KR100955347B1 - Apparatus and method for information management of terminal - Google Patents

Abstract

The present invention relates to an information management apparatus of a terminal and a method thereof.

In the present invention, at least one key and data capable of securing the information stored in the terminal are stored in the information store. In order to prepare for a user's request, change, loss, and failure of the terminal, the key and data stored in the information storage are moved and stored to the universal subscriber identity module (USIM), which is one of the backup devices detachable from the terminal. Thereafter, according to the request of the user, the key or data moved to and stored in the backup device is provided from the backup device through a predetermined authentication procedure. Then, the provided key or data is stored in the information store.

Through this, it provides a safer and more convenient information management service to terminal users and related parties.

Trusted Security Platform Module (TPM), Universal Subscriber Identity Module (USIM), Keys, Information Security

Description

Device for managing information of terminal and its method {APPARATUS AND METHOD FOR INFORMATION MANAGEMENT OF TERMINAL}

The present invention relates to an information management apparatus of a terminal and a method thereof, and more particularly, to an apparatus and method for managing information of a terminal using a universal subscriber identity module.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunication Research and Development. [Task Management Number: 2006-S-041-02, Title: Security and Reliability of Next Generation Mobile Terminals] Develop common security core modules for services.

In recent years, as security threats to various terminals including computer systems have rapidly increased, solutions for them have been searched and developed from various angles. Among them, the software security method is the majority, which is characterized by a number of problems.

In fact, software security means that if a user loses his or her data store, for example, personal data stored in the lost store is completely leaked out. In addition, the existing security method does not provide any protection against the threat of hacking because the encryption key can be easily exposed to the outside.

For this reason, a security method using hardware has been proposed as a solution for solving various problems. One of them is called Trusted Platform Module (TCM) of Trusted Computing Group (TCG) (Trusted Platform Module, `` TPM '' or `` Information Security Chip '' or `` Trusted Security Platform Module ''). ) Chip.

Specifically, unlike the CPU processor, the TPM chip simply provides a storage space for storing key values, passwords, digital certificates, and the like, and provides an encryption engine. That is, each TPM chip is assigned a unique key, EK (Endorsement Key) and SRK (Storage Root Key) when manufactured, and these key values are prevented from going out of the chip.

Therefore, the TPM chip is able to secure various vulnerabilities of the existing software security method due to its characteristics, and is recently being spotlighted by users and related parties.

TCG, a consortium formed in 2003, has developed and published security standards for computers, mobile phones and PDAs. For example, the TPM chip mounted on the terminal does not operate or backups important data required when the terminal is lost or changed, and defines functions and commands for a moving mechanism.

However, the specifications defined by the TCG require the participation of platform or TPM chip manufacturers in information security, and some functions are optional, and some chip manufacturers currently exclude some functions from the beginning. If you do not provide.

Therefore, in the security and management of personal information stored in various terminals, there is a demand for a method that can provide users and related parties with improved stability and convenience than conventional methods.

An object of the present invention is to back-up the key and data used for the information security of the terminal to the backup device (Back-up), the device and the device that can receive the backup key and data from the backup device and stored in the terminal It is to provide a method.

According to an aspect of the present invention, there is provided an information management apparatus of a terminal, including: an information store in which at least one key and data are stored; An information security chip that secures information stored in the terminal using at least one of a key and data stored in the information storage; And store and move at least one of the key and data stored in the information store to a backup device detachable from the terminal, and receive and store at least one of the moved and stored keys and data in the information store. It includes.

Further, an information management method of a terminal according to another aspect of the present invention, the method comprising the steps of: storing at least one key and data for securing the information stored in the terminal in the information storage; Generating a backup request message which is a message requesting to move and store the stored key to a backup device detachable from the terminal, and then transmitting the generated backup request message to the backup device; Encrypting the stored key using at least one key and authority verification data provided from the backup device according to the transmitted backup request message; And transmitting the encrypted result value and the pre-generated disposable key to the backup device.

According to the present invention, the key and data used in the trusted security platform module for the information security of the terminal backed up with a backup device detached from the terminal, USIM, or provided with the backed up key and data from the USIM trust built into the terminal Stored in the security platform module. Through this, it is possible to provide a more secure and convenient information management service to the terminal user and the related party.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, except to exclude other components unless specifically stated otherwise. In addition, the terms “… unit”, “… unit”, “module”, etc. described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware or software or a combination of hardware and software. have.

In addition, in the following embodiment of the present invention will be described for managing the information stored in the Trusted Platform Module (TPM) which is one of the security chip. However, the present invention is not limited thereto, and in some cases, the present invention may be applied to managing information stored in another memory or module in the terminal.

In addition, in the following embodiments of the present invention for convenience of description, moving and storing the information stored in the security chip to the backup device detachable from the terminal is called a 'backup', and to store the backup information received from the backup device Named 'recovery'.

First, an information management apparatus of a terminal according to an embodiment of the present invention will be described.

1 is a diagram illustrating an information management apparatus of a terminal according to an exemplary embodiment of the present invention.

As shown in FIG. 1, the information management apparatus 100 according to an exemplary embodiment of the present invention is included in the terminal 200, and includes an information storage (Protected storage) 110 and a trusted platform module (Trusted Platform Module) 120. , An information manager 130 and an input / output interface unit 140.

The information manager 130 includes a backup request unit 131, a backup execution unit 132, a recovery request unit 133, and a recovery execution unit 134.

In addition, the Universal Subscriber Identity Module (USIM) according to an embodiment of the present invention (hereinafter referred to as "USIM", 300) is one of the backup devices detachably attached to the terminal 200, the memory 310 and the service The support unit 320 is included.

For reference, the service support unit 320 is a card applet for backing up or restoring keys and data related to the trust security platform module 120.

In detail, the information storage 110 stores at least one key and data having a hierarchical structure based on a storage root key (SRK), which is a unique key.

The trust security platform module 120 stores and manages at least one key and data (eg, a password and a digital certificate) used in the information storage 110 in the information store 110.

The information manager 130 backs up the keys and data stored in the information storage 110 by the trust security platform module 120 and the keys and data stored in the trust security platform module 120 to the USIM 300, and backs up the information. Is received from the USIM 300 and stored in the trust security platform module 120 and the information store 110.

Specifically, the backup request unit 131 of the information manager 130 moves, stores, or backs up at least one key stored in the trust security platform module 120 and the information store 110 to the USIM 300. After generating a message (hereinafter referred to as a backup request message) requesting to transmit, the generated backup request message is transmitted to the USIM (300).

For reference, the information management apparatus 100 according to an embodiment of the present invention generates a message in the form of an APDU (Application Protocol Data Unit, hereinafter called 'APDU') and transmits the message to the USIM 300. The USIM 300 also generates a response message in response to the received message in the form of APDU and transmits it to the information management apparatus 100.

The backup performing unit 132 converts a key to be backed up into a predetermined form using data (key and authority verification data, etc.) provided from the USIM 300 according to the transmitted backup request message. Then, a non-equivalent operation (for example, an exclusive-or operation) is performed on the converted key and the one-time pad generated by itself.

Subsequently, the backup execution unit 132 encrypts the resultant result through the data (key) previously provided from the USIM 300, and then encrypts the final result value and the one-time generated key that were previously generated to the USIM 300. Send.

The recovery request unit 133 generates a message (hereinafter, referred to as a "recovery request message") for requesting to move, store, or recover the at least one key backed up to the USIM 300 to the terminal 200, and then generate the generated message. The recovery request message is transmitted to the USIM 300.

The recovery performing unit 134 converts the data provided from the USIM 300 into a predetermined form according to the transmitted recovery request message, and then converts at least one key in the converted result value through the trust security platform module 120. Store in information repository 110 or trust security platform module 120.

The input / output interface 140 supports data transmission and reception between the information management apparatus 100 and the USIM 300.

Next, the USIM 300 receives at least one key and data from the terminal 200 and stores the backup data in the memory 310, and stores the keys and data stored in the memory 310 to the terminal 200 according to a user's request. to provide.

In detail, the memory 310 of the USIM 300 may include not only keys and data backed up from the terminal 200, but also a migration public key 311, a migration private key 312, and authorization verification. Data (Authorization Data, 313), Maintenance Public Key (314) and Maintenance Private Key (315) are stored.

When the backup request message is received from the information manager 130, the service support unit 320 converts the mobile public key and authority verification data among the information stored in the memory 310 into an APDU form and provides the information to the information manager 130. The key and data backed up from the corresponding terminal are stored in the memory 310 according to the provided information.

In addition, when the recovery request message is received from the information manager 130, the service support unit 320 performs a predetermined user authentication procedure (eg, password matching).

After decrypting the data stored in the memory 320 with the mobile private key 312 according to the result, the decrypted result value is encrypted using the public key delivered from the information manager 130. . In addition, the encrypted result value and the disposable key are provided to the information management apparatus 100.

As such, the information management apparatus 100 according to an exemplary embodiment of the present invention may include a USIM 300 which is one of a backup device detachable from the terminal 200 with a key and data used by the trust security platform module 120 for information security. Back up Then, the backed up key and data are received from the USIM 300 and stored in the corresponding space in the terminal 100.

In this way, according to an embodiment of the present invention, a terminal user or a company that manufactures a trusted security platform module (TPM) may be more convenient than a method described in a general security standard (eg, TCG standard, etc.). Can provide secure information management.

For reference, an embodiment of the present invention describes that the information management apparatus 100 backs up or recovers only the key and data stored in the information storage 110 through the trust security platform module 120 (TPM). However, as described above, the present invention is not limited thereto, and in some cases, various information stored in another memory or module in the terminal may be backed up or restored.

Next, an information management method according to an embodiment of the present invention will be described based on the information management device having the above-described structure.

First, in the information management method according to an embodiment of the present invention, a process of backing up the key and data stored in the information storage 110 to the USIM 300 will be described.

FIG. 2 is a flowchart sequentially illustrating a backup process of an operation process of the information management apparatus illustrated in FIG. 1.

First, a process of backing up a migratable key stored in the information storage 110 to the USIM 300 will be described.

As shown in FIG. 2, when the terminal user wants to back up at least one of the keys and the data stored in the information storage 110 (S210 and S220), the backup request unit 131 of the information management apparatus 100 may perform the backup. The backup request message is transmitted to the USIM 300 (S230).

Then, the service support unit 320 of the USIM 300 converts the mobile public key and authority verification data among the information stored in the memory 310 into an APDU form according to the received backup request message and provides it to the information manager 130. (S231).

Thereafter, the backup execution unit 132 converts the key to be backed up into a predetermined form using data (key and authority verification data, etc.) provided from the USIM 300 (S232). Then, a non-equivalent operation (for example, an exclusive-or operation) is performed on the converted key and the one-time pad generated by itself (S233).

Thereafter, the backup performing unit 132 encrypts the performed result value through the data (key) previously provided from the USIM 300 (S234), and then encrypts the final result value and the one-time generated key that were previously generated by the USIM ( 300) (S235).

Then, the service support unit 320 of the USIM 300 stores the received data in the memory 310 (S236).

Next, the process of backing up the data stored in the information storage 110 to the USIM 300 in order to prepare for the loss or change situation of the terminal does not operate or the trust security platform module 120 mounted on the terminal 200. Learn about.

As shown in FIG. 2, when the terminal user wants to back up data stored in the information storage 110 (S210 and S220), the backup request unit 131 of the information manager 130 sends a backup request message to the USIM 300. Transmit (S240).

Then, the service support unit 320 of the USIM 300 reads the maintenance public key 314 stored in the memory 310 and provides it to the information manager 130 according to the received backup request message (S241).

Thereafter, the backup execution unit 132 stores the maintenance public key 314 provided from the USIM 300 in the information storage 110 managed by the trusted security platform module 120 through a predetermined function (TPM_LoadManuMaintPub) ( S242).

Thereafter, the trust security platform module 120 converts the SRK and the authorization verification data stored in the information store 110 into a predetermined form through a predetermined function (TPM_CreateMaintenance-Archive) to form a safe ring data structure (S243).

In addition, the trust security platform module 120 may perform a non-equivalent operation (eg, an exclusive-or operation) together with a secure data structure previously created with a string generated from a random number or usage authorization information. Etc.) (S244). Subsequently, the result value is encrypted with the maintenance public key 314 previously provided from the USIM 300 (S245).

Subsequently, the backup execution unit 132 converts the encrypted final result value and the string generated from the random number or the usage authorization information into an APDU form and transmits them to the USIM 300 (S246).

Then, the service support unit 320 of the USIM 300 stores the received data in the memory 310 (S247).

Next, in the information management method according to an embodiment of the present invention, a process of receiving a key and data from the USIM 300 and storing it in the terminal 200 will be described.

3 is a flowchart sequentially illustrating a recovery process of an operation process of the information management apparatus illustrated in FIG. 1.

First, a process of receiving a migratable key from the USIM 300 and storing it in the information storage 110 will be described.

As shown in FIG. 3, when the terminal user requests to move and store at least one key backed up to the USIM 300 to the information storage 110 of the information management apparatus 100, that is, to recover (S310 and S320), the recovery is performed. The request unit 133 transmits a recovery request message to the USIM 300 (S330).

At this time, the recovery request message includes a public key that can encrypt a migratable key.

Then, the service support unit 320 of the USIM (300) performs a predetermined user authentication procedure (for example, password matching, etc.) (S331).

Thereafter, the service support unit 320 decrypts (S332) the protected data stored in the memory 320 with the mobile private key 312 according to the authentication procedure performed, and then, the public key included in the decrypted result value in the recovery request message. It encrypts using a (Public key) (S333).

In addition, the service support unit 320 provides the encrypted result value and the disposable key to the information management device 100 (S334).

Thereafter, the recovery execution unit 134 of the information management apparatus 100 converts the data provided from the USIM 300 into a predetermined form, and then converts the at least one key in the converted result value into the trusted security platform module 120. It is stored in the information store 110 through (S335).

Thereafter, the recovery execution unit 130 transmits a report message to the USIM 300 indicating that the key has been successfully stored in the information storage 110 (S336), and the service support unit 320 of the USIM 300 receives the received message. According to the report message, the movement related information stored in the memory 310 is deleted (S337).

Next, the process of storing the data of the trust security platform module 120 backed up to the USIM 300 in the information storage 110 in order to prepare for a loss or change situation of the terminal.

As shown in FIG. 3, when the terminal user requests to move and store the data backed up to the USIM 300 to the information storage 110 of the information management apparatus 100, that is, to recover (S310 and S320), a recovery request unit ( 133 transmits a recovery request message to the USIM 300 (S340).

In this case, the recovery request message includes a public key that can encrypt data of the trusted security platform module 120.

Then, the service support unit 320 of the USIM 300 requests the password to the terminal user according to the user authentication procedure (S341). In accordance with the authentication result, the protected data stored in the memory 310 is decrypted by the holding private key 315 (S342).

Thereafter, the service support unit 320 encrypts the decrypted result value using the public key included in the recovery request message (S343).

Thereafter, the service support unit 320 converts the encrypted result value into an APDU form together with the string generated from the random number or the usage authorization information and transmits it to the information management apparatus 100 (S344).

Then, the recovery execution unit 134 of the information management apparatus 100 extracts a unique data value (tpmproof) that can identify the SRK, the authorization verification data, and the trusted security platform module from the received message, and then trusts the extracted value. It is stored in the information store 110 through the security platform module 120 (S345).

For reference, a display example of the structure of the key and data stored in the information storage 110 is attached to FIG. 4.

4 is a diagram illustrating a structure of keys and data stored in an information store according to an exemplary embodiment of the present invention.

As shown in FIG. 4, in the information store 110, the SRK 401, which is a unique key generated when the owner of the trust security platform module 120 performs the TakeOwnership process, serves as a root. The signature key 402, the protection data 403, and the storage key 404, which form a hierarchical structure around the SRK 401, are stored. At least one other storage key 405 to 400n is formed around the storage key 404 in a tree form.

Specifically, at least one other storage key 405 to 408 may be encrypted using one storage key 404 (also known as a parent key), and if a specific key 405 is to be used, the specific key 405 may be used. After loading both the and the parent key 404 of the key into the key slot (slot) of the trusted security platform module 120, decryption is performed internally.

On the other hand, the present invention is provided by storing a maintenance common key pair (maintenance key pair) that can be owned only by the manufacturer in the memory 310 of the USIM 300, in order to prepare for the change, loss and failure of the terminal 200, etc. do.

In general, a maintenance public key pair is specified (TCG specification) with values that only the manufacturer can own and use. However, the present invention provides a storage public key pair stored in the USIM 300 so that the USIM 300 itself can act as a manufacturer.

In addition, in order to store the maintenance public key pair in the USIM 300, a personal identification number (PIN) of the USIM manager must be known. This allows only administrators to store or read the maintained public key value in the USIM 300, thereby managing information in the Trusted Security Platform Module (TPM) more securely and conveniently through the USIM, which provides physical stability. Do it.

As such, the information management apparatus of the terminal according to the embodiment of the present invention achieves reliability and safety improvement by excluding participation of a manufacturer or a related party. In addition, when the terminal is changed, lost, or broken down, the USIM receives the key and data necessary for the security of the information, and performs a recovery operation, thereby increasing the service satisfaction of the user and the related person.

The embodiments of the present invention described above are not implemented only through the apparatus and the method, but may be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded. Implementation can be easily implemented by those skilled in the art from the description of the above-described embodiments.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1 is a diagram illustrating an information management apparatus of a terminal according to an exemplary embodiment of the present invention.

FIG. 2 is a flowchart sequentially illustrating a backup process of an operation process of the information management apparatus illustrated in FIG. 1.

FIG. 3 is a flowchart sequentially illustrating a recovery process of an operation process of the information management apparatus shown in FIG. 1.

4 is a diagram illustrating a structure of keys and data stored in an information store according to an exemplary embodiment of the present invention.

Claims (8)

An apparatus included in a terminal for managing information of the terminal, An information store in which at least one key and data are stored; An information security chip that secures information stored in the terminal using at least one of a key and data stored in the information storage; And Transfer and store at least one of the information security chip or the key and data stored in the information storage to a backup device detachable from the terminal, and receive at least one of the moved and stored keys and data from the backup device. Or an information manager for storing in the information repository managed by the information security chip. Information management apparatus of the terminal comprising a. According to claim 1, The information manager, A backup request unit for generating a backup request message which is a message requesting to move at least one of the key and data stored in the information storage to the backup device, and transmitting the generated backup request message to the backup device; A backup performing unit for encrypting the stored key and data using at least one key and authority verification data provided from the backup device according to the transmitted backup request message, and transmitting the encrypted result value to the backup device ; A recovery request unit for generating a recovery request message which is a message for requesting at least one of a key and data moved and stored to the backup device, and transmitting the generated recovery request message to the backup device; And A recovery performing unit for storing at least one key and data provided from the backup device in the information store according to the transmitted recovery request message Information management apparatus of the terminal comprising a. The method of claim 2, The backup device, A memory in which the moved key and data are stored; And A service support unit providing at least one of keys and data stored in the memory to the information manager according to the transmitted backup request message, and storing at least one key and data received from the information manager in the memory; Information management apparatus of the terminal comprising a. The method of claim 3, The service support unit, And performing a predetermined user authentication procedure according to the transmitted recovery request message, and providing any one of keys and data stored in the memory to the information manager based on the performed result. The method according to any one of claims 1 to 4, The information management device of the terminal, the backup device is a universal subscriber identification module. In the method for managing the information of the terminal through the information management device included in the terminal, Storing at least one key and data for securing the information stored in the terminal in an information store; Generating a backup request message which is a message requesting to move and store the stored key to a backup device detachable from the terminal, and then transmitting the generated backup request message to the backup device; Encrypting the stored key using at least one key and authority verification data provided from the backup device according to the transmitted backup request message; And Transmitting the encrypted result value and the pre-generated one-time key to the backup device. Information management method of the terminal comprising a. The method according to claim 6, Generating a backup request message which is a message requesting to move and store the stored data to the backup device, and then transmitting the generated backup request message to the backup device; Storing at least one key provided from the backup device in the information store according to the transmitted backup request message; Converting the stored key into a predetermined form and performing a predetermined operation on the converted result value and a string generated from a random number or usage authorization information; Encrypting the performed result value using a key provided from the backup device, and then transmitting the encrypted result value and the generated character string to the backup device; Information management method of the terminal further comprising. The method according to claim 6, Generating a recovery request message, the message requesting to receive at least one key and data stored in the backup device, and then transmitting the generated recovery request message to the backup device; And Storing at least one of a key and data provided from the backup device in the information store according to the transmitted recovery request message; Information management method of the terminal further comprising.

Images