JP2013046122A - Terminal, application protection method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a terminal application transported from another terminal or falsified from being executed.SOLUTION: Allocating execution permission information required for execution of a terminal application to a terminal after encrypting the execution permission information with a hash value of the terminal application and terminal identification information, and providing the execution permission information to the terminal application after decrypting the encrypted information with the hash value of the terminal application and the terminal identification information of the terminal whenever the execution is performed prohibit the decryption of the execution permission information and the execution of the terminal application, unless the terminal application is not falsified and has not been transported from another terminal. Thereby, the terminal application transported from the other terminal or falsified is prevented from being executed. The allocation of the execution permission information to the terminal requires no access to a control server for each execution, which reduces a load of information processing and communication in the terminal and server.

Description

  The present invention relates to protection of a terminal application.

  Application software (hereinafter also referred to as “terminal application” or “application”) that runs on mobile information terminals (hereinafter “terminals”) represented by smartphones and mobile phone terminal devices has become widespread and provides various functions. Yes. Many terminal applications limit terminals and users to be used, such as a paid billing model and limited benefits, and this type of terminal application is permitted to be executed only on terminals that have a legitimate right to use such as purchases. If this type of terminal application is copied or moved between terminals without the consent of the provider, it will be used on non-licensed terminals and threaten paying billing revenues, which will hinder the spread of good software.

JP 2011-049876 A

  In order to prevent such an adverse effect, a device has been proposed to embed terminal identification information (unique serial number, etc.) in the terminal application at the time of introduction, that is, installation or initial activation, so that it does not operate even if it is transferred to another terminal. Yes. However, in this case, there is a possibility that the terminal identification information embedded in the terminal application is tampered with and used without permission on any terminal.

  Regarding terminals and usage rights, there is a technology that allows only legitimate users to operate the terminal by fingerprint authentication or the like (see, for example, Patent Document 1), but this technology collects users before allowing various terminal operations. Since authentication is performed and the information in the terminal can be freely operated by an authenticated user, it has not prevented the terminal application from being moved or falsified.

  In view of the above problems, an object of the present invention is to prevent the terminal application from being executed due to movement between terminals or alteration.

  Based on the above object, one aspect (1) of the present invention is a terminal that executes a terminal application and performs other information processing, and obtains execution permission information necessary for executing the terminal application as a hash value of the terminal application. And encryption permission storage means for storing encrypted data encrypted with the terminal identification information of the terminal in association with the terminal application, hash generation means for generating a hash value from the terminal application, and when trying to execute the terminal application The execution permission from the encrypted data stored in the encryption permission storage means in association with the terminal application by the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal And decrypting means for decrypting information and providing the decrypted information to the terminal application.

  Another aspect (9) of the present invention captures the above aspect in a method category, and is an application protection method in a terminal that performs terminal application execution and other information processing, and is necessary for terminal application execution. A computer having encryption permission storage means for storing encrypted data obtained by encrypting the execution permission information with the terminal application hash value and the terminal identification information of the terminal in association with the terminal application generates a hash value from the terminal application And when the terminal application is to be executed, the encryption permission storage means associated with the terminal application based on the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal A decryption process for decrypting the execution permission information from the encrypted data stored in And wherein the Ukoto.

  Another aspect (13) of the present invention is an application protection program for a terminal that executes the terminal application and performs other information processing, in which the above aspect is captured in the category of a computer program. A computer having encryption permission storage means for storing encrypted data obtained by encrypting execution permission information necessary for execution of the terminal application with the hash value of the terminal application and the terminal identification information of the terminal in association with the terminal application. By controlling, when generating a hash value from the terminal application and trying to execute the terminal application, the terminal application is determined based on the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal. The execution permission information is restored from the encrypted data stored in the encryption permission storage means in association with Characterized in that to provide to the terminal application by reduction.

  In the present invention, the execution permission information essential for the execution of the terminal application is encrypted with the hash value of the terminal application and the terminal identification information and placed on the terminal, and is decrypted with the hash value of the terminal application and the terminal identification information of the terminal each time it is executed. When the terminal application is converted and provided to the terminal application, the execution permission information cannot be decoded and the terminal application cannot be executed unless the terminal application is falsified and moved between terminals. For this reason, it is possible to prevent the terminal application from being executed due to movement between terminals or tampering. Also, by placing the execution permission information in the terminal, it is not necessary to access the control server for each execution, and the load of information processing and communication can be reduced at the terminal and the server.

  In any one of the above aspects, the terminal according to another aspect (2) of the present invention sends a confirmation request including the generated hash value and application identification information for identifying the terminal application to a predetermined control server. Confirmation request transmitting means for transmitting, permission information receiving means for receiving execution permission information transmitted from the control server in response to the transmitted confirmation request and required for execution of the terminal application, and the received execution The permission information includes encryption means that encrypts the permission information with the hash value related to the confirmation request and the terminal identification information of the terminal to obtain encrypted data.

  The control server according to another aspect (5) of the present invention is required for application identification information, a hash value, and execution on a terminal for a terminal application related to provision to a terminal that has a right of use. The application permission information stored in the application information storage means, the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal, and the terminal application stored in the application information storage means Falsification confirmation means for confirming that the terminal application has not been falsified by comparison with the hash value, application identification information acquired from the confirmation request, and the terminal application stored in the application information storage means A right-of-use confirmation means for confirming that the right of use exists for the terminal application by collating with the application identification information; Permission transmitting means for transmitting the execution permission information stored in the application information storage means to the terminal that is the transmission source of the confirmation request with respect to the terminal application that has been confirmed not to exist and that the right of use right exists. It is characterized by having.

  An application protection method according to another aspect (11) of the present invention is an application identification information regarding a terminal application related to provision to a terminal and having a right of use, which is obtained by capturing the above aspect in a method category. And the control server computer having the application information storage means storing the hash value and the execution permission information necessary for execution on the terminal, obtain from the confirmation request relating to the terminal application transmitted from the terminal A falsification confirmation process for confirming that the terminal application has not been falsified by collating the hash value with the hash value stored in the application information storage unit for the terminal application, and an application acquired from the confirmation request The terminal information is checked by comparing the identification information with the application identification information stored in the application information storage means for the terminal application. The usage right source confirmation process for confirming that the right of use right exists for the device and the terminal application that has been confirmed not to have been tampered with and the right of use right is stored in the application information storage means A permission transmission process for transmitting execution permission information to the terminal that is the transmission source of the confirmation request.

  In these aspects, in addition to the operational effects of the present invention described above, in particular, the control server provides the execution permission information after confirming the non-tampering property of the terminal application and the existence of the legitimate right by the confirmation request from the terminal. The execution permission information is stored in the terminal as encrypted data encrypted with the hash value and the terminal identification information. This eliminates the need for the control server to encrypt the execution permission information with the terminal identification information and send it to the terminal at the time of downloading the terminal application, and the terminal application is not immediately fixed to the terminal at the time of downloading. For this reason, if the terminal application is activated for the first time at any terminal convenient for the user and a confirmation request is made, the terminal application can be used only on that terminal thereafter, and flexible usability is realized.

  Another aspect (3) of the present invention includes the generated hash value, application identification information for identifying the terminal application, and terminal identification information of the terminal in any one of the aspects related to the terminal. Confirmation request transmitting means for transmitting a confirmation request to a predetermined control server, and execution permission information transmitted from the control server in response to the transmitted confirmation request and necessary for execution of the terminal application, the confirmation And encryption permission receiving means for receiving encrypted data encrypted with the hash value and the terminal identification information included in the request.

  The control server according to another aspect (6) of the present invention is necessary for execution of the terminal identification information, the hash value, and the terminal application related to provision to the terminal and having the right of use. The application permission information stored in the application information storage means, the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal, and the terminal application stored in the application information storage means Falsification confirmation means for confirming that the terminal application has not been falsified by comparison with the hash value, application identification information acquired from the confirmation request, and the terminal application stored in the application information storage means A right-of-use confirmation means for confirming that the right of use exists for the terminal application by collating with the application identification information; The execution permission information stored in the application information storage means for the terminal application for which it is confirmed that the usage right source is not present and is encrypted with the hash value acquired from the confirmation request and the terminal identification information And encrypting means for generating encrypted data, and permission transmitting means for transmitting the encrypted encrypted data to the terminal that is the transmission source of the confirmation request.

  An application protection method according to another aspect (12) of the present invention captures the above aspect in a method category, and is application identification information for a terminal application related to provision to a terminal that has a right of use. And the control server computer having the application information storage means storing the hash value and the execution permission information necessary for execution on the terminal, obtain from the confirmation request relating to the terminal application transmitted from the terminal A falsification confirmation process for confirming that the terminal application has not been falsified by collating the hash value with the hash value stored in the application information storage unit for the terminal application, and an application acquired from the confirmation request The terminal information is checked by comparing the identification information with the application identification information stored in the application information storage means for the terminal application. The usage right source confirmation process for confirming that the right of use right exists for the device and the terminal application that has been confirmed not to have been tampered with and the right of use right is stored in the application information storage means Encrypting the execution permission information with the hash value acquired from the confirmation request and the terminal identification information to obtain encrypted data, and the encrypted encrypted data is the transmission source of the confirmation request And a permission transmission process for transmitting to the terminal.

In these aspects, in addition to the operation and effect described above, in particular, the control server provides the execution permission information after confirming that the terminal application has not been tampered with and the existence of the legitimate title in response to a confirmation request from the terminal. The permission information is stored in the terminal as encrypted data encrypted with the hash value and the terminal identification information. This eliminates the need for the control server to encrypt the execution permission information with the terminal identification information and send it to the terminal at the time of downloading the terminal application, and the terminal application is not immediately fixed to the terminal at the time of downloading. For this reason, if the terminal application is activated for the first time at any terminal convenient for the user and a confirmation request is made, the terminal application can be used only on that terminal thereafter, and flexible usability is realized.
In particular, in the modes (2, 5) in which encryption is performed on the terminal side, the server load required for encryption is reduced, while in the modes (3, 6) in which encryption is performed on the server side, processing capacity is limited. In addition to reducing the load on the terminal, there is no need to prepare other encryption means such as SSL in order to transmit execution permission information, which is a key for executing the terminal application, via a communication network before encryption. Security can be maintained at a burden.

  Another aspect (4) of the present invention is a control server for providing a terminal application to a terminal, wherein predetermined execution permission information necessary for the execution of the terminal application includes a hash value related to the terminal application, Terminal identification information received from a terminal, encryption means encrypted with encrypted data, terminal application incorporating an application protection program, and provision means for providing the encrypted data to the terminal, the application When the protection program tries to execute the terminal application on the terminal, the protection program uses the hash value generated by the hash generation unit from the terminal application and the terminal identification information of the terminal, to the terminal application. The execution permission information is decrypted from the encrypted data stored in the predetermined encryption permission storage means in association with the terminal data and provided to the terminal application. The features.

  The application protection method according to another aspect (10) of the present invention is based on the above-described aspect in the category of the method, and a computer of a control server that provides the terminal application to the terminal is necessary for the execution of the terminal application. Encryption processing for encrypting predetermined execution permission information with a hash value related to the terminal application and terminal identification information received from the terminal to obtain encrypted data, a terminal application incorporating an application protection program, and the encryption Providing processing for providing the data to the terminal, and when the application protection program tries to execute the terminal application on the terminal, the hash generation unit generates the hash from the terminal application. The value and the terminal identification information of the terminal are stored in a predetermined encryption permission storage means in association with the terminal application. Characterized in that to provide to the terminal application from the No. of data by decoding the execution permission information.

  In these aspects, in addition to the effects described above, in particular, by providing the terminal with encrypted data encrypted with the hash value and the terminal identification information, together with the terminal application incorporating the application protection program from the control server, Thereafter, since processing such as a confirmation request is not required at the terminal including when the terminal application is activated for the first time, it is excellent in user convenience and the terminal application can be reliably fixed to a specific terminal from the beginning.

  An application protection system according to another aspect (8) of the present invention has any one of the above aspects related to a terminal and any one of the above aspects related to a control server.

  According to another aspect (7) of the present invention, in any one of the aspects related to the control server, a common providing means for providing a common module constituting the application protection program to the terminal, and the application protection program together with the common module. An individual providing means for providing a terminal application incorporating an individual module to be realized to the terminal, and the common module is generated by causing the terminal to generate a hash value from the terminal application installed in the terminal. A confirmation request including the hash value and application identification information for identifying the terminal application is transmitted to a predetermined control server, and is transmitted from the control server in response to the transmitted confirmation request and is necessary for executing the terminal application. Execution permission information which is encrypted with the hash value related to the confirmation request and the terminal identification information of the terminal. Then, the encrypted data is stored in a predetermined encryption permission storage means, and when the terminal module that incorporates the individual module is started for the first time on the terminal, the individual module is Passing the application identification information included in the terminal application, instructing the confirmation request, and when the terminal application is to be executed again on the terminal, a hash value generated by the hash generation unit from the terminal application; According to the terminal identification information of the terminal, the execution permission information is decrypted from the encrypted data stored in the encryption permission storage means in association with the terminal application, and is provided to the terminal application. To do.

  In this aspect, in addition to the above-described effects, it is necessary to install the confirmation request and the encryption part as a common module in the terminal, so that the confirmation request and the encryption functional part must be duplicated for each terminal application. As a result, the compression of the limited storage capacity can be avoided, and the repair and update of the common module portion can be completed quickly in one process. In addition, compared to the case where the application protection program is implemented as a single module common to all terminal applications and installed on the terminal, the functions according to the circumstances such as the characteristics of individual specific terminal applications can be freely controlled by individual modules. Can be implemented.

  Each of the above aspects can be grasped as other categories (methods, programs, etc.) that are not clearly described with respect to the aspects, and the categories of the methods and programs are “means” indicated in the apparatus category. Are appropriately read as “processing” or “step”. In addition, the order of execution of the processes and steps is not limited to that specified directly in the present application, and it is natural that the order can be changed as appropriate or processed together. Furthermore, in the category of methods and programs, “computers” that execute individual processes and steps may be common or may be different for each process. In addition, the present invention includes more specific aspects described later.

  According to the present invention, it is possible to prevent a terminal application from being executed due to movement between terminals or alteration.

The functional block diagram which shows a structure about 1st Embodiment of this invention. The figure which shows the example of data in 1st Embodiment of this invention. The flowchart which shows the process sequence regarding the confirmation request | requirement in 1st Embodiment of this invention. The flowchart which shows the process sequence at the time of terminal application execution in 1st Embodiment of this invention. The functional block diagram which shows a structure about 2nd Embodiment of this invention. The functional block diagram which shows a structure about 3rd Embodiment of this invention.

  Next, as an example of the present invention, a mode for carrying out the present invention (referred to as “embodiment”) will be described with reference to the drawings. It should be noted that assumptions common to those already described in the background art and problems are omitted as appropriate.

[1. First embodiment]
[1-1. Configuration of First Embodiment]
As shown in FIG. 1 (configuration diagram), the present embodiment relates to an application protection system having a terminal T that also serves as an application protection device and a control server 2 (hereinafter also referred to as “server 2” or “server”). It is.

  As shown in FIG. 1, the server 2 includes at least an arithmetic control unit 6 such as a CPU, a storage device 7 such as a main memory and an auxiliary storage device, and a communication network N (for example, the Internet, as shown in FIG. 1). Communication means 8 (communication gateway device, communication circuit with mobile communication network, wireless LAN adapter, etc.).

  The terminal T is an electronic information device that executes a terminal application and performs other information processing. The terminal T is a mobile PC, a stationary PC, or the like in addition to a smartphone, a mobile phone terminal, and a tablet PC. Although not shown, the terminal T includes an input / output unit using a liquid crystal display panel, a touch panel, a push button, and the like in addition to the computer configuration as described above. Although a small number of terminals T are schematically shown in FIG. 1, there are actually a large number of terminals T according to the number of users.

  In each of the terminal T and the server 2, predetermined computer programs (common modules and individual modules constituting an application protection program in the terminal T) stored in (installed in) the storage device 7 are connected to the arithmetic control unit 6. By controlling, the elements (11 and others) such as each means shown in FIG. 1 are realized.

  Among these elements, the information storage means can be realized in any data format such as a file on the storage device 7, or may be remote storage by network computing (cloud). The storage means may include not only a data storage area but also functions such as data input / output and management. In addition, the unit of the storage means shown in this application is for convenience of explanation, and the configuration can be divided or integrated as appropriate, and the processing data and processing results of each means are stored in addition to the explicit storage means. A storage means is used as appropriate.

  Among the storage means, the encryption permission storage means 41 includes, as illustrated in FIG. 2 (1), the execution permission information necessary for executing the terminal application, the hash value of the terminal application, and the terminal identification information of the terminal. This is means for storing the encrypted data encrypted in step 1 in association with the terminal application. The execution permission information is digital information such as an execution permission code required to execute the terminal application, and may be different for each terminal application or may be common.

  In addition, as illustrated in FIG. 2B, the application information storage unit 28 includes application identification information, a hash value, a terminal, and a terminal application related to provision to the terminal T that have a right of use. It is a means for storing execution permission information necessary for execution in. Here, the “application identification information” is a serial number unique to the terminal application downloaded and provided for each individual terminal, and is different for each user or terminal even for terminal applications of the same type and version.

  However, if the application identification information is embedded in the terminal application executable file itself, or if the terminal application executable file itself is changed little by little to make it unique, the hash values based on such files will also differ. Such a hash value may be used as application identification information. In addition to the purchase history of the paid application, the “use right” may be of any type, such as an acquisition history of a promotional privilege, a test ID record, and the like.

  In addition, the arrow in the figure (for example, FIG. 1) supplementarily indicates a main direction in the flow of data, control, and the like, and does not mean the limitation of the direction. For example, when data is acquired in a certain direction, a prior data request and a subsequent acknowledge (ACK) are transmitted in the reverse direction. In addition, each means other than the storage means is a processing means for realizing and executing the functions and operations of information processing as described below, but these are functional units arranged for explanation, and actual hardware It doesn't matter if it matches elements or software modules.

[1-2. Operation of First Embodiment]
The operation of the first embodiment configured as described above is shown in the flowchart of FIG.
[1-2-1. Overview〕
As an outline of the operation, the application protection program is configured by cooperation of the common module MX regardless of the terminal application and the individual module M1 incorporated in each terminal application. Then, the common module MX preinstalled in the terminal T transmits a confirmation request to the server 2 when the terminal application A is activated for the first time, encrypts the returned execution permission information, and decrypts it when the terminal application A is activated next time. Use. This will be specifically described below.

[1-2-2. Common module pre-installation)
First, the common module MX constituting the application protection program is preinstalled in the terminal T at the time of manufacture or is downloaded and installed by the user (step S1). When the user downloads from the server 2, the common provision unit 25 of the server 2 reads the common module MX constituting the application protection program from the predetermined common module storage unit 24 stored in advance and transmits it to the terminal T. (Step S21).

  Depending on the specifications of the terminal T, the download-provided common module MX is one of the terminal applications or an optional system module such as a device driver, an add-in, a dynamic link library, or the like in an appropriate format. Installed (introduced). The terminal T in which the common module MX is installed as described above becomes an execution environment in which each terminal application A can be executed.

[1-2-3. (Provision of terminal application)
Then, for each terminal application A, the individual providing means 27 of the server 2 implements an application protection program together with the common module MX in response to a download request access from the terminal T when purchasing an application (step S2). It is provided to the terminal T as the terminal application A incorporating the individual module M1 (step S22). Although one terminal application A is shown in FIG. 1, a large number of terminal applications A can be used as long as the storage capacity of the terminal T permits, and when each terminal application A is installed in the terminal T, it can be activated with an icon or the like.

  If the individual module M1 is stored in the terminal application A in advance in a predetermined application storage unit 26 or the like, the processing load incorporated in the terminal application A at the time of providing the download can be reduced. On the other hand, if it is incorporated in the terminal application A on the spot at the time of providing the download, it is possible to avoid duplication of storage capacity in the terminal T for the common module MX and to recreate all the built-in terminal applications A at the time of updating. The burden is avoided.

[1-2-4. Send confirmation request)
Then, when the terminal application A incorporating the individual module M1 is activated on the terminal T (step S3) and the activation is the first time (step S4: “YES”), the individual module M1 activates the arithmetic control unit 6 of the terminal T in particular. By controlling, as the confirmation request instruction means 11, the common module MX is passed the application identification information included in the terminal application A to instruct a confirmation request (step S5).

  At this time, in order to operate the common module MX from the individual module M1, what kind of linkage means is specifically adopted in the configuration of software represented by basic software such as an operating system is the type of basic software However, as an example, it is conceivable to use a call that involves parameter passing between modules.

  At this time, since the individual module M1 is incorporated in the terminal application A, when viewed from the common module MX, which is a type of terminal application, control is passed from the other terminal application A. It is also conceivable that the reference of the terminal application A itself (information such as a pointer specifying which terminal application is a processing target) cannot be transferred between the terminal applications. In such a case, the file path of the terminal application A (information such as a character string specifying a file directory or a folder on the terminal T where the execution file of the terminal application A is placed) may be passed.

  If it is difficult to acquire application identification information by the common module MX even if the file path is passed, the application identification information may be taken over as a parameter. Which function is placed between the individual module M1 and the common module MX is free (described later). When the hash value of the terminal application A is generated by the individual module M1, the individual module as described above is used. Instead of the file path from M1 to the common module MX, a generated hash value may be passed.

  In any case, upon receiving the confirmation request instruction from the individual module M1, in the common module MX, first, the hash generation means X1 generates a hash value, that is, a digest at that time, from the program file of the terminal application A (step S6). ).

  Here, if the range of data such as a file used as a basis for generating the hash value is limited to the net part of the terminal application A excluding the individual module M1, the processing load and time can be suppressed, while the terminal including the individual module M1. If the entire application A is targeted, it is possible to cope with tampering of the individual module M1 portion, so that the processing accuracy is improved. And the confirmation request transmission means X2 transmits the confirmation request containing the hash value produced | generated as mentioned above and the application identification information which identifies the terminal application A to the server 2 (step S7).

[1-2-5. (Processing for confirmation request)
In the server 2, the tampering confirmation means 31 includes a hash value acquired from the confirmation request related to the terminal application A transmitted from the terminal T, and a hash value stored in the application information storage means 28 for the terminal application A. It is confirmed by verification that the terminal application A has not been tampered with (step S23). Further, the usage right source exists for the terminal application A by collating the application identification information acquired from the confirmation request by the usage right source confirmation unit 32 with the application identification information stored in the application information storage unit 28 for the terminal application A. It confirms that it does (step S24). The usage right source confirmation unit 32 has confirmed that the usage right source exists by collation using the application identification information. However, the usage right source confirmation unit 32 uses the terminal identification information, user identification information for identifying the user, and a collation using a combination thereof. You can also confirm that the title exists. In this case, the confirmation request transmitting unit X2 transmits a confirmation request including these pieces of information to the server 2. The application information storage means 28 stores terminal identification information and user identification information in addition to application identification information.

  And about the terminal application A with which it was confirmed that it was not tampered (step S23: "YES") and the right of use exists (step S24: "YES"), the permission transmission means 33 is the application information storage means. The execution permission information stored in 28 is transmitted to the terminal T that is the transmission source of the confirmation request (step S25). On the other hand, the permission transmission means 33 replies a negative response such as an error code for the terminal application whether it has been tampered (step S23: “NO”) or has no right to use (step S24: “NO”) (step S26). .

[1-2-6. (Encrypted data storage)
In the terminal T, the response transmitted and received as a reply to the confirmation request is affirmative, that is, if it is execution permission information (step S8: “OK”), it is stored (step S9), and an error code or the like is negative. If it is a response (step S8: “NG”), a predetermined operation is performed such as displaying an error and ending the terminal application (step S10).

  When the response is affirmative, the permission information receiving means X3 is the execution permission information that is transmitted from the server 2 in response to the transmitted confirmation request and is necessary for the execution of the terminal application A, and relates to the confirmation request. What is encrypted with the hash value and the terminal identification information of the terminal T to be encrypted data is stored in a predetermined encryption permission storage means 41.

  Specifically, a mode in which encrypted data that has been encrypted on the server 2 side by the hash value and the terminal identification number is received and stored by the terminal T is also conceivable (described later), but here, another encryption technique (SSL Etc.) (step S8: “OK”), and the encryption means X4 encrypts the received execution permission information with the hash value related to the confirmation request, the terminal identification information of this terminal, The encrypted data is encrypted and stored in the encryption permission storage means 41 (step S9).

  The terminal identification information is a physical individual manufacturing number of the terminal T, a terminal ID associated with the contractor, and the terminal application can be acquired from basic software such as an operating system. By performing encryption on the terminal T side as described above, the server load required for encryption is reduced, and there is a load such as security risk for transmitting terminal identification information used for encryption on the communication network N. Can be avoided.

[1-2-7. (Processing during terminal application execution)
When the encrypted data is stored in the terminal T as described above, the terminal application A is continued or is started again by automatic restart or user operation. Can be executed. That is, when trying to execute the terminal application A by starting the terminal application A again on the terminal T in which the encrypted data has been stored, the terminal application A is not started (step S3) but the first time (step S4: "NO"), the process proceeds from the terminal E indicated by a circle to the flowchart of FIG.

  First, the individual module M1 causes the terminal T to generate the hash value, that is, the digest at that time from the file of the terminal application A as the hash generation means 50 (step S11). Further, the individual module M1 uses the terminal application as the decryption means 60 based on the hash value generated by the hash generation means 50 from the terminal application A and the terminal identification information (for example, the individual production number) of the terminal T. The execution permission information is decrypted from the encrypted data stored in the encryption permission storage means 41 in association with A, and is provided to the terminal application A (step S12). Note that the hash generation means X1 and the hash generation means 50 can use the same routines and modules on the actual program.

  The activated terminal application A checks the execution permission information provided as described above (step S13), and continues to operate if it can be confirmed as authentic execution permission information set in advance (step S13: “OK”). If it cannot be confirmed (step S13: “NG”), an error is displayed and the terminal application is terminated (step S15) to avoid the original operation.

[1-3. Effects of the first embodiment]
As a basic effect of the first embodiment as described above, execution permission information essential for execution of the terminal application A is encrypted with the hash value and terminal identification information of the terminal application A and placed on the terminal T (for example, FIG. 3). ) By performing decryption with the hash value of the terminal application A and the terminal identification information of the terminal and providing it to the terminal application A (for example, FIG. 4), the terminal application A has not been tampered with and In other cases, the execution permission information cannot be decrypted and the terminal application cannot be executed. For this reason, it is possible to prevent the terminal application A from being executed due to movement between terminals or tampering. Further, by placing the execution permission information in the terminal T, it is not necessary to access the server 2 for each execution, and the load on information processing and communication can be reduced in the terminal T and the server 2. Further, even when communication between the terminal and the server is not possible (offline), it is possible to manage the terminal application to be executed properly.

  In particular, in the first embodiment, the server 2 provides the execution permission information after confirming the non-tampering property of the terminal application A and the existence of the right source in response to the confirmation request from the terminal T. The execution permission information includes the hash value, The data is stored in the terminal T as encrypted data encrypted with the terminal identification information. This eliminates the need for the server 2 to encrypt the execution permission information with the terminal identification information and transmit it to the terminal T at the time of downloading the terminal application A, and at the time of downloading, the terminal application A is immediately applied to the terminal T. Not fixed. For this reason, if the terminal application A is activated for the first time at any terminal convenient for the user and a confirmation request is made, the terminal application A can be used only on the terminal thereafter, and flexible usability is realized.

  In the first embodiment, in addition to the basic effects described above, the confirmation request and the encryption functional part are installed in the terminal T as the common module MX (for example, FIG. 1), so that the confirmation request and the encryption functional part are provided. Since there is no need to have each terminal application A redundantly, it is possible to avoid the compression of the limited storage capacity, and the repair and update of the common module MX portion can be completed quickly in one process. Furthermore, compared with the case where the entire application protection program is realized as a single module common to all terminal applications A and installed in the terminal T, functions according to circumstances such as the characteristics of the specific terminal application A are provided. The individual module M1 can be freely mounted.

[2. Second Embodiment]
In the first embodiment, the execution permission information is acquired by a confirmation request from the terminal T to the server 2 when the terminal application A is activated for the first time. However, the execution permission information is transmitted to the terminal T together with the terminal application A when the terminal application A is provided for download. May be provided. Such a configuration of the second embodiment is shown in FIG.

  In this case, the server 20 is a control server that provides the terminal application B to the terminal T2, and includes the following means shown in FIG. That is, the encryption means 72 includes predetermined execution permission information necessary for execution of a terminal application (for example, terminal application B) by using a hash value related to the terminal application B and terminal identification information received from the terminal T2. Encrypt and use as encrypted data. Then, the providing means 73 provides the terminal application B incorporating the application protection program P and the encrypted data to the terminal T2. In FIG. 5, the encryption permission storage means 42 storing the encrypted data can be realized as internal data of the application protection program P, for example.

  The application protection program P in the second embodiment is not divided into individual modules and common modules, and causes the terminal T2 to perform the following process when attempting to execute the terminal application B in the terminal T2. That is, the application protection program P corresponds to the terminal application B as the decryption means 60 based on the hash value generated by the hash generation means 52 from the terminal application B and the terminal identification information of the terminal T2. In addition, the execution permission information is decrypted from the encrypted data stored in the predetermined encryption permission storage means 42 and provided to the terminal application B. The terminal application B continues the operation if the provided execution permission information is authentic.

  In the second embodiment, in addition to the basic effects of the first embodiment described above, in particular, the encryption that is encrypted with the hash value and the terminal identification information together with the terminal application B incorporating the application protection program P from the server 20. Since the terminal T2 including the first activation of the terminal application B does not require processing such as a confirmation request or the like since the terminal application B is also provided to the terminal T2, the user application is easy to use. It can be securely fixed to the terminal T2.

[2. Third Embodiment]
In the first embodiment, the execution permission information is encrypted on the terminal side. However, the encryption may be performed on the control server side. Also in such a configuration, the application protection program is shared with the individual modules. It is not essential to be divided into modules. Such a configuration example is shown in FIG. 6 as a third embodiment. This example is closer to the first embodiment than the second embodiment, but compared to FIG. 1 (first embodiment), the application protection program P2 is not divided into individual modules and common modules. The control server 30 has no common module storage means and common provision means, and the encryption means Z4 is on the control server 30 side.

  In the third embodiment, the providing means 37 provides the terminal application C incorporating the application protection program P2 to the terminal T3, and the confirmation request transmitting means Z2 of the application protection program P2 controls the terminal application C at the first activation. The point that the confirmation request transmitted to the server 30 includes the hash value generated by the hash generation means X1 and the application identification information for identifying the terminal application C is the same as in the first embodiment, but further, the terminal T3 Terminal identification information.

  In the control server 30, the application information storage unit 28, the tampering confirmation unit 31, and the usage right source confirmation unit 32 are the same as those in the first embodiment, but in the second embodiment, the encryption unit Z4 has not been tampered with and the usage right source. The execution permission information stored in the application information storage unit 28 for the terminal application C that has been confirmed to exist is encrypted with the hash value and the terminal identification information acquired from the confirmation request to obtain encrypted data, and the permission transmission unit 83 Transmits the encrypted encrypted data to the terminal T3 that is the transmission source of the confirmation request.

  In this case, in the terminal T3, the encryption permission receiving unit Z3 is the execution permission information that is transmitted from the control server 30 and is necessary for the execution of the terminal application C in response to the transmitted confirmation request. Encrypted data encrypted with the hash value and terminal identification information included in the request is received and stored in the encryption permission storage means 41.

  In such a third embodiment, the encryption is performed by the control server 30 to reduce the load on the terminal T3 with limited processing capability, and the execution permission information that is the key for executing the terminal application is not encrypted. Therefore, it is not necessary to prepare other encryption means such as SSL for transmission via a communication network, so that security can be maintained with a small burden.

[4. Other embodiments]
In addition, said each embodiment is only an illustration, and this invention includes what is illustrated below and other embodiment other than that. For example, the configuration diagrams, data diagrams, flowcharts, and the like in the present application are merely examples, and the presence / absence of each element, the order of the arrangement and processing execution, and the specific contents can be changed as appropriate. As an example, the means of each function separately shown in the first embodiment for the individual module M1 and the common module MX may be realized without being divided into modules as in the second embodiment or the third embodiment. In this case, by providing a means to ensure that the terminal application's own reference and file path are of the same application and are not misrepresented (identity), the terminal application can be more reliably prevented from being moved or tampered with. It is desirable to do.

  In addition, when the application protection program is divided into individual modules and common modules, which function is provided in which is free. For example, the encryption that makes the execution permission information encrypted data is performed by an individual module in addition to an example performed by a common module (for example, the first embodiment) and an example performed by a control server (third embodiment). Also good. Alternatively, the encryption module may store encrypted data, generate a hash, and decrypt the encrypted data using the common module, and the individual module may have only a function for calling a specific function of the common module. As described above, the function distribution and the types of parameters exchanged between the individual modules and the common module can be freely determined according to the type and specifications of the smartphone platform.

  In addition, a configuration in which the individual means in the control server shown in FIG. 1 and the like are realized by separate and independent facilities is also common. For example, the distribution of the terminal application and the response to the confirmation request are different from each other. It is possible to process with. Depending on the functions of the control server and the terminal, the configuration can be changed flexibly, for example, by calling an external platform or the like with an API (application program interface) or network computing (so-called cloud). Furthermore, each element such as means relating to the present invention may be realized by other information processing mechanisms such as a physical electronic circuit as well as a computer control unit.

DESCRIPTION OF SYMBOLS 1 This apparatus 6 Operation control part 7 Storage apparatus 8 Communication means 11 Confirmation request instruction means 41, 42 Encryption permission storage means 15 Data storage means 2, 20, 30 Control server (server)
24 common module storage means 25 common provision means 26 application storage means 27 individual provision means 28 application information storage means 31 confirmation means 32 usage right source confirmation means 33, 83 permission transmission means 37, 73 provision means 50, 52, X1 hash generation means 60, 72 Encryption means A, B, C Terminal application E Terminal M1 Individual module MX Common module N Communication network P, P2 Application protection program T, T2, T3 Terminal X2, Z2 Confirmation request transmission means X3 Permission information reception means X4 Z4 encryption means Z3 encryption permission receiving means

Claims (13)

A terminal that executes a terminal application and performs other information processing,
Encryption permission storage means for storing encrypted data obtained by encrypting execution permission information necessary for execution of the terminal application with the hash value of the terminal application and the terminal identification information of the terminal in association with the terminal application;
A hash generation means for generating a hash value from the terminal application;
When trying to execute a terminal application, the hash value generated by the hash generation unit from the terminal application and the terminal identification information of the terminal are stored in the encryption permission storage unit in association with the terminal application. Decryption means for decrypting the execution permission information from encrypted data and providing it to the terminal application;
A terminal characterized by comprising: Confirmation request transmission means for transmitting a confirmation request including the generated hash value and application identification information for identifying the terminal application to a predetermined control server;
Permission information receiving means for receiving execution permission information transmitted from the control server and required for execution of the terminal application in response to the transmitted confirmation request;
Encrypting means for encrypting the received execution permission information with the hash value related to the confirmation request and the terminal identification information of the terminal to obtain encrypted data;
The terminal according to claim 1, further comprising: Confirmation request transmitting means for transmitting a confirmation request including the generated hash value, application identification information for identifying the terminal application, and terminal identification information of the terminal to a predetermined control server;
Execution permission information transmitted from the control server in response to the transmitted confirmation request and necessary for execution of the terminal application, wherein the hash value and the terminal identification information included in the confirmation request are encrypted. Encryption permission receiving means for receiving encrypted encrypted data;
The terminal according to claim 1, further comprising: A control server that provides a terminal application to a terminal,
Encryption means for encrypting predetermined execution permission information necessary for execution of the terminal application with a hash value related to the terminal application and terminal identification information received from the terminal;
A terminal application incorporating an application protection program and a providing means for providing the encrypted data to the terminal;
Have
The application protection program is
When the terminal application is to be executed in the terminal, a predetermined encryption permission is associated with the terminal application based on the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal A control server, wherein the execution permission information is decrypted from the encrypted data stored in a storage means and provided to the terminal application. Application information storage means for storing application identification information, hash values, and execution permission information necessary for execution on a terminal for a terminal application related to provision to a terminal that has a usage right When,
Check that the terminal application has not been tampered with by comparing the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal and the hash value stored in the application information storage unit for the terminal application. Tampering confirmation means to confirm,
Usage right source confirmation for confirming that the right of use exists for the terminal application by collating the application identification information acquired from the confirmation request with the application identification information stored in the application information storage unit for the terminal application. Means,
The execution permission information stored in the application information storage unit for the terminal application that has been confirmed not to be tampered with and the right to use is transmitted to the terminal that is the transmission source of the confirmation request Permission transmission means to perform,
A control server comprising: Application information storage means for storing application identification information, hash values, and execution permission information necessary for execution on a terminal for a terminal application related to provision to a terminal that has a usage right When,
Check that the terminal application has not been tampered with by comparing the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal and the hash value stored in the application information storage unit for the terminal application. Tampering confirmation means to confirm,
Usage right source confirmation for confirming that the right of use exists for the terminal application by collating the application identification information acquired from the confirmation request with the application identification information stored in the application information storage unit for the terminal application. Means,
The hash value and the terminal for acquiring the execution permission information stored in the application information storage means for the terminal application that has been confirmed not to be falsified and to have the usage right source from the confirmation request An encryption means for encrypting with identification information to obtain encrypted data;
Permission transmission means for transmitting the encrypted encrypted data to the terminal that is the transmission source of the confirmation request;
A control server comprising: A common providing means for providing the terminal with a common module constituting the application protection program;
An individual providing means for providing a terminal with a terminal application that incorporates an individual module for realizing the application protection program together with the common module;
Have
The common module is connected to the terminal.
Generate a hash value from the terminal application installed in the terminal,
Transmitting a confirmation request including the generated hash value and application identification information for identifying the terminal application to a predetermined control server;
Execution permission information transmitted from the control server corresponding to the transmitted confirmation request and necessary for execution of the terminal application, wherein the hash value related to the confirmation request and the terminal identification information of the terminal are encrypted. The encrypted data is stored in a predetermined encryption permission storage means,
The individual module is connected to the terminal.
When the terminal application that incorporates the individual module is started for the first time on the terminal, the common module is caused to pass the application identification information included in the terminal application to instruct the confirmation request,
When the terminal application is to be executed again on the terminal, the encryption permission is associated with the terminal application based on the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal. The control server according to claim 5 or 6, wherein the execution permission information is decrypted from the encrypted data stored in a storage means and provided to the terminal application. Terminal T according to any one of claims 1 to 3,
A control server according to any one of claims 4 to 7;
An application protection system comprising: An application protection method in a terminal that executes a terminal application and performs other information processing,
A computer having encryption permission storage means for storing encrypted data obtained by encrypting execution permission information necessary for execution of a terminal application with a hash value of the terminal application and terminal identification information of the terminal in association with the terminal application,
A hash generation process for generating a hash value from the terminal application;
When trying to execute a terminal application, the hash value generated by the hash generation unit from the terminal application and the terminal identification information of the terminal are stored in the encryption permission storage unit in association with the terminal application. A decryption process for decrypting the execution permission information from the encrypted data and providing the decrypted execution permission information to the terminal application;
An application protection method characterized by: The computer of the control server that provides the terminal application to the terminal
An encryption process for encrypting predetermined execution permission information necessary for execution of the terminal application with a hash value related to the terminal application and terminal identification information received from the terminal;
A terminal application incorporating an application protection program and a providing process for providing the encrypted data to the terminal;
Run
The application protection program is
When the terminal application is to be executed in the terminal, a predetermined encryption permission is associated with the terminal application based on the hash value generated by the hash generation means from the terminal application and the terminal identification information of the terminal An application protection method, comprising: decrypting the execution permission information from the encrypted data stored in a storage means and providing the decrypted execution information to the terminal application. Application information storage means for storing application identification information, hash values, and execution permission information necessary for execution on a terminal for a terminal application related to provision to a terminal that has a usage right A control server computer having
Check that the terminal application has not been tampered with by comparing the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal and the hash value stored in the application information storage unit for the terminal application. Falsification confirmation processing to be confirmed,
Usage right source confirmation for confirming that the right of use exists for the terminal application by collating the application identification information acquired from the confirmation request with the application identification information stored in the application information storage unit for the terminal application. Processing,
The execution permission information stored in the application information storage unit for the terminal application that has been confirmed not to be tampered with and the right to use is transmitted to the terminal that is the transmission source of the confirmation request Permission transmission processing to
The application protection method characterized by performing. Application information storage means for storing application identification information, hash values, and execution permission information necessary for execution on a terminal for a terminal application related to provision to a terminal that has a usage right A control server computer having
Check that the terminal application has not been tampered with by comparing the hash value acquired from the confirmation request related to the terminal application transmitted from the terminal and the hash value stored in the application information storage unit for the terminal application. Falsification confirmation processing to be confirmed,
Usage right source confirmation for confirming that the right of use exists for the terminal application by collating the application identification information acquired from the confirmation request with the application identification information stored in the application information storage unit for the terminal application. Processing,
The hash value and the terminal for acquiring the execution permission information stored in the application information storage means for the terminal application that has been confirmed not to be falsified and to have the usage right source from the confirmation request Encryption processing encrypted with identification information and used as encrypted data;
Permission transmission processing for transmitting the encrypted encrypted data to the terminal that is the transmission source of the confirmation request;
The application protection method characterized by performing. An application protection program for a terminal that executes a terminal application and performs other information processing,
The program includes encryption permission storage means for storing encrypted data obtained by encrypting execution permission information necessary for execution of a terminal application with a hash value of the terminal application and terminal identification information of the terminal in association with the terminal application. By generating a hash value from the terminal application by controlling the computer
When trying to execute a terminal application, the hash value generated by the hash generation unit from the terminal application and the terminal identification information of the terminal are stored in the encryption permission storage unit in association with the terminal application. An application protection program, wherein the execution permission information is decrypted from the encrypted data and provided to the terminal application.

Images