KR100691822B1 - method for preventing illegal application copy in mobile terminal - Google Patents

Abstract

The present invention relates to a method for preventing application duplication, comprising: a first step of confirming respective authentication information inserted in each file constituting an application when an execution request signal for a pre-stored application is input; A second step of generating respective authentication information using the unique information of each file constituting the application and the unique information of the mobile communication terminal; A third step of confirming whether or not the same authentication information is compared by comparing each authentication information identified in the first step and each authentication information generated in the second step; As a result of the checking of the third step, if the same authentication information, the mobile communication terminal including the fourth step of accepting the execution request for the application provides an application copy prevention method, it is possible to verify whether the application is illegal copying, It can also verify the effect of preventing the user from abuse of the application and the modification of the specific file of the application, thereby preventing the illegal copying of the application through file cracking, etc. There is an effect that the application can be executed in a short time even in a mobile communication terminal having a low specification characteristics without burdening the load.

Application replication, authentication information, hash code, file unique information, mobile terminal specific information

Description

Method for preventing illegal application copy in mobile terminal}             

1 is a configuration diagram of an embodiment of a communication network to which the present invention is applied.

Figure 2a is a flow diagram of an embodiment of the process of downloading and storing the application of the application copy protection method in the mobile communication terminal according to the present invention.

Figure 2b is a flow diagram of an embodiment of a process of executing an application stored in the application copy protection method in a mobile communication terminal according to the present invention.

* Explanation of symbols on the main parts of the drawing

10: mobile communication terminal 11: computer

12: content providing server

The present invention relates to a method for preventing application duplication, and more particularly, in order to prevent unauthorized users from acquiring an unauthorized use of an application for a mobile communication terminal, unique information of each file constituting an application and mobile communication at the time of application download. Each authentication information is generated by using the unique information of the terminal, inserted into each file, and stored.In the execution of a previously stored application, each authentication generated by using the unique information of each file and the unique information of the mobile communication terminal The present invention relates to a method for preventing application duplication in a mobile communication terminal, which accepts / rejects an application execution request based on a result of comparing the information and the respective authentication information inserted into each file constituting the application with each other.

Recently, thanks to the development of wired and wireless Internet related technology, users can download and enjoy contents (eg, application programs, movies, music, games, etc.) through the mobile terminal or store the downloaded contents on the mobile terminal. I was able to enjoy it.

In general, content consists of a single file, such as MP3 or ringtone, or a single executable file (e.g. EXE), such as a document authoring program, Unified Multimedia Framework (UMF), or multiple library files (e.g. ; DLL, etc.) Hereinafter, a content consisting of one file or a plurality of files will be collectively referred to as an application.

On the other hand, the paid content is provided to the user who has made a payment (prepaid, postpaid, etc.) through a legitimate authentication process (for example, ID / password confirmation and the actual confirmation of the mobile terminal) from the content providing server.

However, a fraudster illegally copies contents stored in another's mobile communication terminal or contents stored in a computer through cracking, and stores them in their mobile communication terminal for unauthorized use.

For example, a fraudulent user may use a wired or wireless local area communication function (eg, infrared (IrDA), Bluetooth (Bluetooth), serial (RS-232), universal serial bus (USB), etc.) or Copy and store contents in the mobile communication terminal through the wired / wireless local area communication function between the mobile communication terminal and its mobile communication terminal, and execute (play) or modify some data of the copied content through cracking, etc. Playback).

Techniques for overcoming the above problems are disclosed in Korean Patent Laid-Open Publication No. 2004-38031 (name of the invention: "method for creating and executing content for preventing illegal copying").

According to the related art, an installation file and an execution file constitute one content, and an authentication code generated by using a mobile serial number (ESN) as a parameter at the time of downloading the content. It is inserted into the installation file and stored in the mobile communication terminal. When the installation file execution request signal is inputted, the installation is performed when the authentication code inserted in the installation file and the authentication code generated using the mobile communication terminal serial number as parameters are the same. The file can be executed, and the installation file is executed accordingly to load the executable file so that the content is installed and executed in the mobile communication terminal.

However, the above-described conventional technology changes the file name by copying only the executable file among the files constituting the content, and replaces the installation file for installing the duplicated executable file with the installation file of another content, and the corresponding content is moved by an illegal user. There is a problem that is installed and executed in the communication terminal.

For example, the mobile terminal A has a go-stop game (install file; "godori.inf", an executable file; "godori.daf"), and the mobile terminal B has a tetris game (install file; "tetris.inf). ", Executable;" tetris.daf ") is installed.

Here, after copying the executable file ("godori.daf") installed in the mobile communication terminal A to the mobile communication terminal B, the name of the executable file is changed to "tetris.daf" and the previously installed executable file. overwrite ("tetris.daf") and save it.

Then, when the Tetris game is run on the mobile terminal (where the fraudulent user runs the Tetris game with the intention of running the duplicated game), the installation file of the previously created Tetris game ("tetris.inf") Since the authentication code generated using the authentication code and the serial number of the mobile communication terminal are the same as each other, there is a problem in that the executable file of the GoStop game copied by changing only the file name is executed without permission.

On the other hand, when executing (playing) the content in the mobile communication terminal, it is necessary to provide a fast execution environment to the user in consideration of its talk (e.g., small display, small memory, low-speed CPU, etc.).

Therefore, the process of generating and inserting anti-piracy authentication information into content consisting of a single file or a large number of files, anti-piracy authentication information inserted into a content or application, and newly generated illegal There is an urgent need for a technology that compares the copy protection authentication information with each other so that the process of verifying illegal copying does not put a burden on the mobile communication terminal and enables the process to be processed in a short time even in a mobile communication terminal having low specification characteristics. have.

The present invention has been proposed to solve the above problems and to meet the above demands. The present invention provides a method for forming an application at the time of downloading an application in order to prevent unauthorized users from acquiring and using an application for a mobile communication terminal. Using the unique information of the file and the unique information of the mobile communication terminal, each authentication information is generated and inserted into each file and stored.In the case of executing a previously stored application, the unique information of each file and the unique information of the mobile communication terminal are stored. The present invention provides a method for preventing application duplication in a mobile communication terminal, which accepts or rejects an application execution request according to a result of comparing each authentication information generated by using the authentication information and each authentication information inserted into each file constituting the application. There is a purpose.

The present invention for achieving the above object, the first step of confirming each authentication information inserted in each file constituting the application when the execution request signal for the pre-stored application; A second step of generating respective authentication information using the unique information of each file constituting the application and the unique information of the mobile communication terminal; A third step of confirming whether or not the same authentication information is compared by comparing each authentication information identified in the first step and each authentication information generated in the second step; And as a result of the third step, if the same authentication information is included, the method for preventing application duplication in the mobile communication terminal including a fourth step of accepting the execution request for the application.

In addition, when the execution request signal for the pre-stored application is input, the first step of checking each authentication information inserted in each file constituting the application; A second step of generating respective authentication information using the unique information of each file constituting the application and the unique information of the mobile communication terminal; And a third step of comparing whether each piece of authentication information identified in the first step and each piece of authentication information generated in the second step are compared with each other to determine whether the pieces of authentication information are the same. And a result of the third step, the computer-readable recording medium having recorded thereon a program for realizing the fourth step of accepting the request for execution of the application in the case of the same authentication information.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, detailed descriptions of well-known functions or configurations will be omitted if it is determined that the detailed description of the present invention may unnecessarily obscure the subject matter of the present invention. Terms to be described later are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the specification.

1 is a configuration diagram of an embodiment of a communication network to which the present invention is applied.

As shown in FIG. 1, a communication network to which the present invention is applied includes a mobile communication terminal 10 on the user side, a computer 11 on the user side, and a content providing server 12.

The user accesses the Internet through the mobile communication terminal 10 and downloads one file or a plurality of files constituting an application from the content providing server 12 and stores them in the mobile communication terminal 10 or through the computer 11. After accessing the Internet, one or more files constituting an application are downloaded from the content providing server 12 and stored in the computer 11, and then the applications stored in the computer 11 are moved through wired / wireless local area communication functions. It can be stored in the communication terminal 10.

On the other hand, a fraudulent user, i.e., a user who has not received proper user authentication from the content providing server 12 or has not paid a fee, copies some files or all files that constitute an application stored in the mobile communication terminal 10 of another person. To the mobile terminal through the wired / wireless local area communication function, or copy some files or all the files that constitute an application stored in another computer 11 and store them in the mobile terminal through the wired / wireless local area communication function. After downloading or storing an application that is distributed on the Internet illegally or illegally, it may be stored in its mobile communication terminal through a wired / wireless local area communication function.

In the present invention, as described above, a user may copy some files or all files constituting an application and store them in their mobile terminal for use, that is, play a video, play a game, execute a document creation program, or the like. 11) and by using the unique information of each file constituting the application and the unique information of the mobile communication terminal when the application is downloaded from the content providing server 12, etc. to generate the respective authentication information and insert each authentication information into each file Stored in the mobile communication terminal 10.

When a specific user tries to execute (play) an application stored in the mobile communication terminal 10, each authentication information is generated by using the unique information of each file constituting the application and the unique information of the mobile communication terminal. Accept or reject the application execution (playback) according to the result of comparison with each piece of authentication information inserted in the.

In particular, an application for a mobile terminal is downloaded through a wireless Internet platform such as Wi-Fi (Wireless Internet Platform for Interoperability) or executed (played) on the Wi-Fi. In the middle of the platform layer, it is preferable to be called and executed in preference to the application download process and the application execution (playback) process.

2A is a flowchart illustrating an example of a process of downloading and storing an application in an application copy prevention method in a mobile communication terminal according to the present invention.

First, all files constituting an application are downloaded from the computer 11 or the content providing server 12 (200). In this case, all the files constituting the application downloaded to the mobile communication terminal 10 are stored in the mobile communication terminal (eg, flash memory, hard disk, USB memory, etc.) before being stored in the wireless Internet installed in the mobile communication terminal. It is downloaded in the form of temporary storage on the platform (eg WIPI).

On the other hand, as described above, the application is an application program such as a video file, a music file, a game file, a ringtone file, an image file composed of a single file, and a document creating program composed of a plurality of files such as an executable file and a library file. It is meant to be all inclusive.

Then, the unique information of each file constituting the downloaded application and the unique information of the mobile communication terminal 10 to download the application is confirmed (201).

At this time, it is desirable to check the data bits corresponding to the read-only code recorded in the file as the unique information of the file constituting the application.

Here, read-only code is programming code recorded in a read-only code area among various areas in a file, and a function declaration argument (eg, "for", "if /") written in a programming language. else "," void ", etc.).

In particular, the files constituting the application include a read only code area, a read only data area, a read / write data area, and a zero initialization area. There are a number of areas such as Initialize Area, and the code recorded in the read-only code area is unique to each application and is composed of different data bits for each application.

On the other hand, the application for the mobile communication terminal was produced in consideration of the low specification characteristics of the mobile communication terminal 10, because the size of the data bit corresponding to the read-only code is very small to check the read-only code recorded in each file or described later Those skilled in the art will readily understand that generating each authentication information using each read-only code to be inserted into each file has little effect on the performance of the mobile communication terminal 10.

On the other hand, when some files forming an application are modified through cracking or the like, the application is being executed (reproduced) with a part of data bits of each file deformed, and considering the small size of the code that can only be read, It is desirable to verify all file modifications by using each read-only code of all files as a parameter for generating authentication information to prevent piracy.

In addition, the unique information of the mobile communication terminal 10 may include a mobile communication terminal unique number (ESN; Eletronic Serial Number) (also known as a mobile communication terminal unique number assigned by a mobile communication company) or a mobile terminal identification number (MIN). (So-called serial serial number assigned by the terminal manufacturer) or mobile subscriber identification number (IMSI; International Mobile Subscriber Identity, which is preferably stored in a SIM card, etc.). Any information that can uniquely express the terminal 10 can be used.

Then, the authentication information is generated using the unique information of each file constituting the application and the unique information of the mobile communication terminal (202).

At this time, the authentication information generation process is performed for each file unit, the read-only code identified in step "201" is selected as a parameter, and the mobile terminal identification number or mobile terminal identification number identified in step "201". Alternatively, a hash code (eg, Checksum, etc.) may be selected using a hash algorithm such as a known message digest algorithm 5 (MD5) by selecting one of the mobile subscriber identification numbers as a parameter. Create authentication information such as).

Thereafter, each authentication information is inserted and stored in each file constituting the downloaded application (203). At this time, the respective authentication information generated in step 202 is inserted into the header of each file downloaded from the wireless Internet platform and stored in the storage medium of the mobile communication terminal 10.

Then, the user selects and executes (plays) an executable file among files constituting an application stored in the storage medium of the mobile communication terminal 10.

2B is a flowchart illustrating a process of executing an application stored in an application copy prevention method in a mobile communication terminal according to the present invention. Hereinafter, a state in which all files constituting an application are downloaded and stored in the mobile communication terminal 10 possessed by a user who has undergone a proper authentication process in order to understand the present invention will be described. Those skilled in the art will readily understand that some or all files constituting an application are duplicated in the terminal.

First, an execution (playback) request signal for a previously stored application is input (210). At this time, the user requests execution (playback) by selecting an execution file or the like among files constituting an application stored in the storage medium of the mobile communication terminal 10.

Then, each authentication information inserted in each file constituting the application is checked (211). At this time, each piece of authentication information inserted in the header of each file is checked.

In operation 212, the unique information of each file constituting the application and the unique information of the mobile communication terminal 10 in which the application is stored are checked. In this case, the authentication information generated by selectively using a specific parameter is inserted into each file constituting the previously stored application. The parameter item for generating the authentication information is preferably set in advance. It is preferable to generate the authentication information by using the parameter in the process of generating the authentication information to be described later and to check the parameters used.

Thereafter, each piece of authentication information is generated using the unique information of each file constituting the application and the unique information of the mobile communication terminal 10 (213). At this time, the authentication information generation process is performed for each file.

Thereafter, each authentication information inserted into each file constituting the application and each generated authentication information are compared with each other (214). At this time, the authentication information comparison process is performed for each file unit.

As a result of comparing the authentication information 214, if each authentication information inserted in each file constituting the application and each generated authentication information are the same, the execution (reproduction) request for the application is accepted (215). . As a result, the application is executed to be enjoyed by the user.

As a result of comparing the authentication information 214, if any one of each of the authentication information inserted into each file constituting the application and each of the generated authentication information is different, the request for execution (reproduction) for the application is rejected (216). ). Accordingly, an error message (eg, "Illegal cloned application", etc.) is displayed while the application is not running.

Meanwhile, in the present invention, each unique information extracted from each file constituting the application at the time of application download, that is, a read-only code and unique information of the mobile communication terminal from which the application is downloaded, that is, ESN (or MIN or IMSI) is used as a parameter. Each authentication information is generated and stored in each file, and when the application is stored (playback), the attribute information of each file and the unique information of the mobile communication terminal in which the application is executed (playback) are used as parameters. By generating each piece of authentication information and verifying whether the application is illegally copied based on the result of comparing each piece of authentication information with each other, it is possible not only to prevent unauthorized users from using the application illegally, but also from each file constituting the application. Take unique information from as a parameter Modification of the file information can also be verified with.

On the other hand, the results of applying the present invention to a mobile communication terminal are as follows. Here, as a parameter for generating authentication information, each readable code recorded in each file constituting the application and the unique number of the mobile communication terminal were used.

The CPU of the mobile communication terminal is ARM7, which is composed of one executable file and 12 library files with a predetermined memory and other input / output devices, and the total size of all applications is 50 kbytes. When the execution (playback) request signal is inputted, the total time required for the application to be executed after the authentication process is 20ms, which is a known digital rights management technology (DRM) under the same terminal and the same application conditions. ; Digital Rights Management) shows a much higher performance than 4,465ms of total time required, resulting in a shorter execution time.

While the content of the present invention has been described by way of examples, the embodiments of the present invention are merely illustrative of the present invention and should not be construed as limiting the scope of the present invention. Those skilled in the art to which the present invention pertains may modify or alter the present invention in various forms within the principles and scope described in the claims herein.

As described above, the present invention generates unique authentication information using the unique information of each file constituting the application and the unique information of the mobile communication terminal from which the application is downloaded at the time of downloading the application, and stores the respective authentication information in each file, and saves it. When the application is executed (reproduced), each authentication information is generated using the unique information of each file and the unique information of the mobile communication terminal on which the application is executed (reproduced) as parameters. Therefore, it is possible to verify whether the application is illegally copied, and there is an effect of preventing unauthorized users from abuse of the application.

In addition, since the present invention uses the unique information of each file constituting the application as a parameter for generating and comparing each authentication information, the specific file deformation of the application can be verified together, and thus the application through file cracking or the like. It is effective to prevent illegal copying.

In addition, since the present invention uses the readable code of each file constituting the application as a parameter for generating and comparing each authentication information, each authentication information for all files is generated or each authentication information is written to all files. Inserting or comparing all the authentication information with each other and verifying illegal copying does not put a load on the mobile communication terminal, and the application can be executed quickly even in a mobile communication terminal having low specification characteristics.

Claims (7)

delete A first step of checking each authentication information inserted into each file constituting the application when an execution request signal for a previously stored application is input; A second step of generating respective authentication information by using unique information of each file constituting the application and unique information of a mobile communication terminal; A third step of confirming whether or not the authentication information is identical to each other by comparing each authentication information checked in the first step and each authentication information generated in the second step; A fourth step of accepting the execution request for the application if the same authentication information is found as the third step; Application copy prevention method in a mobile communication terminal comprising a. The method of claim 2, Each authentication information generated in the second step comprises a hash code generated by using the unique information of the file constituting the application and the unique information of the mobile communication terminal as parameters. How to prevent application duplication. The method of claim 2, The unique information of the file constituting the application comprises a data bit corresponding to a read only code (Read Only Code) recorded in the file. The method of claim 2, The unique information of the mobile communication terminal may be any one of a mobile terminal unique number (ESN), a mobile terminal identification number (MIN), and an international mobile subscriber identity (IMSI). Application copy prevention method in a mobile communication terminal comprising a. delete A first step of checking each authentication information inserted into each file constituting the application when an execution request signal for a previously stored application is input; A second step of generating respective authentication information by using unique information of each file constituting the application and unique information of a mobile communication terminal; And A third step of confirming whether or not the authentication information is identical to each other by comparing each authentication information checked in the first step and each authentication information generated in the second step; A fourth step of accepting the execution request for the application if the same authentication information is found as the third step; A computer-readable recording medium having recorded thereon a program for realizing this.

Images