KR100386853B1 - System for Security Kernel for Security based on Duty using Electronic Signature Authentication - Google Patents

Abstract

The present invention relates to a secure kernel system for role based security based on digital signature authentication.

The system of the present invention is a security kernel system based on digital signature authentication for a user accessing a system via an internal local area network or a remote external communication network. The security administrator sets a role security information of a user A certificate storage means for storing the issued certificate; a storage means for storing role-based security information indicating a file system access right set by the security manager for a specific file system; Means for verifying the identity of the user accessing the system and for confirming the identity of the user and the role-based security information of the user; and means for processing the process performed by the user who accesses the system, Setting means for setting role-based security information , By a user, role-based security information and security manager processor compares the role-based security information set in the file system, characterized by comprising control means for controlling access to the file system for the process.

Description

A Role-based Secure Kernel System Using Digital Signature Authentication {System for Security Kernel for Security Based on Duty using Electronic Signature Authentication}

The present invention relates to a security kernel system for role-based security using digital signature authentication, and more particularly, to a secure kernel system for role-based security, in which an unauthorized person intrudes into a computer system or a network system and accesses sensitive information, , Or spoofing at the kernel level to prevent hacking threats from occurring at the kernel level and to use the digital signature authentication to securely control the access to the file system with the role-based secret level of the user and the security administrator with the role-based secret level Based security.

In the related art, a method of allowing only a network connection related to a specific service and a network address using an intrusion blocking system and a method of identifying an identity of a computer system user in order to safely protect information stored in a computer is a one-time password method or the like There is a problem that only a limited security function that applies partial security technologies and methods such as the security administrator is provided. In addition, since the function of setting and managing role-based security information for the user depends on the ID and password of the security manager, When the ID and the password are hacked, the identification of the user and establishment and management of the role-based security information are not controlled securely and are operated by the intruder. As a result, the classified information or the high- Up, Modulation, There is still a security vulnerability that can be exploited or leaked.

The present invention has been proposed in order to solve all the problems of the related art as described above, and it is an object of the present invention to provide a computer readable recording medium having a role-based Provides a secure kernel method for role-based security using digital signature authentication, which enables a computer system to operate safely and reliably by solving the fundamental security weakness of the kernel in the existing computer operating system by adding a security kernel with access control function It has its purpose.

FIG. 1 is a diagram illustrating an Internet environment to which the present invention is applied.

FIG. 2 is a structural view of a secure kernel device for role-based security using digital signature authentication to which the present invention is applied.

FIG. 3 is a detailed structure of the security kernel of FIG. 2,

FIG. 4 is a detailed structure of the certificate storage unit of FIG. 2,

FIG. 5 is a detailed structure of the process role based security information storage of FIG. 3,

FIG. 6 is a detailed structure of the file system role-based security information storage of FIG. 3,

FIG. 7 is a flowchart illustrating a secure kernel method for role-based security using digital signature authentication according to an embodiment of the present invention;

8 is a detailed flowchart for explaining the installation step of FIG. 7,

FIG. 9 is a detailed flowchart of an embodiment for explaining the operational steps of FIG. 7,

FIG. 10 is a detailed flowchart of an embodiment for explaining the digital signature authentication based identification processing method of FIG. 9,

11 is a detailed flowchart for explaining a user registration and deletion processing method of FIG. 9,

FIG. 12 is a detailed flowchart for explaining a file system role-based access right setting processing method of FIG. 9,

FIG. 13 is a detailed flowchart of an embodiment for explaining a file system access processing method of FIG. 9; FIG.

The present invention seeks to change the access right of a file system for each user according to a role of a user in relation to a given responsibility such as a position, a position, a job, and the like of a user. Based security information indicating a role-based access right set by a security administrator, and the issued certificate includes a role-based security information indicating a role-based security right set by the security administrator. Based security information, and the role-based security information to be set is set by the security manager. [0030] The system of the present invention is a system for verifying the certificate of a user accessing the system, Performs a verification process, and performs a process for a user (security manager / user) The role-based security information of the user is verified through the identification process, and the access permission is determined by comparing the user-role-based information of the process and the role-based security information of the file system set by the security administrator In other words, a step of performing identification of a user by using an electronic signature authentication and verification method and having a role-based access right to a specific file system based on a result of identification verification, Based access right when a child process of the process and a child process of the process attempt to access the file system. By operating all of the above steps in the kernel in the form of a secure kernel, Role-based access control on files is at the kernel level A security management module, a certificate storage unit, and a security library are provided at the user level, and the security management module, the certificate storage unit, and the security library are provided at the user level. , And a system call interface and a security kernel at the kernel level. The security management module interacts with the security library, the system call interface, and the existing library to generate digital signature keys for security administrators and users, issues certificates, identifies security administrators and users at the kernel level, Provides an interface for safe access control.

The security kernel provides the digital signature verification means for the identity verification of the security administrator and the user. It also provides the role-based access right of the security manager or the user process granted after the digital signature verification and the file system Role-based access control information is used to provide role-based access control for specific files.

The above-mentioned objects, features and advantages will become more apparent from the following detailed description in conjunction with the accompanying drawings. It should be noted that, in the case of adding the reference numerals to the constituent elements of each drawing, the same constituent elements have the same number as much as possible even if they are displayed on different drawings. Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

As shown in the figure, the environment to which the present invention is applied is connected to the computer system 1 through an internal local area network or a remote internet communication network. And the security manager 5 managing the computer system 1 can display the electronic signature using the floppy diskette 3 or the smart card 4 The user 9 or 14 is responsible for the security management of the computer system 1 and the user 9 or 14 via an identity verification process based on the user's floppy diskette 7 or smart card 8, After having undergone the authentication process based on the authentication, only the access permitted by the security manager (5) has role-based access authority.

2, the user level includes a security management module 201 and a certificate storage unit 202. The security management module 201 and the certificate storage unit 202, And a security library 203. The security management module 201 interacts with the security library 203 and the system call interface 204 and the existing library to manage the security manager 5, 14) generates an electronic signature key, issues a certificate, and provides an interface to securely perform role-based access control to the file system by identifying the security administrator and the user at the kernel level.

The kernel level is composed of a system call interface 204 and a secure kernel 205. The system call interface 204 is a system call interface that connects a user level job to a file subsystem unit, And the security kernel 205 performs functions such as digital signature verification, role-based access right setting and inquiry, and file system role based access control.

3, the secure kernel of the present invention includes a role-based access right control unit 301, an electronic signature verification unit 302, a role- Based security policy setting / inquiry unit 306, a file system role based access right determining unit 307, a security manager certificate storage 308, a process role based security information storage Based security policy rule repository 310 and a file system role based security information repository 311. The role based access rights control unit 301 includes a role based access right setting / Based security policy rule setting / inquiry unit 306 and the file system role based access rights decision unit 307. The role based access right setting / inquiry unit 303 receives the role based security information The setting / inquiring unit 304 and the file system role-based security information And a setting / inquiry unit 305. When the identity of the user attempting to access is confirmed through the digital signature verification unit 302, the process role based security information setup / The role information of the repository 309 is set to the role 405 information included in the user certificate and the file system role based security information setting / Based access right decider 307 that inquires the role 602 information of the file system role based security information storage 311 by referring to the process information and determines the access right thereafter. The setting / inquiry unit 306 sets and inquires the role-based security policy rule stored in the role-based security policy rule storage 310. The role-based access rights setting / inquiry unit 303 And the file system role-based access right determining unit 307. The file system role-based access right deciding unit 307 controls the role-based access right deciding unit 307, The information of the security information storage 309 and the information of the file system role based security information storage 311 are compared with each other through the role based security policy rule setting / inquiry unit 306 to finally determine the role based access right to the file system The security policy rule stored in the role-based security policy rule repository 310 includes user role information for the current process set in the process role-based security information storage 309, And comparison information for judging access control by comparing role information, which is set access right information.

4 is a detailed configuration diagram of the certificate storage unit 202 of FIG 2. As shown in the figure, the certificate storage unit of the present invention includes a user ID 401 and a user certificate 402. [ The user certificate 402 includes a security manager ID 403 of the security manager 5 that issued the user certificate to the user 9 or 14, a user ID 404 that is the owner of the certificate, a role indicating the role- A security validity period 406 indicating a term of a role-based access right to the user's file system, a public key 407 indicating a user's digital signature public key, a certificate issuance time 408 A certificate validity period 409 information indicating a valid period of the certificate and an electronic signature value 410 that is a result of the security manager digitally signing the information 403, 404, 405, 406, 407, 408, 409 .

5 is a detailed configuration of the process role based security information storage 309 shown in FIG. 3, a process ID 501 for identifying each process executed by the security manager 5 or the user 9 or 14, And a user role 502 for executing the process.

FIG. 6 is a detailed configuration of the file system role-based security information storage 311 of FIG. 3, showing a file ID 601 for identifying a file and a role 602 representing role-based access right ) Information.

7 is a flowchart illustrating a security kernel method for role-based security using digital signature authentication according to an embodiment of the present invention. As shown in the figure, the secure kernel method of the present invention includes a security manager 5 (701), and performs an operation step of controlling user registration / deletion and file access authority (702).

7 is a detailed flowchart of an exemplary embodiment of the present invention. As shown in the figure, the installation step of the present invention is a method in which the security manager 5 encrypts its digital signature key pair, (PK_SM) and a private key (SK_SM) 801 and electronically signs the role-based security information ROLE_SM and the public key PK_SM with the secret key SK_SM to generate a certificate CERT_SM = The security manager 5 encrypts the secret key SK_SM and stores the encrypted secret key SK_SM in the smart card 4 or the floppy diskette 3 in step 803. In step 803, the security manager 5 encrypts the secret key SK_SM, SM [ROLE_SM, PK_SM] SK_SM, , And stores the certificate (CERT_SM) in a smart card or a floppy diskette 3 (804), and embeds the certificate (CERT_SM) in the security manager certificate storage 308 (805).

7 is a detailed flowchart of an embodiment for explaining the operational steps of FIG. 7. As shown in the figure, the operating step of the present invention includes a security manager 5 or a user 9 or 14 ) Is performed based on the digital signature authentication (901). If the result of the identification is not successful (902), the process ends if the result of the identification is unsuccessful (911) Based security information ROLE_SM of the security manager 5 from the certificate of the security manager 5 built in the storage 308. If the identity is the security manager 5, (904) the role-based security information (ROLE_SM) of the security manager (5) to the role-based security information (ROLE_UP) of the user (9 or 14) Processing 906, file system role-based access rights Based security information ROLE_UP of the process in the case of the user 9 or 14 as a result of the identification of the user, (905) and performs a file system role-based access processing (909) on the basis of the role-based security information (ROLE_U).

9 is a detailed flowchart for explaining an electronic signature authentication-based identification processing method of FIG. 9. As shown in the figure, the identification processing method of the present invention is a method in which a server system S sends a random number R] (1001) and generates an electronic signature value (X = U [R] SK_U) for the random number R at step 1002. The security manager 5 The security kernel 205 extracts the public key PK_SM of the security manager 5 from the certificate CERT_SM of the security manager 5 using the public key PK_SM of the security manager 5, The certificate (CERT_U) of the user (9 or 14) is verified (1005), and if the verification fails, it ends with a value of FALSE. If verification is successful, the public key PK_U of the client user and the role-based security information ROLE_U of the client user are extracted from the certificate (CERT_U) of the client user 9 or 14 (1007) (1010) with the role-based security information (ROLE_U) value of the client user (9 or 14) if the verification result is successful (1010). If the verification fails , And terminates with a value of FALSE (1011).

9 is a detailed flowchart for explaining the user registration and deletion processing method of FIG 9. The role-based security information (ROLE_UP) of the client user (9 or 14) When the user agrees with the information ROLE_SM 1101, if the user 9 or 14 is deleted in accordance with the access right of the security manager 5, the registered user U is deleted. Based security information ROLE_U to the new user 9 or 14 1104 and generates a public key PK_U and a private key SK_U of the new user 9 or 14 in operation 1005. In step 1005, The certificate authority 5 electronically signs the role-based security information ROLE_U and the public key PK_U of the new user 9 or 14 with the private key SK_SM of the security manager 5 and generates a certificate CERT_U = SM [ROLE_U, PK_U] SK_SM (1106). User U encrypts his / her secret key (SK_U) The user U stores the certificate CERT_U on the smart card 8 or 13 or the floppy diskette 7 or 12 or the like on the floppy diskette 7 or 12 Such a user registration is performed when a user 9 or 14 requesting a digital signature certificate exists and is similar to a general certificate issuing process. In the present invention, the security manager 5 checks whether the user's role-based security Information (ROLE_U) is set and a certificate is issued.

12 is a detailed flowchart for explaining a file system role-based access right setting processing method of FIG. 9. The role-based security information ROLE_UP of the client user process is transmitted to the role-based security information The security manager 5 selects the file F for setting the file role based security information ROLE_F in operation 1202. If the security manager 5 does not match the file role security information ROLE_SM, 5 selects an object to be granted access to the file F 1203 and the secure kernel encrypts the user role based security information ROLE_U for the user to be permitted in the file role based security information ROLE_F (1204).

13 is a detailed flowchart for explaining the file system access processing method of FIG 9. The security kernel 205 obtains 1301 the name of the access target file F, The file access of the client user process is permitted according to the role-based security policy rule defined in the role 310. By doing so, the user's role can be discriminated according to roles such as position, rank, or charge The method of the present invention as described above can be implemented as a program and can be recorded on a computer readable recording medium such as a CD-ROM, a RAM, ROM, a floppy disk, a hard disk, a magneto-optical disk, etc.). The present invention described above is applicable to a general purpose Of the above-described embodiment in the person having it possible various changes and modifications may be made without departing from the scope of the present invention is not limited to the examples and the accompanying drawings.

According to the present invention as described above, the security manager's certificate is embedded in the security kernel inside the kernel when the system is installed, thereby preventing hacking such as tampering or tampering with the certificate, Based access control, file system role-based access control, and file system role-based access control of the user process are all performed in the kernel, so that the hacking behavior of the computer system, such as file tampering, deletion, Can be originally prevented at the kernel level, so that it is possible to secure the security of the file system, and it is possible to safely protect the computer system from hacking threats such as unauthorized work have.

In addition, the present invention can securely provide role-based access control by applying to a computer system that must securely implement access control between a security manager having various roles such as various administrative and financial information systems and a file system in which a user and a role are assigned There is an effect to be able to.

Claims (14)

An electronic signature authentication based security kernel system for a user accessing a system via an internal local area network or a remote external communication network, A security management module for generating a digital signature key for a user (security manager / user) accessing the system and issuing a certificate including role-based security information for each user set by the security manager; (Security manager / user) and a role included in the certificate by verifying the digital signature certificate of the user (security manager / user) accessing the system, Based security information, security setting that controls access to the system by setting the access right according to the role based on the system by the security administrator and the established system access right and the role based security information of the user who is accessed to the system A root-based security using an electronic signature authentication Board system. An electronic signature authentication based security kernel system for a user accessing a system via an internal local area network or a remote external communication network, A certificate issuing means for issuing approval and issuance of the role security information of the user in response to the user's certificate request, a certificate storing means for storing the issued certificate, A storage means for storing role-based security information indicating a file system access right; means for verifying the identity of the user accessing the system and the role-based security information of the user; Based security information of a user who executes the process on the basis of the role-based security information of the process, a role-based security information of the processor, and a role-based security information To access the file system for that process Role-based security system kernel using the electronic signature authentication, characterized in that comprises a control means for control. delete delete delete delete delete The security kernel according to claim 1, wherein the secure kernel controls a user access to a file system for a process executed by a user accessing the system according to role-based security information set in a file system role-based security information store by a security manager Based access control unit, An electronic signature verification unit for verifying an identity of a user accessing the system by verifying the digital signature certificate; A security manager certificate store where the security manager's certificate is stored, A process role based security information store storing a process ID for identifying each process executed by the user, and a role based security information of a user executing the processor, A file system role-based security information store including role-based security information indicating a file ID for identifying the file and access rights to the file, A file system role-based security information setting / inquiring unit for setting role-based security information of a file system role-based security information store by a security manager; A role-based security information setting / inquiring unit for setting role-based security information on a process executed by a user in a process security information storage; A role-based security policy rule repository in which role-based security policy rule information on access control of a user accessing the system is stored; A role-based security policy rule setting / inquiry unit for setting and inquiring security policy rule information stored in a role-based security policy rule store; Based security information set in the process role-based security information store and the role-based security information set by the security administrator in the file system security information storage according to the security policy rules read from the role-based security policy rule setting / And a file system role-based access right decision unit for controlling access of the file to the role-based security kernel system using the digital signature authentication. 9. The method of claim 1, 2, or 8, wherein the user certificate issued by the security administrator to the user includes general certificate information for digital signature authentication, Based security kernel information using the digital signature authentication, the security-manager ID, the role-based security information indicating the access authority, the security validity period, and the digital signature value information of the security manager. 9. The method according to any one of claims 1 to 8, wherein the certificate storing unit includes a user ID and a user certificate as identification information for a user, The user certificate includes at least one of a security manager ID that issued a user certificate, a user ID that is an owner of a certificate, role-based security information that indicates a multi-level access right of the user, a security validity period A public key representing the digital signature public key of the user, a certificate generation time indicating the generation time of the certificate, certificate validity period information indicating a valid period of the certificate, and a result value obtained by digitally signing the information And a digital signature value, wherein the role-based secure kernel system uses digital signature authentication. 1. An electronic signature authentication based security kernel method for restricting access of a system to a user accessing a system, Issuing a certificate including a user role based security information set by a security manager in a certificate for a user requesting a certificate; Performing identification of a user accessing the system based on digital signature authentication; A step of granting the security information of the security manager to the role-based security information of the process by reading the security manager role-based security information from the certificate of the security manager registered in the security manager certificate storage, A step of reading the role-based security information of the user from the user certificate and granting the role-based security information of the process to the role-based security information if the user is an ordinary user, The user (security manager / user) compares the role-based security information (granted) set in the process security information executed in the system with the role-based security information set in the file system for the process, Wherein the root-based security kernel system includes a plurality of roles. The method according to claim 11, wherein, in performing the identification, Generating a digital signature value; extracting a public key of the security manager from the security manager certificate; verifying the user certificate using the extracted public key; Based security information, and verifying the digital signature value. The security kernel method for multi-level security based on digital signature authentication according to claim 1, 13. The method according to claim 11 or 12, wherein the user certificate is issued by a security manager and is electronically signed, and includes the issued security manager ID, file system role-based security information, A secure kernel method for multi - level security based on digital signature authentication. The secure kernel method according to claim 11 or 12, wherein the role-based security information set in the file system is set by the security manager as an access right to the file.