminal devices 3 are provided, and a receiving unit 23 that receives a package distributed by the distributing unit 17, and an application program and a security policy are installed by a package program received by the receiving unit 23. And an installation unit 22 for Each terminal device 3 has the same configuration.

  The distribution apparatus 2 receives request information for requesting distribution of an application program or the like from the terminal apparatus 3, and based on the received request information, stores a program stored in the program / security policy DB 11 and a security policy corresponding to the program. Then, the extraction unit 12 extracts the installation path from the selected program, and the security policy changing unit 15 changes the selected security policy.

  The operation of the distribution system 1 configured as described above will be described with reference to FIG.

  First, as shown in FIG. 2, an installation path is extracted from the program for installing an application program by the extraction unit 12 (step 101), and a random directory name is added to the extracted installation path by the addition unit 13 ( Step 102).

  Next, based on the dependency information stored in the dependency information storage unit 19, the determination unit 20 determines whether or not the application program distributed by the distribution unit 17 is a dependency application program (step 103). If it is determined in step 103 that the application program is a dependent application program, the application program is changed by the changing unit 21 based on the installation path stored in the installation path storage unit 18 (step 104). On the other hand, if it is determined in step 103 that the application program is not a dependent application program, the process proceeds to step 105.

  Next, the installation path in which the random directory name is added by the adding unit 13 is reflected in the program by the reflecting unit 14 (step 105), and it is determined whether or not the secure OS is installed in the terminal device 3 (step 105). Step 106). If it is determined in step 106 that the secure OS is installed in the terminal device 3, the security policy is changed by the security policy changing unit 15 to a security policy corresponding to the added random directory name. (Step 107). On the other hand, when it is determined in step 106 that the secure OS is not installed in the terminal device 3, the process proceeds to step 108.

  Next, the program whose installation path is reflected by the reflecting unit 14 and the changed security policy changed by the security policy changing unit 15 are packaged by the package unit 16 (step 108), and the package is delivered to the terminal device 3 by the distributing unit 17 (Step 109).

  Next, the package distributed by the distribution unit 17 is received by the reception unit 23 (step 110), and the received package is installed (step 111).

  Such a distribution system according to the first embodiment of the present invention makes it difficult to find a place such as a file even if it is invaded by a cracker or the like, and falsifies, deletes, and takes out data. A program to be prevented and a security policy corresponding to the program can be distributed. Furthermore, since the security policy is changed to a security policy corresponding to the added directory, it is possible to reduce the labor of setting work for changing the security policy of the terminal device on which the secure OS is installed. Further, even when a program for installing an application program having a dependency relationship with an already distributed application program is distributed, the terminal device can operate normally.

  In addition, the distribution system 1 according to the first embodiment of the present invention distributes a program that makes it difficult to find a location such as a file even in a terminal device in which a normal OS that is not a secure OS is mounted. Therefore, falsification, deletion, take-out, etc. of data can be prevented.

[Second Embodiment]
FIG. 3 shows a distribution system according to the second embodiment of the present invention. Note that the description of the same configuration as the distribution system 1 of the first embodiment is omitted.

  In the distribution system 1 of the first embodiment, the distribution device 2 adds a random directory name to the program installation path. In this embodiment, the terminal device adds a random directory name to the installation path. It is added and reflected in the program, and the security policy is changed corresponding to this directory name.

  As shown in FIG. 3, the distribution system 31 includes a distribution device 32 that distributes a program for installing an application program and the like and a package of a security policy, and an application program and security distributed from the distribution device 32 in which a secure OS is installed in advance. And a plurality of terminal devices 33 in which the policy is installed. The distribution device 32 and the terminal device 33 are connected to each other via the network 4 and can communicate with each other in a secure session such as encryption so as to prevent data tapping and tampering. The program means an installer that includes an application program and installs the application program.

  The distribution device 32 includes a program / security policy DB 41 that stores programs and security policies, a package unit 42 that packages programs and security policies, and a distribution unit 43 that distributes packages packaged by the package unit 42. is doing.

  The terminal device 33 includes a reception unit 51 that receives a package distributed by the distribution unit 43, an extraction unit 52 that extracts an installation path from the package program received by the reception unit 51, and an installation extracted by the extraction unit 52. An addition unit 53 for adding a random directory name to the path, a reflection unit 54 for reflecting the installation path in which the random directory name is added by the addition unit 53 to the program, and a security policy are added by the addition unit 53 A security policy change unit 56 that changes to a security policy corresponding to a directory name, and an installation unit 55 that installs a program whose installation path is reflected by the reflection unit 54 and a security policy changed by the security policy change unit 56 It is.

  Further, the terminal device 33 shows an installation path storage unit 57 that stores an installation path with a random directory name added by the adding unit 53 and a dependent application program that depends on the application program already installed by the installation unit 55. A dependency information storage unit 58 that stores dependency information, and a determination unit 59 that determines whether or not the application program installed by the installation unit 55 is a dependency application program based on the dependency information stored in the dependency information storage unit 58. And a change unit 60 that changes the application program based on the installation path stored in the installation path storage unit 57 when the determination unit 59 determines that the application program is a dependent application program. It is provided. The installation unit 55 further installs the application program changed by the changing unit 60.

  The operation of the terminal device 33 of the distribution system 31 configured as described above will be described with reference to FIG.

  First, as shown in FIG. 4, a package distributed by the distribution unit 43 is received by the reception unit 51 (step 201), and an installation path is extracted from the program of the received package by the extraction unit 52 (step 202). .

  Next, a random directory name is added to the installation path extracted by the extraction unit 52 by the addition unit 53 (step 203), and the installation unit 55 based on the dependency information stored in the dependency information storage unit 58. The determination unit 59 determines whether or not the application program to be installed is a dependent application program (step 204). If it is determined in step 204 that the application program is a dependent application program, the application program is changed by the changing unit 60 (step 205). On the other hand, if it is determined in step 204 that the application program is not a dependent application program, the process proceeds to step 206.

  Next, the installation path to which the random directory name is added is reflected in the program by the reflecting unit 54 (step 206).

  Next, it is determined whether or not a secure OS is installed in the terminal device 33 (step 207). If it is determined in step 207 that the secure OS is installed, the security policy needs to be changed due to the addition of the directory name, so the security policy is changed to the added random directory name. When the security policy is changed to the corresponding security policy by the security policy changing unit 56 (step 208), and it is determined that the secure OS is not installed, the process proceeds to step 209.

  Next, the installation unit 55 installs the program reflecting the installation path and the changed security policy (step 209).

  Such a distribution system 31 according to the second embodiment of the present invention makes it difficult to find a place such as a file even if it is invaded by a cracker or the like, and falsifies, deletes, and takes out data, etc. And a security policy corresponding to this program can be installed. Furthermore, since the security policy is changed to a security policy corresponding to the added directory, it is possible to reduce the labor of setting work for changing the security policy of the terminal device 33 in which the secure OS is installed. Even when an application program having a dependency relationship with an already installed application program is installed, the terminal device 33 can operate normally.

  Further, the distribution system 31 according to the second embodiment of the present invention distributes a program that makes it difficult to find a location such as a file even in a terminal device in which a normal OS that is not a secure OS is installed. Since the program to be distributed can be distributed, it is possible to prevent data from being altered, deleted, and taken out.

[Third Embodiment]
FIG. 5 shows a program distribution system according to the third embodiment of the present invention. Note that the description of the same configuration as the distribution systems 1 and 31 of the first embodiment and the second embodiment is omitted.

  The distribution systems 1 and 31 of the first and second embodiments are characterized by the distribution device 2 and the terminal device 33, respectively, but the present embodiment is characterized by a program, that is, an installer.

  The distribution system 61 includes a distribution device 62 that distributes a program for installing an application program or the like and a security policy package, and a plurality of security programs installed in advance, and a plurality of application programs and security policies distributed from the distribution device 62 are installed. And a terminal device 63. The distribution device 62 and the terminal device 63 are connected to each other via a network 64, and can communicate with each other through a secure session such as encryption so as to prevent data eavesdropping and tampering. The program means an installer that includes an application program and installs the application program.

  The distribution device 62 includes a program / security policy DB 71 that stores programs and security policies, a package unit 71 that packages programs and security policies, and a distribution unit 73 that distributes packages packaged by the package unit 71. is doing.

  A plurality of terminal devices 63 are provided, and each includes a receiving unit 81 that receives a package distributed by the distributing unit 73, and an installing unit 82 that installs an application program and a security policy according to the package program received by the receiving unit 81. ing. Each terminal device 63 has the same configuration.

  The operation of the distribution system 61 configured as described above will be described with reference to FIG.

  First, as shown in FIG. 6, the package distributed by the distribution unit 73 is received by the reception unit 81 (step 301), and a random directory is generated when installing the program of the received package (step 301). 302).

  Next, a dependent application program depending on the already installed application program is detected from the received package (step 303). If a dependent application program is detected in step 303, an installation path in which a random directory is generated in step 302 is detected (step 304). On the other hand, if no dependent application program is detected in step 303, the process proceeds to step 306. In step 304, the actual system is searched using the file name to be used as a key to detect a dependent file path.

  Next, it is determined whether or not a secure OS is installed in the terminal device 63 (step 306). If it is determined in step 306 that the secure OS is installed, the security policy is changed to the security policy corresponding to the generated directory (step 307), while the secure OS is not installed. If so, the process proceeds to step 308. Next, an application program is installed in the generated directory (step 308).

  The processing from step 302 to step 308 is included in the program, that is, the installer.

  Since the distribution system 61 according to the third embodiment of the present invention generates a random directory and installs an application program in the generated directory, even if it is invaded by a cracker or the like It is possible to make it difficult to find the location of files, etc., and to prevent falsification, deletion, and taking out of data. Furthermore, since the security policy is changed to a security policy corresponding to the generated directory, it is possible to reduce the labor of setting work for changing the security policy of the terminal device 63 in which the secure OS is installed. Further, even when an application program having a dependency relationship with an already installed application program is installed, the terminal device 63 can operate normally.

  In addition, the distribution system 61 according to the third embodiment of the present invention generates a random directory and generates a directory even if the terminal device is mounted with a normal OS that is not a secure OS. Since the application program is installed, it is possible to make it difficult to find the location of a file or the like even if it is invaded by a cracker or the like, and to prevent falsification, deletion, and taking out of data.

  In addition to the functions of the distribution device 2 and the terminal device 33 realized by dedicated hardware, a program for realizing the functions is recorded on a computer-readable recording medium and recorded on the recording medium. The read program may be read into a computer system and executed. The computer-readable recording medium refers to a recording medium such as a floppy disk, a magneto-optical disk, a CD-ROM, or a storage device such as a hard disk device built in the computer system. Furthermore, a computer-readable recording medium is a server that dynamically holds a program (transmission medium or transmission wave) for a short period of time, as in the case of transmitting a program via the Internet, and a server in that case. Some of them hold programs for a certain period of time, such as volatile memory inside computer systems.

It is a block diagram of the delivery system of a 1st embodiment of the present invention. It is a flowchart for operation | movement description of the delivery apparatus and terminal device of the 1st Embodiment of this invention. It is a block diagram of the delivery system of the 2nd Embodiment of this invention. It is a flowchart for operation | movement description of the terminal device of the delivery system of the 2nd Embodiment of this invention. It is a block diagram of the delivery system in the 3rd Embodiment of this invention. It is a flowchart for operation | movement description of the terminal device of the delivery system of the 3rd Embodiment of this invention.

Explanation of symbols

1, 31, 61 Distribution system 2, 32, 62 Distribution device 3, 33, 63 Terminal device 4, 34, 64 Network 11, 41, 71 Program security policy DB
12, 52 Extraction unit 13, 53 Addition unit 14, 54 Reflection unit 15, 56 Security policy change unit 16, 42, 71 Package unit 17, 43, 73 Distribution unit 23, 51, 81 Reception unit 22, 55, 82 Installation unit

Claims (4)

A terminal device on which the application program is installed; and
A distribution device that distributes a program for installing the application program to the terminal device;
A distribution system comprising:
The distribution device includes:
Extraction means for extracting an installation path from a program distributed to the terminal device;
Adding means for adding a random directory name to the installation path extracted by the extracting means;
Reflecting means for reflecting the installation path with the directory name added by the adding means to the program;
Distribution means for distributing a program in which an installation path is reflected by the reflection means;
Installation path storage means for storing an installation path to which a random directory name is added by the addition means;
Dependency information storage means for storing dependency information indicating a dependency application program depending on the application program installed by the program already distributed by the distribution means;
A determination unit that determines whether or not an object to be installed by the program distributed by the distribution unit is the dependency application program based on the dependency information stored in the dependency information storage unit;
Changing means for changing the application program installed by the program based on an installation path stored in the installation path storage means when the determination means determines that the application program is a dependent application program When,
Have
A distribution system in which the distribution unit distributes a program for installing the application program changed by the changing unit. The distribution device includes:
Security policy changing means for changing the security policy stored therein to a security policy corresponding to the directory name added by the adding means;
The distribution system according to claim 1, wherein the distribution unit further distributes the security policy changed by the security policy change unit to the terminal device on which a secure OS is mounted. A terminal device on which the application program is installed; and
A distribution device that distributes a program for installing the application program to the terminal device;
A distribution system comprising:
The terminal device
Extraction means for extracting an installation path from a program distributed from the distribution device;
Adding means for adding a random directory name to the installation path extracted by the extracting means;
Reflecting means for reflecting the installation path with the directory name added by the adding means to the program;
Installation means for installing a program whose installation path is reflected by the reflection means;
Installation path storage means for storing an installation path to which a random directory name is added by the addition means;
Dependency information storage means for storing dependency information indicating a dependency application program that depends on the application program already installed by the installation means;
Determination means for determining whether or not a target to be installed by the installation means is the dependence application program based on the dependence information stored in the dependence information storage means;
A changing unit that changes the application program based on an installation path stored in the installation path storage unit when the determination unit determines that the application program is a dependent application program;
Have
A distribution system in which the installation unit further installs the application program changed by the changing unit. The terminal device
A secure OS is installed, and security policy changing means for changing to a security policy corresponding to the directory name added by the adding means is further included, and the installation means installs the security policy changed by the security policy changing means The distribution system according to claim 3.

Images