KR101591076B1 - Method and apparatus for checking integrity of resource - Google Patents

Abstract

The present invention relates to an apparatus and a method for checking the integrity of a resource, provided to enable a client terminal to perform a resource integrity checking operation by minimizing the time and resources required for checking the integrity of a resource. To achieve the purpose as described above, the method for checking the integrity of a resource by the apparatus for checking the integrity of a resource according to a first embodiment of the present invention may comprise the following steps of: receiving a resource CRC table in which CRC values of all resources included in a processor from a server, and storing the same; generating a CRC value of a resource loaded into a memory, when a client terminal calls the resource and loads the same into the memory for the execution of the processor; and obtaining a memory CRC value corresponding to the generated CRC value by searching for the resource CRC table, and then confirming whether the memory CRC value is matched with the generated CRC value to check the integrity of the resource loaded into the memory.

Description

[0001] The present invention relates to a method and apparatus for checking resource integrity,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a resource integrity checking technique, and more particularly, to an integrity checking method and apparatus that enables an integrity check on a resource on a client terminal side to be performed.

Game resource hacking is used to change the user interface (UI). It is used to play games by creating a new interface that is different from the existing screen. However, depending on the case, you can change the item or change it to a character that has not yet been released, and then the resource hacking that accesses the game can cause a great deal of damage to the game rule violation. .

Generally, large online games have a huge number of data files. There is a tremendous amount of game-related content, such as graphics files, sound files, and script files, managed as few as hundreds or as many as several thousand resource files. In the initial stage of the online game service, a method of directly installing and using such a resource file on a client terminal has been adopted. Recently, a method of packing a resource file and providing it to a client terminal is mainly used.

If the resource file is installed directly on the client terminal, there is a problem that the resource file is scattered or lost due to an operator's mistake when the management target is too many problems and when the game is updated or patched. On the other hand, , It is possible to work much faster by adding and modifying only the newly changed files in the packed file, and it is possible to add encryption in addition to the compression at the time of file packing.

However, since such a resource packing file is a large-capacity file (having a capacity of 1 GB to 2 GB in the case of a game resource), there is a disadvantage in that a resource integrity check time and resources are very large. As a result, when the integrity checking operation is performed on the resource packing file itself on the client terminal side, various problems such as impossibility of the game progress due to the workload required for the integrity check and the game being down are caused.

In the current online game, the resource integrity check operation is not performed on the client terminal side. However, as the method and type of hacking are rapidly diversified, there is an increasing need to check the resource integrity on the client terminal side.

It is an object of the present invention to provide a resource integrity checking apparatus and method that can minimize a time and resources required for a resource integrity check so that a resource integrity check operation can be performed on a client terminal side.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to another aspect of the present invention, there is provided a method for checking a resource integrity of a resource integrity check apparatus, comprising: receiving and storing a resource CRC table storing CRC values for all resources included in a processor from a server; Generating a CRC value for a resource loaded in the memory when a client terminal calls a resource for execution of the processor and loads the resource into a memory; And searching the resource CRC table to acquire a memory CRC value corresponding to the generated CRC value and checking integrity of the resource loaded in the memory by checking whether the CRC value matches the generated CRC value .

The resource CRC table is created by the server loading all the resources included in the processor into the server memory and then acquiring and collecting CRC values for all of the resources loaded in the server memory.

The checking of the integrity may further include providing the server with an integrity check result of a resource loaded in the memory.

Wherein the step of checking the integrity further includes a function of notifying the server of the risk index for each resource and performing the integrity check operation only on the resource loaded in the memory with a risk index equal to or greater than a predetermined value .

According to another aspect of the present invention, there is provided a method for checking a resource integrity of a resource integrity check apparatus, the method comprising: when a client terminal calls a resource for execution of a processor and loads the resource into a memory, Generating a CRC value; Receiving a CRC value transmitted from the server in response to notifying a server of a resource loaded in the memory; And comparing the generated CRC value with the received CRC value, and acknowledging the integrity of the resource loaded into the memory only when the CRC value matches the received CRC value.

The server loads all the resources included in the processor into the server memory, and then obtains and stores a CRC value for all of the resources loaded into the server memory, retrieves the stored CRC value, and notifies the resource integrity checker And acquires and provides a CRC value corresponding to the received resource.

The checking of the integrity may further include providing the server with an integrity check result of a resource loaded in the memory.

Wherein the step of checking the integrity further includes a function of notifying the server of the risk index for each resource and performing the integrity check operation only on the resource loaded in the memory with a risk index equal to or greater than a predetermined value .

According to another aspect of the present invention, there is provided a resource integrity checking apparatus including a resource CRC table receiving and storing unit for receiving and storing a resource CRC table storing a CRC value for all resources included in a processor from a server, ; A resource CRC obtaining unit that obtains a CRC value for a resource loaded in the memory when a client terminal calls a resource for execution of the processor and loads the resource into a memory; And a resource integrity check unit for checking the integrity of the resource loaded in the memory by checking whether the CRC value matches the generated CRC value by searching the resource CRC table to obtain a memory CRC value corresponding to the generated CRC value, And a check unit.

In order to achieve the above object, a resource integrity checking apparatus according to a fourth embodiment of the present invention, when a client terminal calls a resource for execution of a processor and loads the resource into a memory, acquires a CRC value for the resource loaded in the memory A resource CRC acquisition unit; A resource CRC receiver for notifying a server of a resource loaded in a memory and receiving a CRC value transmitted from the server in response to the resource; And a resource integrity checking unit that compares the CRC value acquired through the resource CRC acquiring unit with the CRC value received through the resource CRC receiving unit and checks integrity of the resource loaded into the memory only when the CRC value matches .

The apparatus and method for checking resource integrity according to the present invention can minimize a workload added to a client terminal so that a client terminal can reliably perform a resource integrity check operation even while executing a specific processor such as an online game It will help.

1 is a diagram illustrating a resource integrity management system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an example of a resource CRC table according to an embodiment of the present invention.
3 is a detailed block diagram of an integrity check apparatus according to an embodiment of the present invention.
4 is a diagram illustrating a resource integrity checking method using an integrity check apparatus according to an embodiment of the present invention.
5 is a detailed block diagram of an integrity check apparatus according to another embodiment of the present invention.
6 is a diagram for explaining a resource integrity checking method using an integrity check apparatus according to another embodiment of the present invention.

Hereinafter, an online game rating display icon size control method and a control apparatus according to embodiments of the present invention will be described with reference to the accompanying drawings.

The following examples are intended to illustrate the present invention and should not be construed as limiting the scope of the present invention. Accordingly, equivalent inventions performing the same functions as the present invention are also within the scope of the present invention.

In addition, in adding reference numerals to the constituent elements of the drawings, it is to be noted that the same constituent elements are denoted by the same reference numerals even though they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

1 is a diagram illustrating a resource integrity management system according to an embodiment of the present invention.

Referring to FIG. 1, the system of the present invention includes a server 100, a client terminal 200, and an integrity check device 300, which may be connected to each other through a wired or wireless communication network.

The server 100 and the client terminal 200 may interwork with each other to service a variety of processors to the user, but in order to facilitate understanding of the description, the server 100 and the client terminal 200 interact with each other A case where a game service is provided will be described as an example.

First, the client terminal 200 downloads and installs a client program for performing an online game from the server 100, and allows the user to receive various game services through the client program.

The server 100 provides the client terminal 200 with a client program including game contents (exe file, DLL file, resource file, etc.) that can be executed by the client terminal 200. [ In addition, the game terminal 200 may be provided with a game service required by the user, such that a game is progressed according to a user control value acquired through a client program installed in the client terminal 200, .

In addition, the server 100 may load all of the resources of the online game that it provides in the memory before providing the game content to the client terminal 200, and then acquire and collect the CRC value therefrom, Creates and stores a resource CRC table. When the game contents are provided to the client terminal 200, they are provided together.

The integrity check device 300 allows the client terminal 200 to check the integrity of each resource to be called during the on-line game. More specifically, the integrity check apparatus 300 of the present invention acquires and stores a resource CRC table provided by the server 100. Each time the client terminal 200 calls a particular resource during the on-line game progress and loads it into the memory, it acquires the CRC value for the resource loaded in the memory and checks whether the currently obtained CRC value is stored in the resource CRC table , The client terminal 200 checks the integrity of the currently called resource.

That is, in the present invention, since the resource file before the memory load has a very large capacity, if the integrity check operation is performed on the resource file before the memory load, it takes a considerable amount of time to execute the game, The integrity check operation is performed only on resources temporarily uploaded to the memory of the client terminal 200. [

Also, the resource is a data value itself such as graphic information, sound information, etc., and therefore, the CRC value for a resource loaded in the memory is always a constant value. Therefore, in the present invention, all of the resources that can be called at the time of the online game service are loaded into the memory, and the CRC value is acquired to acquire the resource integrity criterion.

In addition, in the above description, the integrity check device 300 is implemented as a separate hardware device different from the client terminal 200. However, in practice, the integrity check device 300 may be an embedded device or software, And may be embodied in a form embedded in the terminal 200, as a matter of course.

Of course, in some cases, the integrity check device 300 may be implemented in a form embedded in the server 100 instead of the client terminal 200. [ In this case, the CRC value for the resource currently called from the client terminal and loaded into the memory is provided, and the integrity of the resource can be checked by comparing the resource CRC table included in the resource.

3 is a detailed block diagram of an integrity check apparatus according to an embodiment of the present invention.

3, the integrity check apparatus 300 of the present invention includes a communication unit 310 for supporting communication with the client terminal 200, a resource CRC table provided from the server 100, A resource CRC table storing unit 330 for storing the resource CRC table received through the resource CRC table receiving unit 320 and the resource CRC table receiving unit 320 received via the CRC table receiving unit 320, A resource CRC acquisition unit 340 for acquiring a CRC value for a resource loaded in the memory, and a resource CRC table to acquire a CRC value corresponding to the CRC value acquired by the resource CRC acquisition unit 340, And a resource integrity checking unit 350 that recognizes the integrity of the resource that is currently called by the client terminal 200 only when they are compared with each other.

Hereinafter, a resource integrity checking method using the integrity check apparatus of FIG. 2 will be described in detail with reference to FIG.

First, the server 100 loads all of the resources of the online game into its memory before providing the online game service to the client terminal 200, and acquires and collects the CRC value therefor to generate and generate a resource CRC table (S10). The operation of step S10 may be performed when the online game is updated, or whenever an administrator request is input.

In this state, when the client terminal 200 activates the client program installed in the client terminal 200 and requests the online server 100 to access the server 100 (S11), the server 100 responds to the online game service And obtains the necessary game contents and the resource CRC table obtained in step S10 and provides the resource CRC table to the client terminal 200 in step S12. The client terminal 200 transmits the resource CRC table to the integrity check device 300, So that the check device 300 can perform a resource integrity check operation based on the check result (S13).

The client terminal 200 obtains the user control value through the client program and provides the user control value to the server 100. The server 100 proceeds the game according to the user control value and then feeds back the game progress result to the client program, Thereby providing various game services required by the user (S14).

However, when the client terminal 200 calls a specific resource through the game progress and loads it into the memory (S15, S16), the integrity check device 300 generates a CRC value for the resource loaded in the memory in response to the load (S17).

Then, the resource CRC table is searched to acquire the CRC value for the resource loaded in the memory (S18), and it is confirmed whether the CRC value matches the CRC value generated in the step S17 (S19).

If it is determined in step S19 that the CRC value stored in the resource CRC table matches the CRC value generated in step S17, the client terminal 200 recognizes the integrity of the currently called resource (S20) (Step S21). In step S21,

The integrity check apparatus 300 also feeds back the integrity check results of steps S20 and S21 to the server 100 again so that the server 100 collects and analyzes the integrity check results of the integrity check apparatus 300 to determine the resource- The integrity check device 300 can perform an integrity check operation selectively by identifying the index (i.e., identifying the resources that are primarily hacked by malicious users) and providing it back to the integrity check device 300 . That is, after the integrity check device 300 checks the risk index for the resource loaded in the current memory before the integrity check operation, the integrity check operation is performed only when the risk index is equal to or greater than a predetermined value, Thereby reducing the workload of the system.

5 is a detailed block diagram of an integrity check apparatus according to another embodiment of the present invention.

5, the integrity check apparatus 300 of the present invention includes a communication unit 310 for supporting communication with a client terminal 200, a communication unit 310 for calling the client terminal 200 via a CRC algorithm, A resource CRC acquiring unit 340 for acquiring a CRC value for a resource, a resource CRC acquiring unit 340 for acquiring a CRC value provided by the server 100 in response thereto, The CRC value acquired by the resource CRC acquisition unit 340 and the CRC value received through the resource CRC reception unit 360 are compared with each other, And a resource integrity checking unit 370 for acknowledging the integrity of the resource.

That is, instead of receiving the resource CRC table at once, the integrity check device 300 of FIG. 5 checks the resource CRC value corresponding thereto from the server 100 every time a resource called by the client terminal 200 is loaded into the memory Have a structure to be provided.

Hereinafter, a resource integrity checking method using the integrity check apparatus of FIG. 5 will be described in detail with reference to FIG.

First, the server 100 loads all of the resources of the online game into its memory before providing the online game service to the client terminal 200, and acquires and collects the CRC value therefor to generate and generate a resource CRC table (S30). The operation of step S10 may be performed when the online game is updated, or whenever an administrator request is input.

In this state, when the client terminal 200 activates the client program installed in the client terminal 200 and requests the online server 100 to access the server 100 (S31), the server 100 responds to the online game service And acquires necessary game contents and provides them to the client terminal 200 (S32).

The client terminal 200 obtains the user control value through the client program and provides the user control value to the server 100. The server 100 proceeds the game according to the user control value and then feeds back the game progress result to the client program, Thereby providing various game services required by the user (S33).

However, when the client terminal 200 calls a specific resource through the game progress and loads it into the memory (S34 and S35), the integrity checking apparatus 300 checks the CRC value of the resource loaded in the memory of the client terminal 200 (S36), and notifies the server 100 of the resource currently loaded in the memory of the client terminal 200 (S37).

When the server 100 retrieves the resource CRC table and acquires and provides the CRC value corresponding to the resource currently loaded in the memory of the client terminal 200 (S38), the integrity check device 300 receives the CRC value, And compares the CRC value with the CRC value obtained in step S36 to check whether it is coincident (S39).

If it is determined in step S39 that the CRC value received through step S38 is identical to the CRC value generated in step S36, the client terminal 200 recognizes the integrity of the currently called resource (S40) And makes the terminal 200 deny the integrity of the currently called resource (S41).

Of course, at this time, the integrity check device 300 also feeds back the integrity check results of steps S40 and S41 to the server 100 again, and the server 100 collects and analyzes the integrity check results of the integrity check device 300, It will be appreciated that the integrity check device 300 can perform an integrity check operation selectively by referring to the index.

The computer readable recording medium on which the process instructions are recorded may be a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, Media storage devices.

Also, the computer-readable recording medium having the above-described processor recorded thereon may be distributed to a computer device connected via a network, and a computer-readable code may be stored and executed in a distributed manner. In this case, one or more of the plurality of distributed computers may execute some of the functions presented above and send the results of the execution to one or more of the other distributed computers, The computer may also perform some of the functions described above and provide the results to other distributed computers as well.

A computer that can read a recording medium on which an application that is a processor for driving a resource integrity checking apparatus and method according to each embodiment of the present invention is read may be a general PC such as a general desktop computer or a notebook computer, , A smart TV, and a mobile communication terminal. In addition to this, it should be interpreted as all devices capable of computing.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiments, it is to be understood that the invention is not limited to the disclosed embodiments. That is, within the scope of the present invention, all of the components may be selectively coupled to one or more of them. In addition, although all of the components may be implemented as one independent hardware, some or all of the components may be selectively combined to perform a part or all of the functions in one or a plurality of hardware. Lt; / RTI > The code and code segments that make up the computer processor may be easily deduced by those skilled in the art. Such a computer processor may be embodied in an embodiment of the present invention by being stored in a computer-readable storage medium, readable and executed by a computer. As the storage medium of the computer processor, a magnetic recording medium, an optical recording medium, or the like may be included.

It is also to be understood that the terms such as " comprises, "" comprising," or "having ", as used herein, mean that a component can be implanted unless specifically stated to the contrary. But should be construed as including other elements. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Commonly used terms, such as predefined terms, should be interpreted to be consistent with the contextual meanings of the related art, and are not to be construed as ideal or overly formal, unless expressly defined to the contrary.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

Claims (12)

A method for checking a resource integrity of a resource integrity check device,
Receiving and storing a resource CRC table in which a CRC value for all the resources included in the processor is stored from the server;
Generating a CRC value for a resource loaded in the memory when a client terminal calls a resource for execution of the processor and loads the resource into a memory; And
Searching the resource CRC table to obtain a memory CRC value corresponding to the generated CRC value, and checking integrity of the resource loaded in the memory by checking whether the CRC value matches the generated CRC value In addition,
The step of checking the integrity
Further comprising a function of notifying the server of the risk index for each resource and performing the integrity check operation only for resources whose risk index is equal to or greater than a preset value among the resources loaded into the memory, . The apparatus of claim 1, wherein the resource CRC table
Wherein the server is created by loading all of the resources included in the processor into the server memory and then acquiring and collecting a CRC value for all of the resources loaded into the server memory. The method of claim 1, wherein the step of checking integrity comprises:
And providing the server with an integrity check result of the resource loaded in the memory. delete A computer-readable recording medium having recorded therein a process instruction for implementing a resource integrity checking method according to any one of claims 1 to 3. A method for checking a resource integrity of a resource integrity check device,
Generating a CRC value for a resource loaded in the memory when a client terminal calls a resource for execution of the processor and loads the resource into a memory;
Receiving a CRC value transmitted from the server in response to notifying a server of a resource loaded in the memory;
Comparing the generated CRC value with the received CRC value and acknowledging the integrity of the resource loaded into the memory only if the CRC value matches,
The step of checking the integrity
Further comprising a function of notifying the server of the risk index for each resource and performing the integrity check operation only for resources whose risk index is equal to or greater than a preset value among the resources loaded into the memory, . 7. The method of claim 6, wherein the server
The CRC value for all of the resources loaded in the server memory is loaded and stored in the server memory after loading all the resources included in the processor into the server memory, And acquiring and providing a corresponding CRC value. 7. The method of claim 6, wherein the step of checking integrity comprises:
And providing the server with an integrity check result of the resource loaded in the memory. delete A computer-readable recording medium having recorded therein a process instruction for implementing a resource integrity checking method according to any one of claims 6 to 8. A resource CRC table receiving and storing unit for receiving and storing a resource CRC table storing a CRC value for all the resources included in the processor from the server;
A resource CRC obtaining unit that obtains a CRC value for a resource loaded in the memory when a client terminal calls a resource for execution of the processor and loads the resource into a memory; And
The resource CRC table is searched to obtain a memory CRC value corresponding to the generated CRC value, and then a resource integrity check is performed to check integrity of the resource loaded into the memory by confirming whether or not the CRC value matches the generated CRC value ≪ / RTI >
The resource integrity checking unit
Further comprising a function of notifying the server of the risk index for each resource and performing the integrity check operation only for resources whose risk index is equal to or greater than a preset value among the resources loaded into the memory, . A resource CRC obtaining unit for obtaining a CRC value for a resource loaded in the memory when a client terminal calls a resource for processor execution and loads the resource into a memory;
A resource CRC receiver for notifying a server of a resource loaded in a memory and receiving a CRC value transmitted from the server in response to the resource; And
And a resource integrity checking unit for comparing and analyzing the CRC value acquired through the resource CRC acquiring unit and the CRC value received through the resource CRC receiving unit and checking the integrity of the resource loaded into the memory only when they match,
The resource integrity checking unit
Further comprising a function of notifying the server of the risk index for each resource and performing the integrity check operation only for resources whose risk index is equal to or greater than a preset value among the resources loaded into the memory, .

Images