KR101702770B1 - Method for Providing Security Keypad by using Secure Operating System - Google Patents

Abstract

The present invention relates to a method for providing a security keypad by using a secure operating system (OS). The method is executed through a wireless terminal in which a secure OS having a secure kennel and an open normal operating system (OS) with an opened kennel structure are installed.

Description

FIELD OF THE INVENTION [0001] The present invention relates to a security keypad,

The present invention provides a method executed by a wireless terminal equipped with a secure operating system (OS) having a secure kernel and a normal operating system having a kernel structure disclosed therein, (n) allocates a memory area accessible from the designated program (s) of the secure OS or identifies a pre-allocated memory area, and the program (n) of the general OS executes the program of the secure OS (s) requests security keypad information for implementing a security keypad on the keypad display area information on the touch screen on the general OS, and the program (s) of the secure OS requests a plurality of touch areas Dynamically generating and holding random array information in which a plurality of key data are randomly matched, and implementing a security keypad corresponding to the random array information on a general OS (N) of the general OS, displays the security keypad on the touch screen based on the security keypad information, and displays the security keypad on the touch screen based on the security keypad information, Acquiring touch coordinates corresponding to a touch event of the touch screen and providing the touch coordinates corresponding to the touch event of the touch screen as a program s of the secure OS through the memory area, (N) of the general OS through the memory area, and the program (n) of the general OS provides the key data to the designated server according to a designated procedure And a method of providing a security keypad using the security operating system.

Recently, a Trust Zone technology has been proposed in which each physical processor core is divided into two worlds, Secure World and Normal World, and each world is isolated. Trust Zone technology is equipped with a normal operating system in the normal world, and Secure World is equipped with a security-enhanced operating system. By keeping Secure World isolated from the normal world, even if the normal world is hacked or forged, security of the normal world and isolated secure world .

The isolation of Secure World and Normal World in Trust Zone technology is one of the key points to ensure the security of Secure World. An application executed in the secure world can directly access and control various constituent parts of a display device, a communication device, and an input device provided in a terminal without using the operating system of the normal world. Although Secure World and Normal World physically share a single processor core within a single terminal and Secure World is driven by Normal World, both Secure and Normal Worlds, in terms of hardware and software, Other systems.

In recent years, the Trust Zone technology has been used to connect to a security server in a secure world, to display a randomly arranged password input screen by controlling a display device in a secure world, to receive a password, (Patent Registration No. 10-1259824). However, if the password input is performed only within the secure world, there is no problem if a service using the secret input (for example, banking, settlement, authentication, etc.) is performed in the secure world. If the password input in the secure world When the service is implemented in the normal world, since the secure world and the normal world are isolated from each other, it is impossible to use the password input in the secure world for the service of the normal world. However, all the application services implemented in the terminal are implemented through the normal world rather than the secure world.

In order to solve the above problems, it is an object of the present invention to provide a system and method for a mobile communication system, including a secure OS (Secure Operating System) having a secure kernel and a wireless terminal equipped with a normal operating system (N) of a general OS allocates a memory area accessible from a designated program (s) of the secure OS or identifies a pre-allocated memory area, and a step (n) requests security keypad information for implementing a security keypad to keypad display area information on a touch screen on the general OS as a program (s) of the secure OS through the memory area, The program (s) dynamically generates and holds random arrangement information in which a plurality of touch areas and a plurality of key data are randomly matched based on the keypad display area information, (N) of the general OS via the memory area, and a third step of providing security keypad information for implementing the security keypad corresponding to the random random access information on the general OS, ) Displays a security keypad on a touch screen based on the security keypad information, obtains touch coordinates corresponding to a touch event of the touch screen, and provides the touch coordinates to the security OS program (s) through the memory area 4) and a program (s) of the security OS derive key data corresponding to the touch coordinates based on the random arrangement information and providing the key data to the program (n) of the general OS through the memory area And a sixth step of performing a procedure in which the program (n) of the general OS provides the key data to a designated server according to a designated procedure And a method of providing the security keypad using the security keypad.

The method for providing a security keypad using a security operating system according to the present invention is a method for providing a security keypad using a security operating system having a secure kernel and a wireless terminal equipped with a normal operating system (N) of a general OS allocates a memory area accessible from a designated program (s) of the secure OS or identifies a pre-allocated memory area, and a step (n) requests security keypad information for implementing a security keypad to keypad display area information on a touch screen on the general OS as a program (s) of the secure OS through the memory area, The program (s) dynamically generates random array information in which a plurality of touch areas and a plurality of key data are randomly matched based on the keypad display area information, (C) configuring security keypad information for implementing the security keypad corresponding to the random arrangement information on the general OS and providing the security keypad information as the program (n) of the general OS through the memory area, (n) displays a security keypad on a touch screen based on the security keypad information, acquires touch coordinates corresponding to a touch event of the touch screen, and provides the touch coordinates to the security OS program (s) through the memory area (N) of the general OS through the memory area, and a fifth step of providing the program (s) of the secure OS by deriving the key data corresponding to the touch coordinates based on the random arrangement information, And a sixth step of performing a procedure of providing the key data to a designated server according to a designated procedure of the program (n) of the general OS It is gong.

delete

According to another aspect of the present invention, there is provided a method of providing a secure keypad using a secure operating system, comprising: checking an encryption key for encrypting a program (n) of the general OS through decryption only through a designated server; n) may provide the encryption key to the program (s) of the secure OS through the memory area, and the program (s) of the secure OS may store the encryption key.

delete

delete

delete

delete

According to the present invention, in the fourth step, when the program (n) of the general OS confirms touch input through the security keypad displayed on the touch screen, touch coordinates corresponding to the touch input through the memory area (S) of the secure OS, and the program (s) of the secure OS may accumulate the touch coordinates.

According to the present invention, the fifth step further includes extracting effective coordinates obtained by touching a valid touch area in the touch coordinates of the program (s) of the secure OS, wherein the program (s) And derives the key data corresponding to the effective coordinates based on the random arrangement information.

According to the present invention, in the fifth step, the program (s) of the secure OS decrypts the derived key data only through a designated server and provides the decrypted key data to the program (n) of the general OS through the memory area Step < / RTI >

According to the present invention, the fifth step may further include erasing the random arrangement information corresponding to the security keypad implemented on the general OS by the program (s) of the secure OS.

According to the present invention, a wireless terminal equipped with a security OS and a general OS displays a security keypad implemented in cooperation with a security OS while providing various services through a general OS and reads a touch input to the security keypad through a security OS So that it is possible to securely input the security through the security OS while providing various services through the general OS.

1 is a diagram illustrating a functional configuration of a wireless terminal according to an embodiment of the present invention.
2 is a functional block diagram of a program implementing a security keypad according to an embodiment of the present invention.
3 is a diagram illustrating a process of preparing a program s in a secure OS according to an embodiment of the present invention.
4 is a diagram illustrating a process of setting an encryption key in a secure OS through a general OS according to an embodiment of the present invention.
5 is a diagram illustrating a process of generating a security keypad to be displayed on a general OS through a secure OS according to an embodiment of the present invention.
6 is a diagram illustrating a process of reading a touch input of a security keypad displayed on a general OS through a security OS according to an embodiment of the present invention and processing the touch input as a security input of a general OS.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a functional block diagram of a wireless terminal 100 according to an embodiment of the present invention.

1 is a block diagram illustrating a configuration of a secure OS 120 having a secure kernel 130 and a normal OS 110 having a kernel structure disclosed therein. 110 of FIG. 1, a security keypad is implemented on the general OS 110. It is to be understood by those skilled in the art that the present invention can be implemented by referring to and / Various embodiments of the function of the wireless terminal 100 can be inferred. However, the present invention includes all of the above-described embodiments, and the technical features thereof are not limited by the method shown in FIG. The wireless terminal 100 of FIG. 1 may include various terminals such as a smart phone, a tablet PC, and a PDA, which are equipped with the secure OS 120 and the general OS 110.

1, the wireless terminal 100 includes a control unit 105, a memory unit 165, a screen output unit 135, a user input unit 140, a sound processing unit 145, and a short range wireless communication unit 150. [ A wireless network communication unit 155, a USIM reader 160, and a USIM, and has a battery for power supply.

The control unit 105 is a general term for controlling the operation of the wireless terminal 100. The control unit 105 physically includes a processor and an execution memory, ). Preferably, the processor may comprise an ARM processor.

According to the present invention, the control unit 105 includes a normal world in which a normal OS 110 in which a kernel structure, an API and a driver are displayed, and a secure kernel And a secure world in which a secure operating system 120 (Secure Operating System) having a security function 130 is operated. The normal world and the secure world are constructed in a mutually isolated structure. Preferably, the secure OS 120 includes a Trust Zone of the ARM processor. Hereinafter, a functional configuration for the present invention on the general OS 110 and the secure OS 120 will be described with reference to the control unit 105 for convenience.

The memory unit 165 is a generic name of a nonvolatile memory corresponding to a storage unit included in the wireless terminal 100 and includes at least one program code executed through the control unit 105 and at least one And stores the data set.

According to the present invention, the memory unit 165 may include a general OS storage area accessed by the general OS 110 and a secure OS storage area accessed by the secure OS 120, I can not access the OS storage area. The general OS storage area may store program codes corresponding to applications executed through the general OS 110 and at least one data set used by applications of the general OS 110. [ The secure OS storage area may store program codes corresponding to applications executed through the secure OS 120 and at least one data set used by applications of the secure OS 120. [

The general OS 110 has a kernel (hereinafter, referred to as a "general kernel 115" in contrast to the security kernel 130 of the secure OS 120) The general kernel 115 of the wireless terminal 100 includes various functions of the wireless terminal 100 such as the screen output unit 135, the user input unit 140, the sound processing unit 145, the near field wireless communication unit 150, Resources, and has a driver on the general OS 110 for this purpose. The general kernel 115 of the general OS 110 can not access the secure OS storage area and the general OS 110 and the secure OS 120 are isolated from each other.

The secure OS 120 includes a secure kernel 130 in which a kernel structure is not disclosed and the secure kernel 130 of the secure OS 120 includes a screen output unit 135, a user input unit 140, It is possible to access various resources of the wireless terminal 100 such as the processing unit 145, the short-range wireless communication unit 150 and the wireless network communication unit 155 and may include a driver on the secure OS 120 for this purpose . The secure kernel 130 of the secure OS 120 can not access the normal OS storage area and the secure OS 120 and the normal OS 110 are isolated from each other.

The screen output unit 135 may include a display such as a liquid crystal display (LCD) or a touch screen including a touch input unit as a screen output unit provided in the wireless terminal 100 .

The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the display or the touch screen of the screen output unit 135. The general kernel 115 is connected to the screen output unit 135, The security OS 120 can not access the screen output unit 135. In this case, The security keypad of the present invention is output to the screen output unit through the general OS 110. [

The secure kernel 130 of the secure OS 120 may include a separate security driver for accessing and controlling the display or the touch screen of the screen output unit 135, It is possible to access and control the output unit 135, but the security keypad of the present invention is not output to the screen output unit through the secure OS 120. [

The user input unit 140 may be a user input unit provided in the wireless terminal 100 and may include a touch input unit of the touch screen when the screen output unit 135 includes a touch screen. A keypad, and a key button.

The general kernel 115 of the general OS 110 includes a driver for accessing and controlling a touch input unit, a keypad or a key button of the user input unit 140. The general kernel 115 is connected to the user input unit 140 The security OS 120 can not access the user input unit 140. In this case,

The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the touch input unit, keypad or key button of the user input unit 140, When accessing and controlling the input unit 140, the general OS 110 can not access the user input unit 140.

The sound processing unit 145 may include sound output means and sound input means provided in the wireless terminal 100, and may include a speaker for outputting sound and a microphone for receiving sound.

The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the speaker or microphone of the sound processing unit 145. The general kernel 115 accesses the sound processing unit 145 The security OS 120 can not access the sound processing unit 145 controlled by the general OS 110. [

The secure kernel 130 of the secure OS 120 includes a separate security driver for accessing and controlling the speaker or microphone of the sound processing unit 145. The secure kernel 130 may include a sound driver 145, The general OS 110 can not access the sound processing unit 145 controlled by the secure OS 120. In this case,

The wireless network communication unit 155 and the short-range wireless communication unit 150 are communication means for connecting the wireless terminal 100 to a communication network. Preferably, the wireless terminal 100 is a wireless communication unit And may further include one or more short-range wireless communication units 150. FIG.

The wireless network communication unit 155 collectively refers to communication means for connecting the wireless terminal 100 to a wireless communication network via a base station and includes an antenna for transmitting and receiving a radio frequency signal of a specific frequency band, And at least one processing module. The wireless network communication unit 155 may connect the wireless terminal 100 to a call network including a call channel and a data channel via an exchange and may transmit wireless network data based on a packet communication, To a data network providing communication (e.g., the Internet).

According to an embodiment of the present invention, the wireless network communication unit 155 is a mobile communication unit that performs at least one of connection to a mobile communication network, location registration, call processing, call connection, data communication, and handoff according to the CDMA / WCDMA / ≪ / RTI > Meanwhile, according to the intention of a person skilled in the art, the wireless network communication unit 155 may further include a portable Internet communication configuration for performing at least one of connection to the portable Internet, location registration, data communication and handoff according to the IEEE 802.16 standard, It is evident that the present invention is not limited by the wireless communication configuration provided by the wireless network communication unit 155. [ That is, the wireless network communication unit 155 is a general term for a component that connects to a wireless communication network through a cell-based base station irrespective of a frequency band of a wireless section, a type of a communication network, or a protocol.

The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the wireless network communication unit 155. When the general kernel 115 accesses and controls the sound processing unit 145 The secure OS 120 can not access the wireless network communication unit 155 controlled by the general OS 110.

The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the wireless network communication unit 155. The secure kernel 130 may access the wireless network communication unit 155 The general OS 110 can not access the wireless network communication unit 155 controlled by the secure OS 120. In this case,

The short-range wireless communication unit 150 is a generic term of a communication unit that connects a communication session using a radio frequency signal within a predetermined distance (for example, about 10 m) as a communication medium and connects the wireless terminal 100 to a communication network The wireless terminal 100 can be connected to the communication network through at least one of Wi-Fi communication, Bluetooth communication, public wireless communication, and UWB. According to an embodiment of the present invention, the short-distance wireless communication unit 150 can connect the wireless terminal 100 to a data network providing packet-based short-range wireless data communication through a wireless AP.

The general kernel 115 of the general OS 110 includes a driver for accessing and controlling the short range wireless communication unit 150. When the general kernel 115 accesses and controls the sound processing unit 145 The secure OS 120 can not access the short range wireless communication unit 150 controlled by the general OS 110. [

The secure kernel 130 of the secure OS 120 has a separate security driver for accessing and controlling the short-range wireless communication unit 150. When the secure kernel 130 accesses the short-range wireless communication unit 150 The general OS 110 can not access the short range wireless communication unit 150 controlled by the secure OS 120. [

The USIM reader 160 is a generic term of a configuration for exchanging at least one data set with a universal subscriber identity module that is mounted or detached from the wireless terminal 100 based on the ISO / IEC 7816 standard , And the data set is exchanged in a half duplex communication manner through an APDU (Application Protocol Data Unit).

The USIM is an SIM type card having an IC chip conforming to the ISO / IEC 7816 standard, and includes an input / output interface including at least one contact connected to the USIM reader 160, a program code for at least one IC chip (Or processing) the program code for the IC chip or extracting (or processing) the data set in accordance with at least one command transmitted from the wireless terminal 100 in connection with the input / output interface To the input / output interface.

According to the present invention, the general OS 110 is loaded with various applications operating using the general kernel 115, and the user can control various applications executed in the general OS 110 through the general kernel 115 The normal OS 115 performs a user operation by the user input unit 140 controlled through the general kernel 115 while displaying one or more interface screens through the screen output unit 135. The general OS 115, The application of the present invention performs a designated operation and provides various services to the user. Hereinafter, an application (or a program module embedded in or linked to an application) operating in accordance with the present invention on the general OS 110 is referred to as " program (n) 200 " Preferably, the program (n) 200 displays a security keypad such as a banking application, a payment application, or an authentication application executed in the general OS 110 to display a touch screen Lt; RTI ID = 0.0 > touch < / RTI > However, the program (n) 200 is not limited to a banking application, a payment application, or an authentication application. In the case where the application (n) 200 receives a touch input through the touch screen by displaying a security keypad on the general OS 110, And belong to the scope of the present invention.

According to the embodiment of the present invention, the program (n) 200 of the general OS 110 is provided in the upper part of the general kernel 115 on the OS structure and operates using the general kernel 115.

According to the present invention, at least one security application operating on the secure kernel 130 is installed in the secure OS 120. [ The security application on the secure OS 120 operates using the secure kernel 130 and may be connected to the screen output unit 135, the user input unit 140, the sound processing unit 145, The wireless network communication unit 155, the short range wireless communication unit 150, and the like. Hereinafter, a security application (or a program module embedded in or linked to a security application) that operates in accordance with the present invention on a generic OS 110 is referred to as "program (s) 244" for convenience. Preferably, the program (s) 244 may include an app running in the secure OS 120.

According to an embodiment of the present invention, the program (s) 244 of the secure OS 120 is provided in the upper part of the secure kernel 130 on the OS structure, and operates using the secure kernel 130.

The OS of the wireless terminal 100 is switched from the general OS 110 to the secure OS 120 in the secure OS 120 (or between the general OS 110 and the secure OS 120) Or a security monitor 125 (Secure Monitor) that performs a series of procedures for switching from the security OS 120 to the general OS 110. [ Since the security monitor 125 uses the command of the secure OS 120, FIG. 1 illustrates the security monitor 125 as being provided in the secure OS 120 for the sake of convenience.

The security monitor 125 monitors whether an SMC (Secure Monitor Call) command is generated through the kernel or an IRQ (Interrupt Request) to FIQ (Fast Interrupt Request) Can be performed.

FIG. 2 is a functional block diagram of a program implementing a security keypad according to an embodiment of the present invention.

2 shows the functional configuration of the program (n) 200 of the general OS 110 and the program (s) 244 of the secure OS 120 implementing the security keypad, Those skilled in the art will be able to refer to and / or modify the FIG. 2 to envision various implementations of the functionality of the program, but the present invention encompasses all of the above- And the technical characteristics thereof are not limited only by the method shown in FIG.

Referring to FIG. 2, the program 200 of the general OS 110 performs a series of procedures for switching to the secure OS 120 through the normal kernel 115, (S) 244 of the program (s) 244 or a pre-allocated memory area for confirming the pre-allocated memory area. According to another embodiment of the present invention, the process of allocating the memory area or checking the pre-allocated memory area may be performed through the program (s) 244 of the secure OS 120, (s) 244 may include the configuration of allocating / checking the memory area as a scope of right.

The interworking procedure unit 204 checks whether the secure OS 120 is loaded in the wireless terminal 100 at least at the first execution of the program (n) 200 installed in the general OS 110 And if the security OS 120 is installed in the wireless terminal 100, the security OS 120 may perform a series of procedures for mounting the program (s) 244 for implementing the security keypad. If the program (s) 244 for implementing the security keypad is installed in the secure OS 120, the interworking procedure unit 204 causes the secure OS 120 to load the program (s) And / or information identifying the program (s) 244 loaded on the secure OS 120 may be stored and maintained in the general OS storage area.

The interworking procedure unit 204 confirms that the program s 244 is loaded on the secure OS 120 based on the identification information and / or confirms that the program (s) 244 is loaded on the secure OS 120 s) 244 is confirmed.

When the program (s) 244 of the secure OS 120 is confirmed through the identification information, the interworking procedure unit 204 transmits the program (s) 244 immediately before switching to the secure OS 120 through the general kernel 115 (n) 200. [0033] FIG. Preferably, the interworking procedure unit 204 is a program for performing a security input procedure through the general kernel 115 at the time of switching the OS of the wireless terminal 100 from the general OS 110 to the secure OS 120 (OS) of the wireless terminal 100 is switched from the general OS 110 to the secure OS 120 by storing the state information of the wireless terminal 100 in the normal OS storage area, The state of the program (n) 200 is changed to the state of performing the security input procedure (for example, the interface screen state of the program (n) 200, the state of the program (n) Communication session state, etc.).

According to the embodiment of the present invention, the interworking procedure unit 204 may be configured to execute the security OS 120 immediately before switching to the secure OS 120 through the general kernel 115 (for example, immediately before the security OS 120 is driven through the SMC command) The program (n) 200 may be initialized and / or the general OS 110 (n) may be initialized in the process of switching the general OS 110 to the secure OS 120 by maintaining the state information of the program When the OS of the wireless terminal 100 is switched from the secure OS 120 to the normal OS 110 even if an exceptional situation occurs such as a page fault occurs during the procedure of switching from the secure OS 120 to the secure OS 120, The state of the program (n) 200 can be restored to the state immediately before switching to the secure OS 120 using the state information.

When the program (s) 244 of the secure OS 120 is confirmed and / or the state information of the program (n) 200 is stored, the interworking procedure unit 204 reads the general kernel 115 And generates an SMC command for driving the secure OS 120 through the secure OS 120. The security monitor 125 verifies the validity of the SMC command and performs a procedure for driving the secure OS 120 according to the SMC command when the verification is successful.

Meanwhile, at a predetermined time point before, during, or after the start of the operation of the secure OS 120, the linkage procedure unit 204 accesses the secure OS 120, which is accessible from the program (n) (S) 244 of the memory area 242, or identifies the pre-allocated memory area. For example, the allocated memory area may include a shared memory for inter-process communication between the program (n) 200 of the general OS 110 and the program (s) 244 of the secure OS 120 have. While the normal shared memory is allocated in the OS for inter-process communication within the same OS, the memory region of the present invention is used for inter-process communication of heterogeneous processes executed in heterogeneous OS including general OS 110 and secure OS 120 Which is a shared memory for providing the data.

According to the first memory area allocation example of the present invention, the linkage procedure unit 204 allocates the memory area on the general OS 110 or the memory area allocated on the general OS 110 . In this case, the security monitor 125 may access or monitor the memory area of the general OS 110, and the program (s) 244 of the secure OS 120 may be accessed through the security monitor 125 (Or access to) the memory area of the OS 110 indirectly.

According to the second memory area allocation embodiment of the present invention, the interworking procedure unit 204 can allocate the memory area on the security monitor 125 or check the memory area allocated to the security monitor 125 have. In this case, the interworking procedure unit 204 may allocate the memory area to the security monitor 125 or check the memory area allocated to the security monitor 125 through the SMC command.

According to the third memory area allocation embodiment of the present invention, the interworking procedure unit 204 can access (or access) the program (n) 200 and can also access the program (s) 244 (Or connectable) to the security server on the network, or to identify the memory area allocated to the security server. When the memory area is allocated to the security server on the network, the program (n) 200 of the general OS 110 and the program (s) 244 of the secure OS 120 communicate with the security server, You can read or write data to and from the memory area.

The interworking procedure unit 204 may set the program (n) 200 as a process of the general OS 110 that refers to the allocated memory area. Preferably, the interworking procedure unit 204 provides the PID (Process ID) of the program (n) 200 to the memory area so that the program (s) 244 of the secure OS 120 operates The program (s) 244 can set the program (n) 200 as a process of the general OS 110 side to read data recorded in the allocated memory area.

If a memory area accessible by the program (s) 244 of the secure OS 120 is allocated or at least one pre-allocated memory area is identified through at least one of the first to third memory area allocation embodiments, The procedure unit 204 can set a program (s) 244 designated as a process accessible to the allocated memory area in the secure OS 120. [ For example, the interworking procedure unit 204 may store address information of the allocated memory area (e.g., a memory address on a RAM or a memory address of a RAM provided in the processor, (S) 244 of the secure OS 120 via the security monitor 125 and the network address (and / or identification value) identifying the memory region . ≪ / RTI >

(S) 244 of the secure OS 120 are allocated / verified and / or the memory region is made accessible (accessible) in the program (s) 244 of the secure OS 120 In this case, the interworking procedure unit 204 interlocks with the security monitor 125 to prevent access to the memory area from other processes except for the program (n) 200 among the processes of the general OS 110 . Preferably, the interworking procedure unit 204 uses the memory access control function of the security monitor 125 to control the process of the general OS 110 in a process other than the program (n) Can not be accessed.

When the security OS 120 is activated by the SMC command and the program (s) 244 of the secure OS 120 is executed, the access right of the allocated / confirmed memory area is managed by the security monitor 125 Is assigned to the designated program (s) 244 of the secure OS 120.

Referring to FIG. 2, the program (s) 244 of the secure OS 120 may identify a memory area allocated through at least one of the first to third memory area allocation examples and refer to the memory area And an interlock processing unit 248 for performing a procedure for interlocking.

When the secure OS 120 is activated and the program (s) 244 of the secure OS 120 is executed, the interworking processor 248 interlocks with the operation procedure performed through the security monitor 125, (S) 244 and performs a series of procedures for accessing the memory area in at least one of the first to third memory area allocation embodiments. Preferably, the interworking processor 248 may perform a procedure of obtaining an access right to the memory area.

Meanwhile, the interlock processor 248 may check the memory area at any time before referring to the memory area in the program (s) 244, and the interlock processor 248 may check the memory area at a specific time The present invention is not limited thereto.

Referring to FIG. 2, the program (n) 200 of the general OS 110 identifies an encryption key for decrypting only through a designated server, (S) (244) of the secure OS (120), and a program (s) (244) provided to the secure OS (120) and a cryptographic key storage unit 252 for checking and storing the cryptographic key provided by the cryptographic key generator 200 (n). If the program (s) 244 of the secure OS 120 does not encrypt the key data, the encryption key providing unit 208 and the encryption key storing unit 252 may be omitted.

The cryptographic key providing unit 208 accesses the touch screen based on the security keypad displayed on the touch screen through the program (n) 200 of the general OS 110 in the program (s) 244 of the secure OS 120 And confirms the encryption key for encrypting the key data derived by using the inputted touch coordinates through the designated server so as to be decryptable. Preferably, the cryptographic key providing unit 208 may perform a key exchange procedure with the designated server to confirm an encryption key for encrypting the key data through the server so as to be decryptable.

When the encryption key for encrypting the key data is confirmed, the encryption key providing unit 208 provides the confirmed encryption key to the program (s) 244 of the secure OS 120 through the memory area , The encryption key storage unit 252 of the secure OS 120 identifies the encryption key provided by the program 200 on the general OS 110 through the memory area, It can be stored in secure OS storage area.

According to another embodiment of the present invention, the encryption key providing unit 208 encrypts the key data through the program (s) 244 of the secure OS 120 at the time of performing the security input procedure (S) 244 of the secure OS 120 can provide the program (s) 244 of the secure OS 120 through the memory area in real time, The key data can be encrypted using an encryption key.

Referring to FIG. 2, the program 200 of the general OS 110 includes a security input determination unit 212 for determining whether a security keypad is displayed during a specified operation, And a keypad information request unit 216 for requesting security keypad information for implementing a security keypad on the general OS 110 through a program area (s) 244 of the secure OS 120 through the memory area .

The program (n) 200 is executed in the general OS 110 and performs at least one designated operation among banking, settlement, and authentication. The security input determination unit 212 determines whether the security key To determine whether to perform the security input procedure. For example, when the program (n) 200 is a banking app, the security input determining unit 212 may determine various passwords, a random number of a secure card, an OTP One Time Password), and so on.

If it is determined that the security input process is to be performed through the security input determination unit 212, the keypad information request unit 216 transmits the program (s) 244 of the secure OS 120 through the memory area And requests security keypad information for implementing the security keypad on the general OS 110.

According to an embodiment of the present invention, the keypad information request unit 216 may display keypad display area information on the touch screen implementing the security keypad (for example, a coordinate area for displaying the security keypad on the touch screen, (S) 244 of the secure OS 120 while requesting the security keypad information from the program (s) 244 of the secure OS 120 can do.

Referring to FIG. 2, the program (s) 244 of the secure OS 120 confirms a request of the security keypad information requested by the program (n) 200 of the general OS 110 through the memory area A random array generating unit 260 for dynamically generating random arrangement information in which a plurality of touch regions and a plurality of key data are randomly matched in response to the security keypad information request, A random array management unit 264 for holding random array information, a keypad information configuration unit 268 for configuring security keypad information for implementing a security keypad corresponding to the random array information on the general OS 110, And a keypad information providing unit (272) for providing the security keypad information to the program (n) (200) of the general OS (110) through a memory area.

The information request confirming unit 256 confirms whether or not the program n of the general OS 110 requests security keypad information for implementing a security keypad on the general OS 110 through the memory region do. Upon receiving the security keypad information from the program (n) 200 of the general OS 110 and checking and providing the keypad display area information for displaying the security keypad on the touch screen, the information request confirming unit 256 The keypad display area information provided by the program (n) 200 of the general OS 110 can be confirmed through the memory area.

In response to the security keypad information request, the random array generating unit 260 randomly generates a plurality of touch areas and a plurality of key data to be displayed on the touch screen through the program (n) 200 of the general OS 110 Dynamically generates matched random array information. That is, the random array generating unit 260 may generate different random array information each time the security keypad information is requested in the program (n) 200 of the general OS 110. Here, the touch regions may have the same graphic structure or different graphic structures, and may be arranged in a lattice structure or may be disposed at any position where the respective touch regions do not overlap with each other.

According to the embodiment of the present invention, the random array generator 260 can dynamically generate random array information in which M (M? 2) touch areas and M key data are randomly matched. Meanwhile, the random arrangement information may include m (m? 2) areas that do not match specific key data. In this case, the random arrangement generating unit 260 may generate M key data and M touch areas at random And at the same time, random array information including m regions that do not match specific key data can be dynamically generated.

According to the embodiment of the present invention, when the keypad display area information for displaying the security keypad is provided from the program (n) 200 of the general OS 110, the random array generating unit 260 generates the keypad display area (M + m) touch areas (M + m) capable of being displayed in the keypad display area, or random arrangement information in which M touch areas and M key data randomly matched are displayed in the keypad display area on the touch screen corresponding to the information, And may randomly generate random arrangement information that randomly matches M touch regions and M key data among the (M + m) touch regions.

When random array information is generated by randomly matching a plurality of touch regions and a plurality of key data correspondingly through the random array generating unit 260, the random array managing unit 264 determines whether the OS of the wireless terminal 100 The random arrangement information may be stored and maintained in the designated secure OS storage area such that the random arrangement information is retained on the secure OS 120 even after switching to the general OS 110. [

Random array information in which a plurality of touch areas and a plurality of key data are randomly matched is generated and / or the generated random array information is maintained (stored) on the secure OS 120 through the random array generating unit 260 The keypad information configuring unit 268 configures the security keypad information for implementing the security keypad corresponding to the random arrangement information on the general OS 110. The security keypad information may include a security keypad corresponding to the random arrangement information on the touch screen through the program (n) 200 of the general OS 110 without exposing the random arrangement information to the general OS 110 And information for display.

According to the first security keypad information embodiment of the present invention, the keypad information configuration unit 268 may configure the security keypad information that implements the security keypad corresponding to the random arrangement information in the form of a bitmap image.

According to the second security keypad information embodiment of the present invention, the keypad information configuration unit 268 may configure the security keypad information to implement the security keypad corresponding to the random arrangement information in the form of a vector drawing.

According to the third security keypad information embodiment of the present invention, the keypad information configuration unit 268 restores the security keypad structure corresponding to the random arrangement information only through the program (n) 200 of the general OS 110 (N) 200 of the generic OS 110 so as to be decryptable only by encrypting the encrypted random number information or the security keypad information to implement the security keypad corresponding to the random arrangement information on the general OS 110 .

According to the fourth security keypad information embodiment of the present invention, the keypad information configuration unit 268 interprets the security keypad structure corresponding to the random arrangement information only through the program (n) 200 of the general OS 110 Thereby making it possible to configure security keypad information for implementing the security keypad corresponding to the random arrangement information on the general OS 110. [

According to the fifth security keypad information embodiment of the present invention, the keypad information configuring unit 268 may combine two or more of the first to fourth security keypad information embodiments (or a part of the embodiments) to correspond to the random arrangement information The security keypad can be configured to implement the security keypad on the general OS 110.

When the security keypad information for implementing the security keypad corresponding to the random arrangement information on the general OS 110 is configured through at least one of the first to fifth security keypad information embodiments, the keypad information providing unit 272 Provides the security keypad information to the program (n) 200 of the general OS 110 through the memory area.

Referring to FIG. 2, the program (n) 200 of the general OS 110 checks the security keypad information provided by the program (s) 244 of the secure OS 120 through the memory area A security keypad display unit 224 for displaying a security keypad on the touch screen based on the security keypad information, a touch screen display unit 224 for acquiring touch coordinates corresponding to a touch event of the touch screen, And a touch coordinate providing unit 232 for providing the obtained touch coordinates to the program (s) 244 of the secure OS 120 through the memory area.

The keypad information verifying unit 220 may obtain the program s of the secure OS 120 through the memory area 244 by providing the security keypad information in the program s 244 of the secure OS 120. [ (S) 244 of the secure OS 120 on the touch screen using the security keypad information, the security keypad display unit 224 displays the security keypad information provided by the security OS 120, And displays a plurality of touch areas corresponding to the information and a security keypad randomly matched with a plurality of key data.

When the security keypad is displayed on the touch screen, the touch coordinate acquiring unit 228 acquires touch coordinates corresponding to a touch event of the touch screen, and the touch coordinate providing unit 232 And provides the obtained touch coordinates to the program (s) 244 of the secure OS 120.

According to the first security touch input embodiment of the present invention, when the touch input through the security keypad displayed on the touch screen is completed (e.g., touching the 'done' touch area on the security keypad) (N > = 1) touch coordinates can be stored until the touch coordinate providing unit 232 processes an area other than the security keypad area or a specified number of touch inputs is completed. And can provide the N touch coordinates acquired and accumulated through the touch coordinate acquiring unit 228 through the memory area to the program (s) 244 of the secure OS 120. [

According to the second security touch inputting method of the present invention, the touch coordinate acquiring unit 228 acquires touch coordinates whenever a touch input through the security keypad displayed on the touch screen is confirmed, 232 may provide the touch coordinates obtained through the touch coordinate acquiring unit 228 through the memory area to the program (s) 244 of the secure OS 120. In this case, May be accumulated through the program (s) 244 of the secure OS 120. [

Referring to FIG. 2, a program (s) 244 of the secure OS 120 may include a touch (not shown) for confirming touch coordinates provided by a program (n) 200 on the general OS 110 through the memory area A data derivation unit 284 for deriving key data corresponding to the touch coordinates on the basis of the random arrangement information, and a memory unit 283 for storing the program n of the general OS 110 through the memory region, And a data providing unit (292) for providing the derived key data to the terminal (200). Meanwhile, the program (s) 244 of the secure OS 120 may include effective coordinates (t) for confirming effective coordinates obtained by touching a valid touch area among the touch coordinates provided by the program (n) 200 on the general OS 110 And the verification unit 280. In this case, the data derivation unit 284 can derive the key data corresponding to the valid coordinates based on the random arrangement information. Meanwhile, the program (s) 244 of the secure OS 120 includes an encryption processing unit 288 for encrypting the derived key data so as to be decryptable only through a designated server. In this case, the data providing unit 292 And may provide the encrypted key data to the program (n) 200 of the general OS 110 through the memory area.

If the touch coordinate acquisition unit 276 acquires and provides the touch coordinates based on the touch input through the security keypad in the program (n) 200 of the general OS 110, the touch coordinate confirmation unit 276 acquires the touch coordinates (N) 200 on the touch screen (110).

According to the first security touch input embodiment of the present invention, after storing N touch coordinates input through the security keypad in the program (n) 200 of the general OS 110, the accumulated N touch coordinates The touch coordinate confirmation unit 276 can confirm N touch coordinates provided from the program (n) 200 on the general OS 110 through the memory area.

If the touch coordinate input unit 276 provides the touch coordinate input through the security keypad in the program (n) 200 of the general OS 110 according to the second security touch input embodiment of the present invention, The touch coordinates provided by the program (n) 200 on the general OS 110 can be checked and stored through the memory area.

The data derivation unit 284 reads the touch coordinates based on the random arrangement information held by the random arrangement management unit 264 and derives key data corresponding to the touch coordinates.

When the stored N touch coordinates are provided in the program (n) 200 of the general OS 110 according to the first security touch input embodiment of the present invention, the data derivation unit 284 extracts, And the key data corresponding to the N touch coordinates can be derived by reading the N touch coordinates based on the information.

(N) 200 of the general OS 110 according to the second security touch inputting method of the present invention, the data derivation unit 284 determines whether or not each touch coordinate input through the security keypad is touched, Can read the touch coordinates based on the random arrangement information and derive the key data corresponding to the touch coordinates. In this case, the data derivation unit 284 can accumulate the derived key data.

According to the embodiment of the present invention, the touch coordinates provided to the program (s) 244 of the secure OS 120 by the touch input in the program (n) 200 of the general OS 110 are stored in the non- It is also possible to include touch coordinates by touching an area. For example, when the random array information further includes m areas that are not matched with specific key data in addition to M touch areas matched with M key data, the program (n) 200 of the general OS 110 The touch coordinates obtained by touching any one of the m regions may be provided to the program (s) 244 of the security OS 120 (note that, The program (s) 244 of the secure OS 120 identifies only the touch coordinates of a valid touch area by identifying the touch coordinates of a valid touch area in the program (n) 200 of the general OS 110, Lt; / RTI > In this case, the valid coordinate confirmation unit 280 can confirm the effective coordinate obtained by touching a valid touch area among the touch coordinates provided by the program (n) 200 on the general OS 110, and the data derivation unit 284 Can derive the key data corresponding to the effective coordinates based on the random arrangement information.

When the stored N touch coordinates are provided in the program (n) 200 of the general OS 110 according to the first security touch input embodiment of the present invention, (1 ≤ n ≤ N) touched effective touch regions from among the touched coordinates, and the data derivation unit 284 obtains n Key data can be derived.

When each touch coordinate input through the security keypad is provided in the program (n) 200 of the general OS 110 according to the second security touch input embodiment of the present invention, the valid coordinate verification unit 280 The data derivation unit 284 can derive the key data corresponding to the valid coordinates determined based on the random arrangement information. In this case, the data derivation unit 284 can accumulate the derived key data.

The data providing unit 292 provides the key data derived from the data deriving unit 284 to the program (n) 200 of the general OS 110 through the memory area.

The encryption processing unit 288 encrypts the encryption key (or the program (n) 200 of the general OS 110) stored in the secure OS storage area through the encryption key storage unit 252 The data providing unit 292 can decrypt the key data derived through the data derivation unit 284 using only a designated server by using the encryption provided in real time through the memory unit 292. In this case, And can provide the key data encrypted by the encryption processing unit 288 to the program (n) 200 of the general OS 110.

According to the embodiment of the present invention, when the key data (or the encrypted key data) is provided to the program (n) 200 of the general OS 110 through the data providing unit 292, 264 may erase the random arrangement information corresponding to the security keypad implemented on the general OS 110. [

Referring to FIG. 2, the program 200 of the general OS 110 includes a data checking unit 220 for checking key data in a program (s) 244 of the secure OS 120 through the memory area, And a security input processing unit 240 for performing a procedure of providing the key data to a designated server according to a designated procedure.

The data checking unit 236 checks key data derived from the random arrangement information in the program (s) 244 of the secure OS 120 through the memory area. If the key data is encrypted and provided in the program (s) 244 of the secure OS 120, the data checking unit 236 checks the program s of the secure OS 120 through the memory area, It is possible to identify the key data encrypted so as to be decryptable only through the server designated by the server 244.

The secure input processing unit 240 performs a procedure for providing the identified key data to the designated server through the data checking unit 236 according to a designated procedure. For example, when the program (n) 200 of the general OS 110 is a banking app, the security input processing unit 240 provides a banking transaction using the key data confirmed through the data checking unit 236 .

Meanwhile, when the key data confirmed through the data checking unit 236 is encrypted so as to be decrypted only through the server designated by the program (s) 244 of the secure OS 120, the secure input processing unit 240 (S) 244 of the secure OS 120 to the designated server according to a designated procedure without decrypting the key data. For example, when the program (n) 200 of the general OS 110 is a banking app, the secure input processing unit 240 performs a process of providing the encrypted key data to a server providing a banking transaction.

FIG. 3 is a diagram illustrating a process of preparing a program (s) 244 in the secure OS 120 according to an embodiment of the present invention.

3 illustrates a process of loading a program (s) 244 in the secure OS 120. It should be noted that those skilled in the art can refer to FIG. 3 and FIG. (E.g., omitting some of the steps or changing the order of execution) of preparing the program (s) 244 by modifying the program (s) 244, All the methods of implementation are included, and the technical features thereof are not limited only by the method shown in FIG.

Referring to FIG. 3, a program (n) 200 of a general OS 110 is connected to a security OS 120 (or a wireless terminal 100) based on a model (or a type of a processor) ) (Trust zone) is mounted (300). If the secure OS 120 is installed in the wireless terminal 100, the program (n) 200 performs a procedure for loading the program (s) 244 specified in the secure OS 120 (305). The program (s) 244 is loaded and executed in the secure OS 120 according to a designated procedure (310).

When the program (s) 244 is loaded on the secure OS 120, the program n of the general OS 110 transmits the program s 244 to the secure OS 120 (S) 244 mounted on the secure OS 120 and / or identification information of at least one of the information that identifies the program (s) 244 loaded on the secure OS 120 (315).

4 is a diagram illustrating a process of setting an encryption key in the secure OS 120 through the general OS 110 according to an embodiment of the present invention.

In more detail, FIG. 4 shows a case where the program (n) 200 of the general OS 110 confirms the encryption key and provides it to the program (s) 244 of the secure OS 120, s) 244 stores the encryption key. As a person skilled in the art, referring to and / or modifying FIG. 4, a variety of encryption key setting processes It is to be understood that the present invention is not limited to the embodiment (s), but it is to be understood that the invention may be practiced otherwise than as specifically described herein, Technical features are not limited.

Referring to FIG. 4, a program (n) 200 of the general OS 110 identifies an encryption key to be provided to the program (s) 244 of the secure OS 120 (400). If the encryption key is confirmed, the program (n) 200 of the general OS 110 transmits the encryption key to the secure OS 120 of the wireless terminal 100 using the identification information set through the process shown in FIG. (S) 244 is loaded (step 405). If the program (s) 244 is not installed in the secure OS 120, the program 200 of the generic OS 110 may access the secure OS 120 The program (s) 244 may be installed on the side of the computer.

If the program (s) 244 is loaded on the secure OS 120, the program n of the generic OS 110 transmits the OS of the wireless terminal 100 to the secure OS 120, The mobile terminal 100 stores and maintains the state information of the program 200 before switching the OS of the wireless terminal 100 to the secure OS 120 and transmits the program of the secure OS 120 s) 244, or identifies the pre-allocated memory area (415). If the memory area is allocated / confirmed, the program (n) 200 of the general OS 110 sets the access right of the program (n) 200 for the allocated / confirmed memory area, The secure OS 120 provides the encryption key through the memory area to the security monitor 125 while setting the program s 244 to access the memory area 420, The OS of the wireless terminal 100 is switched to the secure OS 120 (430).

When the OS of the wireless terminal 100 is switched to the secure OS 120 and the program (s) 244 of the secure OS 120 is executed or activated (435), the program (s) ) 244 is allocated through the program (n) 200 of the general OS 110 to identify a memory area that can be shared with the program (n) 200 (440). The memory area may be allocated via the program (s) 244 according to an implementation method, and the present invention may include an embodiment in which the program (s) 244 allocates the memory area. If the program (s) 244 does not identify the accessible memory region, the program (s) 244 processes the OS of the wireless terminal 100 to switch to the normal OS 110 (445 (N) 200 of the general OS 110 is the program (n) before switching to the secure OS 120 when the OS of the wireless terminal 100 is switched to the general OS 110. [ (450).

Meanwhile, when the program (s) 244 of the secure OS 120 identifies the accessible memory area, the program (s) 244 of the secure OS 120 confirms the access right to the memory area (455). If the access right to the memory area is not confirmed, the program (s) 244 of the secure OS 120 processes the OS of the wireless terminal 100 to switch to the normal OS 110 (445) , When the OS of the wireless terminal 100 is switched to the general OS 110, the program n of the general OS 110 transmits the program n (n) before the switch to the secure OS 120 200 are restored (450).

Meanwhile, if the access right to the memory area is confirmed, the program (s) 244 of the secure OS 120 checks the encryption key from the memory area (460) and stores the encryption key (465). The program (s) 244 of the secure OS 120 provides the result of storing the encryption key in the memory area 470 and performs processing for switching the OS of the wireless terminal 100 to the general OS 110 When the OS of the wireless terminal 100 is switched to the general OS 110, the program 200 of the general OS 110 transmits the program before switching to the secure OS 120, (s) 244 of the secure OS 120 and accesses (485) a memory area shared with the program (s) 244 of the secure OS 120 to store the encryption key The result is confirmed (490).

5 is a diagram illustrating a process of generating a security keypad to be displayed on the general OS 110 through the secure OS 120 according to an embodiment of the present invention.

5 shows a case where the program (s) 244 of the secure OS 120 randomly generates a plurality of touch areas and a plurality of key data at a request of the program (n) 200 of the general OS 110 (N) 200 of the general OS 110 confirms it by providing the security keypad information for implementing the security keypad by dynamically generating the matched random array information. Those skilled in the art will be able to refer to and / or modify FIG. 5 to infer various implementations of the security keypad setup process (e.g., omitting some of the steps or changing the sequence) However, the present invention is not limited to the technical features of the present invention.

Referring to FIG. 5, a program (n) 200 of the general OS 110 performs a designated operation (500) and determines whether the security keypad is displayed during the designated operation (504). If it is determined that the security keypad is displayed during the designated operation, the program (n) 200 of the general OS 110 transmits the identification information of the wireless terminal 100 using the identification information set through the process shown in FIG. It checks whether the program (s) 244 is loaded on the security OS 120 side (508). If the program (s) 244 is not installed in the secure OS 120, the program 200 of the generic OS 110 may access the secure OS 120 The program (s) 244 may be installed on the side of the computer.

If the program (s) 244 is loaded on the secure OS 120, the program n of the generic OS 110 transmits the OS of the wireless terminal 100 to the secure OS 120, (N) 200 is stored and maintained (512) before the transition of the program (n) 200 to the secure OS 120 and the program of the secure OS 120 s) 244, or identifies the pre-allocated memory area (516). If the memory area is allocated / confirmed, the program (n) 200 of the general OS 110 sets the access right of the program (n) 200 for the allocated / confirmed memory area, The secure OS 120 requests 520 the security keypad information through the memory area while setting the program 244 to access the memory area 520, The OS of the wireless terminal 100 is switched to the secure OS 120 (528). Meanwhile, the program (n) 200 of the general OS 110 may provide the keypad display area information to display the security keypad through the memory area while requesting the security keypad information according to the method.

If the OS of the wireless terminal 100 is switched to the secure OS 120 and the program (s) 244 of the secure OS 120 is executed or activated 532, the program of the secure OS 120 ) 244 is allocated through the program (n) 200 of the general OS 110 to identify a memory area that can be shared with the program (n) 200 (536). The memory area may be allocated via the program (s) 244 according to an implementation method, and the present invention may include an embodiment in which the program (s) 244 allocates the memory area. If the program (s) 244 does not identify the accessible memory area, the program (s) 244 processes the OS of the wireless terminal 100 to switch to the normal OS 110 (540 (N) 200 of the general OS 110 is the program (n) before switching to the secure OS 120 when the OS of the wireless terminal 100 is switched to the general OS 110. [ (544).

Meanwhile, when the program (s) 244 of the secure OS 120 identifies the accessible memory area, the program (s) 244 of the secure OS 120 confirms the access right to the memory area (548). If the access right to the memory area is not confirmed, the program (s) 244 of the secure OS 120 processes the OS of the wireless terminal 100 to switch to the normal OS 110 (540) , When the OS of the wireless terminal 100 is switched to the general OS 110, the program n of the general OS 110 transmits the program n (n) before the switch to the secure OS 120 200) (step 545).

Meanwhile, when the access right to the memory area is confirmed, the program (s) 244 of the secure OS 120 confirms (552) a security keypad information request through the memory area, Randomly arranged randomly arranged key data is generated dynamically (556), and the generated randomly arranged information is maintained (560). When the keypad display area information is provided from the program (n) 200 of the general OS 110, the program (s) 244 of the secure OS 120 is displayed in the area corresponding to the keypad display area information It is possible to dynamically generate random array information in which a plurality of touch regions and a plurality of key data are randomly matched.

The program (s) 244 of the secure OS 120 configures 564 the security keypad information for implementing the security keypad corresponding to the random array information on the general OS 110, The wireless terminal 100 provides the security keypad information to the program n 200 of the general OS 110 and processes the OS of the wireless terminal 100 to switch to the general OS 110, When the OS of the terminal 100 is switched to the general OS 110, the program 200 of the general OS 110 transmits the program 200 of the program 200 before switching to the secure OS 120. [ (S) 244 of the secure OS 120 (580), and confirms the security keypad information from the memory area (584)

6 is a diagram illustrating a process of reading a touch input of a security keypad displayed on a general OS 110 through a security OS 120 according to an embodiment of the present invention and processing the touch input as a security input of the general OS 110 .

6 is a flowchart illustrating an operation of the program (n) 200 of the general OS 110 in the normal OS 110 using the security keypad information confirmed from the secure OS 120 through the process shown in FIG. (S) 244 of the secure OS 120 provides the touch coordinates of the touch input through the security keypad to the program (s) 244 of the secure OS 120 after the security keypad is displayed on the secure OS 120, (N) 200 of the general OS 110 to derive the key data corresponding to the touch coordinates based on the random array information generated / maintained through the process shown in FIG. 5, The security keypad input and the security keypad inputting and reading process of FIG. 6 will be described with reference to FIG. 6, For example, some steps may be omitted, ) Would be able to infer, the present invention is made, including any exemplary way in which the inference, to which the technical feature that is not limited to the exemplary method shown in the figure 6.

Referring to FIG. 6, the program (n) 200 of the general OS 110 displays the security keypad on the touch screen based on the security keypad information confirmed from the security OS 120 through the process shown in FIG. (600) and acquires the touch coordinates corresponding to the touch event of the touch screen according to the first or second security touch input embodiment (604).

When the touch coordinates are provided to the program (s) 244 of the secure OS 120 according to the first or second security touch input embodiment, the program (n) 200 of the general OS 110 transmits the touch State information of the program (n) 200 is stored and maintained before the OS of the terminal 100 is switched to the secure OS 120 (608), and the OS of the wireless terminal 100 is transmitted to the secure OS 120 (S) 244 of the secure OS 120, or identifies 612 the pre-allocated memory area. If the memory area is allocated / confirmed, the program (n) 200 of the general OS 110 sets the access right of the program (n) 200 for the allocated / confirmed memory area, (S) 244 in the secure OS 120 to access the memory area in step 616. The first or second security touch input may be performed in a manner such that touch coordinates (620) and processes the OS of the wireless terminal 100 to be switched to the secure OS 120 through the security monitor 125 (624).

When the OS of the wireless terminal 100 is switched to the secure OS 120 and the program (s) 244 of the secure OS 120 is executed or activated (628), the program of the secure OS 120 ) 244 is allocated through the program (n) 200 of the general OS 110 and identifies a memory area that can be shared with the program (n) 200 (632). The memory area may be allocated via the program (s) 244 according to an implementation method, and the present invention may include an embodiment in which the program (s) 244 allocates the memory area. If the program (s) 244 does not identify the accessible memory area, the program (s) 244 processes the OS of the wireless terminal 100 to switch to the normal OS 110 (636 (N) 200 of the general OS 110 is the program (n) before switching to the secure OS 120 when the OS of the wireless terminal 100 is switched to the general OS 110. [ (640).

Meanwhile, when the program (s) 244 of the secure OS 120 identifies the accessible memory area, the program (s) 244 of the secure OS 120 confirms the access right to the memory area (644). If the access right to the memory area is not confirmed, the program (s) 244 of the secure OS 120 processes (636) the OS of the wireless terminal 100 to switch to the general OS 110, , When the OS of the wireless terminal 100 is switched to the general OS 110, the program n of the general OS 110 transmits the program n (n) before the switch to the secure OS 120 200 are restored (640).

Meanwhile, when the access right to the memory area is confirmed, the program (s) 244 of the secure OS 120 checks touch coordinates provided according to the first or second security touch input embodiment through the memory area (Step 648), key data corresponding to the touch coordinates is derived based on the random arrangement information generated / maintained through the process shown in FIG. 5 (step 656). Meanwhile, the program (s) 244 of the secure OS 120 can confirm the valid coordinates of the touch coordinates that are touched by the effective touch area (652) according to the method of operation (652). In this case, The key data corresponding to the valid coordinates may be derived based on the random array information generated / maintained through the key generation unit (656).

The program (s) 244 of the secure OS 120 is a program for encrypting the encryption key (or program n) of the general OS 110 during the process of FIG. 5 through FIG. 200), and encrypts the derived key data to be decrypted only through the designated server (660). The encryption process may be omitted according to an implementation method.

The program (s) 244 of the secure OS 120 provides the derived key data (or encrypted key data) through the memory area (664), and transmits the OS of the wireless terminal 100 to the general OS When the OS of the wireless terminal 100 is switched to the normal OS 110, the program (n) 200 of the general OS 110 transmits the program (n) 200 to the secure OS (S) 244 of the secure OS 120 and accesses (676) the memory area shared with the program (s) 244 of the secure OS 120, (Or the encrypted key data) corresponding to the touch input using the security keypad from the area (680), and provides the key data (or the encrypted key data) to the designated server according to the designated procedure (684).

100: wireless terminal 110: general OS
115: Generic kernel 120: Security OS
125: Security Monitor 130: Security Kernel
200: program (n) 204:
208: Providing cryptographic key 212: Security input judging unit
216: Keypad information requesting unit 220: Keypad information verifying unit
224: Security keypad display unit 228: Touch coordinate acquisition unit
232: Touch coordinate providing unit 236: Data checking unit
240: security input processing unit 244: program (s)
248: interworking processor 252: cryptographic key storage unit
256: information request confirmation unit 260: random sequence generation unit
264: random array management unit 268: keypad information configuration unit
272: Keypad information providing unit 276: Touch coordinate confirming unit
280: Effective coordinate confirming unit 284: Data deriving unit
288: encryption processing unit 292: data providing unit

Claims (9)

A method for executing a secure operating system (OS) having a secure kernel and a normal operating system (OS) having a kernel structure,
A first step in which the program (n) of the general OS allocates a memory area accessible by the designated program (s) of the secure OS or identifies an allocated memory area;
(N) of the general OS requests security keypad information for implementing the security keypad on the keypad display area information on the touch screen on the general OS as the program (s) of the secure OS through the memory area ;
The program (s) of the secure OS dynamically generates and holds random arrangement information in which a plurality of touch areas and a plurality of key data are randomly matched based on the keypad display area information, and the security keypad corresponding to the random arrangement information (N) of the general OS through the memory area by configuring security keypad information for implementing the security keypad on the general OS;
The program (n) of the general OS displays a security keypad on a touch screen based on the security keypad information, obtains touch coordinates corresponding to a touch event of the touch screen, (s);
Deriving key data corresponding to the touch coordinates based on the random arrangement information and providing the key data to the program (n) of the general OS through the memory area; And
And performing a procedure of providing the key data to a designated server according to a designated procedure of the program (n) of the general OS.
The method according to claim 1,
Confirming an encryption key for encrypting the program (n) of the general OS through decryption only through a designated server;
The program (n) of the general OS providing the encryption key to the program (s) of the secure OS through the memory area; And
And storing the encryption key in a program (s) of the secure OS.
delete delete The method as claimed in claim 1,
Accumulating N (N > = 1) touch coordinates until the program n of the general OS completes touch input through the security keypad displayed on the touch screen; And
And when the touch input is completed, the program (n) of the general OS provides the stored N touch coordinates through the memory area as a program (s) of the secure OS. A method of providing a security keypad using an operating system.
The method as claimed in claim 1,
When the program (n) of the general OS confirms a touch input through the security keypad displayed on the touch screen, providing touch coordinates corresponding to the touch input to the program (s) of the secure OS through the memory area;
And storing the touch coordinates by the program (s) of the secure OS.
The method as claimed in claim 1,
Further comprising the step of extracting effective coordinates in which the program (s) of the security OS touches a valid touch area in the touch coordinates,
And the program (s) of the security OS derives key data corresponding to the effective coordinates based on the random arrangement information.
The method as claimed in claim 1,
And encrypting the derived key data so that the program (s) of the secure OS decrypts the derived key data only through the designated server and providing the encrypted data to the program (n) of the general OS through the memory area A method of providing a security keypad using an operating system.
The method as claimed in claim 1,
Further comprising the step of the program (s) of the secure OS clearing random arrangement information corresponding to the security keypad implemented on the general OS.

Images