KR101506577B1 - Method for autenticating between a software mobility device and a local host, method for creating I/O channel, and the device thereof - Google Patents

Abstract

A method for mutual authentication between a software mobile device and a local host, and a method and apparatus for forming an I / O channel according to the present invention are disclosed. A method for mutual authentication between a software mobile device and a local host in accordance with the present invention includes the steps of: requesting and receiving a certificate stored with an integrity value of a local host; receiving an integrity value measured at the local host; Comparing and verifying the integrity value with an integrity value in the certificate, and encrypting and transmitting the security profile of the device when the local host is verified.

Description

FIELD OF THE INVENTION [0001] The present invention relates to a method and apparatus for mutual authentication between a software mobile device and a local host, a method for forming an I / O channel,

The present invention relates to a method for mutual authentication between a software mobile device and a local host and a method for forming an I / O channel.

SW Mobility allows software and data to be stored on removable storage media (eg, USB Flash Drive) or downloaded over a network connection and used for continuous computing on other PC (Personal Computer) or CE (Consumer Electronics) (seamless computing). This is a new computing paradigm that can replace the movement of laptops, etc., and is being developed not only as a simple data storage function through a removable storage medium or a network connection, but also as a method of moving an individual's computing environment. Based on the operating system's virtualization technology, various advanced companies such as Microsoft's Virtual PC, EMC's VMWare, IBM's SoulPad, SanDisk's U3 and RingCube's MojoPac are developing similar solutions.

However, in order to support continuous computing in other PC or CE devices, in most cases, malware such as Trojan Horse, Worm, and Virus of a moving PC or CE device, It does not take into consideration the security of the user's software and data or the personal computing environment, thereby limiting the support of various services such as DRM and e-trading.

On the other hand, in general, virtualization can be defined as a technique of serving an upper layer as if there are a plurality of "actual single computing devices" in which arbitrary software is executed without directly modifying them.

1 is a reference diagram for explaining the concept of virtualization in general.

Referring to Figure 1 (a), a typical computing system comprises an actual computing machine 100 and software 110. Introducing the concept of virtualization into the general computing system shown in Figure 1 (a), a virtualization layer 120 is provided between the actual computing machine 100 and the software 110, as shown in Figure 1 (b) .

In addition, virtualization can be virtualized as a physical hardware platform, depending on the target, by virtualizing the operating system of the local host and system virtualization to provide independent systems for multiple operating systems, And operating system virtualization that provides operating system services.

FIG. 2 is a reference diagram for explaining the types of virtualization according to objects of virtualization.

2, operating system virtualization 210 refers to the provision of a virtualization layer 240 between an operating system 250 and an application 230, and system virtualization 220 refers to an operation between a hardware platform 270 and an operating system 250 A virtualization layer 260 is provided.

Software migration solutions based on these virtualization technologies can be executed by specific vendors' specific APIs to perform continuous computing of user software and data after moving to another PC or CE device over a removable storage medium or network. Modify the application you want (for example, U3 from SanDisk), or a combination of certain operating systems (eg, EMC's VMWare) based on system virtualization technology.

However, in such conventional cases, it is difficult to extend the scope of the software moving application because only the application in which the source code is disclosed can be modified, or the research and development for the improvement due to the system overhead accompanying the movement of the specific operating system are underway .

Recently, a software moving solution moving through a removable storage medium or a network connection has been applied not only to simple data but also to the purpose of improving the usability of various software or applications such as DRM, e-Trading, etc. in the movement of personal computing environment. There is a continuing need to support the safety of execution environments on mobile solutions.

In contrast, the conventional network connection based method is streaming from a server to a client. Most of the server authentication is based on a user account and a password, rather than security related to the execution of a SW moving solution on a local host. It provides limited security through user authentication and encryption support for data access control due to media loss threats.

However, only the security functions of the existing methods can be used to prevent malware such as Trojan Horse, Worm, Virus (Virus), etc. on the local host when the software such as DRM and e-Trading is executed by software solution. It is impossible to provide integrity-based mutual authentication to provide a safe execution environment in response to malware, and there is a limit in providing a secure channel for preventing malicious information leakage or forgery or falsification. For example, when DRM content is executed on a software moving solution using local host resources (eg, sound, video), it is likely to be a leak of multimedia contents decrypted by stealth attacks due to malware on the local host. In addition, when a web-based e-trading service is executed on a software moving solution, malicious software on a local host may leak out relevant information about user accounts, passwords and transaction details on the Internet, and the related service sites may be falsified.

The present invention has been made to solve the above problems and it is an object of the present invention to provide a software moving device moving through a mobile storage medium or a network in order to ensure the safety of a computing execution environment in a software mobile device, There is provided an authentication method, an I / O channel forming method, and a software moving device capable of providing an integrity-based mutual authentication with a local host and a secure channel between an application on a software mobile device and an I / O device of a local host moved .

According to another aspect of the present invention, there is provided a method for authenticating a local host to which a software mobile device has moved in a software mobile device including an operating system virtualization layer, Requesting and receiving from the local host an integrity value measured at the local host and comparing and verifying the received integrity value with the integrity criterion value in the certificate, Encrypting the security profile of the software mobile device and transmitting the encrypted security profile to the local host.

The software moving device is preferably included in a removable storage device.

Wherein the software mobile device is included in a server computer connected to the local host via a network, and the operating system virtualization layer included in the server computer is downloaded from the server computer to the local host to communicate with the local host .

In another aspect of the present invention, there is provided a secure I / O channel forming method for a software mobile device including a virtualization layer of an operating system and a local host, the method comprising the steps of: The method of claim 1, further comprising the steps of: determining whether a security filter driver is applicable to the software mobile device and the security filter; And a step of transmitting data by forming a secure channel through a session key when data is transmitted for the execution of an I / O device by an application in a software moving device by a driver.

Wherein the session key is generated through mutual authentication of the software mobile device and the security filter driver upon installation of the security filter driver of the software mobile device, And are preferably pre-shared among the filter drivers and included in the security filter driver.

According to another aspect of the present invention, there is provided a software mobile device including an operating system virtualization layer, the software mobile device comprising: a requestor for receiving and receiving a certificate stored in an integrity reference value of a local host with the local host, receiving an integrity value measured by the local host, And a security manager for comparing and verifying the received integrity value with the integrity reference value in the certificate and encrypting the security profile of the software mobile device when the local host is verified and transmitting the encrypted security value to the local host.

Another aspect of the present invention is summarized as a software mobile device including an operating system virtualization layer, wherein the software mobile device checks whether or not a security policy requesting secure I / O is applied when an application is running, As a result, when a security policy is to be applied, a security filter driver is installed in the kernel mode on the local host, and the I / O device And a security manager for transmitting data by forming a secure channel through a session key when data is transmitted for execution.

According to the present invention, the software moving device of the present invention is capable of executing software, data, and personal computing environments on a removable storage medium or a network connection without any additional installation based on operating system virtualization technology independent of the local host kernel mode. Provides a secure channel for integrity-based mutual authentication between software mobile device and local host and malicious information leakage and forgery prevention in order to execute software application of DRM and e-Trading in response to malware in moving local host in moving , Which is effective in enabling continuous computing on other PC or CE devices.

The present invention will now be described in detail with reference to the accompanying drawings.

3 shows the overall structure of a system in which a software mobile device according to the present invention is implemented. The software moving apparatus according to the present invention is based on an operating system virtualization technology configured mainly in a user mode, and is executed in the same form as a general application without any modification to an operating system on a local host.

3, an OS virtualization layer 330 is arranged on the hardware 310 and the operating system 320, and on the OS virtualization layer 330 and the application 1, 340 340 running on the OS 320, And applications 3 and 4 (350) to be executed. In the system shown in FIG. 3, a software mobile device according to the present invention is implemented in the OS virtualization layer 330. Also, the hardware 310 and the operating system 320 are combined to be referred to as a local host.

4 shows a schematic diagram of a software mobile device according to the invention.

Referring to FIG. 4, the software mobile device 400 includes an operating system virtualization layer 410 and a top layer 420.

The OS virtualization layer unit 410 includes an OS virtualization management unit 411 that manages operating system virtualization of the local host, a resource management unit 412 that manages resources of the local host, and security And a security management unit 413 for managing the security management unit 413.

The top layer 430 comprises an application 421, user data 422 and a personal computing environment 423, wherein the software or application on the software mobile device is installed and operated on the operating system virtualization layer in the same manner as a generic application do.

Fig. 5 shows the structure of a system including the software mobile device shown in Fig.

In particular, according to the present invention, the security management unit 413 that performs mutual authentication between the software mobile device and the local host manages a secure area (Trusted Computing Base (TCB) storing the registration information and encryption key of the software mobile device, A virtualized TCB (vTCB) 500 is used, which can be configured in various forms, such as hardware or software of a physical physical chipset.

In addition, the local host also has an area for storing various registration information and encryption keys such as an operating system and a device, and based on this, a mutual authentication with a software mobile device and a secure channel are established.

 6 is a reference diagram for explaining mutual authentication between a software mobile device and a local host moved according to the present invention.

The software mobile device performs mutual authentication through integrity verification with the information stored in the secure area (vTCB, TCB) on the local host kernel moved during the service initialization through the removable storage medium or network without any separate installation, Thereby securing the reliability of the execution environment.

The software mobile device according to the present invention may be contained in a removable storage device or may be implemented by a client server.

7 shows an example in which the software moving device according to the present invention is contained in a removable storage device. Referring to FIG. 7, a software moving apparatus 400 according to the present invention is stored in a portable storage apparatus 700, and the portable storage apparatus 700 is inserted into a local host apparatus 300 to be moved, .

8 shows an example in which the software mobile device according to the present invention is implemented by a client server. Referring to Figure 8, a software mobile device 400 according to the present invention is arranged in a server computer 800 and includes a software mobile device client 300 in a local host device 300 for use by a local host device 300, (810) from the server computer (800). The downloaded software mobile client 810 acts as an intermediary between the local host 300 and the software mobile device 400 of the server computer 800.

A mutual authentication procedure between a software mobile device and a local host stored in a removable storage medium according to the present invention will now be described with reference to FIGS. 6 and 9. FIG. A software mobile device implemented as a server client will be separately described below.

Referring to FIGS. 6 and 9, a certificate is exchanged 910 between the software mobile device 400 and the local host 300.

The software mobile device 400 requests and exchanges a certificate (Cert) of the local host with its registration information (ID) or the like.

That is, the software mobile device 400 requests and receives a certificate from the local host 300, and the local host 300 requests and receives a certificate from the software mobile device 400.

       FIG. 10 shows an example of a certificate used for mutual authentication in FIG.

Referring to FIG. 10, a certificate 1000 includes an ID 1010, a public key 1020, an integrity reference value 1030, and a signature 1040.

Integrity, ID, and public key of the corresponding software mobile device and platform are stored in the exchanged certificate and are digitally signed with the private key of the certification authority (CA). In addition, the integrity reference value in the corresponding certificate can be stored as a digital file in the secure area (vTCB, TCB) of each subject to replace the certificate.

Next, the software mobile device 400 and the local host 300 measure and exchange their own integrity values, and each of the software mobile device 400 and the local host 300 transmits the received measured integrity value and the received The stored integrity criteria values in the certificate are compared and verified (920).

At this time, the integrity value measurement uses the Integrity Check Module included in the secure area (vTCB, TCB).

When the integrity of the other party is verified through the verification, each of the subjects, that is, the software mobile device 400 and the local host 300 encrypts the security profile (for example, version information) (930).

Integrity checking at the local host may be performed by a Security Reference Monitor included in the operating system 320 of FIG. The Security Reference Monitor enforces access checks, security policies, and audits for user authentication, which check whether a user has the right to access a specific object and can perform certain actions on that object. When a user accesses a file or directory It examines the user's account to determine whether access is allowed, and generates the result as an inspection message if necessary.

Now, a description will be made of a software moving device implemented on a network basis.

The software mobile device client 810 downloaded to the local host requests registration information of the corresponding local host and transmits the registration information to the server computer 800 in which the software mobile device 400 is arranged. At this time, the software mobile device client 810 acts as an intermediary on the local host 300, and substantial mutual authentication is performed between the software mobile device server 800 and the local host 300.

 The software mobile device server 800 requests and receives a certificate from the software mobile device client 810 to the local host and the local host sends a certificate request to the software mobile device server 800 via the software mobile device client 180 .

  In this case, the integrity value of each subject is stored in the exchanged certificate and is digitally signed with the CA's secret key. In addition, the integrity value in the corresponding certificate can be stored in the secure area (vTCB, TCB) of each subject in the form of a digital file to replace the certificate.

 Next, the software mobile device server 800 compares the received integrity measure of the local host with the stored value in the transmitted certificate and verifies.

  At this time, the integrity value measurement uses an Integrity Check Module included in the secure area (vTCB, TCB), and the software mobile server server performs the software mobile client client on the local host.

 When the integrity value of the other party is verified through the verification, the security profile of each subject is encrypted and exchanged with the session key.

11 is a reference diagram for explaining a secure channel I / O formation between a software mobile device and a local host moved according to the present invention.

An application requiring safety on the software mobile device, for example, DRM or e-Trading, is executed by executing the security filter driver 1110 on the moved local host kernel to verify the signature of the I / Lt; RTI ID = 0.0 > a < / RTI > secure channel.

12 is a flowchart illustrating a process of forming a secure channel I / O between a software mobile device and a local host moving according to the present invention. 11 and 12, the process of forming a secure channel I / O between the software mobile device and the local host moving according to the present invention will be described.

In operation 1210, the software mobile device checks whether a security policy requesting secure I / O is applied.

If it is determined that the security policy is to be applied, the security filter driver 1110 is installed in the kernel mode on the local host in response to the Secure File I / O request (1220). At this time, the security filter driver 1110 verifies the signature of the service provider (e.g., WHQL (Windows Hardware Qualification Lab), DRM server) for the corresponding I / O device driver 1120, It is also possible to confirm.

Then, the software mobile device and the security filter driver 1110 form a secure channel through the session key K in data transmission for execution of the I / O device according to application driving in the software mobile device, and the security filter driver 1110 And transfers the data to the I / O device 1130 (1230). At this time, the session key may be generated through a mutual authentication process between the software mobile device and the security filter driver when the security filter driver of the software mobile device is installed, or may be generated beforehand between the software mobile device and the security filter driver To be included in the security filter driver 1110.

Also, the validity of the session key is managed by a time stamp (Time Stamp) or the like at the time of requesting Secure File I / O, and it is deleted together with the security filter driver at the end of the software mobile device.

For example, the session key of the software mobile device and the security filter driver is generated using a random number and a time stamp.

13 is a reference diagram for explaining an example of using an operating system virtualization apparatus according to the present invention.

The present invention can be applied not only to a general portable storage device such as a USB flash drive (USB flash drive), but also to an MP3P, a mobile phone, And can be applied in the form of use.

In addition, it is expected that the application of the secure execution environment of the present invention to a business model such as software as a service (SaaS) or DRM can contribute to legitimate activation.

The mutual authentication method as described above can also be implemented as a computer-readable code on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like, and may be implemented in the form of a carrier wave (for example, transmission via the Internet) . The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. Functional programs, codes, and code segments for implementing the mutual authentication method can be easily inferred by programmers of the art to which the present invention belongs.

The present invention has been described with reference to the preferred embodiments. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

FIG. 1 is a reference diagram for explaining the concept of virtualization in general,

2 is a reference diagram for explaining the types of virtualization according to objects of virtualization,

FIG. 3 is a diagram illustrating an overall structure of an operating system virtualization system according to the present invention,

Figure 4 is a schematic diagram of the software mobile device shown in Figure 3,

5 illustrates the structure of an operating system virtualization system including the software mobile device shown in FIG. 4,

6 is a reference diagram for describing mutual authentication between a software mobile device according to the present invention and a local host moved;

Figure 7 is an example of a software mobile device according to the present invention being embedded in a removable storage medium,

Figure 8 shows an example where the software mobile device according to the present invention is implemented by a client server,

9 is a flowchart for explaining mutual authentication between a software mobile device and a local host moved according to the present invention;

Figure 10 is an example of a certificate used for mutual authentication in Figure 9,

11 is a reference diagram for explaining a secure channel I / O formation between a software mobile device and a local host moved according to the present invention;

FIG. 12 is a flowchart illustrating a process of forming a secure channel I / O between a software mobile device and a local host moving according to an embodiment of the present invention;

13 is a reference diagram for explaining an example of use of a software moving apparatus according to the present invention.

Claims (10)

A method for authenticating a local host in a software mobile device comprising an operating system virtualization layer, The security management unit of the software mobile device acquiring the certificate stored in the local host's integrity reference value and the integrity value measured at the local host from the local host; The security manager of the software mobile device verifying the integrity of the local host by comparing the integrity value with an integrity reference value in the certificate; And And encrypting the security profile of the software mobile device and transmitting the encrypted security profile to the local host when the local host is verified. The method according to claim 1, Characterized in that the software mobile device is included in a removable storage device. The method according to claim 1, Wherein the software mobile device is included in a server computer that is networked with the local host. A method of forming a secure I / O channel between a software mobile device and a local host that includes an operating system virtualization layer, Wherein the security management unit of the software mobile device includes a security filter driver in a kernel mode on the local host when a security policy requiring secure I / Installing; And Wherein the security management unit of the software mobile device forms a secure channel through a session key in data transmission for execution of the I / O device in accordance with the driving of the application in the software mobile device by the security filter driver / O channel formation method. 5. The method of claim 4, Wherein the session key is generated through a mutual authentication process between the software mobile device and the security filter driver upon installation of the security filter driver of the software mobile device, And is included in the security filter driver in a manner that is pre-shared between the security filter driver and the security filter driver. 1. A software mobile device comprising an operating system virtualization layer, Wherein the operating system virtualization layer includes a security management unit for authenticating a local host, Wherein the security manager obtains a certificate stored in the local host's integrity reference value and an integrity value measured at the local host from the local host and verifies integrity of the local host by comparing the integrity value with an integrity reference value in the certificate, Encrypts the security profile of the software mobile device when the integrity of the local host is verified, and transmits the encrypted security profile to the local host. The method according to claim 6, Wherein the software moving device is included in a removable storage device. The method according to claim 6, Wherein the software mobile device is included in a server computer that is networked with the local host. 1. A software mobile device comprising an operating system virtualization layer, Wherein the operating system virtualization layer includes a security manager for authenticating a local host, Wherein the security management unit includes a security filter driver installed in a kernel mode on the local host when a security policy requesting secure I / O is applied when the application is running in the software mobile device, Wherein the software mobile device and the security filter driver form a secure channel through the session key when transmitting data for execution of the I / O device in accordance with the driving of the application in the software mobile device. 10. The method of claim 9, Wherein the session key is generated through a mutual authentication process between the software mobile device and the security filter driver upon installation of the security filter driver of the software mobile device, And is included in the security filter driver in a pre-shared manner between the security filter driver and the security filter driver.

Images