KR101060574B1 - Privacy-enhanced mobile phone-based location mobile recorder and its operation method - Google Patents

Abstract

According to the present invention, information about a path taken by a person carrying a specific mobile phone through the mutual communication between the mobile phones and the base station is recorded in a location movement recording device built into the mobile phone. A mobile phone-based location movement recording apparatus which can be known by checking, comprising a location movement information recording unit, an external signal transmission and reception unit and a data encoder / decoder for communication with the outside, and the location movement recording unit prevents privacy infringement. A location information storage device for storing a data encryption block and an encrypted value for the device; A filtering block for excluding redundant data for efficient storage device utilization; An address decoder and an operation control block for streamlining information storage in an annular shape; A physical copy protection block for authentication and copy protection of the device; And a certification authority key storage and management block for secure storage of the key value received from the certification authority.

Mobile Phones, Location History, Privacy, Encryption, Location Tracking, Cell Phone Copy Protection

Description

Privacy enhanced mobile phone based path tracking device and its operation method {Privacy enhanced mobile phone based path tracking apparatus and its operation mechanism}

The present invention confirms the encrypted content recorded in the mobile phone built-in mobile location recording device after the information on the path of the person carrying a specific mobile phone through the mutual communication between the mobile phones and the communication with the base station. The structure and operation mechanism of the mobile phone-based location mobile recording device that can be known by.

In the existing mobile phone, it is possible to check the location of the base station unit. When using a mobile phone, there is a technology that can determine the location of the mobile phone with an error of several tens of meters. However, with the current technology, the movement path of a mobile phone cannot be known by a mobile phone unit rather than a base station unit. In other words, there was no record of which mobile phone was moved around.

 In order to know where the mobile phone is at present, it can be known by knowing which base station the mobile phone finally communicated with. Based on this information, if a particular person who owns the mobile phone becomes a victim or suspect of a particular case, it is possible to know where the specific person was.

However, such a base station-based positioning technique not only provides detailed information about the movement route of the specific person who owns the mobile phone, but also provides no information about who the mobile phone meets with whom. .

If a mobile phone communicates with a mobile phone within a certain area to record which mobile phone exists within a certain area (eg within 10 meters), then whoever owns the mobile phone (which mobile phone) See who owns them, and who they were near. On the basis of this information, a lot of information can be obtained about the specific movement route requiring location and route tracking, which provides useful information in case of investigation and disappearance.

On the other hand, if one stores the intercommunication information with another person's mobile phone in a certain distance within the mobile phone may be used for malicious purposes such as invasion of personal privacy. Since this dysfunction adversely affects the net function of obtaining a moving path for missing persons and incidents, accident victims, and suspects, which are intended in the present invention, in the present invention, a legally authorized institution such as a court and an investigation authority may be installed in the mobile phone. If there is a need to decrypt the recorded location route information, it also provides a cryptographically secure way to decrypt it through legal procedures. In addition, to eliminate the possibility of using a fake cell phone or counterfeit mobile phone to collect the information of others' mobile phone also provides a counterfeit confirmation function using a physically unclonable function (PUF).

An object of the present invention is to know the location information of a specific person who owns a mobile phone and specific information about which person (ie, mobile phone) has moved around, and in this case there may be a privacy infringement problem or a piracy problem. To provide a technical means to solve the problem.

It is also another object to provide a net function to decrypt a location movement recording device (black box system) existing inside a mobile phone carried by a specific person through a legal procedure so that the person can know the location movement record. .

The present invention for solving the above-described conventional problems and the technical problem according to the present invention, in the mobile phone-based location mobility recording device, the location movement information recording unit, the external signal transmission and reception unit and data for communication with the outside An encoder / decoder, wherein the location movement information recording unit comprises: a location information storage device for storing a data encryption block and an encrypted value for preventing privacy intrusion; A filtering block for excluding redundant data of the location information storage device; An address decoder and an operation control block for controlling storage address information in the location information storage device and having an annular structure; Physical copy protection block for mobile phone authentication and copy protection by an accredited certification authority; And a certification authority key storage and management block for storing the key value received from the certification authority.

In this case, the external signal transceiver is a block in charge of the physical layer communication area with the base station and other mobile phones of the mobile phone, the data encoder / decoder unit is responsible for information transmission and reception with the external signal transceiver.

In the location information, the external location is stored in the same base station information for use of the storage space and communication information with the same neighboring mobile phone is detected by a filtering block serving as a filtering middleware. It is characterized in that the redundant storage of the information does not occur.

In addition, the storage address information inside the location information storage device is controlled by an address decoder and an operation control block, and has a circular structure for storing information. On the other hand, the method of operating the mobile phone-based location mobile recorder, the location of the mobile phone owner by recording the base station information and the information on the adjacent mobile phone successful in communication through the communication between the base station and the mobile phone supporting the ad hoc mode And it is characterized by making it possible to know the information of the movement route.
In this case, the communication with the adjacent mobile phone is performed using the ad-hoc operation mode of the mobile phone, and the adjacent distance is defined as the strength of the radio frequency signal by internal setting, and the wireless communication technique can be used. do.

In addition, even though the data encryption block is used to provide mobile phone identification information, it uses the authentication method using the physical copy protection block and the authentication method using the physical copy protection block to prevent the invasion of privacy and use the periodic authorized authority key update method. Characterized in that.

In addition, a decryption key for the encrypted data is found based on the type and time information of the location information device and the identification information of the authorized authority, and the decrypted data read from the location information storage device storing the encrypted value is decoded. It is possible to implement an operation mechanism that performs a function of identifying a fake mobile phone by using a copy protection block and a challenge / response stored in a certification authority.

As described above, the attack detection and response technique by the monitoring center proposed by the present invention and the collaborative attack detection and response technique by the sensor nodes can detect and respond to the attack in real time, thereby making it safer and more reliable. Wireless sensor network application service becomes possible.

In addition, the present invention also provides the effect of protecting the privacy of a particular person.

The configuration and operation principle of the mobile phone-based location movement recording apparatus proposed by the present invention will be described in detail with reference to the accompanying drawings.

 1 is a diagram illustrating a mobile phone-based location movement recording apparatus to be introduced in accordance with the present invention, FIG. 2 is a flowchart illustrating an authentication and information transmission and reception operation according to the present invention, and FIG. 3 is stored in the location information device according to the present invention. 4 is a flow chart illustrating a mobile phone authentication procedure for obtaining location information and mobile information by an authorized authority and an encryption key update process issued by an authorized authority according to the present invention. Figure showing the use of the location information storage device in the form of a circular (circular) in order to increase the space use efficiency of the location information storage device according to the present invention, Figure 6 is a process for the authentication process for a specific mobile phone in the authorized authority according to the invention 7 is a flow chart showing the encrypted inside the mobile phone-based location recording device according to the present invention A flow chart showing the steps to decode it using the proper decryption key after reading the stored information.

Through the hardware structure and operation mechanism of the mobile phone-based location mobile recording device proposed in the present invention, the privacy-enhanced mobile phone-based location mobile recording that is intended to be developed in the present invention is possible, and the record is decrypted only by an authority having a future authority. You can do it. To this end, the present invention presents a detailed hardware structure and proposes a cryptographic technique.

It provides cryptographically secure mechanisms to enable the exchange and storage of mutual information between mobile phones in a secure and reliable manner, and to ensure that only authorized authorities can decrypt the information. Privacy violations have been avoided.

 In addition, if there is no authority to collect mobile phone information of another person, we propose a mobile phone authentication technique using a function that cannot be replicated physically by a certification authority to collect the corresponding information. This technique can be used to prevent problems such as cell phone duplication.

The present invention relates to a structure and operation mechanism, a privacy protection method, and a mobile phone authentication technique for a location recording information device for solving the above technical problem.

Hereinafter, an embodiment according to the present invention will be described in detail with reference to FIGS. 1 to 7.

1 is a location movement information recording apparatus of a mobile phone largely comprises a position movement information recording unit 100 and an external signal transceiver 110 and a data encoder / decoder 120 for communication with the outside. Here, the location movement recorder includes a data encryption block 130 and a location information storage device 140, a certificate authority key storage and management block 150, a physical copy protection block 160, a filtering block 170, an address decoder, and an operation control. It consists of block 180.

The external signal transceiver 110 of FIG. 1 is a block in charge of a physical layer communication area with a base station of a mobile phone and another mobile phone, and the data encoder / decoder unit 120 transmits and receives information together with the external signal transceiver 110. In charge of. Information received from the outside is stored in the location information storage device 140 located inside the location movement information recording unit 100. The data format to be stored is shown in FIG.

 When storing external information, duplicated information for efficient use of the storage space, that is, information of the same base station information or communication with the same neighboring mobile phone is detected and stored by the filtering block 170 serving as a filtering middleware. Duplicate storage for does not occur.

In this case, the storage address information inside the location information storage device 140 is controlled by the address decoder and the operation control block 180 and has a circular structure for efficient information storage. This is illustrated in FIG. 5.

In addition, the physical copy protection block 160 in the position movement information recording unit 100 is a hardware block having a physically unclonable function (PUF) characteristic, even though the same hardware is implemented, the response value for a specific challenge signal is different. In the present invention, the physical copy protection block 160 using the PUF technique is used for mobile phone authentication by an accredited certification authority. This is illustrated in FIG. 4. In addition, when recording the information of the adjacent mobile phone to the location information storage device 140, which mobile phone is adjacent to know whether the adjacent as a strength of the RF signal, which can select the adjacent area by the setting. On the other hand, for communication between mobile phones, the mobile phone should basically support the ad-hoc communication mode.

On the other hand, when the data encryption block 130 provides its own information (such as mobile phone unique serial number or a specific set value, Ethernet serial number, etc., any one can provide its own uniqueness) to the mobile phone of another person, The key is stored and stored in the key storage and management block 150 of the certificate authority to be encrypted and transmitted. If it is transmitted without encryption, any mobile phone automatically learns the surrounding mobile phone information, so that it is easy to track the location information of the person with the mobile phone, which may cause a problem of personal privacy infringement.

의 공개키 값이

이라면 모바일 폰 기반 위치 이동 기록 장치에는 이 값을 사용해서 자신의 모바일 폰 식별 정보를

정보와 함께 제공해야 하며, 인증 기관에서는 사후에

에 대응하는 비밀키인

을 사용해서 해독할 수 있게 된다. 그리고 만일 데이터 암호화 블록(130)에 사용되는 알고리즘이 대칭키 암호 알고리즘인 경우에 인증기관 키 저장 및 관리 블록(150)에 저장되어 있는 키 값도 인증 기관이 발급한 비밀키 값이 된다. 이 경우, 비밀키 값이 유출되는 경우, 심각한 보안성 위협 및 개인 프라이버시 침해 문제가 발생하므로 인증기관 키 저장 및 관리 블록(150)은 물리적 해킹 방지 기능을 갖춘 Tamper Resistance한 블록이어야 한다. As a cryptographic algorithm that can be used in the data encryption block 130 of FIG. In addition, an RSA or an elliptic curve cryptographic algorithm may be used. In this case, the key value stored in the certification authority key storage and management block 150 must be a public key value of the certification authority. In other words, if the certification authority

The public key value of

, Use this value for mobile phone-based location mobile recorders to provide their mobile phone identification information.

Must be provided with the information.

The secret key corresponding to

Can be decrypted using. If the algorithm used in the data encryption block 130 is a symmetric key encryption algorithm, the key value stored in the certificate authority key storage and management block 150 also becomes a secret key value issued by the certificate authority. In this case, when the secret key value is leaked, serious security threats and personal privacy infringement problems occur, so the certification authority key storage and management block 150 should be a tamper resistant block having a physical hacking prevention function.

The I / O interface block 190 of FIG. 1 is used for command data and response signal input / output for controlling the operation of the position movement information recording unit 100 in the main processor of the mobile phone. It is also used as a communication interface that can later read and decrypt encrypted location movement information (encrypted information) stored in the location information storage device 140.

2 shows a main operation flowchart of the mobile phone based location movement information recording apparatus according to the present invention. First, the position movement information recording apparatus is in the standby state 210. In this case, it is activated by the watch-dog timer operating principle after a certain time. That is, when a specific time has elapsed, the mobile station exits the standby state and starts communication with an external base station or another mobile phone (220, 230). In order to communicate with the outside, an authentication process with a base station or an authentication process with another mobile phone is required (240). If the authentication passes, the communication with the base station or another mobile phone terminal 250 is performed. This authentication process can use the terminal authentication scheme used in the existing mobile phone network or, if using a USIM card (Universal Subscriber Identity Module Card) can be authenticated using this. Alternatively, the authentication authority may be granted through the authentication process performed in FIG. 4 of the present invention.

After successfully performing the authentication procedure in FIG. 2, the mobile phone performs the filtering operation 260 for duplicated information in order to receive information from the outside, and then stores the received information (270). On the other hand, in the case of transmitting information to the outside, the encrypted information is transmitted 290 after performing encryption on the format shown in FIG. 3 (280).

 3 shows an information format stored in the location information device. The information includes time information 310, identification information 320 of an authorized authority, and encrypted base station identification information or encrypted other terminal identification information 330. Time information can be set in units of minutes or seconds depending on the service request. CAi, which is a certification authority identification information, provides information for identifying a key value necessary for decrypting (decoding) identification information of an encrypted base station. In particular, since the value of the key used for encryption varies according to which accredited authority and when, the appropriate decryption key for information encrypted using the time information and the accredited certification authority information can be used. . At this time, it is assumed that the key value used for decryption is safely stored and managed by an authorized authority. As an example of the information format shown in FIG. 3, the following case may be considered.

는 공인 인증 기관 번호, 그리고

은 공인 인증 기관

가 특정 시간

일 때 사용한 키 값으로 암호화한 타 단말기 식별 정보로 설정할 수 있다. Time can be set up to seconds.

Is the accredited certification authority number, and

An accredited certification body

A certain time

It can be set as identification information of another terminal encrypted with the key value used at the time.

4 illustrates a mobile phone authentication procedure for acquiring location information and mobile information by an authorized authority and an encryption key update process issued by the authorized authority. First, when the mobile phone was in the waiting state 410, when the authentication time comes (420), the authentication and key update process with the authorized authority is started (430). There may be a number of ways to verify that the mobile phone has the authority to collect location information by a public authority. In the present invention, the USIM card-based user authentication scheme, and whether or not the authenticity of the physical copy protection device (PUF) Verification can be used.

A physical copy protection device produces a determined response for a particular challenge, and if the device is replicated in hardware at the same logical circuit level, it produces a different output response for the same challenge value. By using these characteristics, if a challenge value for a mobile phone PUF and a response pair for a specific mobile phone PUF are remembered in advance, only the corresponding challenge / response pair can be compared in the future to determine whether the mobile phone is genuine.

 6 shows an authentication process for a specific mobile phone at an authorized authority. First, the accredited agency in standby starts a certification process for a specific mobile phone (610). Identification information is obtained as to which mobile phone is an authentication test target (620). Subsequently, a plurality of challenge values of the corresponding mobile phone securely stored in its database are selected and inputted into the mobile phone to be an authentication test, and the output response value is obtained (640). When the received response value and the response value stored in the database are compared and matched above a specific threshold (650), the mobile phone passes the authentication in consideration of authenticity (660). Otherwise, authentication fails (670).

FIG. 5 illustrates the use of the location information storage device in a circular form in order to increase the space usage efficiency of the location information storage device 140. Read and write positions are managed by the address decoder and operation control block 520, and the actual values are stored in virtually annularly stored storage spaces.

FIG. 7 illustrates a procedure of reading encrypted information stored in a mobile phone-based location mobile recording device and decrypting it using an appropriate decryption key. When the decryption procedure starts (710), first obtain the mobile phone identification information (720). The key value used for the encrypted value is found based on the identification information, the time information, and the certification authority information of the mobile phone, and through this, the encrypted value can be decrypted (730, 740, 750).

Although the above has been illustrated and described with respect to preferred embodiments of the present invention, the present invention is not limited to the above-described specific embodiments, and the general knowledge in the art to which the invention pertains without departing from the spirit of the invention claimed in the claims. Of course, various modifications can be made by those skilled in the art, and these modifications will not be individually understood from the technical spirit or prospect of the present invention.

1 is a diagram of a mobile phone-based location movement recording apparatus to be introduced in accordance with the present invention;

2 is a flow chart showing an authentication and information transmission and reception operation according to the present invention

3 is a configuration conceptual diagram illustrating an information format stored in a location information apparatus according to the present invention.

4 is a flowchart illustrating a mobile phone authentication procedure for obtaining location information and mobile information by an authorized authority and an encryption key update process issued by an authorized authority according to the present invention.

5 is a view showing the use of the location information storage device in the form of a circular (circular) in order to increase the space usage efficiency of the location information storage device according to the present invention;

 Figure 6 is a flow chart showing the authentication process for a specific mobile phone in an authorized authority according to the present invention

7 is a flowchart illustrating a procedure of reading encrypted information stored in a mobile phone-based location mobile recording device and decrypting it using an appropriate decryption key according to the present invention.

<Description of Symbols for Main Parts of Drawings>

100: position movement recording unit 110: external signal transmission / reception unit

120: data encoder / decoder section 130: data encryption block

140: location information storage device 150: certificate authority public key storage and management block

160: physical copy protection block 170: filtering block

180: address decoder and operation control block 190: I / O interface block

Claims (8)

A mobile phone-based location movement recording device,  It consists of a position movement information recording unit, an external signal transceiver and a data encoder / decoder for communication with the outside, The position movement information recording unit, A location information storage device for storing a data encryption block and an encrypted value for preventing privacy intrusion; A filtering block for excluding redundant data of the location information storage device; An address decoder and an operation control block for controlling storage address information in the location information storage device and having an annular structure; Physical copy protection block for mobile phone authentication and copy protection by an accredited certification authority; And Mobile device based location recording device, characterized in that consisting of; key storage and management block for storing the authority value for the key value received from the certificate authority. The method of claim 1, The external signal transceiver is a block that is responsible for the physical layer communication area with the base station and other mobile phones of the mobile phone, the data encoder / decoder unit is responsible for transmitting and receiving location information with the external signal transceiver Location recorder. 3. The method of claim 2, In the location information, the external location is stored in the same base station information for use of the storage space, and communication information with the same neighboring mobile phone is detected by a filtering block serving as a filtering middleware so that the stored location information is stored in the already stored information. Mobile phone-based location movement recording device, characterized in that no duplicate storage for. The method of claim 3, The storage address information inside the location information storage device is controlled by an address decoder and an operation control block, and has a circular structure for storing information. A method for operating a mobile phone based location mobile recorder according to any one of claims 1 to 4,  Through the communication with the base station and the communication between the mobile phones supporting the ad hoc mode, the base station information and the information on the adjacent mobile phone that have been successfully communicated are recorded so that the location of the mobile phone owner and the information of the moving path can be known. Mobile phone based location mobile recording device operating method. The method of claim 5, The mobile phone communicates with an adjacent mobile phone using an ad-hoc operation mode of the mobile phone, and the adjacent distance is defined as the strength of a radio frequency signal by an internal setting, and the mobile phone is enabled to use a wireless communication technique. Operation method of the base position recording device. The method of claim 6,   Despite the use of data encryption blocks to provide mobile phone identification information, we recommend that you use periodic authentication authority key updates through authentication techniques that prevent privacy breaches and that use physical copy protection blocks and authentication techniques that use physical copy protection blocks. A method of operating a mobile phone-based location movement recording device, characterized in that. The method of claim 7, wherein  Detects the decryption key for the encrypted data based on the type and time information of the location information device and the identification information of the authorized authority, decrypts the encrypted data read from the location information storage device that stores the encrypted value, and prevents physical duplication. A method of operating a mobile phone-based location mobile recorder, which can implement an operation mechanism for performing a function of identifying a fake mobile phone by using a challenge / response stored in a block and a certification authority.

Images