KR100651718B1 - Control method which can create and update for public key of USIM card and apparatus thereof - Google Patents

Abstract

The present invention relates to a public key generation and update control method and apparatus of a USIM card, the method of generating and updating a public key by controlling the USIM card in a portable terminal equipped with a USIM card, comprising: (a) a standby mode state Detecting whether the external power is supplied; (b) outputting a public key generation activation signal for generating a public key to the USIM card when supply of external power is detected in step (a); (c) receiving, from the USIM card, a public key generation completion signal generated when a public key generation and update are completed in the USIM card receiving the public key generation activation signal; And (d) outputting a public key generation deactivation signal for terminating the public key generation to the USIM card when receiving the public key generation completion signal in step (c). Thus, it is possible to provide public key generation and renewal from time to time comfortably without incurring additional time delay or power consumption.

Description

Control method which can create and update for public key of USIM card and apparatus

1 is a block diagram schematically showing the configuration of a portable terminal including a USIM card according to the present invention.

FIG. 2A is an example of a block diagram illustrating the memory unit of the USIM card of FIG. 1 in more detail.

FIG. 2B is another example of a block diagram illustrating the memory unit of the USIM card of FIG. 1 in more detail.

3 is a flowchart illustrating a public key generation and update process according to an embodiment of the present invention.

4 is a flowchart illustrating a process of requesting generation and update of a public key according to an embodiment of the present invention.

The present invention relates to a method and apparatus for controlling a public key generation and renewal of a Universal Subscriber Identification Module (USIM) card, and more particularly, to perform a public key encryption function in a USIM card mounted in a portable terminal. A method and apparatus for generating and updating a public key for a public key are provided.

Recently, as data communication increases through various wireless networks, it is required to implement enhanced encryption functions in portable terminals such as mobile phones and PDAs. For more secure authentication and information protection, the USIM card in the form of a smart card IC chip, which is a small embedded system, is installed in a portable terminal to independently manage the safe storage and processing of data related to personal information and authentication. Therefore, various encryption related technologies, especially public key cryptography such as RSA used for digital signature or authentication, are implemented in the USIM card, and furthermore, private keys used for encryption and decryption of such public key cryptographic algorithm in the USIM card. And public keys, that is, the ability to directly generate arbitrary public key pairs.

However, although an algorithm for generating a public key pair for applying to a public key encryption algorithm such as RSA has already been proposed, the mathematical nature of the public key encryption algorithm requires a large amount of computation and should be generated for enhanced security. As the size of the key increases, the execution time and power consumption required for this cause a performance degradation such as a slow response time and a lot of power consumption in the portable terminal, which is difficult to actually use directly.

Therefore, to solve this problem, instead of providing a key generation function in the USIM card, only a plurality of public keys (here, the public key means public key pairs (public key, secret key)) are generated in advance. If there is a public key request stored in the library, a method of selecting and reading any one of them is suggested. However, this method has a security weakness that public keys stored in a USIM card can be used repeatedly. If a public key is to be updated to solve this problem, externally generated values are transmitted whenever necessary. There is a problem that a hassle of passing through and a security problem in transmission exist.

The present invention effectively discloses using the charging time, which is the time when external power is supplied to the portable terminal in the standby mode in order to solve the performance problem due to the time delay and power consumption that are expected when performing public key generation in the USIM card. Provided are a method and apparatus for generating and updating keys.

A method of controlling the generation and update of a public key of a USIM card according to the present invention, and a method of generating and updating a public key by controlling the USIM card in a portable terminal equipped with a USIM card, the method comprising: (a) an external power source in a standby mode; Detecting whether supply is present; (b) outputting a public key generation activation signal for generating a public key to the USIM card when an external power source is detected in step (a); (c) receiving, from the USIM card, a public key generation completion signal generated when a public key generation and update are completed in the USIM card receiving the public key generation activation signal; And (d) outputting a public key generation deactivation signal for terminating the public key generation to the USIM card when receiving the public key generation completion signal in step (c).

In addition, the method for requesting the generation and renewal of a public key of a USIM card according to the present invention, in a method for requesting to generate and update a public key with the USIM card in a portable terminal equipped with a USIM card, (a) the portable terminal Requesting a public key from the client; (b) retrieving public key update information for a public key previously stored in the USIM card; (c) comparing the number of currently available public keys obtained in step (b) with a threshold of a preset available public key margin; And (d) if the number of the available public keys is less than the threshold in step (c), select any one of the available public keys and transmit them to the portable terminal, and generate and update the public key. Requesting; has a.

The apparatus for generating and updating a public key of a USIM card according to the present invention is a device for generating and updating a public key by controlling the USIM card in a portable terminal equipped with a USIM card, wherein external power is supplied in a standby mode. A portable terminal for outputting a public key generation activation signal for generating a public key in the USIM card when detecting a; And generating a new public key when the public key generation activation signal is input from the portable terminal, retrieving the public key update information for the pre-stored public key, and generating and updating the public key. USIM card for storing in the area and changing the public key update information.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the present invention.

1 is a block diagram schematically showing the configuration of a portable terminal including a USIM card according to the present invention.

Referring to FIG. 1, the portable terminal includes a transceiver 100, a key input unit 110, a memory unit 120, a voice processing unit 130, a display unit 140, an external power detection unit 150, and a controller 160. ) And the USIM card 170.

Here, it is shown that the portable terminal includes a USIM card 170. However, the USIM card (Universal Subscriber Identification Module) 170 is a smart card that can be issued, managed, and operated separately from the portable terminal.

The portable terminal described in the present invention is a terminal used in 3rd generation mobile communication or above, and is equipped with a USIM card 170 issued separately from the portable terminal, so that the mobile terminal and the user of the portable terminal can be authenticated.

The USIM card 170 is a smart device for applying to a Universal Mobile Telecommunication System (UMTS), a third generation communication service that enables portable terminal users to transmit broadband packet-based text, digitized voice or video, and multimedia data at a high speed of 2Mbps or more. It is a card.

The controller 160 controls the overall operations related to the portable terminal and the overall operations of the components.

The transceiver 100 is connected to a server of a mobile communication business that provides a mobile communication service through a wired / wireless network to transmit and receive wireless data. The transceiver 100 may be configured as a transmitter and a receiver as described above, or may be configured as separate transmitters and receivers.

The key input unit 110 includes a plurality of numeric keys and function keys to output a key press signal by the user to the controller 160.

The memory unit 120 includes an EEPROM (Electrically Erasable Programmable Read-Only Memory) for storing various programs and initial service data for operating the portable terminal, and a RAM for temporarily storing data generated during operation of the portable terminal. RAM: Random Access Memory.

The voice processor 130 receives wireless data inputted through a network connected to a server of a mobile communication business that provides a mobile communication service through a transceiver 100 and processes the signal to output audible frequencies to a speaker.

The display unit 140 displays the state of the portable terminal on the monitor so that the user can know the state of the portable terminal under the control of the controller 160.

The external power detector 150 detects whether external power is supplied to the portable terminal and outputs an external power detection signal to the fisherman 160.

The controller 160 generates a public key generation activation signal for allowing a public key generation and update function when the current mode of the portable terminal is in a standby mode and an external power detection signal is input from the external power detection unit 150. Output to USIM card 170. In addition, if the control unit 160 receives a public key generation completion signal indicating that all public key generation and updates have been completed from the USIM card 170, the control unit 160 generates a public key generation deactivation signal to generate a USIM card 170. Will output

The USIM card 170 includes a microprocessor 171, a memory unit 172, a public key controller 173, and a public key generator 174. As described above, the USIM card 170 can be mounted and separated from the portable terminal.

The USIM card 170 starts driving to generate a public key when a public key generation activation signal is input from the controller 160.

The memory unit 172 is an RAM that stores various programs and initial service data for operating the USIM card 170 and data generated during the operation of the USIM card 170. It is composed. The memory unit 172 includes a public key storage unit 172 '. The public key storage unit 172' stores public keys as many as the number currently assigned to the USIM card 170.

The microprocessor 171 controls the overall operations associated with the USIM card 170 and the operations between the respective components.

The public key storage unit 172 'of the memory unit 172 is capable of both reading and writing, maintaining data even when power is cut off, and generally used by a nonvolatile memory such as an EEPROM having a security function against physical hacking. do.

The public key storage unit 172 'stores the public key update information indicating whether the stored public keys have been used to perform public key generation and update.

The public key control unit 173 loads public key update information indicating whether public keys stored in the public key storage unit 172 'have been used, and reports the public key generation unit 174 when it is determined that the public key has been used. Transmits a public key generation signal for generating a public key. When the public key controller 173 generates the public key and determines that all of the current public keys have been generated, the public key controller 173 generates and transmits a public key generation completion signal to the controller 160 to notify completion of the public key generation.

The public key generation unit 174 is driven according to a public key generation signal input from the public key control unit 173, and generates one public key according to a public key generation algorithm, and the generated public key is a public key storage unit. The data is stored at 172 'and updated as a new value.

FIG. 2A is an example of a block diagram illustrating the memory unit of the USIM card of FIG. 1 in more detail.

Referring to FIG. 2A, a public key storage unit 172 ′ of the memory unit 172 illustrates a method for storing a public key and public key update information for the public key.

FIG. 2A illustrates a first form for storing a public key and public key update information for the public key, and it will be described by describing that the number of possible public key storages in the public key storage unit 172 'is n.

The public key storage unit 172 'is configured with n public key pair storage areas 200 consisting of a public key pair (one consisting of a secret key and a public key), and for each public key pair for the public key pair storage area 200. It consists of a public key update information storage area 220 indicating whether the public key pair is an available public key pair.

The public key pair storage area 200 includes a first public key pair storage area 201, a second public key pair storage area 202, a third public key pair storage area 203, a fourth public key pair storage area 204, .. N-th public key pair storage area 20n-1, and n-th public key pair storage area 20n.

The public key update information storage 220 includes a first public key update information storage area 221, a second public key update information storage area 222, a third public key update information storage area 223, and a fourth public key update. Information storage area 224, ..., n-th public key update information storage area 22n-1, and n-th public key update information storage area 22n.

Here, each of the first public key pair storage area 201, the second public key pair storage area 202, the third public key pair storage area 203, the fourth public key pair storage area 204, ..., The public key update information for the public key pair stored in the n-1 public key pair storage area 20n-1 and the nth public key pair storage area 20n is either the public key pair used or the public key pair not yet used. It indicates information about whether or not. The public key control unit 173 stores the public key update information for each of the public key pair storage areas 200 in the first public key update information storage area 221, the second public key update information storage area 222, and the second public key update information storage area 222. 3 public key update information storage area 223, fourth public key update information storage area 224, ..., n-1 public key update information storage area 22n-1, and nth public key update information storage area By loading the public key update information stored in the area 22n, it is possible to know whether the corresponding public key pair is an available public key pair.

FIG. 2B is another example of a block diagram illustrating the memory unit of the USIM card of FIG. 1 in more detail.

Referring to FIG. 2B, another method for storing a public key and public key update information for the public key in the public key storage unit 172 ′ of the memory unit 172 is illustrated.

FIG. 2B is a second form for storing the public key and public key update information for the public key, and it will be described with reference to the number of possible public key storages in the public key storage unit 172 '.

The public key storage unit 172 'is configured with n public key pair storage areas 250 consisting of a public key pair (one consisting of a secret key and a public key), and for each public key pair for the public key pair storage area 200. The public key update information storage area 270 indicates whether the public key pair is an available public key pair. Here, the public key update information storage area 270 is a method of managing public key update information by forming a separate storage area for storing public key update information, unlike FIG. 2A. Accordingly, the public key control unit 173 may determine whether the corresponding public key pair is available by loading the public key update information stored in the public key update information storage area 270 separately formed with the public key update information. Parts not described in FIG. 2B will be referred to FIG. 2A.

3 is a flowchart illustrating a public key generation and update process according to an embodiment of the present invention. The overall operation is performed through the controller 160 of FIG. 1.

Referring to FIG. 3, first, the controller 160 determines whether an external power detection signal is input through the external power detection unit 150 (S300). Here, the external power detection signal is generated by the external power detection unit 150 and output to the controller 160 when the portable terminal in the standby mode receives external power for charging. As a result of the determination in step S300, if no external power detection signal is input, step S300 is repeated. On the other hand, if the external power detection signal is input as a result of the determination in step S300, the flow proceeds to step S310.

Next, the controller 160 transmits the public key generation activation signal to the USIM card 170 when the external power detection signal is input in step S300, that is, when charging by the external power is currently performed (S310). ).

Next, in the USIM card 170 receiving the public key generation activation signal in step S310, the public key control unit 173 discloses each of the public key pair storage areas 200 stored in the public key storage unit 172 '. The public key update information for the key pair is retrieved (S320).

Next, it is determined whether the generation and the updating of the public key are necessary based on the public key update information retrieved in step S320 (S330). Here, whether to generate and update the public key is determined based on whether there is a public key to update through public key update information for the public key pair. That is, when the public key update information is retrieved and it is determined that there is no public key to update, the generation and update of the public key is not necessary. However, if the public key update information is retrieved and there is at least one public key to update, it is determined that the generation and update of the public key is necessary. If it is determined in step S330 that generation and update of the public key are not necessary, the flow proceeds to step S370. On the other hand, if it is determined in step S330 that the generation and update of the public key is necessary, the flow proceeds to step S340.

In step S340, the public key controller 173 controls to operate the public key generator 174 to generate a public key.

Next, the public key generation unit 174 generating the public key in step S340 stores the public key in one of the public key pair storage areas 200 to be updated under the control of the public key controller 173 to update the public key. In addition, the public key update information for the corresponding public key pair is also changed to indicate that it is an available public key (S350).

Next, the public key controller 173 determines whether all public keys for which public key update is required are updated (S360). If it is determined in step S360 that the public key to be renewed remains, step S340 is returned. On the other hand, if it is determined in step S360 that there is no public key to be updated, the flow proceeds to step S370.

In step S370, the USIM card 170 transmits a public key generation completion signal indicating that the public key generation and update have been completed since it is determined that there is no public key to be updated as a result of the determination in step S360. (S370).

Next, when receiving the public key generation completion signal, the controller 160 outputs the public key generation deactivation signal to the USIM card 170 for terminating the generation and update of the public key any more (S380).

Referring to FIG. 3, a flow chart is performed when external power is supplied in a standby mode. If the external power is cut off or the standby mode is released during the operation, the portable terminal automatically terminates the above operation. Done.

Referring to FIG. 3, the public key has an advantage in that all operations are performed naturally in a state in which the user does not recognize because the public key may be generated and updated in a state of being in an external power supply and in a standby mode. However, if the user does not continue to provide an environment in which his / her public key can be generated and renewed, a situation in which the public keys stored in the USIM card 170 are used up may vary depending on the public key storage capability of the USIM card 170. You can get to Therefore, in order to prevent such a situation, the user should be able to request the public key generation and update directly. Hereinafter, a part related to this will be described with reference to FIG. 4.

4 is a flowchart illustrating a process of generating a public key generation and update request according to an embodiment of the present invention.

Referring to FIG. 4, first, when a public key request signal is input from the controller 160 to use a public key, the public key controller 173 of the USIM card 170 enters the public key storage unit 172 '. The public key update information for the stored public key pair is retrieved (S400).

Next, the public key control unit 173 searches for public key update information for the public key pair in step S400 and determines whether there is a public key available above a threshold (S410). Here, whether or not the available public key exists above the threshold is determined by setting a threshold value of the available public key margin in advance and comparing the threshold with the number of currently available public keys. This is set to request that a used public key be updated with a new public key before the available public key is completely gone. If it is determined in step S410 that the available public key is greater than or equal to the threshold, the flow proceeds to step S420. On the other hand, if it is determined in step S410 that the available public key does not exist above the threshold, the process proceeds to step S430.

In step S420, one of the available public keys is selected, and the public key update information for the selected public key pair is changed to indicate that the public key has been used.

On the other hand, in step S430 it is determined whether all available public keys are used. If it is determined in step S430 that all available public keys are used, the flow proceeds to step S450. On the other hand, if it is determined in step S430 that all available public keys are not used, the flow proceeds to step S440.

In step S440, one of the available public keys is selected, and the public key update information for the selected public key pair is changed. Further, in step S440, the controller 160 generates an available public key shortage signal to inform that the current public key is not exhausted but exists below a threshold (that is, a state in which there is no available public key). Will output

In operation S440, the controller 160 controls the display unit 140 to display the warning message previously stored in the memory unit 120 in the form of a predetermined message in operation S445. This allows the user to recognize that the current USIM card is in the state of needing to generate and renew a public key. Here, the relevant information, such as how many public keys are available, may be included in the warning message.

On the other hand, since all available public keys are used in step S450, when a public key request signal is input through step S400, one randomly selected public key, that is, a used public key, is randomly selected. In operation S450, an available public key depletion signal is generated and output to the controller 160 to inform that the currently available public keys are all exhausted. In this case, since the public key update information for all public keys is used, there is no need to change it.

In operation S450, the controller 160 controls the display unit 140 to display the warning message previously stored in the memory unit 120 in the form of a predetermined message in operation S455. As a result, the user can recognize that the portable terminal is in a state in which a public key needs to be generated and updated. Here, a stronger warning message is formed than the warning message displayed in step S445 to prompt the user to recognize that the public key needs to be generated and updated. In this case, when a warning message is transmitted, a process of allowing a user to select whether to use the selected public key as it is or not may be added.

In an embodiment of the present invention, the USIM card has been described as an example, but may be applicable to other smart cards within a range that can be inferred by those skilled in the art.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD_ROM, magnetic tape, floppy disks, and optical data storage, and may also include those implemented in the form of carrier waves (eg, transmission over the Internet). . The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

As described above, optimal embodiments have been disclosed in the drawings and the specification. Although specific terms have been used herein, they are used only for the purpose of describing the present invention and are not intended to limit the scope of the invention as defined in the claims or the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible from this. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

The present invention relates to a method and apparatus for generating and updating a public key of a USIM card. Since the process of generating and updating a public key is performed in an externally powered state of charging, the present invention reduces power consumption due to a large amount of computation and also a standby mode. In this case, since the public key is generated, updated, and stored in advance, a quick response to the public key request may be possible since only a value of one of the stored public keys is retrieved for the request of the public key.

In addition, from the standpoint of the user of the portable terminal, when the public key generation is actually required, the portable terminal can respond to the request of the public key without incurring additional time delay or power consumption. Since the public key is frequently generated and updated through charging in the standby mode, the public key is generated and updated conveniently if the user follows the management method of the portable terminal. If all public keys currently stored in the USIM card are used and a new public key is generated and renewed separately, the user is not required to operate a special portable terminal, but only charges the portable terminal in the standby mode later. As a result, the public key can be generated and updated.

In addition, since all public key generation and update operations are performed independently in the USIM, there is an advantage in that security is more advantageous than using a separate external device.

Claims (13)

A method of generating and updating a public key by controlling the USIM card in a portable terminal equipped with a USIM card, (a) detecting whether external power is supplied in a standby mode; (b) outputting a public key generation activation signal for generating a public key to the USIM card when supply of external power is detected in step (a); (c) receiving, from the USIM card, a public key generation completion signal generated when a public key generation and update are completed in the USIM card receiving the public key generation activation signal; And (d) outputting a public key generation deactivation signal for terminating the public key generation to the USIM card when receiving the public key generation completion signal in step (c); How to control public key generation and renewal. The method of claim 1, wherein step (c) (c-1) retrieving public key update information for a public key previously stored in the USIM card; (c-2) determining whether a public key is generated and updated when there is an area requiring public key update according to the public key update information retrieved in step (c-1); (c-3) If it is determined that the public key generation and update are to be performed according to the result of step (c-2), a public key is generated and the generated public key is stored in the area requiring the public key update. Storing and changing the public key update information for the public key; (c-4) determining whether the generation and updating of the public key is completed, and generating a public key generation completion signal when it is determined that the public key is completed. And update control method. The method of claim 2, wherein step (c-2) In the case where it is determined that the number of areas for which public key update is required in the public key update information retrieved in step (c-1) exceeds a preset threshold of available public key margin, the public key generation and update are performed. Public key generation and renewal control method of a USIM card. The method of claim 1, When at least one of a case where the supply of external power to the portable terminal is stopped or when the portable terminal exits the standby mode is detected, the portable terminal outputs a public key generation deactivation signal to the USIM card at any stage of the step. Public key generation and update control method of the USIM card, characterized in that. delete delete delete delete An apparatus for generating and updating a public key by controlling the USIM card in a portable terminal equipped with a USIM card, A portable terminal outputting a public key generation activation signal for generating a public key in the USIM card when it detects that external power is supplied in a standby mode; And When the public key generation activation signal is input from the portable terminal, a new public key is generated, an area in which the generated public key is required to be generated and updated by retrieving public key update information for a previously stored public key And a USIM card for storing and changing the public key update information in the USIM card. The portable terminal of claim 9, wherein the portable terminal includes: An external power detector to detect whether external power is supplied and output an external power detection signal; And And a controller for outputting the public key generation activation signal to the USIM card when an external power detection signal is input from the external power detection unit. The card of claim 9, wherein the USIM card is A public key storage unit for storing public key update information corresponding to each of the public key and the public key; A public key generator for generating the public key; And A public key controller configured to control the public key generator to generate a public key, store the generated public key in an area requiring the update stored in the public key storage, and change public key update information; Public key generation and renewal device of the USIM card comprising a. The method of claim 11, The public key storage unit stores individual public key update information for each public key in the same storage area or stores individual public key update information for each public key in storing the public key and the public key update information. A public key generation and update apparatus for a USIM card, characterized in that it is made of at least one of storing in a public key update storage area separately managed. The method of claim 9, The portable terminal outputs a public key generation deactivation signal to the USIM card when one or more of the cases where the external power supply is interrupted or the standby mode state is detected is detected. Public key generation and update device.

Images