KR20110013194A - System and method for using memory of host terminal in storage device, host terminal and storage device, and recording medium thereof - Google Patents

Abstract

PURPOSE: A memory use system of a host terminal, a method thereof, a storage device and a recording medium for the same for replacing the memory using the memory of the host terminal are provided to supply a module of high complexity such as the host terminal by using the memory of the host terminal. CONSTITUTION: A communication unit(61) performs data transceiving. A storage unit(63) stores a program. A controller(69) transmits a memory allocation request message to a host terminal through the communications unit. The controller receives a memory address value from the host terminal through the communication unit.

Description

A system and method for using a memory of a host terminal in a storage device, the host terminal and the storage device, and a recording medium therefor {host and storage device, and a recording medium}

The present invention relates to a method of using a memory of a host terminal in a storage device, and more particularly, to a system and method for using a memory of a host terminal in a storage device that complements a memory of the storage device by using the memory of the host terminal when executing a program in the storage device. It relates to a host terminal and a storage device, and a recording medium therefor.

Although the price of memory has recently fallen, it is still not low, and memory used in auxiliary storage devices such as USB memory and smart cards is still forming a high price range. This limits the development of content and modules that require large amounts of memory. The storage business is only developing contents in a narrow development scope under the security focus.

However, the development of the storage industry requires systems and contents that have been developed in existing host terminals, and storage hardware has problems in specifications and performance to accommodate such requirements. In addition, most of the storage devices can not be driven without the power of the host terminal in hardware, and most modules and contents are also dependent on the host terminal.

SUMMARY OF THE INVENTION The present invention has been proposed to solve the above-mentioned conventional problems, and uses a memory of a host terminal in a storage device that enables a program to be implemented in the storage device using a large memory in the host terminal when executing the program in the storage device. It is an object of the present invention to provide a system and method, a host terminal and a storage device thereof, and a recording medium therefor.

In the storage device of the present invention for achieving the above object, the memory using system of the host terminal, if it is confirmed that the memory size referenced by the running program exceeds the available memory size, and transmits a memory allocation request message, the allocated memory And a host terminal for allocating memory and transmitting the allocated memory address value to the storage device upon receiving the memory allocation request message from the storage device receiving the address value and the storage device.

In the storage device of the present invention for achieving the above object, a storage device in a memory using system of a host terminal includes a communication unit for data transmission and reception, a storage unit for storing a program, and a memory size referred to by a program during program execution. If it is confirmed that the exceeded, and transmits the memory allocation request message to the host terminal via the communication unit, and comprises a control unit for receiving the allocated memory address value from the host terminal through the communication unit.

In the storage device of the memory utilization system of the host terminal in the storage device of the present invention, the control unit transmits a memory allocation request message when it is confirmed that the memory size referred to by the program exceeds the available memory size allocated to the program. It is done.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, the control unit transmits the memory address value allocated through the communication unit, and transfers, deletes, or changes the data of the program being executed or transmitted. Characterized in that request.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, the control unit, when the program releases the allocated memory reference or terminates the program, the memory address value allocated to the host terminal through the communication unit And a memory release request message.

In the storage device of the memory utilization system of the host terminal in the storage device of the present invention, the controller, when the program being released releases the reference to the memory allocated or terminates the program, confirms that the memory of the host terminal is allocated to the program The memory address value and the memory release request message are transmitted.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, when the control unit receives a check message for checking the available memory size from the host terminal through the communication unit, the control unit in response to the check message, the host through the communication unit; The memory allocation request message is transmitted to the terminal.

In the storage device of the memory utilization system of the host terminal in the storage device of the present invention, the program is a separate execution target code block.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, the control unit, upon receiving the packed stack information and register information from the host terminal, calls the entry point of the separation execution target code block (entry point) The execution of the separate execution target code block is started.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, the control unit is characterized in that after executing the separate execution target code block, returning the result value to the host terminal.

In the storage device of the memory using system of the host terminal in the storage device of the present invention, the separate execution target code block is included in a Rights Object and received from the host terminal.

In the storage device of the present invention for achieving the above object, the host terminal in the memory using system of the host terminal, a memory allocation request message from the storage device via the terminal communication unit during the execution of the program in the terminal communication unit and storage for data transmission and reception And a terminal control unit for allocating memory by referring to the memory allocation request message and transmitting the allocated memory address value to the storage device through the terminal communication unit.

In a host terminal in a memory using system of a host terminal in a storage device of the present invention, the terminal controller checks periodically the available memory size of the storage device when the storage device is connected or the program is executed. Characterized in that the transmission of the message.

In the storage terminal of the present invention, in the host terminal in the memory using system of the host terminal, when the terminal controller receives the memory allocation request message, the memory size referred to by the program with reference to the memory allocation request message is the available memory size of the host terminal. Alternatively, the host terminal may determine whether or not the available memory size is allocated to the program, and allocate the memory.

In the storage device of the present invention, the host terminal in the memory using system of the host terminal further includes an output unit for expressing information, and when the terminal controller receives the memory allocation request message, the program request is made by referring to the memory allocation request message. When the memory size exceeds the available memory size of the host terminal or the available memory size allocated to the program in the host terminal, the memory short message is output through the output unit, and an error message is transmitted to the storage device through the terminal communication unit. do.

In the storage device of the present invention, in the host terminal in the memory using system of the host terminal, the terminal control unit releases the allocated memory when the memory address value and the memory release request message allocated from the storage unit are received through the terminal communication unit. It is characterized by.

In a host terminal in a memory using system of a host terminal in the storage device of the present invention, the program is a separate execution target code block.

Memory storage method of the host terminal in the storage device of the present invention for achieving the above object, the storage device, the step of confirming that the memory size referenced by the running program exceeds the available memory size of the storage device, storage device A first transmission step of transmitting a memory allocation request message to the host terminal, and an address value receiving step of the storage device receiving a memory address value allocated to the host terminal from the host terminal.

In the memory using method of the host terminal in the storage device of the present invention, the checking step is characterized in that the storage device confirms that the memory size referenced by the program exceeds the available memory size allocated to the program.

In the storage device of the present invention, the method of using a memory of the host terminal includes, after the address value receiving step, the storage device releases a memory reference to which the program being executed is allocated or terminates the memory address value allocated to the host terminal. And a second transmitting step of transmitting a memory release request message.

In the method of using the memory of the host terminal in the storage device of the present invention, in the first transmission step, when the storage device receives a check message for checking the available memory size of the storage device from the host terminal, the memory is returned in response to the check message. And transmitting an allocation request message.

Memory storage method of the host terminal in the storage device of the present invention for achieving the above object, the receiving step of the host terminal receives a memory allocation request message from the storage device during execution of the program in the storage device, the host terminal memory allocation An allocating step of allocating memory with reference to the request message, and a first transmitting step of transmitting a memory address value allocated by the host terminal to the storage device.

In the memory using method of the host terminal in the storage device of the present invention, in the allocating step, the memory size referenced by the program by the host terminal with reference to the memory allocation request message is allocated to the available memory size of the host terminal or the program in the host terminal. It is characterized by identifying that the available memory size or less and allocating memory.

In the storage device of the present invention, the method of using the memory of the host terminal, before the receiving step, checks that the host terminal periodically checks the available memory size of the storage device when the host terminal confirms that the storage device is connected or the program is executed. And a second transmitting step of transmitting a message.

In the storage device of the present invention, the method of using a memory of the host terminal, after the first transmission step, when the host terminal receives the memory address value and the memory release request message allocated from the storage device, the memory is released. It is done.

In the method of using the memory of the host terminal in the storage device of the present invention, the program is a separate execution target code block.

The present invention also provides a computer-readable recording medium having recorded thereon a program for implementing a method of using a memory of the host terminal in the storage device described above.

According to the present invention, by providing a method of using the memory of the host terminal, it is possible to provide a module or content with a high complexity as a host terminal in the storage device, and to develop various service contents businesses and specialized services.

In addition, the programs, media, images, game engines, etc. implemented in the storage device are protected by the storage device security policy, thereby improving the content security.

1 is a block diagram of a digital rights management system to which the present invention is applied.
2 is a block diagram showing a data structure of executable content in a digital rights management system to which the present invention is applied.
3 is a block diagram showing the structure of the separated execution based content in the digital rights management system to which the present invention is applied.
4 is a block diagram illustrating a separation execution based content composition module in a digital rights management system to which the present invention is applied.
5 is a diagram illustrating a stub code to be inserted into the executable content in the digital rights management system to which the present invention is applied.
FIG. 6 is a diagram illustrating a configuration of an auxiliary execution function unit in a separation execution based content of a digital rights management system to which the present invention is applied and a separation execution process through the same.
7 is an operation flowchart of a code decoding function unit in a digital rights management system to which the present invention is applied.
8 is a block diagram showing the structure of an auxiliary execution module in a storage device of a digital rights management system to which the present invention is applied.
9 is a block diagram illustrating a storage device in a memory using system of a host terminal in a storage device according to an exemplary embodiment of the present invention.
10 is a block diagram illustrating a host terminal in a memory using system of the host terminal in a storage device according to an exemplary embodiment of the present invention.
11 is a flowchart illustrating a method of using a memory of a host terminal in a storage device in accordance with an embodiment of the present invention.
12 is a flowchart illustrating a method of using a memory of a host terminal in a storage device according to another exemplary embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. However, in describing in detail the operating principle of the preferred embodiment of the present invention, if it is determined that the detailed description of the related known functions or configurations may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, the same reference numerals are used for parts having similar functions and functions throughout the drawings.

In the present specification, when one component 'transmits' data or a signal to another component, it may directly transmit data or a signal, and may transmit data or a signal through at least one other component. it means.

1 is a block diagram of a digital rights management system to which the present invention is applied.

Referring to FIG. 1, the digital rights management system to which the present invention is applied includes a content providing terminal 10, a content registration server 30, a digital rights management server 40, a host terminal 50, and a host terminal ( 50) is configured to include a storage device 60 connected via a wired or wireless interface. In the storage device of the present invention, the memory using system of the host terminal includes the host terminal 50 and the storage device 60.

In the present invention, the executable content 11 is a digital work that is stored and distributed in a digital form, and includes an application program, a game program, and a variety of software including a plurality of instructions to enable the executed device to perform any function. can do.

In addition, "separate execution" means that the executable content 11 is executed through the interworking of two different devices, more specifically, the host terminal 50 and the storage device 60. In order to implement such separation execution, the host terminal 50 stores the separation execution base content 37 from which a selected code block (hereinafter referred to as a separation execution target code block) in the code area is removed, and the storage device 60 stores the separation execution base content 37. A portion of the host terminal 50 removed from the separated execution based content 37 in a state in which the separated execution target code block 35 removed from the executable content 11 and converted into executable in the storage device 60 is stored ( Request to the storage device 60 a result value for the separation execution target code block).

In FIG. 1, the network 70 performs a series of data transmission / reception operations for data transmission and information exchange between the content providing terminal 10, the content registration server 30, the DRM server 40, and the host terminal 50. . The network 70 is an IP network providing a large data transmission / reception service and a seamless data service through IP, and may be an ALL-IP network, which is an IP network structure integrating different networks based on IP. In addition, the network 70 includes a wired communication network, a mobile communication network, a wireless broadband network (WiBro), a high-speed downlink packet access (HSDPA) network, a satellite communication network, or other well-known or future-developed wired or wireless networks or a combination thereof.

The content providing terminal 10 is a terminal operated by a content provider. The content providing terminal 10 communicates with the content registration server 30 through the network 70 and stores the executable content 11 developed by the content provider. The executable content 11 is transmitted to the registration server 30.

The content providing terminal 10 executes the profiling and analysis tool 33 downloaded from the content registration server 30 to perform dynamic profiling and static analysis on the executable content 11 to be registered. Profile data is generated from the executable content 11 to be separated and executed through the following (hereinafter, referred to as 'profiling and analysis'), the code block selection rule is input, the generated profile data and the received data are received. The code block selection rule and the executable content 11 to be separated are transmitted to the content registration server 30.

More specifically, the profiling and analysis tool 33 reads user preference information, determines which part to profile, and loads the corresponding PIN tool. Thereafter, the target executable content 11 is loaded into the memory, the PIN tool is inserted and executed, and the result (profile data) is stored.

Profile data essentially includes a code block start address, a code block end address, a code block call count (which is the number of times called during a profile), a code block size, and the presence or absence of a floating point operation. In addition, optionally, the number of host memory references of a code block, the number of calls to an OS API of the code block, the execution time of the code block, the total number of instructions performed on the code block, the parameters passed for the execution of the code block. The number and type, and the type of the value returned after execution of the code block may be included.

The code block selection rule is for setting weights to be given for each item of profile data. The user priority information for which weights can be set is a call to the separated execution target code block 35 to be selected by profiling. Frequency, call location, host memory reference frequency, and OS API reference frequency, and the hardware element of storage 60 in which the separate execution target code block 35 is to be stored.

Here, the call frequency indicates the degree of the call frequency of the code block to which the separate execution target code block 35 is selected among the executions of the executable content 11. In general, the higher the call frequency, the higher the security effect. The load on the device 60 may increase to reduce the overall execution speed of the executable content 11. Therefore, it is desirable to set an appropriate call frequency in accordance with the characteristics of the executable content 11. The call position indicates whether to select a code block to be called at the beginning of execution or to select a code block to be called at the time of setting a specific function in the selection of the separate execution target code block 35. The host memory reference frequency indicates the number of times the code block to be selected as the separated execution target code block 35 refers to the memory of the host terminal 50, and the OS API reference frequency refers to the OS API reference of the host terminal 50 in the code block. Frequency. In general, the higher the memory reference frequency and the OS API reference frequency, the higher the dependency on the host terminal 50. The code block having the high memory reference frequency and the OS API reference frequency is referred to as the separated execution code block 35. When selected, the security efficiency increases, but on the contrary, the execution speed decreases. Therefore, the memory reference frequency and the OS API reference frequency should be appropriately set according to the desired security level. The hardware elements of storage 60 include, for example, the amount of DRAM, NAND flash size, CPU speed, etc. of storage 60 in which separate execution target code block 35 is stored and executed.

By differently weighting each item of the profile data according to the above code block selection rule, the extracted execution target code block 35 is different, and thus the security level is changed.

Meanwhile, the code block selection rule may be set according to the nature of the executable content 11. For example, if the executable content 11 is a game program, execution speed is important, so it is desirable to reduce the host memory reference frequency and the OS API reference frequency to a minimum, in which case, the host memory and the OS API are referred to as a minimum. By selecting the basic code block to be the separated execution target code block 35, the execution speed of the executable content 11 can be minimized. In addition, in the sale of the separated execution based content 37, if the price of the storage device 60 is to be lowered as much as possible, the weight of the hardware element of the storage device 60 may be specified as low. According to this, while the price of the storage device 60 can be lowered, it should be taken into account that the execution speed can be somewhat lowered.

Of course, the above-described code block selection rules can further diversify the settable items.

The content registration server 30 provides the executable content 11 information received from the content providing terminal 10 to the host terminal 50 through a web page, and the separated execution based content 37 and the separated execution target code block. Create 35 and transmit it to the DRM server 40. In this case, the separated execution target code block 35 may be included in a program for the storage device 60 such as an applet and provided to the storage device 60.

Meanwhile, the executable content 11 is converted into the separated execution based content 37, and the DRM server 40, which will be described later, packages the separated execution based content 37 into the encrypted content 41 and the host terminal 50. Since the object provided to the user may be the encrypted content 41, an object that the user checks through a web page and decides to purchase is referred to as the executable content 11 for convenience of description below. .

The content registration server 30 generates the separation execution base content 37 and the separation execution target code block 35 based on the execution content 11 through the separation execution base content configuration module 31, and a detailed process will be described later. do.

The content registration server 30 provides a list of the executable content 11 and detailed information about the corresponding executable content 11 so that a user can purchase the executable content 11 through a web page.

Specifically, upon receiving a request signal for downloading the executable content 11 displayed on the web page from the host terminal 50, the content registration server 30 downloads DD (Download Descriptor) information of the corresponding executable content 11. To the host terminal 50.

The DD information refers to brief information about the executable content 11 or the rights object 43 such as a file name, file size, file provider, URL information of the corresponding executable content 11 or the rights object 43, and the like. It is received before downloading the type content 11 or the rights object 43 and temporarily stored in a buffer, and is automatically deleted when the execution type content 11 or the rights object 43 is downloaded.

In addition, when the content registration server 30 receives a purchase and repurchase request signal of the rights object 43 for the selected executable content 11 from the host terminal 50, the content registration server 30 triggers a purchase or repurchase to the DRM server 40 ( Trigger and, upon receiving the trigger and DD information for the rights object 43 from the DRM server 40, transmits to the host terminal 50. In addition, when the content registration server 30 receives a refund or transfer request signal of the rights object 43 for the selected executable content 11 from the host terminal 50, the content registration server 30 triggers a refund or transfer trigger to the DRM server 40. When the request is received and the corresponding trigger is received from the DRM server 40, the host device 50 transmits the trigger.

 The trigger is a message for starting the protocol execution for the purchase or repurchase, refund or transfer of the rights object 43 between the DRM server 40 and the host terminal 50, and the registration of the storage device 60.

The DRM server 40 packages the separated execution based content 37 received from the content registration server 30, and stores the details of the rights object 43 that created, managed, issued and issued the rights object 43. Server.

Here, the rights object 43 specifies a purchase relation and usage rights between the executable content 11 and the user with respect to the executable content 11 purchased by the user.

Specifically, the DRM server 40 generates a Contents Encryption Key (CEK), and separates execution based content 37 received from the content registration server 30 from an Open Mobile Alliance (OMA), a Digital Media Project (DMP), The package is packaged into encrypted content 41 according to technical standards set forth by DRM standardization organizations such as Moving Picture Experts Group (MPEG) -21 and Internet Streaming Media Alliance (ISMA). At this time, the DRM server 40 generates the decryption key included in the rights object 43 for decrypting the encrypted content 41, such as CEK used during packaging. In this case, the separation execution target code block 35 received from the content registration server 30 may be included in the rights object 43 and generated.

In other words, the encrypted content 41 is a result of packaging the separated execution based content 37 in which the original executable content 11 replaces the separated execution target code block 35 with the stub code.

Here, when generating a CEK and packaging it with encrypted content 41, Advanced Encryption Standard (AES), Rivet-Shamir-Adelman (RSA), Elliptic Curve Cryptosystem (ECC), SEED block encryption algorithm, and DES (DES) Encryption algorithms such as Data Encryption Standard) may be used, but are not limited thereto.

In addition, the DRM server 40 generates a trigger and DD information for the rights object 43 when the user requests a purchase or trigger for the rights object 43 to be purchased or repurchased from the content registration server 30. When a request is made to the content registration server 30 and a refund or transfer trigger for the rights object 43 to be refunded or transferred from the content registration server 30 is requested, the trigger for the rights object 43 is triggered. It generates and transmits to the content registration server 30.

Subsequently, when the content download request is received from the host terminal 50, the corresponding encrypted content 41 is transmitted. When the request for purchase or repurchase of the rights object 43 is received, the rights object 43 is transmitted, and the rights object 43 is transmitted. When request for a refund or transfer of) is requested to delete the rights object 43 stored in the storage device (60).

The host terminal 50 may be a computing device having an independent central processing unit (CPU) capable of executing the executable content 11, such as a PC, a laptop, a workstation, a kiosk, an automated teller machine, an PDA, and a PDA. Personal Digital Assistants) and the like, and include a public computer that is accessible by a large number of users. The host terminal 50 communicates with the content registration server 30 and the DRM server 40 through the network 70, and communicates with the storage device 60 connected via a wired or wireless interface.

Here, the wired / wireless interface is a wired communication method using USB, USB2, Serial / Parallel Port, Ethernet, TCP / IP, communication cable, Bluetooth, Zigbee, Rubee, Infrared; A short range wireless communication method using Data Association, Ultra Wide Broadband (UWB), Near Field Communication (NFC), Wibro, or the like may be used.

Specifically, the host terminal 50 accesses a web page provided by the content registration server 30, selects the executable content 11 displayed on the web page, and requests a download from the content registration server 30. Subsequently, when the DD information of the executable content 11 is received from the content registration server 30, the encrypted content 41 for the executable content 11 is obtained by accessing the DRM server 40 using the DD information. Receive.

In addition, when the user wants to purchase and repurchase the rights object 43, the host terminal 50 transmits a request for purchase or repurchase of the rights object 43 to the executable content 11 to the content registration server 30. send. Subsequently, when the trigger and DD information for the rights object 43 are received from the content registration server 30, the rights object 43 is requested by accessing the DRM server 40 using the trigger. Thereafter, the received right object 43 is transmitted to the storage device 60 connected through the wired / wireless interface. In addition, when the user wants to purchase and repurchase the rights object 43, the host terminal 50 transmits a refund or transfer request signal for the rights object 43 to the content registration server 30. Subsequently, when a trigger for the rights object 43 is received from the content registration server 30, the trigger is connected to the DRM server 40 to request a refund or transfer.

For example, the user of the host terminal 50 already has the rights object 43 for the executable content 11 to be used, so only the encrypted content 41 for the executable content 11 is needed. It may be necessary, such as when purchasing the first executable content (11) or when the right object 43 expires and repurchases, only the rights object 43 for the executable content (11) may be needed. It may also require both encrypted content 41 and rights object 43.

In addition, when the host terminal 50 starts to execute the encrypted content 41, the host terminal 50 checks whether the right object 43 is stored in the storage device 60. When the rights object 43 is stored in the storage device 60, the decryption key included in the rights object 43 is requested from the storage device 60 to decrypt the encrypted content 41. On the other hand, if the rights object 43 is not stored in the storage device 60, the content registration server 30 may transmit a purchase or repurchase request signal. In addition, when the separation execution target code block 35 is stored in the storage device 60, the host terminal 50 decrypts the encrypted content 41 using the decryption key as the separation execution based content 37. Thereafter, in association with the storage device 60 connected through the wired / wireless interface, separation of the encrypted content 41 may be performed.

The storage device 60 may be any of a variety of portable devices incorporating a processor, such as a USB memory, a flash memory card, and various portable and portable storage media (e.g., a Secure Digital (SD) memory card, a microSD memory card, an ISO 7816 standard). Portable storage devices). The storage device 60 is connected to the host terminal 50 through a wired or wireless interface, and stores the rights object 43 for the encrypted content 41 installed in the host terminal 50.

As described above, the rights object 43 may include a decryption key for decrypting the encrypted content 41, and may include a separate execution target code block 35 for the separated execution based content 37. have. At this time, the storage device 60 performs an operation on the separation execution target code block 35 at the request of the host terminal 50 and returns a result value to the host terminal 50.

The basic concept of the above-described separation execution based content 37 will be described with reference to FIGS. 2 and 3.

2 is a block diagram showing a data structure of executable content in a digital rights management system to which the present invention is applied.

Referring to FIG. 2, the executable content 11 to which the present invention is applied may include a plurality of files, for example, a file such as an API provided by an operating system, an API provided by a developer, or a dynamic linking library (DLL). Include. The executable content 11 including the plurality of files may be divided into a code region 21 and a data region 23, and the actual executable content 11 may include a code region 21 and a data region 23. Are mixed with each other. The code area 21 includes a plurality of basic blocks 25, and includes a plurality of basic block groups 27 selected for extraction of the separated execution target code block 35.

Here, the basic block 25 is a sequence of instructions having attributes of a single input and a single output, and a code block having an attribute that does not allow entry from the outside to the inside. Can be defined as That is, the basic block 25 means a continuous sentence (a collection of codes) that is always executed all the time from the beginning to the end, and is a group of statements in which execution is not stopped due to flow control.

3 is a block diagram showing the structure of the separated execution based content in the digital rights management system to which the present invention is applied.

1 and 3, the detached execution based content 37 to which the present invention is applied includes a code region 21a in which stub codes are inserted in place of one or more detached execution target code blocks 35. ) And a data area 23. In this case, the stub code 26 is inserted in place of the separated execution target code block 35 extracted for the separation execution and connects the separation execution based content 37 and the separation execution target code block 35. Specifically, when the stub code 26 performs a separate execution on the executable content 11, the stub code 26 calls the separate execution target code block 37 and calculates by performing an operation on the separated execution target code block 37. Return the result.

 The separated execution target code block 35 includes a plurality of basic block groups 27 extracted from the code area 21 of the executable content 11 through profiling and analysis of the executable content 11. Preferably, the separate execution target code block 35 allows the entry of the control signal through the entry point of the separation execution target code block 35 and the movement of the control signal between the basic block 25, but the separation execution target. The basic block group 27 includes a plurality of basic blocks 25 associated with each other without entry of a control signal to the basic block 25 except for the start point of the code block 35.

On the contrary, when the basic block group 27 in which the control signal enters the basic block 25 except for the starting point is selected as the separate execution target code block 35, the corresponding separation execution code block 35 is extracted. The control signal may enter the middle of the inserted stub code 26, not at the beginning. In this case, the stub code 26 may not process the control signal, and thus execution of the executable content 11 may not be performed. It may be stopped or an error may occur.

The above-described separated execution target code block may be extracted as follows.

First, a plurality of basic block groups 27 are selected through dynamic profiling and static analysis of the code area 21 of the executable content 11 to be separated. The selection of the plurality of basic block groups 27 starts execution of the executable content 11 to be separated, collects basic information about the code area 21 during run-time, and uses the collected basic information. This is accomplished by performing a static analysis of the code region 21 through dynamic profiling that extends the scope of analysis. The basic information is at least one indirect address among a branch address, a jump address, a call address, and an indirect address of the RET. From the basic information, the basic information related to the published API of the executable content 11 is removed, and based on the basic information from which the basic information related to the published API is removed, the code region 21 of the executable content 11 is removed. By performing a static analysis of the analysis, the scope of analysis can be extended. By substituting indirect addresses from among the collected basic information on the control flow, more basic block groups 27 can be selected as compared to performing dynamic profiling or static analysis by extending the analysis range alone.

In addition, when a control signal entering the basic block group 27 is generated among the plurality of selected basic block groups 27, the basic block group 27 is divided and redefined based on the instruction address of the control signal. do. At this time, the basic block group 27 to be redefined is redefined as a first basic block group before and a second basic block group after including the command address of the control signal based on the command address of the control signal.

By repeating this redefinition process, a basic block group 27 including a plurality of basic blocks 25 having properties of a single input and a single output and an attribute which does not allow entry from outside to inside is finally obtained. define.

Subsequently, the separation execution target code block 35 is selected from the plurality of basic block groups 27, and the separation execution target code block 35 is separated from the code area 21, instead of the separation execution target code block 35. Insert the stub cord 26.

In this case, the separate execution target code block 35 may select a basic block group 27 on a critical path of the executable content 11 among the plurality of basic block groups 27. In addition, the separate execution target code block 35 may be selected from the plurality of basic block groups 27 in consideration of the number of calls, the size, and the execution time. For example, a basic block group 27 having a large number of calls, a small size, and a short execution time is selected as the separate execution target code block 35.

According to this, in the executable content 11, the basic block group 27 existing on the critical path, having a large number of calls, a small size, and a short execution time is separated into the target block of execution code 35 for security. By selecting and separating the execution target code block 35 from the executable content 11, the security performance related to copy protection of the executable content 11 can be improved.

In addition, by performing a static analysis using the basic information of the code area 21 collected through dynamic profiling to extract the basic block group 27, the code of the executable content 11 The extraction range of the basic block group 27 may be improved by extending the analysis range of the region 21.

In addition, by providing the flexibility to redefine the once defined basic block group 27, a single input and a single output that can be candidates for the separate execution target code block 35 It is possible to generate a basic block group 27 having an inadequate basic block group 27 with the entry of the control signal to the inside except for the entry point (entry point) is selected as a separate execution target code block 35 As a result, it is possible to suppress the occurrence of an error while separating and executing the separated execution target code block 35.

4 is a block diagram illustrating a separation execution based content composition module in a digital rights management system to which the present invention is applied. 5 is a diagram illustrating a stub code to be inserted into the executable content in the digital rights management system to which the present invention is applied.

In the DRM system illustrated in FIG. 1, the separation execution based content configuration module 31 to be described below includes a separation execution based content 37 and a separation execution target to be stored in the host terminal 50 and the storage device 50, respectively. The module for generating the code block 35.

1, 4, and 5, the separation execution based content composition module 31 includes a module control unit 311, a code analysis unit 313, a code operation unit 315, and a code conversion unit 317. And a code encryption unit 319.

The module controller 311 controls the overall process for generating the separated execution based content 37. That is, the separated execution target code block 35 is selected from the inputted executable content 11 to be separated, and the selected separated execution target code block 35 is separated from the executable content 11, and the separated execution target code block is executed. Converts the executable content 11 to enable separate execution of the 35, converts the separated executable execution code block 35 into a form that can be processed in the storage device 60, The code analyzing unit 313, the code manipulating unit 315, and the code converting unit extract the initial code block from the code area and encrypt the initial code block to decrypt and execute the encrypted initial code block when executing the executable content 11. 317 and the code encryption unit 319 is controlled.

The code analyzer 313 analyzes a code region of the executable content 11 and selects one or more separated execution target code blocks 35 from the code region. More specifically, the code analyzing unit 313 receives the content to be separated, the profile data for the content, and the code block selection rule received from the content providing terminal 10 to receive the profile data and the code block selection rule. Based on the determination, the code block 35 to be separated is executed in the code area of the content.

Specifically, the code analyzer converts the selection rule of the profile data and the separation target code block 35 into an internal data format. For example, the profile data and rules may be implemented in XML form, in which case the selection rule of the profile data and the separated execution code block is an XML parser that converts the XML data into an internal data format. Then, the profile data and code block selection rules are loaded, and one or more separate execution target code blocks 35 are selected in the code area of the executable content 11 based on the loaded profile data and code block selection rules.

In addition, the code analyzing unit 313 updates a code block selection rule, which becomes a reference when the separation target code block 35 is selected. The code block selection rule means to select a code block to be separated with the largest weight among the information of the profile data. As described above, the code block selection rule may be represented by a weight for each item of the profile data. However, since the code block selection rule is highly likely to change according to the type, size, etc. of the content, the rule for selecting the code block to be separated is continuously updated by receiving a verification result of the selected code to be separated. do. For example, if an issue such as execution speed occurs by performing a test on the selected separated execution target code block 35, the detailed weight of the selection rule of the separated execution target code block 35 is changed based on this.

The code manipulation unit 315 converts the executable content 11 to connect the separated execution target code block 35 selected by the code analysis unit 313 and the separated execution based content 37 in which the separated execution target code block is separated. do.

More specifically, the code operation unit 315 generates an auxiliary execution function unit for interworking with the separated separated execution target code block 35, and the separated execution target code block 35 jumps to the auxiliary execution function unit from the front. After the execution of the auxiliary execution function unit is completed, the stub code that jumps to the position to be executed next to the separation execution target code block 35 is generated and inserted into the position of the separation execution target code block 35.

Here, the auxiliary execution function calls the separate execution target code block 35 by packing the parameters passed from the stub code, that is, the information of the stack and the register, and when the call ends, the result value of the separate execution target code block 35. Restore the stack and register information.

For example, the separate executable code block 35 stored in the storage device 60 is implemented as Java bytecode based on the platform of the storage device 60, more specifically, a Java applet embedded with a Java applet and ARM instructions. In this case, the auxiliary execution function unit is implemented as a native launcher for executing the above-described Java applet. In addition, the auxiliary execution function is implemented as a DLL (Dynamic Link Library) file so that it can be loaded and executed only when necessary. This auxiliary execution function will be described in more detail later.

Referring to FIG. 5, (a) shows the executable content 11 before inserting the stub code, that is, the separated execution target code block 35, and (b) is inserted at the position of the separated execution target code block 35. Shows the stub code.

When comparing (a) and (b) of Fig. 5, the stub code jumps to a specific function of the auxiliary execution function unit (jmp NativeLauncher) from the front position of the separate execution target code block 35, and calls the function of the auxiliary execution function unit. After that, it is generated to jump to the endpoint to return a function value, and is inserted at the position of the separated execution code block 35. According to this, code conversion is possible without changing the caller code.

The code manipulation unit 315 inserts a native launcher function unit (Native Launcher DLL) into an import table of an idata section for the insertion of the stub code and for loading the auxiliary execution function unit. The insertion of the auxiliary execution function into the import table is for the auxiliary execution function to be loaded by the loader of the OS when the separate execution base content 37 is driven in the host terminal 50.

In this way, the interaction with the separated separate execution target code block 35 is possible without modifying the source code of the separated execution based content 37.

The code conversion unit 317 converts the separation execution target code block 35 separated from the separation execution base content 37 into an executable form in the storage device 60. In this case, the separation execution target code block 35 may be converted into instructions of a processor included in the storage device 60 in order to improve the separation execution speed. For example, when the storage device 60 is a Java-based smart card, the separate execution target code block 35 is converted to Java byte code, in particular, to Java byte code containing an ARM instruction. That is, when the host terminal 50 has an X86 series processor structure and the storage device 60 is an ARM structured processor, the code conversion unit 317 may execute the X86 instruction of the separate execution target code block 35. Convert Java bytecode and ARM instructions to embedded Java bytecode.

At this time, the code conversion unit 317 preferably converts the separation execution target code block 35 into a plurality of machine codes so that the separation execution of the executable content 11 can be applied to various processor environments. To this end, the code conversion unit 317 may be implemented using a compiler infrastructure, in particular, a low level virtual machine (LLVM). With LLVM, you can use a variety of proven open source solutions, code optimization independent of the target, i.e., the processor of the storage device 60, high code reusability, and a variety of source code I can convert it.

In detail, the code conversion unit 317 converts a separate execution target code block formed of a source, that is, a language based on the platform of the host terminal 50, into an intermediate level language (LLVM IR), and then the intermediate level language. Optimizes the separate execution target code block 35 converted into a second, and finally separates the optimized execution target code block 35 of the intermediate language into a plurality of machine codes based on the processor of the storage device 140, for example, Java bytecode, converted to ARM instructions.

The code encryptor 319 encrypts the initial code block selected under the control of the module controller 311 with a specific key, and decrypts and executes the initial code block through the specific key when executing the executable content 11. The executable content 11 is converted.

Specifically, the code encryptor 319 encrypts the selected initial code block with a designated key, and then inserts the encrypted initial code block into the security area additionally generated in the executable content 11, and at the position of the initial code block. A start stub code is inserted which causes the secondary execution function to be loaded to obtain the key, decrypt and execute the encrypted initial code block.

More specifically, the code encryptor 319 generates a startup stub code that calls a function of an auxiliary execution function to decrypt and execute the encrypted initial code block instead of the initial code block to be encrypted and moved, thereby initial block. Insert it in the position of. The code encryptor 319 creates a new secure section in the executable content 11, encrypts the selected initial block code with a specified key, and loads the encrypted initial code block in the generated secure area. do.

In this case, since the key used for encryption is necessary for decryption at the time of execution of the executable content 11, the key used for encryption may be managed in the form of a Contents Encryption Key (CEK) of the rights object 43 and stored in the storage device 60. .

The initial code block encrypted through the code encryption unit 319 is then decrypted by the auxiliary execution function unit as in the case of the separate execution target code block 35 and driven in an on-memory state. (Running) According to this, the first-level security technology is applied to the executable content 11 at the time of initial driving, and the two-level security technology is applied through separate execution, thereby more illegally using and copying the executable content 11. You can block.

FIG. 6 is a diagram illustrating a configuration of an auxiliary execution function unit in a separation execution based content of a digital rights management system to which the present invention is applied and a separation execution process through the same.

Referring to FIG. 6, a separate execution target digital content 37 stored in the host terminal 50 and a separate execution target stored in the storage device 60 and converted into an executable form in the storage device 60 according to the present invention. The code blocks 35 interoperate with each other via the auxiliary execution function unit 300. In particular, the auxiliary execution function unit 300 allows the host terminal 50 implemented as a heterogeneous processor and the storage device 60 to implement separate execution.

To this end, the auxiliary execution function unit 300 may include an interface function unit 310, a packing function unit 320, an unpacking function unit 330, a memory mapping function unit 340, and the like. In addition, the OS API mapping function 350 may be included, and in addition, the code decoding function 360 may be further included.

The interface function unit 310 provides a communication channel with the separation execution target code block 35 to exchange data with the separation execution target code block 35 stored in the storage device 60. For example, the interface function unit 310 may provide a communication channel with the separate execution target code block 35 through an application protocol data unit (APDU) defined in ISO-7816. The interface function unit 310 may provide a network bearer transparent interface so that the other function unit of the auxiliary execution function unit 300 is not changed even when another type of interface such as TCP / IP Over USB is applied in the future. . The interface function 310 has a function of the same type as general I / O functions.

The packing function unit 320 receives the stack and register information from the stub code 234 and packs it, and transmits the packing function unit 320 to the separate execution target code block 35 through the interface function unit 310. Here, the stack information is a collection of stack values used as parameters starting from the stack position designated by the SP register, and the register information is transmitted when the separate execution target code block 35 is called in the stub code 234. Register information.

The unpacking function unit 330 unpacks the packed data transferred from the separate execution target code block 35 through the interface function unit 310 and returns the packed data to the stub code 234. The unpacking function unit 330 simply sets a return value to a value of a corresponding register if the return value of the separated execution target code block 35 is a Primitive Data Type, and if the return value is a memory address, Change the corresponding values according to the return value.

The memory mapping function unit 340 records the data transmitted from the separate execution target code block 35 through the interface function unit 310 in the memory of the host terminal 50, or the data in the memory of the host terminal 50. And dispatch to the separate execution target code block 35. The separate execution target code block 35 of the storage device 60 may be executed by referring to the memory of the host terminal 50 through the memory mapping function 340.

The OS API mapping function unit 350 receives the API name and parameter values from the separate execution target code block 35 through the interface function unit 310, calls the OS API of the host terminal 50, and as a result, Received is returned to the code execution target block 35 to be separated. As a result, the separated execution target code block 35 stored in the storage device 60 may call the OS API of the host terminal 50 to receive the result.

The code decryption function 360 obtains a specific key from the storage device 60, decrypts the encrypted initial code block 271 loaded in the security area 270, and executes the decrypted initial code block. .

7 is an operation flowchart of a code decoding function unit in a digital rights management system to which the present invention is applied. Referring to FIG. 7, the code decryption function unit 360 receives an encrypted initial code block and a key CEK used for encryption, and decrypts an initial code block with a key (S361). The runtime code executioner directly executes the decoded initial code block on the memory (S362). More specifically, the runtime code executor maps an instruction pointer to the decoded initial code block and jumps to execute the decoded initial code block. According to this, only when the initial code block is executed, the decrypted initial code block exists in the memory, and after execution, it is immediately destroyed, thereby increasing the security effect.

6 and 7, the separation execution operation using the auxiliary execution function unit 300 will be described as follows.

First, when the separated execution based content 37 starts to be driven, the auxiliary execution function unit 300 is loaded by the start stub code 233 located at the beginning of the code region 230 (①), and the code decoding function unit is executed. 360 is called to retrieve an encrypted initial code block 271 loaded in the secure area 270 (2), obtain a key (CEK) necessary for decryption (3), and initialize the initial code block 271. Decode and execute (④). Subsequently, the next program code of the code area is executed in order, and when the stub code 234 is entered, the packing function 320 is called by the stub code 234, and the called packing function 320 is stubbed. The stack and register information delivered from the code 234 is packed and transferred to the separate execution target code block 35 of the storage device 60 through the interface function unit 310 (⑤). In this case, the separate execution target code block 35 is executed. In this case, the separate execution target code block 35 is executed by the memory of the host terminal 50 through the memory mapping function 340 and the OS API mapping function 350. You can access the OS API (⑥). When the execution of the separate execution target code block 35 is completed, the result value is transmitted to the auxiliary execution function unit 300 through the interface function unit 330, and the unpacking function unit 330 freezes the result value again. It is packed and returned to the stub code 234 (⑦).

According to this, the separation execution based content 37 and the separation execution target code block 35 may operate normally through interworking between the host terminal 50 and the storage device 60.

8 is a block diagram showing the structure of an auxiliary execution module in a storage device of a digital rights management system to which the present invention is applied. 6 and 8, the separated execution target code block 35 stored in the storage device 60 to which the present invention is applied and the separated execution based content 37 stored in the host terminal 50 may include an auxiliary execution function unit. It is interlocked through the 300 and the auxiliary execution module 610.

The auxiliary execution module 610 includes an execution function unit 611, a task management function unit 613, a loading function unit 615, a device memory mapping function unit 617, a device OS API mapping function unit 619, and a device memory. The management function unit 621 and the ROM management function unit 623 are included.

The loading function 615 loads the separate execution target code block 35 to fix all unfixed references (hereinafter referred to as linking) and load the references to an arbitrary area in the memory. Refer to reference information to link unresolved reference.

The execution function unit 611 communicates with the host terminal 50, parses the data received from the host terminal 40, executes the contents, and transmits the contents to the host terminal 50. In this case, the protocol may be processed by standardizing between the auxiliary execution function unit 300 and the auxiliary execution module 610.

Specifically, the separation execution target code block 35 included in the RO is received, the separation execution target code block 35 is loaded through the loading function unit 615, and the separation execution is performed by manipulating an IP (interrupt priority) resist. The entry point of the target code block 35 is forcibly called and executed. In addition, when it is necessary to wait for a response from the host terminal 50 due to a call of the device memory mapping function 619 or the device OS API mapping function 621, an instruction pointer and register values that are currently being executed are contextually displayed. After temporary storage in the form of (context), when a response arrives from the host terminal 50, the process is executed again from the corresponding position.

The device memory mapping function 617 packs the instructions loaded by the loading function 615 to the auxiliary execution function 300 of the host terminal 50 when the instructions refer to the memory of the host terminal 50. When the response is received from the auxiliary execution function unit 300, the packet is unpacked and transferred to the execution function unit 611.

Here, the loading function 615 links the code having the memory reference of the host terminal 50 to call the device memory mapping function 617 during the initial loading process, and thus the host in the loaded code. When the memory reference of the terminal 50 is made, the device memory mapping function unit 617 is called.

The device OS API mapping function 619 packs an instruction loaded by the loading function 615 when the OS API of the host terminal 50 calls the OS execution function of the host terminal 50. 300, and when receiving a response from the auxiliary execution function unit 300, unpacks and transmits the response to the execution function unit 611.

Here, the loading function unit 615 links the code that calls the OS API of the host terminal 50 to call the device OS API mapping function unit 619 during the initial loading process, and thus the loaded code When calling the OS API of the host terminal 50 in the device OS API mapping function unit 619 is called.

The task management function unit 613 may include a plurality of separated execution based content 37 executed in the host terminal 50, and when the plurality of separated execution based content 37 are executed at the same time, a task of the storage device 60 may be executed. Create a task to match 1: 1 with. In addition, it is connected to other components of the execution function unit 611 and the auxiliary execution module 610.

When the auxiliary execution module 610 is executed, the device memory management function 621 receives the start address of the heap allocated to the auxiliary execution module 610 and the available memory size from the storage device 60 OS, and performs separate execution. Memory for execution of the target code block 35 is allocated, released, data inserted, deleted, and the like. In this case, the allocated memory is fixed and preferably allocated such that only the auxiliary execution module 610 may be used. In addition, the memory management function unit 621 requests the job management function unit 613 when the memory size referred to by the separated execution target code block 35 is larger than the available memory size of the storage device 60, and the host terminal 50. ) Memory is allocated.

When the number of writes of the NOR or NAND memory in the ROM management function unit 623 storage device 60 is limited, the original equipment manufacturer (OEM) may minimize the access when referring to the NOR or NAND memory due to the small amount of RAM. Provides a file system that can implement cash by allocating a certain area of ROM. Such a file system is provided with APIs such as open, read, and write files as in the existing file system.

9 is a block diagram illustrating a storage device in a memory using system of a host terminal in a storage device according to an exemplary embodiment of the present invention. 1 and 9, the storage device 60 of the present embodiment includes a communication unit 61, a storage unit 63, a communication bus 67, and a control unit 69.

The communication unit 61 has an interface for performing data transmission and reception with the host terminal 50 connected by wire or wirelessly.

The storage unit 63 is a reservoir for storing the program 65.

The program 65 may include various contents or application programs, and may be loaded into the memory of the storage device 60 in the controller 69 and executed.

The communication bus 67 provides a signal transmission path between the components of the storage device 60.

The control unit 69 controls overall operations of the communication unit 61 and the storage unit 63, fetches instructions of the program 65, decodes the instructions, and executes the instructions. The program 65 is executed.

When the program 65 refers to the memory while the program 65 is running, the controller 69 checks the available memory size of the current storage device 60, and checks the available memory size of the storage device 60 and the program 65. Compares the memory size referenced by).

When the controller 69 confirms that the memory size referenced by the program 65 exceeds the available memory size of the storage device 60, the controller 69 transmits a memory allocation request message to the host terminal 50 through the communication unit 61. .

The memory allocation request message includes a logical address or a virtual address used in the program 65 and transmits the memory size requested by the program 65 so that the host terminal 50 can recognize the memory size. Say a message.

In this case, a plurality of programs may be stored in the storage device 60, and a plurality of programs may be executed together by a user. When the controller 69 executes a plurality of programs together, the controller 69 allocates a memory of the storage device 60 to refer to each program. The controller 69 checks the available memory size of the storage device 60 allocated to the program 65 when the program 65 refers to the memory while the program 65 is running and the program 65 is running. The available memory size of the storage device 60 allocated to 65 can be compared with the memory size referenced by the program 65. Subsequently, when the controller 69 confirms that the memory size referenced by the program 65 exceeds the available memory size of the storage device 60 allocated to the program 65, the control unit 69 transmits the host terminal 50 through the communication unit 61. ) Can be used to send a memory allocation request message.

For example, when executing the program 65, the control section 69 may set a base register, which is a memory start address, and a limit register indicating a memory space size, for each program. When the logical address or the virtual address of the program 65 refers to the base register value or more than the combined value of the base register and the limit register, the memory of the storage device 60 is effectively allocated, and the base When the reference value is greater than the sum of the registers and the limit registers, it is confirmed that the available memory size of the storage device 60 allocated to the program 65 is exceeded.

In another embodiment of the present invention, when the controller 69 receives a check message for checking the available memory size of the storage device 60 from the host terminal 50, the controller 69 may transmit a memory allocation request message in response thereto.

The check message is a message for checking the available memory size of the storage device 60 by the host terminal 50 and is a message periodically transmitted without a specific command.

The control unit 69 receives an allocated memory address value of the host terminal 50 from the host terminal 50 through the communication unit 61.

At this time, when recording the data of the program 65 being executed in the memory, the controller 69 checks whether the memory referenced by the program 65 is allocated to the storage device 60 or the host terminal 50, When confirming that the memory of the host terminal 50 is allocated, the data of the program 65 being executed is transmitted to the host terminal 50 through the communication unit 61 while transmitting the memory address value received from the host terminal 50. Can be. In addition, when the program 65 uses, deletes, or changes the data transmitted to the host terminal 50, the program 65 transmits the memory address value received from the host terminal 50 to the host terminal 50. You can request a return, delete or change it.

In addition, the controller 69 releases the memory reference allocated to the host terminal 50 during the execution of the program 65, or when the execution of the program 65 ends, the program 65 refers to it. After confirming that the memory is allocated to the storage device 60 or the host terminal 50 and confirming that the memory of the host terminal 50 is allocated, the memory address received from the host terminal 50 to the host terminal 50 is determined. A value and memory release request message can be sent.

The memory release request message refers to a message for requesting release of memory allocation so that the memory allocated to the program 65 of the host terminal 50 can be used as available space.

In another embodiment of the present invention, the controller 69 may receive an error message from the host terminal 50 because there is no available memory of the host terminal 50 as much as the memory size referred to by the program 65. When receiving, the control section 69 may forcibly terminate the execution of the program 65.

10 is a block diagram illustrating a host terminal in a memory using system of the host terminal in a storage device according to an exemplary embodiment of the present invention. For convenience of description, the configuration shown in FIG. 9 described above will be described with reference to the corresponding reference numeral. 1 and 10, the host terminal 50 according to the present embodiment includes a terminal communication unit 51 and a terminal control unit 57, and may further include an output unit 55.

The terminal communication unit 51 has an interface for performing data transmission and reception with the storage device 60 connected by wire or wirelessly.

The output unit 55 functions to express information under the control of the terminal controller 57. The output unit 55 includes a display device such as a CRT screen, a liquid crystal display (LCD), and a light emitting diode (LED) liquid crystal used to display information.

The terminal controller 57 controls the overall operation of the host terminal 50 including the terminal communication unit 51 and the output unit 55.

When the terminal controller 57 receives the memory allocation request message from the storage device 60 through the terminal communication unit 51, the terminal controller 57 recognizes a logical address or a virtual address included in the memory allocation request message. The memory size referred to by the program 65 is recognized.

The terminal controller 57 allocates memory as much as the memory size referred to by the program 65 and transmits the allocated memory address value to the storage device 60 through the terminal communication unit 51.

In another embodiment of the present invention, the terminal controller 57 checks the current available memory size, and if the program 65 confirms that the requested memory size is less than or equal to the available memory size, that is, if there is space in the memory as long as the size requested by the program. You can allocate memory.

In addition, the host terminal 50 may execute a plurality of programs, and the terminal controller 57 may allocate a memory to be used for each program 65 executed in the storage device 60 together with the plurality of programs. have. When the terminal controller 57 receives a memory allocation request message from the storage device 60 while executing the program 65, the terminal controller 57 checks the available memory size allocated to the program 65 in the host terminal 50, and the program 65. Compare with the memory size referenced in. When the terminal controller 57 determines that the memory size referred to by the program 65 is equal to or smaller than the available memory size allocated to the program 65 by the host terminal 50, the terminal controller 57 allocates the memory.

In this case, the terminal controller 57 confirms that the memory size requested by the program 65 exceeds the available memory size of the host terminal 50 or the available memory size allocated to the program 65 in the host terminal 60. In addition, an error message may be transmitted to the storage device 60, and a memory shortage message may be output through the output unit 55 so that the user can recognize the error message.

On the other hand, the terminal controller 57 stores the data together with the memory address value assigned to the host terminal 50 from the storage device 60 to record the data in the memory allocated to the host terminal 50 while the program 65 is running. Receives the data, records the data in the memory by referring to the memory address. In addition, when the storage device 60 transmits the allocated memory address value while requesting to delete, change, or return data recorded in the memory of the host terminal 50 while the program 65 is running, the terminal controller 57 responds. The data is returned, deleted or changed by referring to the address value.

In addition, when the terminal controller 57 receives the memory release request message together with the memory address value allocated to the host terminal 50 from the storage device 60, the terminal controller 57 refers to the received memory address value and stores the program in the memory 53. Release the memory allocated for 65).

In another embodiment of the present invention, when the terminal controller 57 confirms that the storage device 60 is connected or confirms that the program 65 is executed, the terminal controller 57 periodically checks the memory availability of the storage device 60. You can send a message.

For example, as defined in ISO / IEC 7816-3, when power is supplied to the storage device 60, the terminal controller 57 notifies the ATR (Answer to Reset) indicating that the storage device 60 is ready for service. It can be confirmed that the storage device 60 is connected by receiving the signal, and that the program 65 is executed when the user receives an input signal for executing the program 65 in the storage device 60 from the user. .

11 is a flowchart illustrating a method of using a memory of a host terminal in a storage device according to an embodiment of the present invention. For convenience of description, the configuration shown in FIGS. 1 to 10 described above will be described with reference to the corresponding reference numerals. 1 and 11, the storage device 60 confirms that the program 65 refers to the memory of the storage device 60 while executing the program 65 (S71).

The storage device 60 confirming that the program refers to the memory in step S71 checks the available memory size of the current storage device 60, and the memory size and the available storage device 60 that the program 65 refers to. The memory size is compared (S73).

In this case, when a plurality of programs are executed in the storage device 60, the storage device 60 may allocate a memory of the storage device 60 to be used for each program, and the storage device 60 may use the program 65. The available memory size of the storage device 60 allocated to the C) can be checked and compared with the memory size referenced by the program 65.

If the memory size referenced by the program 65 in step S73 is less than or equal to the available memory size of the storage device 60, the process branches to step S71 and repeats the above-described steps.

If the memory size referenced by the program 65 in step S73 exceeds the available memory size of the storage device 60, the storage device 60 transmits a memory allocation request message to the host terminal 50 (S75). ).

The host terminal 50 receiving the memory allocation request message in step S75 refers to the memory allocation request message, and allocates the memory as much as the memory size referred to by the program 65 (S77).

The host terminal 50 allocating the memory in step S77 transmits the allocated memory address value to the storage device 60 (S79).

In this case, when data of the program 65 being executed is recorded in the memory, the storage device 60 checks whether the memory referenced by the program 65 is allocated to the storage device 60 or the host terminal 50. When confirming that the memory of the host terminal 50 is allocated, the data of the program 65 being executed may be transmitted to the host terminal 50 while transmitting the memory address value received from the host terminal 50. In addition, when the program 65 uses, deletes, or changes the data transmitted to the host terminal 50, the program 65 transmits the memory address value received from the host terminal 50 to the host terminal 50. You can request a return, delete or change it.

The storage device 60 receiving the memory address value in step S79 confirms that the program 65 releases the memory reference allocated to the host terminal 50 or the execution of the program 65 ends (S81). .

In operation S81, when the program 65 releases the memory reference allocated to the host terminal 50 or confirms that the execution of the program 65 is terminated, the storage device 60 transmits the memory address value to the host terminal 50. The memory release request message is transmitted together (S83).

At this time, the storage device 60 does not refer to the memory allocated to the program 65 any more, or when the program is terminated, the host terminal 50 determines whether the memory allocated to the program 65 is the memory of the storage device 60. Check whether the memory is allocated to the host terminal 50, the memory release request message may be transmitted to the host terminal 50.

The host terminal 50 receiving the memory release request message together with the memory address value in step S83 releases the memory allocated to the program 65 in the memory 53 by referring to the received memory address value in step S85. .

12 is a flowchart illustrating a method of using a memory of a host terminal in a storage device according to another exemplary embodiment of the present invention. For convenience of description, the configuration shown in FIGS. 1 to 10 described above will be described with reference to the corresponding reference numerals. 1, 11, and 12, step S91 and step S93 are the same processes as steps S71 and S73 of FIG. 11, and thus descriptions thereof will be omitted.

The host terminal 50 confirms that the storage device 60 is connected or confirms that the program 65 is executed (S95).

The host terminal 50 confirming that the storage device 60 is connected in step S95 or confirming that the program 65 is executed transmits a check message for checking the available memory size of the storage device 60 (S97). .

The storage device 60 receiving the check message in step S97 responds to the check message if the memory size requested by the program 65 in step S93 exceeds the available memory size of the storage device 60. In step S99, the memory allocation request message is transmitted to the host terminal 50.

The host terminal 50 that has received the memory allocation request message in step S99 checks the available memory size of the current host terminal 50, so that the memory size requested by the program 65 is the available memory size of the host terminal 50. Confirm that the following (S101).

In this case, the host terminal 50 may execute a plurality of programs, and the host terminal 50 may allocate a memory to be used for each program 65 executed in the storage device 60 together with a plurality of separate programs. The host terminal 50 may check the available memory size allocated to the program 65 to confirm that the memory size referenced by the program 65 is less than or equal to the available memory size allocated to the program 65.

After checking the available memory of the host terminal 50 in step S101, the host terminal 50 allocates the memory as much as the memory size referred to by the program 65 by referring to the memory allocation request message (S103).

At this time, if it is determined in step S101 that the memory size referenced by the program 65 exceeds the available memory size or the available memory size allocated to the program 65, an error message is transmitted to the storage device 60, The memory shortage message may be output through the output unit 55 to be recognized by the user.

Since the steps S105 to S111 are the same processes as the steps S79 to S85 in FIG. 11, description thereof will be omitted.

Meanwhile, the program 65 described above with reference to FIGS. 9 to 12 may be a separate execution target code block 35 separated from the executable content 11, and such a separate execution target code block 35 may be a right object ( 43 may be transmitted to the storage device 60 from the host terminal 50 and linked with the separated execution based content 37 stored in the host terminal 50. Detailed description thereof has been described above with reference to FIGS. 1 to 8, and thus description thereof will be omitted.

In addition, the memory using method of the host terminal in the storage device according to the present embodiment may be implemented in the form of program instructions that may be executed by various computer means, and may be recorded on a computer-readable recording medium. The recording medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the recording medium may be those specially designed and constructed for the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. For example, the recording medium may be magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs, DVDs, or magnetic-optical media such as floptical disks. magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. Such hardware devices may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above and described with reference to a preferred embodiment for illustrating the technical idea of the present invention, the present invention is not limited to the configuration and operation as shown and described as such, without departing from the scope of the technical idea It will be understood by those skilled in the art that many changes and modifications to the present invention are possible. And all such modifications and changes as fall within the scope of the present invention are therefore to be regarded as being within the scope of the present invention.

According to the present invention, additional costs are minimized because a separate device is not required to use the memory of the host terminal in the storage device. In particular, considering that modern people want to be able to access content regardless of time and place, the method of using the memory of the host terminal in the storage device of the present invention may not be useful.

10: content providing terminal 11: executable content
21: code area 23: data area
25: basic block 26: stub cord
27: basic block group 30: content registration server
31: Separation run based content configuration module 33: Profiling and analysis tool
35: Detach Execution Target Code Block 37: Detach Execution Based Content
40: DRM server 41: encrypted content
43: rights object 44: history of rights object issuance
45: server transmission and reception unit 47: server storage unit
49: server control unit 50: host terminal
51: terminal communication unit 55: output unit
57: terminal controller 60: storage device
61: communication unit 63: storage unit
65: Program 67: Communication bus
69: control unit 70: network
210: DOS header 220: PE header
233: start stub code 230: code area
234: stub code 240: data area
250: Import region 251: Startup DLL
260: export area 270: security area
271: Initial encrypted code block 300: Secondary execution functionality
310: interfacing function unit 311: module control unit
313: code analysis unit 315: code operation unit
317: code conversion unit 319: code encryption unit
320: packing function unit 330: unpacking function unit
340: memory mapping function 350: OS API mapping function
360: code decoding function unit 610: auxiliary execution module
611: execution function unit 613: job management function unit
615: loading function 617: device memory mapping function
619: Device OS API mapping function 621: Device memory management function
623: ROM management function

Claims (27)

A storage device which transmits a memory allocation request message and receives an allocated memory address value when it is confirmed that the memory size referenced by the executing program exceeds the available memory size;
A host terminal for allocating a memory and transmitting the allocated memory address value to the storage device upon receiving the memory allocation request message from the storage device;
The memory utilization system of the host terminal in a storage device comprising a. Communication unit for transmitting and receiving data;
A storage unit for storing a program;
If the memory size referred to by the program exceeds the available memory size during execution of the program, the memory allocation request message is transmitted to the host terminal through the communication unit, and the memory address value allocated from the host terminal is transmitted through the communication unit. Receiving control unit;
Storage device in the memory using system of the host terminal in the storage device comprising a. The method of claim 2, wherein the control unit,
And when the memory size referred to by the program exceeds the available memory size allocated to the program, transmitting the memory allocation request message. The method of claim 2, wherein the control unit,
The memory device transmits the allocated memory address value through the communication unit, and transmits the data of the executing program or requests to return, delete or change the transferred data. Storage. The method of claim 2, wherein the control unit,
When the running program releases the allocated memory reference or when the program ends, the allocated memory address value and a memory release request message are transmitted to the host terminal through the communication unit. Storage device in the memory utilization system of the terminal. The method of claim 5, wherein the control unit,
When the running program releases the allocated memory reference or when the program is terminated, confirming that the memory of the host terminal is allocated to the program and transmitting the memory address value and the memory release request message. Storage device in the memory utilization system of the host terminal in the storage device. The method of claim 2, wherein the control unit,
When the check message to check the available memory size from the host terminal via the communication unit, the storage device, characterized in that for transmitting the memory allocation request message to the host terminal through the communication unit in response to the check message Storage device in the memory utilization system of the host terminal. The method of claim 2,
The program storage device in a memory using system of the host terminal in the storage device, characterized in that the separate execution target code block. The method of claim 8, wherein the control unit,
When receiving the packed stack information and the register information from the host terminal, the host terminal in the storage device to start the execution of the separation execution target code block by calling the entry point (entry point) of the separation execution target code block. Storage in the system of memory utilization. The method of claim 8, wherein the control unit,
And a result value is returned to the host terminal after the separation execution target code block is executed. The method of claim 8,
The separation execution target code block is included in a Rights Object and is received from the host terminal. Terminal communication unit for transmitting and receiving data;
When a memory allocation request message is received from the storage device through the terminal communication unit during program execution in a storage device, the memory is allocated with reference to the memory allocation request message, and the allocated memory is stored in the storage device through the terminal communication unit. Terminal control unit for transmitting the address value;
The host terminal in the memory using system of the host terminal in the storage device comprising a. The method of claim 12, wherein the terminal control unit,
When the storage device is connected or the program is executed, the storage device periodically transmits a check message for checking the available memory size of the storage device. Terminal. The method of claim 12, wherein the terminal control unit,
When the memory allocation request message is received, the memory allocation request message is checked to determine whether the memory size referenced by the program is equal to or less than the available memory size of the host terminal or the available memory size allocated to the program by the host terminal. A host terminal in a memory using system of a host terminal in a storage device, characterized by allocating memory. 13. The apparatus of claim 12, further comprising an output unit for expressing information.
The terminal controller, when the memory allocation request message is received, refers to the memory allocation request message so that the memory size requested by the program is equal to the available memory size of the host terminal or the available memory size allocated to the program at the host terminal. If exceeded, a memory shortage message is output through the output unit, and an error message is transmitted to the storage device through the terminal communication unit. The method of claim 12, wherein the terminal control unit,
And when the allocated memory address value and the memory release request message are received from the storage device through the terminal communication unit, release the allocated memory. The method of claim 16,
The program terminal is a host terminal in the memory using system of the host terminal in the storage device, characterized in that the separate execution target code block. Confirming, by the storage device, that the memory size referenced by the running program exceeds the available memory size of the storage device;
A first transmission step of the storage device transmitting a memory allocation request message to a host terminal;
An address value receiving step of the storage device receiving a memory address value allocated to the host terminal from the host terminal;
Memory usage method of the host terminal in a storage device including a. The method of claim 18, wherein the checking step,
And the storage device confirms that the memory size referred to by the program exceeds the available memory size allocated to the program. 19. The method of claim 18, wherein after the address value receiving step,
Transmitting, by the storage device, the allocated memory address value and a memory release request message to the host terminal when the running program releases the allocated memory reference or when the program ends;
Method of using a memory of the host terminal in the storage device further comprising a. The method of claim 18, wherein the first transmission step,
When the storage device receives a check message for checking an available memory size of the storage device from the host terminal, the storage device transmits the memory allocation request message in response to the check message. How memory is used. A receiving step of receiving, by the host terminal, a memory allocation request message from the storage device during program execution in the storage device;
An allocating step of allocating a memory by the host terminal by referring to the memory allocation request message;
A first transmission step of transmitting, by the host terminal, the allocated memory address value to the storage device;
Memory usage method of the host terminal in a storage device including a. The method of claim 21, wherein the assigning step,
The host terminal determines that the memory size referenced by the program is equal to or smaller than the available memory size of the host terminal or the available memory size allocated to the program in the host terminal by referring to the memory allocation request message, and allocates the memory. Method of using a memory of the host terminal in a storage device, characterized in that. The method of claim 22, wherein before the receiving step,
A second transmission step of, when the host terminal confirms that the storage device is connected or confirms that the program is executed, periodically transmitting a check message for checking an available memory size of the storage device;
Method of using a memory of the host terminal in the storage device further comprising a. The method of claim 22, wherein after the first transmission step,
And when the host terminal receives the allocated memory address value and a memory release request message from the storage device, releases the allocated memory. The method according to any one of claims 18 to 25,
The program is a method of using a memory of the host terminal in the storage device, characterized in that the separate execution target code block. A computer-readable recording medium having recorded thereon a program for executing the method according to any one of claims 18 to 25.

Images