KR100984296B1 - Method for certificating mobile phone - Google Patents

Abstract

The present invention provides a method of connecting a mobile communication terminal with a USB storage device, receiving an encryption key code value from the connected USB storage device, the received encryption key code value, and an encryption key code value previously stored in the mobile communication terminal. And determining whether the USB storage device matches, and authenticating the USB storage device as an intrinsic storage device of the mobile communication terminal, wherein the encryption key code value from the USB storage device includes: There is provided an authentication method of a mobile communication terminal configured with area values of each of a plurality of option areas constituting descriptor information included in a USB storage device.

Mobile terminal, USB, host, device, descriptor

Description

Authentication method for mobile communication terminal {METHOD FOR CERTIFICATING MOBILE PHONE}

1 is a conceptual diagram for implementing the encryption method of the USB storage device of the present invention.

2 is an internal block diagram of a USB control unit.

3A shows a descriptor of a standard device.

FIG. 3B illustrates a configuration descriptor. FIG.

3C illustrates a string descriptor.

4 conceptually illustrates a host and a device of the present invention;

* Brief description of symbols for the main parts of the drawings *

10: mobile communication terminal 20: curl code

30: USB control unit 300: encryption unit

400: host 410: device

The present invention relates to a method for authenticating a USB storage device of a mobile communication terminal. More specifically, a terminal equipped with a USB control unit protects personal information in a unique USB storage device of the corresponding terminal, and an unauthorized copy of software stored as necessary. The present invention relates to a method of authenticating a USB storage device of a mobile communication terminal for personal information protection, such as prevention and access control of important data.

Currently, mobile communication services are gradually developing into IMT-2000 service or WCDMA supporting multimedia personal communication such as high speed data, packet, and video.

For now, IDMA-2000, Code Division Multiple Access (CDMA), has proposed a CDMA system with 1.25 MHz bandwidth as the standard method for North American digital cellular phones. In March, the Ministry of Posts announced that the standard of digital mobile phone was officially decided as CDMA, and it became the first country to commercialize CDMA. These handsets are equipped with 256 colors, 16 chords, and 13 large LCD screens.

Of course, except for Korea, most countries (especially Europe) use GSM (Global System for mobile communication), but the terminal is equipped with 256 colors and 16 chords, and 13 lines of large LCD screen.

The basic form of the memory pack in the above terminal is called a flash memory (or 'flash RAM'), a flash memory (Flash RAM) is a non-volatile memory that is continuously powered, and may erase contents in block units. You can also program it. The flash memory is an EEPROM (a ROM that allows a user to modify contents in the memory) and can be repeatedly erased or reprogrammed. However, an EEPROM chip cannot selectively modify some of its contents and must be erased and reprogrammed.], Which is a block-by-block modification, unlike EPROM, which can be erased or modified at the byte level. Because of the speed is fast.

Such flash memory is used in various devices such as digital mobile phones, digital cameras, LAN switches, PC cards in notebook computers, digital set-top boxes, and embedded controllers.

In addition, the portable memory pack should be connected to the charging connector pin of the mobile communication terminal. Since the pins of the charging connector for each terminal manufacturer are different, the portable memory pack should have a different pin connector for each terminal manufacturer.

Universal Serial Bus (USB), which can be used to exchange data by easily connecting a terminal and a peripheral device, can be applied to a connection with a mobile communication terminal.

The USB was developed by seven companies, including Intel, Compaq, IBM, DEC, Microsoft, NEC and Northern Telecom, and the technology can be used by developers of computers, mobile terminals and peripherals at no extra cost.

The principle of USB is the same as the serial port, but it is faster than the serial port, it is easy to connect, and USB supports data transfer speeds of 12 Mbps, so even the most peripherals are fast enough to connect up to 127 devices in a chain. do.

Portable flash memory for USB is a well-developed technology, and it can carry necessary data without carrying a personal PC or notebook. Plug and Play (connect to USB port and use at the same time, no installation required) and 16MB ~ 1GB of data can be stored in various sizes.

It is possible to carry data in all kinds of pictures, videos, audio files, etc., and to easily preserve data by using encryption function for personal use, and to move large data to other peripheral devices conveniently.

The most attractive thing about portable flash memory for USB is that it can be plug-and-play from anywhere, on any PC, and back up important data.

It is a USB flash memory that is very popular with many users, such as computer music composers, graphic designers, and students with many reports.

As such, the necessity of memory capacity is increasing due to the installation of paid multimedia data (still images, video recording, mp3 files, midi files, etc.) and application programs of mobile terminals, while the limited use space and cost of mobile terminals are increasing. Because of this, it is also difficult to significantly increase the amount of memory required.

When most multimedia devices (digital cameras, digital camcorders, etc.) have external storage devices and mobile terminals also provide necessary external storage devices in accordance with the trend, terminal users can more conveniently use the multimedia functions of mobile communication terminals. You can use it.

However, in this case, since various types of paid information can be illegally copied or abused, it is necessary to have a security function on the storage device so that the corresponding information can be used only in the corresponding mobile communication terminal.

The encryption of the storage device may store SIM information in case of SIM card subscriber loss and use it in case of emergency.

In the encryption technology of the storage device, conventionally, the software locks the software or uses a serial number or a unique ID, which is easily exposed.

In addition to the above, when locking with hardware, it can be classified into EEPROM (electrically erasable and programmable read only memory) format and ASIC (application specific integrated circuit) format. There is a problem that the program can be copied without changing the program machine code to disable the lock.

Accordingly, the present invention has been proposed to solve the above-described problems, and protects personal information in a USB storage device unique to the terminal in a terminal equipped with a USB controller, and prevents unauthorized copying of the stored software as necessary. An object of the present invention is to provide an encryption method of a USB storage device of a mobile communication terminal for protecting personal information such as data access control.

delete

delete

delete

delete

delete

In order to achieve the above object, the mobile communication terminal is connected to a USB storage device, receiving an encryption key code value from the connected USB storage device, the received encryption key code value and the mobile communication terminal Determining whether the stored encryption key code values match, and authenticating the USB storage device as a unique storage device of the mobile communication terminal when the determination result matches, and encrypting the encryption key code from the USB storage device. A value is provided as an authentication method of a mobile communication terminal, which is composed of an area value of each of a plurality of option areas constituting descriptor information included in the USB storage device.
The connecting step may be connected through a Qualcode plug of the USB storage device, wherein the Qualcode plug is a Qualcode plug that can be used only for the mobile communication terminal, and the plurality of option areas are idVendor, idProduct, It consists of bcdDevice, iManufacturer, iProduct, and iSerialNumber.
The encryption key code value may be up to 9 characters in letters or numbers, and the encryption key code value uses a random number.
The encryption key code value pre-stored in the mobile communication terminal is stored in the system software of the mobile communication terminal, and the descriptor information is stored in the USB core of the USB storage device.
In addition, the authentication method of the mobile communication terminal of the present invention further includes the step of inputting an encryption key code value through an encryption input unit that can be set on the menu of the mobile communication terminal.
Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The present invention primarily prevents misuse to other terminals by applying a USB security module using a USB system software of a mobile communication terminal and a descriptor of a storage device using a plug of Qualcode used only in a mobile communication terminal. .

The USB module stores the encryption key code value called a unique storage device in the host's system software by informing the device that the device is a specific device during the enumeration of the first stage and performing the authentication process of the host in the second stage. The authentication procedure is then performed for the specific device corresponding to the encryption key code value.

1 is a conceptual diagram illustrating an encryption method of a USB storage device according to an embodiment of the present invention, wherein the plug portion 21 of the Qualcode 20 connected to the mobile communication terminal 10 and the USB port 11 of the terminal 10 is shown. And a USB controller 30 connected to the Qualcode 20.

Since the plug portion 21 of the Qualcode 20 can be used only in the mobile communication terminal 10, it cannot be used in other USB host devices, for example, a PC, so that the security function can be performed in one step.

In addition, since the tracking to the USB analyzer becomes impossible, the contents of the descriptor in the USB control unit 30 can be protected.

2 is a block diagram of the internal structure of the USB control unit 30 connects the USB core 32 to the I / O input and output terminal 31 and the microcontroller unit (MCU) 33 to the USB core 32, The flash memory 34 is connected to the MCU 33.

The flash memory 34 receives data from the MCU 33 and buffers the data, and transmits the data to the I / O input / output terminal 31 through the USB core 32.

The USB core 32 receives and buffers serial data to an external input / output terminal 31 using a USB port and outputs the buffer to the MCU 33 or buffers the data received from the MCU 33. And then print it out serially.

When the MCU 33 receives data from the USB core 32 and the input data is a module information request command, the MCU 33 reads module information from the flash memory 34 to input / output terminals of the USB core 32. Output to (31).

The USB core 32 transmits packet data in accordance with the protocol of the data to be transmitted, and performs error detection and detection of the transmitted data to process optimally verified data.

Therefore, descriptors as shown in Figs. 3A to 3C are also stored in the USB core 32. Figs.

3A shows a descriptor of a standard device, FIG. 3B shows a configuration descriptor, and FIG. 3C shows a string descriptor.                     

Here, the descriptor is as follows.

When implementing a USB host controller in a mobile communication terminal, any one of an Open Host Controller Interface (OHCI), a Universal Host Controller Interface (UHCI), and an Enumeration Host Controller Interface (EHCI) is used.

This is controlled by the Host Controller Software Driver (HCSD) at the register level. The USB chip vendor can create the host controller and control it with the host controller driver. You will be in charge of the process.

The enumeration is a process of recording device information in advance because the host may communicate with several devices at the same time.

At this time, when specific information about the device is requested, the device transmits this information in the form of a data structure, which is called a descriptor.

The present invention distinguishes it from other devices by using a part or all of the descriptors and transmitting them with a promised encryption key code value. In the present invention, the encryption key code value means a plain text composed of letters or numbers to be encrypted.

The present invention uses the option area as the encryption part area 300 among the standard device descriptors of FIG. 3A.

The encryption unit area 300 is composed of 9 bytes including idVendor 2 bytes, idProduct 2 bytes, bcdDevice 2 bytes, iManufacturer 1 byte, iProduct 1 byte, iSerialNumber 1 byte, etc. You can use the value.

That is, the alphabet and the number are processed by 1 byte each, so it is possible to process the encryption key code value up to 9 digits. If you want to use the encryption key code value as the Hangul code, the Hangul is 2 bytes per 1 character. Up to characters can be processed as encryption key code values.

delete

The encryption key code value in the present invention uses a method of encrypting using a random number.

In the above encryption method, when the terminal user attempts to input a specific password, the USB core 32 performs a function of comparing the encryption key code value, and the MCU 33 performs various calculation functions for executing encryption. If the terminal user needs to change the encryption keycode value of the descriptor, the MCU 33 performs this.

When modifying a part of the encryption key code value in the descriptor, an essential part transmits original information, and when modifying all of them, device information corresponding to the encryption key code value is stored in advance so that USB communication can be performed without difficulty.

4 conceptually illustrates a host 400 and a device 410 of the present invention, where the host 400 refers to a mobile communication terminal. The client software 401, the system software 402, and the interface are shown in FIG. The device 410 refers to a USB storage device, and includes a function function unit 411, a USB device unit 412, and an interface unit 412.

Since the mobile communication terminal of the present invention should be able to synchronize with a PC and communicate with a general USB device, the host 400 requests the request according to a spec and encrypts the contents of the device descriptor separately when the device 410 responds. The key code value is transmitted and the host 400 compares and authenticates it.

The authentication process is performed step by step in the enumeration process to verify whether the device is unique to the terminal.

If the common host controller and the USB storage device are connected with the wrong descriptor, they will be rejected because they cannot be communicated to an unknown device because the encryption key code values are recognized as incorrect descriptors.

USB's universal enumeration process takes the value of the device descriptor, sets the address, and then the value of the device descriptor.

Then get the value of the configuration descriptor, and again, the value of the configuration descriptor, and set the configuration.

In the internal operation of the encryption process, the encryption default value of the USB storage device may be designated by the manufacturer manufacturing the USB storage device.

For example, you can specify an encryption keycode value for a USB storage device as the default value of "0000".

Then, the terminal user inputs his or her own password using up to 9 characters in English letters or numbers through the USB storage device encryption input unit on his terminal menu.

Of course, at this time, the encryption input unit of the USB storage device in which the terminal user can change the encryption key code value is set in advance on the menu of the terminal, and the USB storage device is connected to the user terminal.

In this way, when the encryption input process of the USB storage device is completed, the USB storage device must enter a user password each time it is used, and the input passwords must coincide with each other.

As described in detail above, the present invention protects personal information in a USB storage device unique to the terminal in a terminal equipped with a USB controller and prevents unauthorized copying of stored software and protects personal information such as access control of important data. Therefore, by checking the information transmitted and received through the mobile communication terminal and converting the encryption code to strengthen the lock has a useful effect that can protect the program unauthorized copying and personal information.

Claims (9)

Connecting the mobile communication terminal to the USB storage device; Receiving an encryption key code value from the connected USB storage device; Determining whether the received encryption key code value matches an encryption key code value previously stored in the mobile communication terminal; And Authenticating the USB storage device as a unique storage device of the mobile communication terminal if the determination result is matched; The encryption key code value from the USB storage device comprises an area value of each of a plurality of option areas constituting descriptor information included in the USB storage device. The method of claim 1, The connecting step, Connected via the Qualcode plug of the USB storage device, The Qualcode plug is an authentication method of a mobile communication terminal, characterized in that can be used only in the mobile terminal. The method of claim 1, The plurality of option areas are configured as idVendor, idProduct, bcdDevice, iManufacturer, iProduct, iSerialNumber in the device descriptor area. The method of claim 3, wherein The encryption key code value may be up to nine characters in alphabetic or numeric characters. The method of claim 3, wherein The encryption key code value is an authentication method of a mobile communication terminal, characterized in that using a random number. The method of claim 1, The encryption key code value pre-stored in the mobile communication terminal is stored in the system software of the mobile communication terminal. The method of claim 1, And the descriptor information is stored in a USB core of the USB storage device. The method of claim 1, And inputting an encryption key code value through an encryption input unit set on a menu of the mobile communication terminal. delete

Images