KR100963420B1 - Device and method for detecting dcas host with duplicated secure micro - Google Patents

Abstract

A method is disclosed in which a policy server detects a replicated security module. The cloned security module detecting method may further include generating, by a host, authentication time difference information that is a difference between a time of last authentication at a first address and a time at which a second address is authenticated, and converting the authentication time difference information into a first reference value and the first reference value. Comparing with a second reference value smaller than a reference value and checking whether the security module is duplicated according to a result of comparing the authentication time difference information with the first reference value and the second reference value.

Downloadable, Restricted Receipt, Policy Server, Security Module, Replication, Detection, Host, Authentication, Source

Description

DEVICE AND METHOD FOR DETECTING DCAS HOST WITH DUPLICATED SECURE MICRO}

The present invention relates to a technique for detecting whether a security module is duplicated in a DCAS network and taking appropriate measures according to the detection result.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunications Research and Development (Task Management No .: 2007-S-007-01, Task Name: Downloadable CA System).

A conditional access system in a cable network is a system in which when a user wants to watch a specific program, the user can determine whether to allow a service based on user authentication to control the program access only to the authorized user.

Early limited reception systems used different specifications for different manufacturers, making them incompatible with other equipment except those from a specific vendor. Therefore, since the broadcast service provider has to supply the receiving terminal directly to the subscriber, the burden on the broadcast service provider is high and it is difficult to update the CA system.

In order to solve this problem, OpenCable of North America has released a standard for separating the limited reception module from the subscriber terminal. This was to prevent equipment makers from monopolizing their market share, and to promote competition, leading to lower product prices. Accordingly, the limited reception module separated from the terminal has been standardized as a PCMCIA card type cable card, and a broadcast service provider can provide a paid broadcast service by providing only a cable card to a subscriber without renting the terminal to a subscriber as in the past. . However, the price of the cable card is rising, the management cost is increased, and the retail market for the terminal is not activated, and OpenCable does not achieve the desired result.

In this situation, a downloadable conditional access system (DCAS) related technology has appeared that enables a paid broadcast service by downloading a conditional access software to a subscriber terminal without requiring a hardware conditional reception module separately.

According to the DCAS technology, the DCAS host that has been authenticated downloads a security module client image and performs a key management function for accessing a pay-TV program using the security module client. However, if the security module of the DCAS host is replicated in an illegal manner and the security module client image can be downloaded using the replicated security module, the probability of success of the DCAS technology will be lowered.

So we need to check if the DCAS host is running a replicated security module. Furthermore, if it is determined that the DCAS host is running a replicated security module, it is necessary to deprive the program access to the DCAS host. Therefore, there is a need for a technique that can detect the duplicated security module and take appropriate action based on the detection result.

The present invention provides a technique that allows a host to efficiently determine whether to copy a security module by using authentication time difference information, which is a difference between a time of last authentication at a first address and a time at which a second address is authenticated.

In addition, the present invention provides a technology that can effectively determine whether or not to replicate the security module according to the number of IDs received from the security module suspected to be duplicated, if it is suspected that the security module is replicated using the authentication time difference information. do.

In addition, the present invention provides a technology that can deprive the program viewing authority of the security module, if it is determined that the security module has been duplicated.

In a method of detecting a duplicated security module according to an embodiment of the present invention, the host may generate authentication time difference information that is a difference between a time of last authentication at a first address and a time at which a second address is authenticated. Comparing a second reference value with a first reference value and a second reference value smaller than the first reference value, and checking whether the security module is replicated according to a result of comparing the authentication time difference information with the first reference value and the second reference value. Include.

In addition, the policy server for detecting the replicated security module according to an embodiment of the present invention is a database for storing the time that the host received from the authentication proxy server last authentication at the first address, the host from the authentication proxy server An authentication time difference information generator for receiving authentication completion time at a second address, and generating authentication time difference information that is a difference between a time of last authentication at the first address and a time at which the second address is authenticated, the authentication time difference information Is compared with a first reference value and a second reference value smaller than the first reference value, and comparing the authentication time difference information with the first reference value and the second reference value to check whether the security module is duplicated or not. Includes a copy check unit.

In addition, the method of operating an authentication proxy server according to an embodiment of the present invention includes the step of transmitting a time at which a host was last authenticated at a first address and a time at which a second authentication was completed at a policy server to a policy server, the last at the first address. When the difference between the authentication completion time and the authentication completion time at the second address is a value between a preset first reference value and a second reference value, the security module of the host in response to the security module ID collection request sent from the policy server Collecting an ID and transmitting an ID of the security module of the host collected to the policy server.

In addition, the method of operating the subscriber management system according to an embodiment of the present invention, if it is determined by the policy server that the security module has been duplicated, receiving a request for depriving the program access authority of the security module from the policy server, Extracting a host on which the security module is installed by using a program access deprivation request of the security module; and depriving the host of program access authority.

The present invention can provide a technology that can effectively determine whether or not to replicate the security module by using the authentication time difference information that is the difference between the time when the host was last authenticated at the first address and the time at which the second address was authenticated.

In addition, the present invention provides a technology that can effectively determine whether or not to duplicate the security module according to the number of IDs received by the security module suspected to be duplicated, if it is suspected that the security module has been replicated using the authentication time difference information. can do.

In addition, the present invention can provide a technology that can deprive the program viewing authority of the security module, if it is determined that the security module has been duplicated.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an overall downloadable limited reception system including a DCAS headend system and a DCAS host according to an embodiment of the present invention.

Referring to FIG. 1, a downloadable conditional access service (DCAS) headend system 110 according to an embodiment of the present invention may include an AP (Authentication Proxy) server 111, a LKS (Key Management Server, and a Local Key Server). 112), a DPS (Policy Server, DCAS Provisioning Server, 113), and an IPS (Integrated Personalization System) Server 114.

The headend system 110 may be installed separately from the existing CAS server 140 and operated independently from the existing CAS server 140 to be compatible with the existing cable broadcasting system.

At this time, the LKS 112 is a key of the security module (SM), the history of the ID information of the security module (SM), the key of the AP server 111, the history of the ID information of the AP server 111, IPS server Key-related information for various servers, such as a history of key information of 114, is stored and managed.

In addition, the DPS 113 manages relevant policies and download related information of the DCAS service, and the IPS server 114 stores and manages a secure micro (SM) client to be downloaded to the DCAS host 160.

When there is a DCAS host 160 connected to the cable network, the AP server 111 uses a DCAS host as an external trusted device 120, which is an external trusted authentication device for authentication of the DCAS host 160. The security module (SM) related information of the 160 is transmitted, and the external authentication device 120 authenticates the DCAS host 160 using the received security module (SM) related information.

The AP server 111 receives the download related information from the DPS 113. At this time, the download related information includes information related to the connection (mapping) of the IPS server 114 and the DCAS host 160 (IPS-host mapping information), information related to the downloading method of the security module (SM), and the DCAS operation policy. Information related to the information may include download scheduling information.

At this time, the AP server 111 instructs the IPS server 114 to perform a necessary operation so that the security module (SM) client can be downloaded according to the download related information. At this time, the IPS server 114 performs a necessary operation so that the security module (SM) client can be downloaded according to the download method corresponding to the download-related information selected by the DPS 113 of the various download methods. In this case, each of the downloading schemes may correspond to various transfer protocols such as carousel, Trivial File Transfer Protocol (TFTP), Hyper-Text Transfer Protocol (HTTP), and the like.

When the authentication of the DCAS host 160 is completed, the DCAS host 160 downloads and installs a security module (SM) client to the security module (SM) of the DCAS host 160. The DPS 113 notifies the CAS server 140 of the program access authority of the DCAS host 160 that has been authenticated through the billing system 130. At this time, the CAS server 140 transmits an Entitlement Management Message (EMM) to the DCAS host 160 through the Cable Modem Termination System (CMTS) 150.

The security module (SM) client downloaded and installed in the security module (SM) of the DCAS host 160 extracts a control word (code word) through a series of CAS message processing procedures using the received entitlement management message. The control word is transmitted to the transport processor (TP). The TP decrypts the encrypted program using the control word.

2 is a flowchart illustrating a method of operating a downloadable limited reception system according to an embodiment of the present invention.

Referring to FIG. 2, the AP server is a currently running security module (SM) client version information and the AP server which is the basis for determining whether the download of the security module (SM) client to the DCAS host through the DCAS network protocol interface is required. Send certificates continuously. At this time, the AP server's certificate is used to verify the identity of the AP and the authentication of the message received by the DCAS host from the AP server.

The DCAS host accessing the DCAS network uses the version information of the received security module (SM) client to determine whether the security module (SM) client should be newly installed or updated. At this time, if it is determined that the security module (SM) client needs to be newly installed or updated, the DCAS host transmits authentication basic information to the AP server.

In this case, the authentication basic information includes information related to key pairing of the security module SM and the transport processor, a certificate of the security module SM, and the like. At this time, the certificate of the security module (SM) may be used for authentication of the message received by the AP server from the DCAS host and identity of the DCAS host.

In addition, the AP server transmits authentication basic information to a trusted authority, and the external authentication device performs authentication on the security module SM. When the external authentication device completes authentication with the security module SM, the external authentication device generates a session key sharing factor and transmits the generated session key sharing factor to the AP server.

The AP server shares the session key sharing factor with the DCAS host. The AP server and the DCAS host sharing the session key sharing factor perform mutual authentication, and generate a session key when authentication is completed. At this time, the session key may be used for encryption or decryption for the DCAS message and security module (SM) client.

The AP server requests download-related information from the DCAS Provisioning Server (DPS). At this time, the download-related information includes connection (mapping) information between the DCAS host and the Integrated Personalization System (IPS) server, information related to the address of the IPS server, the name of the security module (SM) client, or the security module (SM) client. It may include information related to the downloading scheme. At this time, the AP server transfers the download related information to the DCAS host.

At this time, the AP server instructs the IPS server to perform processing required for downloading the security module (SM) client according to the downloading method. The IPS server performs the processing required for downloading the security module (SM) client according to the selected downloading method. At this time, the downloaded security module (SM) client is encrypted with the session key.

The DCAS host transmits the download status information to the AP server in relation to whether the security module (SM) client is normally downloaded. The AP server determines whether the security module (SM) client should be downloaded again based on the received download status information. If it is determined that the security module (SM) client should be downloaded again, the AP server proceeds to download the security module (SM) client again.

3 is a diagram illustrating a downloadable restriction receiving system including a policy server that detects a replicated security module according to an embodiment of the present invention.

Referring to FIG. 3, DCAS host 1 310 has an original non-replicated security module, and DCAS host 2 320 has a replicated security module. When the DCAS Host 1 310 and the DCAS Host 2 320 access the AP server 340 through the CMTS 330, the DCAS Host 1 310 and the DCAS Host 2 320 and the AP server 340 Mutual authentication.

When the AP server 340 completes the authentication of the DCAS host 1 310 and the DCAS host 2 320, the AP server 340 has the security of the DCAS host 1 310 and the DCAS host 2 320. The decision basic information, which is used to determine whether the modules have been duplicated, is sent to the DPS 350.

At this time, the determination basic information is the ID (SM_ID) of the security module possessed by the DCAS host 1 310 and the DCAS host 2 320, the IP address of the DCAS host 1 310 and DCAS host 2 (320) and The authentication completion time or the ID information of the AP server 340 may be included.

The DPS 350 detects whether the security module is duplicated according to a duplication / detection detection procedure described later based on the determination basic information. If the DPS 350 suspects that the security modules possessed by the DCAS Host 1 310 and the DCAS Host 2 320 have been replicated, the DPS 350 may transmit the DCAS Host 1 310 to the AP server 340. And requesting transmission of the ID SM_ID of the security module of the DCAS host 2 320 again.

The AP server 340 requests the DCAS host 1 310 and the DCAS host 2 320 to transmit the ID (SM_ID) of the security module that each has, and the DCAS host 1 310 and the DCAS host 2 320. Receive the ID (SM_ID) of each security module. The AP server 340 transmits the IDs SM_IDs of the security modules of the DCAS host 1 310 and the DCAS host 2 320 to the DPS 350.

If the DCAS host 1 310 and the DCAS host 2 320 are operating at different IP addresses, the DPS 350 will receive two IDs (SM_IDs) of the same security module. At this time, the DPS 350 may determine that the security modules possessed by the DCAS host 1 310 and the DCAS host 2 320 are duplicated, and accordingly, the DPS 350 may determine the DCAS host 1 310 and the DCAS. A request may be made to deprive Host 2 of the program access right.

In addition, the DPS 350 transmits the ID SM_ID of the security module of the DCAS host 1 310 and the DCAS host 2 320 to the billing system 360. Here, the billing system 360 includes a subscriber management system.

Billing system 360 stores mapping information between the ID of the DCAS host and the security module for each of the paid service subscribers in a database. The billing system 360 retrieves mapping information corresponding to the ID SM_ID of the received security module using a database. In addition, the billing system 360 deprives the program access authority of the DCAS host 1 310 and the DCAS host 2 320 by using the retrieved mapping information.

In addition, the billing system 360 notifies the restricted reception service server 370 that the program access rights of the DCAS host 1 310 and the DCAS host 2 320 have been deprived. At this time, the restricted reception service server 370 is a certificate management message (EMM) so that DCAS host1 310 and DCAS host2 320 having the ID (SM_ID) of the replicated security module cannot access the program. To process.

4 is a diagram illustrating a downloadable restriction receiving system including a policy server that detects a replicated security module for two AP networks.

Referring to FIG. 4, AP network 1 410 includes DCAS host1 411, CMTS1 412, and AP server1 413, and AP network 2 420 includes DCAS host2 423 and CMTS2. 422 and AP server 2 421. DCAS host 1 411 has an original security module, and DCAS host 2 423 has a replicated security module.

The DPS 430 receives the ID of the security module from the AP server 1 413 and the AP server 2 421 to determine whether the security module has been replicated. At this time, when two IDs of the same security module are received, the DPS 430 determines that the security module is duplicated.

As described in connection with FIG. 3, the billing system 440 deprives DCAS Host 1 411 and DCAS Host 2 423 the program access rights, and the CA Access Service Server 450 receives the DCAS Host 1 411. And processes the entitlement management message (EMM) so that the DCAS host2 423 cannot access the program.

Therefore, according to an embodiment of the present invention, even if a DCAS host having a replicated security module accesses another AP network by determining whether the security module is duplicated, the DPS 430 may determine whether the security module is replicated. have.

5 is an operation flowchart illustrating a method of operating a policy server for detecting a replicated security module.

Referring to FIG. 5, the policy server receives determination basic information for determining whether to copy a security module (S501). In this case, the determination basic information may include ID (SM_ID) of the security module, IP address and authentication completion time of the DCAS host or ID information of the AP server.

In addition, the policy server determines whether an ID (SM_ID) of the same security module exists in the database (S502).

If there is no ID (SM_ID) of the same security module in the database, the policy server stores ID (SM_ID) related information of the security module in the database (S503). The policy server determines that the host is connected for the first time, determines that the security module has not been replicated, and terminates the operation procedure.

Conversely, if there is an ID (SM_ID) of the same security module in the database, the policy server extracts from the database the time when the host was last authenticated at the first IP address. The policy server extracts, from the determination basic information, a time when the host is authenticated at the second IP which is a current IP address different from the first IP address.

In addition, the policy server calculates authentication time difference information (TD _auth ), which is a difference between the time of last authentication at the first IP address and the time at which the second IP is authenticated (S504).

The policy server compares the authentication time difference information (TD _auth ) with a preset first reference value (S505). At this time, the first reference value TD _th1 is a value that can be changed to a large value. As the first reference value TD _th1 is smaller, fewer procedures for determining whether to copy the security module are performed, thereby improving network efficiency. Can be. However, as the first reference value TD _th1 is larger, it may be determined whether the security module is duplicated more accurately.

At this time, if the authentication time difference information (TD _auth ) is greater than the first reference value (TD _th1 ), it is determined that the security module is the original that is not duplicated (S506). This is because, in general, when the security module is not replicated, the authentication time difference information (TD _auth ) has a large value in most cases.

However, when the authentication time difference information TD _auth is less than or equal to the first reference value TD _th1 , the policy server compares the authentication time difference information TD _auth with a preset second reference value TD _th2 (S507). ). In this case, the second reference value TD _th2 is a value used as a reference for determining whether the security module is duplicated and is set to a value smaller than the first reference value TD _th1 . In particular, the second reference value TD _th2 may be set to a value smaller than the time required for power supply to the DCAS host to complete authentication.

Therefore, if the authentication time difference information TD _auth is smaller than the second reference value TD _th2 , the security module is duplicated. At this time, the policy server determines that the security module has been duplicated, and requests to deprive the host of program access authority (S511).

On the contrary, if the authentication time difference information TD _auth is greater than or equal to the second reference value TD _th2 , the security module may or may not be duplicated. At this time, the policy server requests the security module ID (SM_ID) through the AP server to the DCAS host having the security module to accurately determine whether the security module is replicated (S508).

In addition, the policy server receives an ID (SM_ID) of the security module from the AP server (S509). At this time, the policy server determines whether the number of the same ID (SM_ID) of the received security module is two (S510).

If the number of the same ID (SM_ID) of the received security module is two, it may be determined that the duplicated security module exists in the network, so that the Policy Server may access the program of the host having the ID (SM_ID) of the security module. Request to deprive (S511).

In contrast, when the number of IDs SM_IDs of the received security module is one, the policy server determines that the security module is not duplicated (S506).

Although not shown in Figures 1 to 5, the present invention can be described in terms of various operating subjects.

That is, the method of operating an authentication proxy server that operates in response to a policy server according to an embodiment of the present invention includes transmitting a time at which a host was last authenticated at a first address and a time at which a second authentication was completed to a policy server. In response to a request for collecting a security module ID sent from the policy server when a difference between a time of last authentication at the first address and a time at which the authentication is completed at the second address is a value between a preset first reference value and a second reference value. Collecting the ID of the security module of the host and transmitting the ID of the security module of the host collected to the policy server.

In addition, in a method of operating a subscriber management system operating in response to a policy server according to an embodiment of the present invention, if it is determined by the policy server that the security module has been replicated, a request for deprivation of program access authority of the security module from the policy server is requested. Receiving the step, using the program access authority deprivation request of the security module extracting the host is installed, and the program access authority of the host includes the step of depriving.

The operation method of the policy server, the authentication proxy server and the subscriber management system according to the present invention may be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

6 is a block diagram illustrating a policy server according to an embodiment of the present invention.

Referring to FIG. 6, the policy server according to an embodiment of the present invention includes a database 610, an authentication time difference information generator 620, a time comparator 630, and a copy existence checker 640.

The database 610 stores the time when the host received from the authentication proxy server was last authenticated at the first address.

In addition, the authentication time difference information generation unit 620 receives the time that the host is authenticated at the second address from the authentication proxy server, the time of the last authentication time at the first address and the authentication time at the second address Generate the difference authentication time difference information.

The time comparison unit 630 compares the authentication time difference information with a first reference value and a second reference value smaller than the first reference value.

In addition, the duplication check unit 640 checks the duplication of the security module according to a result of comparing the authentication time difference information with the first reference value and the second reference value.

In this case, the duplication check unit 640, when the authentication time difference information is a value existing between the first reference value and the second reference value, and collects the ID of the security module, the collected security suspected duplication It may be checked whether the security module is duplicated based on the number of identical IDs received from the module. Particularly, if the authentication time difference information is greater than the first reference value, the copying inspection unit 640 determines that the security module is the original, and the security time difference information is smaller than the second reference value. The module can be determined to be cloned.

Although illustrated in FIG. 6, a more detailed description of the matters that are not described has been described with reference to FIGS. 1 and 5, and thus will be omitted below.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

1 is a diagram illustrating an overall downloadable limited reception system including a DCAS headend system and a DCAS host according to an embodiment of the present invention.

2 is a flowchart illustrating a method of operating a downloadable limited reception system according to an embodiment of the present invention.

3 is a diagram illustrating a downloadable restriction receiving system including a policy server that detects a replicated security module according to an embodiment of the present invention.

4 is a diagram illustrating a downloadable restriction receiving system including a policy server that detects a replicated security module for two AP networks.

5 is an operation flowchart illustrating a method of operating a policy server for detecting a replicated security module.

6 is a block diagram illustrating a policy server according to an embodiment of the present invention.

Claims (18)

Generating, by the host, authentication time difference information that is a difference between a time of last authentication at the first address and the time of authentication at the second address; Comparing the authentication time difference information with a first reference value and a second reference value smaller than the first reference value; And Checking whether a security module is duplicated according to a result of comparing the authentication time difference information with the first reference value and the second reference value Replicated security module detection method comprising a. The method of claim 1, The step of checking whether the security module is duplicated When the authentication time difference information is a value existing between the first reference value and the second reference value, the ID of the security module is collected, and the duplication of the security module is based on the number of identical IDs of the collected security module. And detecting whether or not the duplicated security module is detected. The method of claim 2, The step of checking whether the security module is duplicated When the number of the same ID of the security module is two, the security module is a duplicated security module detection method, characterized in that the step is determined to be duplicated. The method of claim 1, Maintaining or depriving a program access right of the security module according to a result of checking whether the security module is duplicated Replicated security module detection method further comprises. The method of claim 1, The step of checking whether the security module is duplicated And determining the security module as an original when the authentication time difference information is greater than the first reference value. The method of claim 1, The step of checking whether the security module is duplicated And if the authentication time difference information is smaller than the second reference value, determining the security module as being duplicated. The method of claim 1, The second reference value is a duplicated security module detection method, characterized in that it is set to a value less than the average time required until the power is applied to the host is completed. The method of claim 1, And the first reference value and the second reference value are changeable parameters. The method of claim 1, Generating the authentication time difference information And generating the authentication time difference information by using the time of last authentication at the first address and the time of authentication at the second address received from an authentication proxy server. A database for storing a time at which a host received from an authentication proxy server was last authenticated at a first address; Authentication time difference information that is received from the authentication proxy server when the host is authenticated at the second address and generates authentication time difference information that is a difference between the time of the last authentication at the first address and the authentication time at the second address. Generation unit; A time comparison unit comparing the authentication time difference information with a first reference value and a second reference value smaller than the first reference value; And A duplication checker for checking whether a security module is duplicated according to a result of comparing the authentication time difference information with the first reference value and the second reference value Policy Server for detecting a replicated security module comprising a. The method of claim 10, The duplication check unit When the authentication time difference information is a value existing between the first reference value and the second reference value, the ID of the security module is collected, and the duplication of the security module is based on the number of identical IDs of the collected security module. Policy Server that detects replicated security modules, characterized by checking for availability. The method of claim 10, The duplication check unit And if the authentication time difference information is greater than the first reference value, determining that the security module is the original. The method of claim 10, The duplication check unit And if the authentication time difference information is smaller than the second reference value, determining the duplicated security module as a duplicated security module. Communicating to the Policy Server the time when the host was last authenticated at the first address and when the host was authenticated at the second address; In response to the request for collecting the security module ID sent from the policy server, when the difference between the time of last authentication at the first address and the time at which the authentication is completed at the second address is a value between a preset first reference value and a second reference value, Collecting an ID of a security module of the host; And Transmitting the ID of the security module of the host collected to the policy server Method of operation of the authentication proxy server comprising a. The method of claim 14, The policy server If the number of the same ID of the security module is more than one, the method of operating an authentication proxy server, characterized in that for removing the program access rights of the security module. The method of claim 14, And the second reference value is set to a value smaller than a time required for power to be applied to the host to complete authentication, and smaller than the first reference value. If it is determined by the policy server that the security module has been duplicated, receiving a request for program access deprivation of the security module from the policy server; Extracting a host on which the security module is installed by using a program access deprivation request of the security module; And Depriving the host of program access; Including, The policy server Whether the security module is replicated by using the authentication time difference information, a first reference value, and a second reference value smaller than the first reference value, which is a difference between the time when the host was last authenticated at the first address and the time when the host was authenticated at the second address. Method of operation of subscriber management system, characterized in that determining. The method of claim 17, The policy server When the authentication time difference information is a value existing between the first reference value and the second reference value, the ID of the security module is collected, and the duplication of the security module is based on the number of identical IDs of the collected security module. And checking whether there is a step.

Images