WO2016148472A1

WO2016148472A1 - Dynamic security module terminal device and method for operating same

Info

Publication number: WO2016148472A1
Application number: PCT/KR2016/002536
Authority: WO
Inventors: 하영빈
Original assignee: 주식회사 에버스핀; 하영빈
Priority date: 2015-03-13
Filing date: 2016-03-14
Publication date: 2016-09-22

Abstract

The present invention relates to a dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server, the terminal device comprising: a communication unit for transmitting or receiving a security management event through a network; and a processor for controlling the communication unit, wherein the processor establishes a security session between the processor and the security server and receives the dynamic security module from the security server, and a part or all of codes of the dynamic security module performing the security management have an effective time. According to the present invention, a dynamic security module, of which a part or all of codes performing a security management have a predetermined effective time, can be received from a security server to allow a security module for various application programs of the terminal device to be frequently changed, thereby making hacking of the application programs difficult and thus remarkably improving the security of the user terminal device.

Description

Dynamic security module terminal device and its driving method

The present invention relates to a dynamic security module terminal device and a method of driving the same, and more particularly, a part or all of codes for performing security management receive a dynamic security module having a certain valid time from a security server. Dynamic security module terminal device and its driving method which can significantly improve the security of the user terminal device by making it difficult to hack the application program by changing the security module for various application programs from time to time It is about.

Recently, smart phones, which are mobile terminals, have become an indispensable necessity in modern life and are widely used all over the world. However, as security vulnerabilities in smartphones are continuously discovered, attacks through malicious applications are increasing rapidly.

Hackers develop malicious applications targeting mobile terminals, insert malicious codes, and disguise them as normal applications through the open market or the Internet. When the malicious application is stored in the mobile terminal, the malicious application in the mobile terminal not only knows personal information such as SMS transmission / reception information, phone book, Internet access record, but also financial information such as mobile accredited certificate used for mobile banking. You can try to leak them.

Most application security solutions communicate with the application's security module when the application is executed, invoking security logic and responding with results. However, if the security module is incapacitated due to an application that is forcibly blocked or tampered with communication with the security module due to hacker attacks, a fatal vulnerability occurs in personal information and personal information related to finance.

Therefore, the need for technology development that can solve the security weakness problem in the mobile terminal-based user environment, which is widely spread at home and abroad, and improve the security of various software included in the user terminal has emerged.

An object of the present invention is derived to solve the problems of the prior art as described above, a part or all of the code for performing the security management receives a dynamic security module having a certain valid time from the security server, the various types of the terminal device By changing the security module for the application program from time to time, the dynamic security module terminal device and its driving method that can significantly improve the security (security) of the user terminal device by making it difficult to hack the application program. It is about.

In order to achieve the above object, the dynamic security module terminal apparatus according to the present invention is a dynamic security module terminal apparatus for receiving a dynamic security module and transmitting a security management event to a security server, and transmitting and receiving the security management event through a network. And a processor for controlling the communication unit, wherein the processor generates a secure session with the security server, and receives the dynamic security module from the security server and performs security management. Or all have a valid time.

The processor may further include receiving a security management check result value from the security server.

The dynamic security module may further include stopping an application program mounted on the terminal device when a security problem occurs in the terminal device as a result of security management.

The processor may generate the secure session by receiving and storing a session ID from the secure server.

The creation of the secure session may be performed after authentication from the secure server is completed.

The validity time may be a validity time such that some or all of the code is deleted or not used when the validity time elapses.

The security management event consists of a function name of a code for the dynamic security module, a variable specifying an algorithm to be executed, a protocol field, a variable specifying a protocol sequence, a variable specifying a compilation level, and a variable specifying an execution code obfuscation method. Transmitting information at the time of execution of the at least one dynamic security module selected from the group to the security server to verify whether the information at the time of execution is identical to the configuration of parameters for the dynamic security module stored in the security server. It may include.

When the processor receives the dynamic security module from the security server, the processor may receive encrypted signature information about the dynamic security module.

The terminal apparatus is set with a public key corresponding to the private key of the encrypted signature information, and decrypts the encrypted signature information using the public key.

When the processor receives the dynamic security module from the security server, the processor may receive the entry point information of the code for performing the security management of the dynamic security module so that the dynamic security module is executed from the entry point.

The present invention also provides a method of driving a dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server, in order to achieve the above object, generating a security session with the security server. And receiving the dynamic security module from the security server so that a part or all of the code of the dynamic security module performing security management has a valid time.

The driving method may further include receiving a security management check result value from the security server.

The driving method may further include stopping, by the dynamic security module, an application program mounted on the terminal device when a security problem occurs in the terminal device as a result of security management.

The driving method may generate the secure session by receiving and storing a session ID from the secure server.

The security management event is a function name of a code of a code for the dynamic security module, a variable specifying an algorithm to be executed, a protocol field, a variable specifying a protocol sequence, a variable specifying a compilation level, and a variable specifying an execution code obfuscation method. Transmitting at the time of execution of the at least one dynamic security module selected from the group consisting of the security server, and verifying that the information at the time of execution is identical to the configuration of the parameter for the dynamic security module stored in the security server. May include receiving.

The present invention also provides a computer-readable recording medium having recorded thereon a program for executing the method for driving the dynamic security module terminal apparatus.

In accordance with another aspect of the present invention, a dynamic security module terminal device and a method for driving the same receive a dynamic security module from which a part or all of a code for performing security management has a predetermined valid time is received from a security server, and provides various types of application programs for the terminal device. By changing the security module from time to time, it is difficult to hack the application programs, it is possible to significantly improve the security (security) of the user terminal device.

1 is a schematic diagram showing a schematic configuration of a dynamic security module terminal device according to an embodiment of the present invention.

2 is a schematic diagram showing a dynamic security module receiving state in a dynamic security module terminal device according to an embodiment of the present invention.

3 is a schematic diagram showing an example of information when executing the dynamic security module according to the session ID in the dynamic security module terminal device according to an embodiment of the present invention.

4 is a block diagram illustrating a method of driving a dynamic security module terminal device according to a first embodiment of the present invention.

5 is a block diagram illustrating a method of driving a dynamic security module terminal device according to a second embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, if it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, in describing the embodiments of the present invention, specific numerical values are merely examples.

Figure 1 is a schematic diagram showing a schematic configuration of a dynamic security module terminal device according to an embodiment of the present invention, Figure 2 receives a dynamic security module in the dynamic security module terminal device according to an embodiment of the present invention 4 is a schematic diagram showing an example of information on execution of a dynamic security module according to a session ID in a dynamic security module terminal device according to an embodiment of the present invention.

Referring to these drawings, the dynamic security module terminal device 110 according to the present invention receives the dynamic security module 118 and transmits a security management event to the security server 150 as a dynamic security module terminal device 110. And a communication unit 113 for transmitting and receiving the security management event through a network, and a processor 114 for controlling the communication unit, wherein the processor 114 generates a secure session with the security server 150, and Receiving a dynamic security module 118 from the security server 150, a part or all of the code of the dynamic security module 118 for performing the security management is configured to have a valid time.

That is, the dynamic security module terminal device 110 according to the present invention receives the dynamic security module 118 in which part or all of the code for which the processor 114 performs security management has a certain valid time, but the terminal device ( When driving 110, or when the application program mounted on the terminal device 110, or when the user request of the terminal device 110, or every predetermined period set by the security server 150, or By creating a secure session with the security server 150 in various cases, such as every predetermined period set by the terminal device 110, by receiving the dynamic security module 118 and storing it in the storage 112, the dynamic security module (118) can be updated frequently, effectively preventing the occurrence of security problems for application programs mounted on the user terminal due to hacking of the security module or computer virus infection. It is characterized.

In addition, the dynamic security module 118 does not repeatedly receive the same type of dynamic security module. For example, the dynamic security module 118 may include a function name of a code for performing security management, a variable specifying a algorithm to be executed, a protocol field, and a protocol sequence. At least two dynamic security modules having different code structures or algorithms by differently configuring one or more changeable parts selected from the group consisting of a variable that specifies, a variable that specifies a compilation level, and a variable that specifies an execution code obfuscation method. It can be received from the security server 150.

In addition, the effective time of some or all of the code for performing security management of the dynamic security module 118 is, for example, 1 hour, 3 hours, 6 hours, 9 hours, 12 hours, 24 hours, 48 hours and 72 hours. When such a setting time is terminated by setting at a selected time interval from the group of time, the function of some or all of the code of the dynamic security module 118 may be stopped. Therefore, when the valid time of the dynamic security module 118 expires, the terminal device 110 stops using the dynamic security module 118, and the new dynamic security module 118 from the security server 150. By receiving the received and updated, it is possible to effectively prevent the occurrence of a security problem of the terminal device 110 due to hacking of the dynamic security module 118 or virus infection.

Here, the security management is that the dynamic security module 118 detects the presence of an element that can be a threat of hacking for the application program mounted on the terminal device 110, the terminal device installed the application program O / S forgery of 110, app forgery, rooting, debugger, root process execution history, malicious application installation history, malicious application execution history, malicious port, session forgery, input forgery and Detecting elements that may be hacking threats consisting of computer viruses, transmitting information about the elements that may be hacking threats to the security server 150, treating viruses for the application program, Sending a stop command to the application to prevent hacking threats and virus infection of the application, the dynamic security hat The terminal device 110 may be configured by the dynamic security module 118 such as stopping the function of the dynamic security module 118 itself due to the expiration of the valid time of the module 118 or a problem such as hacking by a hacker or a virus infection. The concept involves the overall management to be performed for security.

The security management event transmitted to the security server 150 may include, for example, information on execution at the time of determining parameters for the dynamic security module 118 received from the security server 150, and the dynamic security module 118. ) May be various events such as a state history of a state in which a state is being driven, security management result information indicating that there is a hacking threat, and a virus treatment history for an application program mounted on the terminal device 110.

In addition, the terminal device 110 may be, for example, a variety of terminal devices that require security, such as a smartphone, a tablet PC, a desktop computer, a notebook computer.

The processor 114 may generate a control signal to control the terminal device 110 including the communication unit 113 and the storage 112. Here, the communication unit 113 may transmit and receive data by communicating with an external device using various protocols, and may connect to an external network by wire or wirelessly, and transmit and receive digital data such as content and applications.

In addition, the storage 112 is a device that can store a variety of digital data, including audio, photos, videos, applications, etc., various digital data, such as flash memory, random access memory (RAM), solid state drive (SSD) Represents storage space. This storage 112 may temporarily store data received from an external device via the communication unit 113.

The processor 114 or the dynamic security module 118 may further include transmitting a security management result to the security server 150 and receiving a security management confirmation result value from the security server 150. That is, the processor 114 for controlling the communication unit 113 of the terminal device 110 transmits a security management result in a relationship with the security server 150, and the security management confirmation result value from the security server 150 The dynamic security module 118 mounted on the terminal device 110 directly transmits a security management result in a relationship with the security server 150, and transmits a security control result. 150 may perform a function of communication control to receive a security management confirmation result value. Accordingly, when any one of the terminal device 110 and the dynamic security module 118 is hacked or infected with a virus, the terminal 110 and the virus 110 perform complementary communication with the security server 150 and perform security management. Since it is possible, the security of the terminal device 110 can be further improved.

Here, the security management result is the details of the security management actually performed by the dynamic security module 118 in the terminal device 110, and performs the detailed security management functions included in the dynamic security module 118. Result value, part of security management event. For example, as a result of detection of the presence of an element that may be the hacking threat, as a result of detection of an element that may be the hacking threat, as a result of virus treatment for the application and the removal of an element that may be a hacking threat It may be such a history.

In addition, the security management check result value is a determination result of whether or not the security problem of the terminal device 110, the security server 150 receives the security management results, and analyzed based on the security management results. That is, as a result of determining whether there is an element that may be a current hacking threat on the terminal device 110, a result of determining whether an application program mounted on the terminal device 110 has been hacked, and the application program is a virus. B. It may be a result of judging whether it is infected with malware.

Specifically, the terminal device 110 transmits the security management result performed by the dynamic security module 118 to the security server 150, the security server 150 analyzes and determines the security management result The security management confirmation result value is generated, and the security management confirmation result value generated in this way is transmitted to the dynamic security module 118 of the terminal device 110, so that the dynamic security module 118 is the security management confirmation result value. Recognize whether a security problem has occurred from the network and take appropriate action.

In detail, the dynamic security module 118 may transmit a stop command for stopping an application program mounted on the terminal device 110 when a security problem occurs in the terminal device 110 as a result of the security management. That is, the dynamic security module 118 sends the stop command to the application program before transmitting the security management result to the security server 150 when a security problem occurs in the terminal device 110 as a result of the security management. After receiving the security management check result value from the security server 150 and recognizing whether a security problem has occurred, the transmission command may be transmitted to the application program. Therefore, a hacker can fundamentally prevent a problem of hacking the dynamic security module 118 and generating a security problem for various application programs of the terminal device 110.

That is, when a security problem occurs in the terminal device 150, the application device mounted on the terminal device 150 is stopped so as to quickly stop the driving of the application program. Quickly track and analyze the dynamic security module 118 or the security server 150 by hackers by implementing additional measures, such as preventing the spread of additional security issues for applications and destroying the security session. Can be blocked.

The processor 114 may generate the secure session by receiving and storing a session ID from the secure server 150.

That is, the security server 150 generates and stores a session ID 116 as a secure session identifier, transmits the session ID 116 to the terminal device 110, and stores the session ID 116 in the storage 112. ), You can create a secure session. The method for generating a security session using the session ID generates a plurality of security sessions and frequently updates the security session, thereby providing reliability and convenience of security management for the terminal device 150 by the dynamic security module 118. There is an advantage to improve.

Here, the generation of the security session may be performed after authentication from the security server 150 is completed. That is, the generation of the secure session may further perform the authentication process of the terminal device 110 with respect to the security server 150 to further improve the security of the terminal device 110.

The authentication of the terminal device 110 is, for example, an application which is an application program including the dynamic security module is installed in the terminal device 110 and the authentication is completed at the same time, or the application is the terminal device ( After being installed in 110, the authentication is completed when the first run, or when the login (login) and logout (logout) for the application is completed, or after the application is installed in the user terminal 150 Authentication may be completed at the request of the user through the application.

The validity time may be a validity time such that some or all of the code is deleted or not used when the validity time elapses. That is, the dynamic security module 118 in which the part or all of the code for performing security management in the terminal device 110 has a valid time is deleted or partially or all of the code when the valid time elapses. The use of the dynamic security module itself can be stopped so as not to perform it.

Therefore, when the valid time of the dynamic security module 118 expires, the terminal device 110 updates a part or all of the codes constituting the dynamic security module 118, thereby hacking the dynamic security module 118. It can fundamentally block the occurrence of security problems caused by virus infections.

The security management event is a function name of a code for the dynamic security module 118, a variable specifying an algorithm to be executed, a protocol field, a variable specifying a protocol sequence, a variable specifying a compilation level, and execution while the secure session is maintained. The execution information of the at least one dynamic security module selected from the group consisting of variables specifying a code obfuscation method is transmitted to the security server 150, the execution information stored in the security server 150 It may include verifying whether or not the configuration of the parameters for the dynamic security module 118 is the same.

Here, the parameter for the dynamic security module 118 is transmitted to the terminal device 110, the function name of the code for performing the security management of the dynamic security module performing security management, a variable specifying the algorithm to be executed, the protocol field , Specific information about the protocol sequence, variables specifying the compilation level, variables specifying the execution code obfuscation method, etc., which are frequently updated to distinguish dynamic security modules with different configurations. As the information determined by the security server 150, information of the execution of the code for performing the security management of the dynamic security module 118.

The parameter verification of the dynamic security module is, for example, when the parameters of the dynamic security modules in which each parameter is sequentially transmitted, such as ABCD, are not the same and changed differently when compared with the details transmitted from the terminal device 110. If it is confirmed, it can be inferred that there has been a hacking attempt by a hacker, and actions can be taken.

Specifically, as shown in FIG. 4, when the security server 150 and the terminal device 110 generate a security session by generating 11836381 as a session ID, the dynamic security module 118 transmitted by the terminal device 110 is provided. When the parameters are A, B, and C, the state is 1, 2, and the terminal device 110 generates a security session by generating 72365784 as a session ID. The details of the dynamic security module 118 transmitted from the parameter are C, B, A and verify that the state is 0, 3, and create a secure session by creating 87656501 as the session ID. In this case, the details of the dynamic security module 118 transmitted from the terminal device 110 can be verified that the parameters (B), B, A, C, and the state (state) is 3, 2. Here, these parameters and state details may be a security management event transmitted from the terminal device (110).

The security management transmits the protocol field and protocol sequence of each dynamic security module 118 received by the terminal device 110 to the security server 150, and the protocol fields and protocols stored in the security server 150. The sequence may be verified by comparing the transmitted protocol field and the protocol sequence with each other.

That is, the security management transmits and analyzes the protocol field and protocol sequence of the dynamic security module 118 received by the terminal device 110 to the security server 150, for example, at least 1 If more than one error occurs, it can be inferred that a hacker attempted a hack. Therefore, based on the analysis of the protocol field and protocol sequence of the dynamic security module 118, it is possible to predict a hacking risk or a possibility of a security problem, and to prevent a security problem from occurring.

Here, the protocol field is a protocol such as a method for performing various items of security management performed by the dynamic security module 118 in the terminal device 110, for example, mounted in the terminal device 110. Communication protocol that transmits the result of determining whether there is an element that can be a hacking threat to the application, communication that transmits the self-remediation history for file virus, boot & file virus, etc. for the application. It may be a protocol.

In addition, the protocol sequence refers to an execution order for various items including security management performed by the dynamic security module 118 in the terminal device 110. For example, the terminal in which the application program is installed is performed. O / S forgery, app forgery, rooting, debugger, root process execution history, harmful application installation, malicious application execution history, harmful port, session forgery, input forgery and computer virus In the detection of an element that may be a hacking threat, it may be an order of detecting the respective elements.

When the processor 114 receives the dynamic security module 118 from the security server 150, the processor 114 receives encrypted signature information for the dynamic security module 118 together, thereby allowing the dynamic security module 118 to operate normally. Verification whether the authentic dynamic security module transmitted from the security server 150 or the dynamic security module transmitted from the security server hacked by a hacker or the like includes a hacking threat to the terminal device 110. have.

The verification of the dynamic security module 118, for example, sets a public key corresponding to the private key of the encrypted signature information in the terminal device 110, and uses the public key to encrypt the encrypted signature information. By decrypting, it may be performed by providing additional security means for the signature information itself to further improve the reliability of the dynamic security module 118.

In addition, when the processor 114 receives the dynamic security module 118 from the security server 150, the processor 114 receives entry point information of a code for performing the security management of the dynamic security module 118, and Dynamic security module 118 may be executed from the entry point.

That is, the dynamic security module 118 configures different entry points of code for performing security management every time the transmission is made by the security server 150 in order to make hacking by the hacker more difficult when the terminal device 110 is driven. By transmitting the dynamic security module 118 having the terminal device 110 installed in the terminal device 110, the security of the terminal device 110 can be improved and the reliability of the dynamic security module 118 can be increased.

4 is a block diagram showing a driving method of the dynamic security module terminal device according to the first embodiment of the present invention, and FIG. 5 shows a driving method of the dynamic security module terminal device according to the second embodiment of the present invention. The block diagram shown is shown.

Referring to these drawings, first, the driving method of the dynamic security module terminal apparatus according to the first embodiment is a driving method of the dynamic security module terminal apparatus that receives the dynamic security module and transmits a security management event to the security server. Generating a secure session with a server (S210) and receiving the dynamic security module from the security server (S220) such that a part or all of the code of the dynamic security module performing security management has a valid time. .

Thereafter, the dynamic security module transmits a security management result performed by the terminal device to the security server, and receives a security management confirmation result value from the security server (S230) and a security problem from the security management confirmation result value. Recognizing the occurrence of the step 240 is performed. At this time, if it is determined that a security problem has not occurred from the security management check result value, the process is terminated, and if it is determined that a security problem has occurred from the security management check result value, the application program included in the terminal device. The step S241 of transmitting the stop command is further performed. The stop command of the application program may be performed by the dynamic security module.

In addition, a method of driving a dynamic security module terminal device according to a second embodiment of the present invention is a driving method of a dynamic security module terminal device which receives a dynamic security module and transmits a security management event to a security server. In step S310, and receiving the dynamic security module from the security server so that a part or all of the code of the dynamic security module performing security management has a valid time (S320).

Thereafter, when executing the dynamic security module, transmitting information to the security server, receiving a parameter verification result of the dynamic security module from the security server (S330) and a security problem from the parameter verification result of the dynamic security module. Recognizing whether or not occurrence (step 340) is performed. At this time, if it is determined that a security problem has not occurred from the security management check result value, the process is terminated, and if it is determined that a security problem has occurred from the security management check result value, the application program included in the terminal device. A step (S341) of transmitting a stop command of is further performed. The stop command of the application program may be performed by the dynamic security module.

The method for driving the dynamic security module terminal apparatus according to the present invention may be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts.

In the present invention as described above has been described by the specific embodiments, such as specific components and limited embodiments and drawings, but this is provided to help a more general understanding of the present invention, the present invention is not limited to the above embodiments. For those skilled in the art, various modifications and variations are possible from these descriptions.

Therefore, the spirit of the present invention should not be limited to the described embodiments, and all of the equivalents and equivalents of the claims, as well as the following claims, will fall within the scope of the present invention. .

The present invention provides a dynamic security module terminal apparatus for receiving a dynamic security module and transmitting a security management event to a security server, comprising a communication unit for transmitting and receiving the security management event through a network, and a processor for controlling the communication unit, The processor generates a secure session with the security server and receives the dynamic security module from the security server, wherein a part or all of the code of the dynamic security module performing the security management has a valid time. Relates to a device.

According to the present invention, a part or all of the code for performing security management receives a dynamic security module having a certain valid time from the security server, so that the security module for various application programs of the terminal device is changed from time to time, It is possible to significantly improve the security of the user terminal device by making hacking of application programs difficult.

Claims

A dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server.

A communication unit for transmitting and receiving the security management event through a network; And

A processor controlling the communication unit; Including,

The processor,

Create a secure session with the secure server and receive the dynamic security module from the secure server,

A dynamic security module terminal device, in which part or all of codes of the dynamic security module performing security management have an effective time.
The method of claim 1,

The processor further comprises receiving a security management check result value from the security server.
The method of claim 1,

The dynamic security module may further include stopping an application program mounted on the terminal device when a security problem occurs in the terminal device as a result of security management.
The method of claim 1,

The processor is

Dynamic security module terminal device for generating the secure session by receiving and storing the session ID from the security server.
The method of claim 1,

The generation of the security session is performed after the authentication from the security server is completed, the dynamic security module terminal device.
The method of claim 1,

The effective time is a dynamic security module terminal device when the effective time elapses so that part or all of the code is not deleted or used.
The method of claim 1,

The security management event consists of a function name of a code for the dynamic security module, a variable specifying an algorithm to be executed, a protocol field, a variable specifying a protocol sequence, a variable specifying a compilation level, and a variable specifying an execution code obfuscation method. Transmitting information at the time of execution of the at least one dynamic security module selected from the group to the security server to verify whether the information at the time of execution is identical to the configuration of parameters for the dynamic security module stored in the security server. Dynamic security module terminal device comprising.
The method of claim 1,

The processor is

When receiving the dynamic security module from the security server, the dynamic security module terminal device for receiving the encrypted signature information for the dynamic security module.
The method of claim 8,

And a public key corresponding to a private key of the encrypted signature information, and deciphering the encrypted signature information using the public key.
The method of claim 1,

The processor is

When receiving the dynamic security module from the security server, the dynamic security module terminal device for receiving the entry point information of the code for performing the security management of the dynamic security module, so that the dynamic security module is executed from the entry point.
A method of driving a dynamic security module terminal device for receiving a dynamic security module and transmitting a security management event to a security server,

Creating a secure session with the secure server; And

Receiving the dynamic security module from the security server such that a part or all of the code of the dynamic security module performing security management has a valid time;

Method of driving a dynamic security module terminal device comprising a.
The method of claim 11,

The driving method is

And receiving a security management check result value from the security server.
The method of claim 11,

The driving method is

The dynamic security module driving method of the dynamic security module terminal device further comprises the step of stopping the application program mounted on the terminal device, when a security problem occurs in the terminal device as a result of security management.
The method of claim 11,

The driving method is

Receiving and storing the session ID from the security server to drive the dynamic security module terminal device to generate the secure session.
The method of claim 11,

The security management event consists of a function name of a code for the dynamic security module, a variable specifying an algorithm to be executed, a protocol field, a variable specifying a protocol sequence, a variable specifying a compilation level, and a variable specifying an execution code obfuscation method. Transmitting information at the time of execution of the at least one dynamic security module selected from the group to the security server to verify whether the information at the time of execution is identical to the configuration of parameters for the dynamic security module stored in the security server. A method of driving a dynamic security module terminal device comprising.
A computer-readable recording medium in which a program for executing the method of any one of claims 11 to 15 is recorded.